The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fs: Fix uninitialized 'offp' in statmount_string() In statmount_string(), most flags assign an output     offset pointer (offp) which is later updated with the string offset. However, the STATMOUNT_MNT_UIDMAP and     STATMOUNT_MNT_GIDMAP cases directly set the struct fields instead of using offp. This leaves offp     uninitialized, leading to a possible uninitialized dereference when *offp is updated. Fix it by assigning     offp for UIDMAP and GIDMAP as well, keeping the code path consistent. (CVE-2025-68212)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68212

high Nessus Plugin ID 278917

Version 1.4