Linux Distros Unpatched Vulnerability : CVE-2025-40075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpmetrics: use dstdevnetrcu Replace three dstdev with a lockdep enabled helper. CVE-2025-40075 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2025-61104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyunknowntlv function at ospfext.c. This vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2025-62230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in the X.Org X server's X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without...

Linux Distros Unpatched Vulnerability : CVE-2025-61102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextlinkadjsid function at ospfext.c. This...

Linux Distros Unpatched Vulnerability : CVE-2025-40059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: Fix incorrect handling for return value of devmkzalloc The return value of devmkzalloc could be an null pointer, use !desc.pdata to fix incorrect...

Linux Distros Unpatched Vulnerability : CVE-2025-40078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Explicitly check accesses to bpfsockaddr Syzkaller found a kernel warning on the following sockaddr program: 0: r0 = 0 1: r2 = u32 r1 +60 2: exit which...

Linux Distros Unpatched Vulnerability : CVE-2025-40065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RISC-V: KVM: Write hgatp register with valid mode bits According to the RISC-V Privileged Architecture Spec, when MODE=Bare is selected,software must write zero...

Linux Distros Unpatched Vulnerability : CVE-2025-40033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remoteproc: pru: Fix potential NULL pointer dereference in prurprocsetctable prurprocsetctable accessed rproc-priv before the ISERRORNULL check, which could lea...

Linux Distros Unpatched Vulnerability : CVE-2025-12343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FFmpeg's TensorFlow backend within the libavfilter/dnnbackendtf.c source file. The issue occurs in the dnnexecutemodeltf function, where a...

Linux Distros Unpatched Vulnerability : CVE-2025-62711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in...

Linux Distros Unpatched Vulnerability : CVE-2025-40079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv, bpf: Sign extend struct ops return values properly The nsbpfqdisc selftest triggers a kernel panic: Unable to handle kernel paging request at virtual...

Linux Distros Unpatched Vulnerability : CVE-2025-40023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs can't read...

Linux Distros Unpatched Vulnerability : CVE-2025-40055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix double free in userclusterconnect userclusterdisconnect frees conn-ccprivate which is lc but then the error handling frees lc a second time. Set lc t...

Linux Distros Unpatched Vulnerability : CVE-2025-40081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: armspe: Prevent overflow in PERFIDX2OFF Cast nrpages to unsigned long to avoid overflow when handling large AUX buffer sizes = 2 GiB. CVE-2025-40081 Note...

Linux Distros Unpatched Vulnerability : CVE-2025-40047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/waitid: always prune wait queue entry in iowaitidwait For a successful return, always remove our entry from the wait queue entry list. Previously this w...

Linux Distros Unpatched Vulnerability : CVE-2025-62291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an...

Linux Distros Unpatched Vulnerability : CVE-2025-62229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation ca...

Linux Distros Unpatched Vulnerability : CVE-2025-59024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crafted delegations or IP fragments can poison cached delegations in Recursor. CVE-2025-59024 Note that Nessus relies on the presence of the package as reported...

Linux Distros Unpatched Vulnerability : CVE-2025-39969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to...

Linux Distros Unpatched Vulnerability : CVE-2025-40019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essivaeadcrypt so that it's also checked for decryption...