The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak     detected by the syzbot . [net?] KMSAN: kernel-infoleak in __skb_datagram_iter In tcf_ife_dump(), the     variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are     reamined uninitialized. nla_put() copies the entire structure into a netlink message, these uninitialized     bytes leaked to userspace. Initialize the structure with memset before assigning its fields to ensure all     members and padding are cleared prior to beign copied. This change silences the KMSAN report and prevents     potential information leaks from the kernel memory. This fix has been tested and validated by syzbot. This     patch closes the bug reported at the following syzkaller link and ensures no infoleak. (CVE-2025-40278)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40278

medium Nessus Plugin ID 277696

Version 1.8

Version 1.7

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Jan 21, 2026, 5:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211700
Version 1.7 Jan 13, 2026, 2:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601130235
Version 1.5 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.4 Dec 13, 2025, 1:08 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512130108
Version 1.3 Dec 11, 2025, 12:59 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512111259
Version 1.2 Dec 10, 2025, 9:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512100929
Version 1.1 Dec 9, 2025, 2:31 AM New Plugin Feed: 202512090231