The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup commit efa95b01da18 (netpoll: fix     use after free) incorrectly ignored the refcount and prematurely set dev->npinfo to NULL during netpoll     cleanup, leading to improper behavior and memory leaks. Scenario causing lack of proper cleanup: 1) A     netpoll is associated with a NIC (e.g., eth0) and netdev->npinfo is allocated, and refcnt = 1 - Keep in     mind that npinfo is shared among all netpoll instances. In this case, there is just one. 2) Another     netpoll is also associated with the same NIC and npinfo->refcnt += 1. - Now dev->npinfo->refcnt = 2; -     There is just one npinfo associated to the netdev. 3) When the first netpolls goes to clean up: - The     first cleanup succeeds and clears np->dev->npinfo, ignoring refcnt. - It basically calls     `RCU_INIT_POINTER(np->dev->npinfo, NULL);` - Set dev->npinfo = NULL, without proper cleanup - No
    ->ndo_netpoll_cleanup() is either called 4) Now the second target tries to clean up - The second cleanup     fails because np->dev->npinfo is already NULL. * In this case, ops->ndo_netpoll_cleanup() was never     called, and the skb pool is not cleaned as well (for the second netpoll instance) - This leaks npinfo and     skbpool skbs, which is clearly reported by kmemleak. Revert commit efa95b01da18 (netpoll: fix use after     free) and adds clarifying comments emphasizing that npinfo cleanup should only happen once the refcount     reaches zero, ensuring stable and correct netpoll behavior. (CVE-2025-68245)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68245

medium Nessus Plugin ID 278836

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Jan 13, 2026, 2:35 AM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202601130235
Version 1.3 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin Feed: 202601101958
Version 1.2 Dec 18, 2025, 1:27 AM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512180127
Version 1.1 Dec 17, 2025, 4:56 PM New Plugin Feed: 202512171656