The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once hci_cmd_sync_dequeue_once() does lookup and     then cancel the entry under two separate lock sections. Meanwhile, hci_cmd_sync_work() can also delete the     same entry, leading to double list_del() and UAF. Fix this by holding cmd_sync_work_lock across both     lookup and cancel, so that the entry cannot be removed concurrently. (CVE-2025-40318)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40318

high Nessus Plugin ID 277714

Version 1.7