The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cifs: client: fix memory leak in smb3_fs_context_parse_param The user calls fsconfig twice, but when the     program exits, free() only frees ctx->source for the second fsconfig, not the first. Regarding fc->source,     there is no code in the fs context related to its memory reclamation. To fix this memory leak, release the     source memory corresponding to ctx or fc before each parsing. syzbot reported: BUG: memory leak     unreferenced object 0xffff888128afa360 (size 96): backtrace (crc 79c9c7ba): kstrdup+0x3c/0x80 mm/util.c:84     smb3_fs_context_parse_param+0x229b/0x36c0 fs/smb/client/fs_context.c:1444 BUG: memory leak unreferenced     object 0xffff888112c7d900 (size 96): backtrace (crc 79c9c7ba): smb3_fs_context_fullpath+0x70/0x1b0     fs/smb/client/fs_context.c:629 smb3_fs_context_parse_param+0x2266/0x36c0 fs/smb/client/fs_context.c:1438     (CVE-2025-40268)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40268

medium Nessus Plugin ID 277710

Version 1.2