The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1988 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)

    * kernel: avoid cyclic entity chains due to malformed USB descriptors (CVE-2020-0404)

    * kernel: speculation on incompletely validated data on IBM Power9 (CVE-2020-4788)

    * kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c (CVE-2020-13974)

    * kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free (CVE-2021-0941)

    * kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() (CVE-2021-3612)

    * kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts (CVE-2021-3669)

    * kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c (CVE-2021-3743)

    * kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (CVE-2021-3744)

    * kernel: possible use-after-free in bluetooth module (CVE-2021-3752)

    * kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks     (CVE-2021-3759)

    * kernel: DoS in ccp_run_aes_gcm_cmd() function (CVE-2021-3764)

    * kernel: sctp: Invalid chunks may be used to remotely remove existing associations (CVE-2021-3772)

    * kernel: lack of port sanity checking in natd and netfilter leads to exploit of OpenVPN clients     (CVE-2021-3773)

    * kernel: possible leak or coruption of data residing on hugetlbfs (CVE-2021-4002)

    * kernel: security regression for CVE-2018-13405 (CVE-2021-4037)

    * kernel: Buffer overwrite in decode_nfs_fh function (CVE-2021-4157)

    * kernel: cgroup: Use open-time creds and namespace for migration perm checks (CVE-2021-4197)

    * kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses (CVE-2021-4203)

    * kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets replies (CVE-2021-20322)

    * kernel: arm: SIGPAGE information disclosure vulnerability (CVE-2021-21781)

    * hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 (CVE-2021-26401)

    * kernel: Local privilege escalation due to incorrect BPF JIT branch displacement computation     (CVE-2021-29154)

    * kernel: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c (CVE-2021-37159)

    * kernel: eBPF multiplication integer overflow in prealloc_elems_and_freelist() in kernel/bpf/stackmap.c     leads to out-of-bounds write (CVE-2021-41864)

    * kernel: Heap buffer overflow in firedtv driver (CVE-2021-42739)

    * kernel: ppc: kvm: allows a malicious KVM guest to crash the host (CVE-2021-43056)

    * kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (CVE-2021-43389)

    * kernel: mwifiex_usb_recv() in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker to cause DoS     via crafted USB device (CVE-2021-43976)

    * kernel: use-after-free in the TEE subsystem (CVE-2021-44733)

    * kernel: information leak in the IPv6 implementation (CVE-2021-45485)

    * kernel: information leak in the IPv4 implementation (CVE-2021-45486)

    * hw: cpu: intel: Branch History Injection (BHI) (CVE-2022-0001)

    * hw: cpu: intel: Intra-Mode BTI (CVE-2022-0002)

    * kernel: Local denial of service in bond_ipsec_add_sa (CVE-2022-0286)

    * kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c (CVE-2022-0322)

    * kernel: FUSE allows UAF reads of write() buffers, allowing theft of (partial) /etc/shadow hashes     (CVE-2022-1011)

    * kernel: use-after-free in nouveau kernel module (CVE-2020-27820)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 4.14.256-197.484. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1727 advisory.

    2024-08-14: CVE-2021-47203 was added to this advisory.

    2024-08-14: CVE-2021-47184 was added to this advisory.

    2024-08-14: CVE-2021-47189 was added to this advisory.

    2024-08-14: CVE-2021-47185 was added to this advisory.

    2024-04-30: CVE-2023-0047 was removed from this advisory (rejected).

    2024-02-01: CVE-2023-0047 was added to this advisory.

    A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the     way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del()     together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A     privileged local user could use this flaw to crash the system or escalate their privileges on the system.
    (CVE-2021-3640)

    A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP     association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and     the attacker can send packets with spoofed IP addresses. (CVE-2021-3772)

    A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some     regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the     memory pages. A local user could use this flaw to get unauthorized access to some data. (CVE-2021-4002)

    In the Linux kernel, the following vulnerability has been resolved:

    i40e: Fix NULL ptr dereference on VSI filter sync (CVE-2021-47184)

    In the Linux kernel, the following vulnerability has been resolved:

    tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix memory ordering between normal and ordered work functions (CVE-2021-47189)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (CVE-2021-47203)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.4.162-86.275. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-093 advisory.

    A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could     happen if removing device (that is not common to remove video card physically without power-off, but same     happens if unbind the driver). (CVE-2020-27820)

    A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the     way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del()     together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A     privileged local user could use this flaw to crash the system or escalate their privileges on the system.
    (CVE-2021-3640)

    A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP     association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and     the attacker can send packets with spoofed IP addresses. (CVE-2021-3772)

    A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and     bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special     privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. (CVE-2021-4001)

    A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some     regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the     memory pages. A local user could use this flaw to get unauthorized access to some data. (CVE-2021-4002)

    In the Linux kernel, the following vulnerability has been resolved:

    i40e: Fix NULL ptr dereference on VSI filter sync (CVE-2021-47184)

