The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure(), if     smb3_sync_session_ctx_passwords() fails, the function returns immediately without freeing and erasing the     newly allocated new_password and new_password2. This causes both a memory leak and a potential information     leak. Fix this by calling kfree_sensitive() on both password buffers before returning in this error case.
    (CVE-2025-71151)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-71151

medium Nessus Plugin ID 296410

Version 1.1