The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - zram: fix slot write race condition Parallel concurrent writes to the same zram index result in leaked     zsmalloc handles. Schematically we can have something like this: CPU0 CPU1 zram_slot_lock()     zs_free(handle) zram_slot_lock() zram_slot_lock() zs_free(handle) zram_slot_lock() compress compress     handle = zs_malloc() handle = zs_malloc() zram_slot_lock zram_set_handle(handle) zram_slot_lock     zram_slot_lock zram_set_handle(handle) zram_slot_lock Either CPU0 or CPU1 zsmalloc handle will leak     because zs_free() is done too early. In fact, we need to reset zram entry right before we set its new     handle, all under the same slot lock scope. (CVE-2025-39941)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39941

high Nessus Plugin ID 269292

Version 1.5

Version 1.4

Version 1.1

Version 1.5 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.4 Oct 28, 2025, 9:02 AM Detection (updated detection logic) Plugin Feed: 202510280902
Version 1.1 Oct 8, 2025, 9:19 AM New Plugin Feed: 202510080919