The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_interval to a large     value, the local variable 'time' in br_multicast_send_query() may overflow. If the time is smaller than     jiffies, the timer will expire immediately, and then call mod_timer() again, which creates a loop and may     trigger the following soft lockup issue. watchdog: BUG: soft lockup - CPU#1 stuck for 221s!     [rb_consumer:66] CPU: 1 UID: 0 PID: 66 Comm: rb_consumer Not tainted 6.16.0+ #259 PREEMPT(none) Call     Trace: <IRQ> __netdev_alloc_skb+0x2e/0x3a0 br_ip6_multicast_alloc_query+0x212/0x1b70
    __br_multicast_send_query+0x376/0xac0 br_multicast_send_query+0x299/0x510     br_multicast_query_expired.constprop.0+0x16d/0x1b0 call_timer_fn+0x3b/0x2a0 __run_timers+0x619/0x950     run_timer_softirq+0x11c/0x220 handle_softirqs+0x18e/0x560 __irq_exit_rcu+0x158/0x1a0     sysvec_apic_timer_interrupt+0x76/0x90 </IRQ> This issue can be reproduced with: ip link add br0 type     bridge echo 1 > /sys/class/net/br0/bridge/multicast_querier echo 0xffffffffffffffff >     /sys/class/net/br0/bridge/multicast_query_interval ip link set dev br0 up The     multicast_startup_query_interval can also cause this issue. Similar to the commit 99b40610956a (net:
    bridge: mcast: add and enforce query interval minimum), add check for the query interval maximum to fix     this issue. (CVE-2025-39773)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39773

medium Nessus Plugin ID 264769

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.5 Sep 25, 2025, 11:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509252329
Version 1.4 Sep 21, 2025, 8:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509210829
Version 1.3 Sep 17, 2025, 9:14 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509170914
Version 1.1 Sep 14, 2025, 2:50 PM New Plugin Feed: 202509141450