The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch     predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing mitigations already     protect kernel/KVM from a malicious guest. Userspace can additionally be protected by flushing the branch     predictors after a VMexit. Since it is the userspace that consumes the poisoned branch predictors,     conditionally issue an IBPB after a VMexit and before returning to userspace. Workloads that frequently     switch between hypervisor and userspace will incur the most overhead from the new IBPB. This new IBPB is     not integrated with the existing IBPB sites. For instance, a task can use the existing speculation control     prctl() to get an IBPB at context switch time. With this implementation, the IBPB is doubled up: one at     context switch and another before running userspace. The intent is to integrate and optimize these cases     post-embargo. [ dhansen: elaborate on suboptimal IBPB solution ] (CVE-2025-40300)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40300

medium Nessus Plugin ID 264766

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.13 Nov 12, 2025, 12:37 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511120037
Version 1.12 Nov 11, 2025, 12:33 AM CVSS metrics ("CVSSv3 score" set to 6.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511110033
Version 1.11 Nov 7, 2025, 11:55 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511072355
Version 1.10 Oct 31, 2025, 8:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510312007
Version 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.8 Oct 28, 2025, 9:02 AM Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.4 Sep 25, 2025, 11:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509252329
Version 1.3 Sep 21, 2025, 8:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509210829
Version 1.2 Sep 17, 2025, 9:14 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509170914
Version 1.1 Sep 14, 2025, 2:50 PM New Plugin Feed: 202509141450