The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - scsi: imm: Fix use-after-free bug caused by unfinished delayed work The delayed work item 'imm_tq' is     initialized in imm_attach() and scheduled via imm_queuecommand() for processing SCSI commands. When the     IMM parallel port SCSI host adapter is detached through imm_detach(), the imm_struct device instance is     deallocated. However, the delayed work might still be pending or executing when imm_detach() is called,     leading to use-after-free bugs when the work function imm_interrupt() accesses the already freed     imm_struct memory. The race condition can occur as follows: CPU 0(detach thread) | CPU 1 |     imm_queuecommand() | imm_queuecommand_lck() imm_detach() | schedule_delayed_work() kfree(dev) //FREE |     imm_interrupt() | dev = container_of(...) //USE dev-> //USE Add disable_delayed_work_sync() in     imm_detach() to guarantee proper cancellation of the delayed work item before imm_struct is deallocated.
    (CVE-2025-68324)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68324

medium Nessus Plugin ID 279255

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.5 Jan 13, 2026, 2:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601130235
Version 1.4 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin Feed: 202601101958
Version 1.3 Dec 28, 2025, 8:09 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512282009
Version 1.2 Dec 20, 2025, 11:42 AM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 6.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSSv2 severity (based on CVE-2025-68324, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512201142
Version 1.1 Dec 19, 2025, 2:41 AM New Plugin Feed: 202512190241