The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously,     btrfs_get_or_create_delayed_node() set the delayed_node's refcount before acquiring the     root->delayed_nodes lock. Commit e8513c012de7 (btrfs: implement ref_tracker for delayed_nodes) moved     refcount_set inside the critical section, which means there is no longer a memory barrier between setting     the refcount and setting btrfs_inode->delayed_node. Without that barrier, the stores to node->refs and     btrfs_inode->delayed_node may become visible out of order. Another thread can then read     btrfs_inode->delayed_node and attempt to increment a refcount that hasn't been set yet, leading to a     refcounting bug and a use-after-free warning. The fix is to move refcount_set back to where it was to take     advantage of the implicit memory barrier provided by lock acquisition. Because the allocations now happen     outside of the lock's critical section, they can use GFP_NOFS instead of GFP_ATOMIC. (CVE-2025-71159)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-71159

high Nessus Plugin ID 296395

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Feb 14, 2026, 1:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602140112
Version 1.3 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
Version 1.2 Jan 31, 2026, 11:07 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202601311107
Version 1.1 Jan 23, 2026, 11:44 PM New Plugin Feed: 202601232344