The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once hci_cmd_sync_dequeue_once() does lookup and     then cancel the entry under two separate lock sections. Meanwhile, hci_cmd_sync_work() can also delete the     same entry, leading to double list_del() and UAF. Fix this by holding cmd_sync_work_lock across both     lookup and cancel, so that the entry cannot be removed concurrently. (CVE-2025-40318)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40318

medium Nessus Plugin ID 277714

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.5 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
Version 1.4 Dec 11, 2025, 12:59 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512111259
Version 1.3 Dec 10, 2025, 9:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512100929
Version 1.2 Dec 9, 2025, 2:31 AM CVSS metrics ("CVSSv2 score" set to 6.3. "CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:C/A:C". "CVSSv3 score" set to 6.3. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) New Plugin metadata Plugin Feed: 202512090231