The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() The variable     mddev->private is first assigned to conf and then checked: conf = mddev->private; if (!conf) ... If conf     is NULL, then mddev->private is also NULL. In this case, null-pointer dereferences can occur when calling     raid5_quiesce(): raid5_quiesce(mddev, true); raid5_quiesce(mddev, false); since mddev->private is assigned     to conf again in raid5_quiesce(), and conf is dereferenced in several places, for example: conf->quiesce =     0; wake_up(&conf->wait_for_quiescent); To fix this issue, the function should unlock mddev and return     before invoking raid5_quiesce() when conf is NULL, following the existing pattern in     raid5_change_consistency_policy(). (CVE-2025-71135)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-71135

medium Nessus Plugin ID 284675

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Feb 10, 2026, 11:15 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602101115
Version 1.5 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.4 Feb 1, 2026, 12:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602010031
Version 1.3 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.2 Jan 16, 2026, 10:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601162212
Version 1.1 Jan 15, 2026, 2:04 PM New Plugin Feed: 202601151404