The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing The Extended Supported Rates (ESR)     IE handling in OnBeacon accessed *(p + 1 + ielen) and *(p + 2 + ielen) without verifying that these     offsets lie within the received frame buffer. A malformed beacon with an ESR IE positioned at the end of     the buffer could cause an out-of-bounds read, potentially triggering a kernel panic. Add a boundary check     to ensure that the ESR IE body and the subsequent bytes are within the limits of the frame before     attempting to access them. This prevents OOB reads caused by malformed beacon frames. (CVE-2025-68254)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68254

high Nessus Plugin ID 278890

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Dec 20, 2025, 11:42 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512201142
Version 1.2 Dec 18, 2025, 1:27 AM CVSS metrics ("CVSSv2 score" set to 5.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2025-68254, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512180127
Version 1.1 Dec 17, 2025, 4:56 PM New Plugin Feed: 202512171656