The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ima: Handle error code returned by ima_filter_rule_match() In ima_match_rules(), if     ima_filter_rule_match() returns -ENOENT due to the rule being NULL, the function incorrectly skips the 'if     (!rc)' check and sets 'result = true'. The LSM rule is considered a match, causing extra files to be     measured by IMA. This issue can be reproduced in the following scenario: After unloading the SELinux     policy module via 'semodule -d', if an IMA measurement is triggered before ima_lsm_rules is updated, in     ima_match_rules(), the first call to ima_filter_rule_match() returns -ESTALE. This causes the code to     enter the 'if (rc == -ESTALE && !rule_reinitialized)' block, perform ima_lsm_copy_rule() and retry. In     ima_lsm_copy_rule(), since the SELinux module has been removed, the rule becomes NULL, and the second call     to ima_filter_rule_match() returns -ENOENT. This bypasses the 'if (!rc)' check and results in a false     match. Call trace: selinux_audit_rule_match+0x310/0x3b8 security_audit_rule_match+0x60/0xa0     ima_match_rules+0x2e4/0x4a0 ima_match_policy+0x9c/0x1e8 ima_get_action+0x48/0x60     process_measurement+0xf8/0xa98 ima_bprm_check+0x98/0xd8 security_bprm_check+0x5c/0x78     search_binary_handler+0x6c/0x318 exec_binprm+0x58/0x1b8 bprm_execve+0xb8/0x130     do_execveat_common.isra.0+0x1a8/0x258 __arm64_sys_execve+0x48/0x68 invoke_syscall+0x50/0x128     el0_svc_common.constprop.0+0xc8/0xf0 do_el0_svc+0x24/0x38 el0_svc+0x44/0x200     el0t_64_sync_handler+0x100/0x130 el0t_64_sync+0x3c8/0x3d0 Fix this by changing 'if (!rc)' to 'if (rc <=     0)' to ensure that error codes like -ENOENT do not bypass the check and accidentally result in a     successful match. (CVE-2025-68740)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-68740

medium Nessus Plugin ID 279821

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.10 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.9 Feb 2, 2026, 9:31 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602022131
Version 1.8 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.7 Jan 13, 2026, 2:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601130235
Version 1.6 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin Feed: 202601101958
Version 1.5 Jan 6, 2026, 6:10 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601061810
Version 1.4 Dec 28, 2025, 8:09 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512282009
Version 1.3 Dec 26, 2025, 4:55 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512261655
Version 1.2 Dec 26, 2025, 12:07 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2025-68740, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512260007
Version 1.1 Dec 25, 2025, 7:38 AM New Plugin Feed: 202512250738