The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - crypto: aspeed - fix double free caused by devm The clock obtained via devm_clk_get_enabled() is     automatically managed by devres and will be disabled and freed on driver detach. Manually calling     clk_disable_unprepare() in error path and remove function causes double free. Remove the manual clock     cleanup in both aspeed_acry_probe()'s error path and aspeed_acry_remove(). (CVE-2025-68172)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68172

medium Nessus Plugin ID 278796

Version 1.4