The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: dsa: microchip: Don't free uninitialized ksz_irq If something goes wrong at setup, ksz_irq_free() can     be called on uninitialized ksz_irq (for example when ksz_ptp_irq_setup() fails). It leads to freeing     uninitialized IRQ numbers and/or domains. Use dsa_switch_for_each_user_port_continue_reverse() in the     error path to iterate only over the fully initialized ports. (CVE-2025-68338)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68338

medium Nessus Plugin ID 279640

Version 1.5