The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - i2c: rtl9300: ensure data length is within supported range Add an explicit check for the xfer length to     'rtl9300_i2c_config_xfer' to ensure the data length isn't within the supported range. In particular a data     length of 0 is not supported by the hardware and causes unintended or destructive behaviour. This     limitation becomes obvious when looking at the register documentation [1]. 4 bits are reserved for     DATA_WIDTH and the value of these 4 bits is used as N + 1, allowing a data length range of 1 <= len <= 16.
    Affected by this is the SMBus Quick Operation which works with a data length of 0. Passing 0 as the length     causes an underflow of the value due to: (len - 1) & 0xf and effectively specifying a transfer length of     16 via the registers. This causes a 16-byte write operation instead of a Quick Write. For example, on SFP     modules without write-protected EEPROM this soft-bricks them by overwriting some initial bytes. For     completeness, also add a quirk for the zero length. [1]     https://svanheule.net/realtek/longan/register/i2c_mst1_ctrl2 (CVE-2025-39928)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39928

medium Nessus Plugin ID 269663

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.9 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.8 Feb 4, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602040631
Version 1.7 Feb 3, 2026, 10:27 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602032227
Version 1.6 Jan 10, 2026, 7:58 PM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.5 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.4 Oct 28, 2025, 9:02 AM Detection (updated detection logic) Plugin Feed: 202510280902