The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: xt_nfacct: don't assume acct name is null-terminated BUG: KASAN: slab-out-of-bounds in ..
    lib/vsprintf.c:721 Read of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851 [..]     string+0x231/0x2b0 lib/vsprintf.c:721 vsnprintf+0x739/0xf00 lib/vsprintf.c:2874 [..]     nfacct_mt_checkentry+0xd2/0xe0 net/netfilter/xt_nfacct.c:41 xt_check_match+0x3d1/0xab0     net/netfilter/x_tables.c:523 nfnl_acct_find_get() handles non-null input, but the error printk relied on     its presence. (CVE-2025-38639)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
260244	Linux Distros Unpatched Vulnerability : CVE-2025-38639	Nessus	Misc.	9/2/2025	9/29/2025	medium
265433	Photon OS 4.0: Linux PHSA-2025-4.0-0864	Nessus	PhotonOS Local Security Checks	9/19/2025	9/19/2025	high
261144	Photon OS 5.0: Linux PHSA-2025-5.0-0610	Nessus	PhotonOS Local Security Checks	9/3/2025	9/24/2025	high

Detections

Analytics

Plugins Search

medium

high

high