The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2_delete_osb(),     ocfs2_journal_shutdown() has already been executed in ocfs2_dismount_volume(), so osb->journal must be     NULL. Therefore, the following calltrace will inevitably fail when it reaches     jbd2_journal_release_jbd_inode(). ocfs2_dismount_volume()-> ocfs2_delete_osb()-> ocfs2_free_slot_info()->
    __ocfs2_free_slot_info()-> evict()-> ocfs2_evict_inode()-> ocfs2_clear_inode()->     jbd2_journal_release_jbd_inode(osb->journal->j_journal, Adding osb->journal checks will prevent null-ptr-     deref during the above execution path. (CVE-2025-39842)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39842

high Nessus Plugin ID 265849

Version 1.5

Version 1.2

Version 1.1

Version 1.5 Oct 27, 2025, 11:56 PM Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.2 Sep 30, 2025, 5:08 PM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSSv2 severity (based on CVE-2025-39842, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509301708
Version 1.1 Sep 25, 2025, 3:39 PM New Plugin Feed: 202509251539