The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iommu/sva: invalidate stale IOTLB entries for kernel address space Introduce a new IOMMU interface to     flush IOTLB paging cache entries for the CPU kernel address space. This interface is invoked from the x86     architecture code that manages combined user and kernel page tables, specifically before any kernel page     table page is freed and reused. This addresses the main issue with vfree() which is a common occurrence     and can be triggered by unprivileged users. While this resolves the primary problem, it doesn't address     some extremely rare case related to memory unplug of memory that was present as reserved memory at boot,     which cannot be triggered by unprivileged users. The discussion can be found at the link below. Enable SVA     on x86 architecture since the IOMMU can now receive notification to flush the paging cache before freeing     the CPU kernel page table pages. (CVE-2025-71202)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-71202

medium Nessus Plugin ID 299070

Version 1.13

Version 1.12

Version 1.11

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.13 Jun 30, 2026, 11:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606301158
Version 1.12 Jun 28, 2026, 8:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606282012
Version 1.11 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.9 May 20, 2026, 10:33 PM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605202233
Version 1.8 Mar 23, 2026, 11:56 AM CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") Plugin Feed: 202603231156
Version 1.7 Mar 18, 2026, 7:26 PM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin Feed: 202603181926
Version 1.6 Mar 10, 2026, 1:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603100156
Version 1.5 Feb 23, 2026, 1:38 PM CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202602231338
Version 1.4 Feb 18, 2026, 9:24 AM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2025-71202, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202602180924
Version 1.3 Feb 17, 2026, 12:54 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602170054
Version 1.2 Feb 15, 2026, 2:57 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Plugin metadata Plugin Feed: 202602151457
Version 1.1 Feb 14, 2026, 11:28 PM New Plugin Feed: 202602142328