The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled,     dma_alloc_coherent() with GFP_USER may return addresses from the vmalloc range. If such an address is     mapped without VM_MIXEDMAP, vm_insert_page() will trigger a BUG_ON due to the VM_PFNMAP restriction. Fix     this by checking for vmalloc addresses and setting VM_MIXEDMAP in the VMA before mapping. This ensures     safe mapping and avoids kernel crashes. The memory is still driver-allocated and cannot be accessed     directly by userspace. (CVE-2025-40311)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40311

medium Nessus Plugin ID 277688

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Jan 30, 2026, 9:16 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601300916
Version 1.6 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.5 Jan 13, 2026, 2:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601130235
Version 1.4 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin Feed: 202601101958
Version 1.3 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.2 Dec 10, 2025, 9:29 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512100929
Version 1.1 Dec 9, 2025, 2:31 AM New Plugin Feed: 202512090231