The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card In try_to_register_card(), the return     value of usb_ifnum_to_if() is passed directly to usb_interface_claimed() without a NULL check, which will     lead to a NULL pointer dereference when creating an invalid USB audio device. Fix this by adding a check     to ensure the interface pointer is valid before passing it to usb_interface_claimed(). (CVE-2025-40085)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40085

medium Nessus Plugin ID 271973

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.7 Nov 16, 2025, 1:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511160150
Version 1.6 Nov 12, 2025, 8:51 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511120851
Version 1.5 Nov 3, 2025, 9:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511032125
Version 1.4 Oct 31, 2025, 8:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510312007
Version 1.3 Oct 30, 2025, 11:01 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510302301
Version 1.2 Oct 30, 2025, 6:41 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510300641
Version 1.1 Oct 29, 2025, 8:57 PM New Plugin Feed: 202510292057