The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was     possible to incur into a double kfree() scenario when calling add_delayed_ref_head(). This could happen if     the record was reported to already exist in the btrfs_qgroup_trace_extent_nolock() call, but then there     was an error later on add_delayed_ref_head(). In this case, since add_delayed_ref_head() returned an     error, the caller went to free the record. Since add_delayed_ref_head() couldn't set this kfree'd pointer     to NULL, then kfree() would have acted on a non-NULL 'record' object which was pointing to memory already     freed by the callee. The problem comes from the fact that the responsibility to kfree the object is on     both the caller and the callee at the same time. Hence, the fix for this is to shift the ownership of the     'qrecord' object out of the add_delayed_ref_head(). That is, we will never attempt to kfree() the given     object inside of this function, and will expect the caller to act on the 'qrecord' object on its own. The     only exception where the 'qrecord' object cannot be kfree'd is if it was inserted into the tracing logic,     for which we already have the 'qrecord_inserted_ret' boolean to account for this. Hence, the caller has to     kfree the object only if add_delayed_ref_head() reports not to have inserted it on the tracing logic. As a     side-effect of the above, we must guarantee that 'qrecord_inserted_ret' is properly initialized at the     start of the function, not at the end, and then set when an actual insert happens. This way we avoid     'qrecord_inserted_ret' having an invalid value on an early exit. The documentation from the     add_delayed_ref_head() has also been updated to reflect on the exact ownership of the 'qrecord' object.
    (CVE-2025-68359)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68359

high Nessus Plugin ID 279727

Version 1.2

Version 1.1

Version 1.2 Dec 26, 2025, 4:55 PM CVSS metrics ("CVSSv2 score" set to 9.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:P") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512261655
Version 1.1 Dec 25, 2025, 7:38 AM New Plugin Feed: 202512250738