The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - xen/events: Return -EEXIST for bound VIRQs Change find_virq() to return -EEXIST when a VIRQ is bound to a     different CPU than the one passed in. With that, remove the BUG_ON() from bind_virq_to_irq() to propogate     the error upwards. Some VIRQs are per-cpu, but others are per-domain or global. Those must be bound to     CPU0 and can then migrate elsewhere. The lookup for per-domain and global will probably fail when migrated     off CPU 0, especially when the current CPU is tracked. This now returns -EEXIST instead of BUG_ON(). A     second call to bind a per-domain or global VIRQ is not expected, but make it non-fatal to avoid trying to     look up the irq, since we don't know which per_cpu(virq_to_irq) it will be in. (CVE-2025-40160)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40160

medium Nessus Plugin ID 275190

Version 1.17

Version 1.16

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.17 Mar 24, 2026, 8:21 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603242021
Version 1.16 Mar 18, 2026, 7:26 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603181926
Version 1.15 Mar 17, 2026, 4:16 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603171616
Version 1.14 Mar 10, 2026, 10:49 PM Detection (updated detection logic) New Plugin metadata Plugin Feed: 202603102249
Version 1.13 Feb 26, 2026, 8:51 AM Detection (updated detection logic) Plugin Feed: 202602260851
Version 1.12 Feb 18, 2026, 9:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602180924
Version 1.11 Feb 14, 2026, 1:12 AM Detection (updated detection logic) Plugin Feed: 202602140112
Version 1.10 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.9 Jan 31, 2026, 11:07 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601311107
Version 1.8 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.7 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin Feed: 202601101958
Version 1.6 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.5 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
Version 1.4 Nov 16, 2025, 1:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511160150
Version 1.3 Nov 14, 2025, 12:33 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511140033
Version 1.2 Nov 13, 2025, 4:18 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2025-40160, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511131618
Version 1.1 Nov 13, 2025, 8:05 AM New Plugin Feed: 202511130805