The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cifs: parse_dfs_referrals: prevent oob on malformed input Malicious SMB server can send invalid reply to     FSCTL_DFS_GET_REFERRALS - reply smaller than sizeof(struct get_dfs_referral_rsp) - reply with number of     referrals smaller than NumberOfReferrals in the header Processing of such replies will cause oob. Return
    -EINVAL error on such replies to prevent oob-s. (CVE-2025-40099)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40099

medium Nessus Plugin ID 272049

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.5 Nov 18, 2025, 9:44 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511182144
Version 1.4 Nov 16, 2025, 1:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511160150
Version 1.3 Nov 12, 2025, 8:51 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511120851
Version 1.2 Oct 31, 2025, 8:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510312007
Version 1.1 Oct 30, 2025, 11:01 PM New Plugin Feed: 202510302301