The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock,     sctp_diag_dump() -> sctp_for_each_endpoint() -> sctp_ep_dump() make sure not to exceed bounds in case the     address list has grown between buffer allocation (time-of-check) and write (time-of-use). (CVE-2025-40331)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40331

high Nessus Plugin ID 277835

Version 1.2