The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog The ptp_ocp_detach() only shuts down the     watchdog timer if it is pending. However, if the timer handler is already running, the timer_delete_sync()     is not called. This leads to race conditions where the devlink that contains the ptp_ocp is deallocated     while the timer handler is still accessing it, resulting in use-after-free bugs. The following details one     of the race scenarios. (thread 1) | (thread 2) ptp_ocp_remove() | ptp_ocp_detach() | ptp_ocp_watchdog() if     (timer_pending(&bp->watchdog))| bp = timer_container_of() timer_delete_sync() | | devlink_free(devlink)     //free | | bp-> //use Resolve this by unconditionally calling timer_delete_sync() to ensure the timer is     reliably deactivated, preventing any access after free. (CVE-2025-39859)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39859

high Nessus Plugin ID 265844

Version 1.7