The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be     written into alternate data streams. This allows an authenticated user to read residual memory content     that may include sensitive data, resulting in an information disclosure vulnerability. (CVE-2025-9640)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-9640

medium Nessus Plugin ID 271522

Version 1.5