The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header The driver     expects to receive a struct gs_host_frame in gs_usb_receive_bulk_callback(). Use struct_group to describe     the header of the struct gs_host_frame and check that we have at least received the header before     accessing any members of it. To resubmit the URB, do not dereference the pointer chain     dev->parent->hf_size_rx but use parent->hf_size_rx instead. Since urb->context contains parent, it     is always defined, while dev is not defined if the URB it too short. (CVE-2025-68343)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68343

high Nessus Plugin ID 279641

Version 1.1