The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - spi: microchip-core-qspi: stop checking viability of op->max_freq in supports_op callback In commit     13529647743d9 (spi: microchip-core-qspi: Support per spi-mem operation frequency switches) the logic for     checking the viability of op->max_freq in mchp_coreqspi_setup_clock() was copied into     mchp_coreqspi_supports_op(). Unfortunately, op->max_freq is not valid when this function is called during     probe but is instead zero. Accordingly, baud_rate_val is calculated to be INT_MAX due to division by zero,     causing probe of the attached memory device to fail. Seemingly spi-microchip-core-qspi was the only driver     that had such a modification made to its supports_op callback when the per_op_freq capability was added,     so just remove it to restore prior functionality. (CVE-2025-39921)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-39921

medium Nessus Plugin ID 269672

Version 1.10

Version 1.9

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.10 Feb 3, 2026, 10:27 PM Plugin metadata Plugin Feed: 202602032227
Version 1.9 Feb 2, 2026, 9:31 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602022131
Version 1.7 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.6 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
Version 1.5 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.4 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin Feed: 202510281756