The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: enetc: fix the deadlock of enetc_mdio_lock After applying the workaround for err050089, the LS1028A     platform experiences RCU stalls on RT kernel. This issue is caused by the recursive acquisition of the     read lock enetc_mdio_lock. Here list some of the call stacks identified under the enetc_poll path that may     lead to a deadlock: enetc_poll -> enetc_lock_mdio -> enetc_clean_rx_ring OR napi_complete_done ->     napi_gro_receive -> enetc_start_xmit -> enetc_lock_mdio -> enetc_map_tx_buffs -> enetc_unlock_mdio ->     enetc_unlock_mdio After enetc_poll acquires the read lock, a higher-priority writer attempts to acquire     the lock, causing preemption. The writer detects that a read lock is already held and is scheduled out.
    However, readers under enetc_poll cannot acquire the read lock again because a writer is already waiting,     leading to a thread hang. Currently, the deadlock is avoided by adjusting enetc_lock_mdio to prevent     recursive lock acquisition. (CVE-2025-40347)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-40347

medium Nessus Plugin ID 278916

Version 1.3

Version 1.2

Version 1.3 Dec 18, 2025, 1:27 AM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512180127
Version 1.2 Dec 17, 2025, 4:56 PM CVSS metrics ("CVSSv2 score" set to 2.1. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N". "CVSSv3 score" set to 7.1. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2025-40347, severity decreased from "High" to "Low") Detection (updated detection logic) New Plugin metadata Plugin Feed: 202512171656