The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Ubuntu Linux 6.8 GA retains the legacy AF_UNIX garbage collector but backports upstream commit     8594d9b85c07 (af_unix: Don't call skb_get() for OOB skb). When orphaned MSG_OOB sockets hit unix_gc(),     the garbage collector still calls kfree_skb() as if OOB SKBs held two references; on Ubuntu Linux 6.8     (Noble Numbat) kernel tree, they have only the queue reference, so the buffer is freed while still     reachable and subsequent queue walks dereference freed memory, yielding a reliable local privilege     escalation (LPE) caused by a use-after-free (UAF). Ubuntu builds that have already taken the new GC stack     from commit 4090fa373f0e, and mainline Linux kernels shipping that infrastructure are unaffected because     they no longer execute the legacy collector path. This issue affects Ubuntu Linux from 6.8.0-56.58 before     6.8.0-84.84. (CVE-2025-13350)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-13350

high Nessus Plugin ID 301707

Version 1.4

Version 1.3

Version 1.2

Version 1.4 Jul 18, 2026, 3:00 PM Detection (updated detection logic) Plugin Feed: 202607181500
Version 1.3 Mar 14, 2026, 2:09 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603140209
Version 1.2 Mar 10, 2026, 10:49 PM Detection (updated detection logic) New Plugin Feed: 202603102249