The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ice: fix NULL access of tx->in_use in ice_ll_ts_intr Recent versions of the E810 firmware have support for     an extra interrupt to handle report of the low latency Tx timestamps coming from the specialized low     latency firmware interface. Instead of polling the registers, software can wait until the low latency     interrupt is fired. This logic makes use of the Tx timestamp tracking structure, ice_ptp_tx, as it uses     the same ready bitmap to track which Tx timestamps complete. Unfortunately, the ice_ll_ts_intr()     function does not check if the tracker is initialized before its first access. This results in NULL     dereference or use-after-free bugs similar to the issues fixed in the ice_ptp_ts_irq() function. Fix this     by only checking the in_use bitmap (and other fields) if the tracker is marked as initialized. The reset     flow will clear the init field under lock before it tears the tracker down, thus preventing any use-after-     free or NULL access. (CVE-2025-39854)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39854

high Nessus Plugin ID 265462

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Sep 30, 2025, 5:08 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2025-39854, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509301708
Version 1.2 Sep 25, 2025, 3:39 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSSv2 severity (based on CVE-2025-39854, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509251539
Version 1.1 Sep 20, 2025, 5:27 AM New Plugin Feed: 202509200527