The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes     past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-     screen and clip image height to screen boundary. Break from the rendering loop if the X position is off-     screen. When clipping image width to fit the screen, update the character count to match the clipped width     to prevent buffer size mismatches. Without the character count update, bit_putcs_aligned and     bit_putcs_unaligned receive mismatched parameters where the buffer is allocated for the clipped width but     cnt reflects the original larger count, causing out-of-bounds writes. (CVE-2025-40304)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40304

medium Nessus Plugin ID 277640

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.4 Dec 13, 2025, 1:08 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512130108
Version 1.3 Dec 10, 2025, 9:29 AM CVSS metrics ("CVSSv2 score" set to 3.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P") CVSSv2 severity (based on CVE-2025-40304, severity decreased from "Medium" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512100929
Version 1.2 Dec 9, 2025, 2:31 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:C") CVSSv2 severity (based on CVE-2025-40304, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512090231
Version 1.1 Dec 8, 2025, 6:20 PM New Plugin Feed: 202512081820