The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be     written into alternate data streams. This allows an authenticated user to read residual memory content     that may include sensitive data, resulting in an information disclosure vulnerability. (CVE-2025-9640)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-9640

medium Nessus Plugin ID 271522

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Dec 2, 2025, 7:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512020712
Version 1.3 Nov 26, 2025, 1:15 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N") CVSSv2 severity (based on CVE-2025-9640, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
Version 1.1 Oct 27, 2025, 6:34 AM New Plugin Feed: 202510270634