The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - um: init cpu_tasks[] earlier This is currently done in uml_finishsetup(), but e.g. with KCOV enabled we'll     crash because some init code can call into e.g. memparse(), which has coverage annotations, and then the     checks in check_kcov_mode() crash because current is NULL. Simply initialize the cpu_tasks[] array     statically, which fixes the crash. For the later SMP work, it seems to have not really caused any problems     yet, but initialize all of the entries anyway. (CVE-2025-71115)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-71115

medium Nessus Plugin ID 284672

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.6 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.5 Feb 1, 2026, 12:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602010031
Version 1.4 Jan 21, 2026, 5:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211700
Version 1.3 Jan 16, 2026, 10:12 PM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2025-71115, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202601162212
Version 1.1 Jan 15, 2026, 2:04 PM New Plugin Feed: 202601151404