    In the Linux kernel, the following vulnerability has been resolved:

    tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix memory ordering between normal and ordered work functions (CVE-2021-47189)

    In the Linux kernel, the following vulnerability has been resolved:

    perf bpf: Avoid memory leak from perf_env__insert_btf() (CVE-2021-47190)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: sysfs: Fix hang when device state is set via sysfs (CVE-2021-47192)

    In the Linux kernel, the following vulnerability has been resolved:

    iavf: free q_vectors before queues in iavf_disable_vf (CVE-2021-47201)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (CVE-2021-47203)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails (CVE-2021-47217)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: Fix out of bound access for corrupted isofs image (CVE-2021-47478)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Put LLD module refcnt after SCSI device is released (CVE-2021-47480)

    In the Linux kernel, the following vulnerability has been resolved:

    regmap: Fix possible double-free in regcache_rbtree_exit() (CVE-2021-47483)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/ttm: fix memleak in ttm_transfered_destroy (CVE-2021-47490)

    In the Linux kernel, the following vulnerability has been resolved:

    usbnet: sanity check for maxpacket (CVE-2021-47495)

    In the Linux kernel, the following vulnerability has been resolved:

    net/tls: Fix flipped sign in tls_err_abort() calls (CVE-2021-47496)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.82-83.359. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-049 advisory.

    A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could     happen if removing device (that is not common to remove video card physically without power-off, but same     happens if unbind the driver). (CVE-2020-27820)

    A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the     way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del()     together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A     privileged local user could use this flaw to crash the system or escalate their privileges on the system.
    (CVE-2021-3640)

    A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP     association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and     the attacker can send packets with spoofed IP addresses. (CVE-2021-3772)

    A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and     bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special     privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. (CVE-2021-4001)

    A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some     regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the     memory pages. A local user could use this flaw to get unauthorized access to some data. (CVE-2021-4002)

    A flaw heap buffer overflow in the Linux kernel's AMD Radeon graphics card driver was found in the way     user writes some malicious data to the AMD GPU Display Driver Debug Filesystem (to the VGA sub-directory     of the /sys/kernel/debug/ directory). A local user could use this flaw to crash the system or escalate     their privileges on the system. (CVE-2021-42327)

    In the Linux kernel, the following vulnerability has been resolved:

    i40e: Fix NULL ptr dereference on VSI filter sync (CVE-2021-47184)

    In the Linux kernel, the following vulnerability has been resolved:

    tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: check for null after calling kmemdup (CVE-2021-47186)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix memory ordering between normal and ordered work functions (CVE-2021-47189)

    In the Linux kernel, the following vulnerability has been resolved:

    perf bpf: Avoid memory leak from perf_env__insert_btf() (CVE-2021-47190)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() (CVE-2021-47191)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: sysfs: Fix hang when device state is set via sysfs (CVE-2021-47192)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (CVE-2021-47197)

    In the Linux kernel, the following vulnerability has been resolved:

    iavf: free q_vectors before queues in iavf_disable_vf (CVE-2021-47201)

    In the Linux kernel, the following vulnerability has been resolved:

    thermal: Fix NULL pointer dereferences in of_thermal_ functions (CVE-2021-47202)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (CVE-2021-47203)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails (CVE-2021-47217)

    In the Linux kernel, the following vulnerability has been resolved:

    selinux: fix NULL-pointer dereference when hashtab allocation fails (CVE-2021-47218)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (CVE-2021-47219)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix possible UAF when remounting r/o a mmp-protected file system (CVE-2021-47342)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value (CVE-2021-47451)

    In the Linux kernel, the following vulnerability has been resolved:

    can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (CVE-2021-47459)

    In the Linux kernel, the following vulnerability has been resolved:

    ocfs2: fix data corruption after conversion from inline format (CVE-2021-47460)

    In the Linux kernel, the following vulnerability has been resolved:

    userfaultfd: fix a race between writeprotect and exit_mmap() (CVE-2021-47461)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: fix possible null-pointer dereference in audit_filter_rules (CVE-2021-47464)

    In the Linux kernel, the following vulnerability has been resolved:

    mm, slub: fix potential memoryleak in kmem_cache_open() (CVE-2021-47466)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() (CVE-2021-47473)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: Fix out of bound access for corrupted isofs image (CVE-2021-47478)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Put LLD module refcnt after SCSI device is released (CVE-2021-47480)

    In the Linux kernel, the following vulnerability has been resolved:

    regmap: Fix possible double-free in regcache_rbtree_exit() (CVE-2021-47483)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/ttm: fix memleak in ttm_transfered_destroy (CVE-2021-47490)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: khugepaged: skip huge page collapse for special files (CVE-2021-47491)

    In the Linux kernel, the following vulnerability has been resolved:

    mm, thp: bail out early in collapse_file for writeback page (CVE-2021-47492)

    In the Linux kernel, the following vulnerability has been resolved:

    usbnet: sanity check for maxpacket (CVE-2021-47495)

    In the Linux kernel, the following vulnerability has been resolved:

    net/tls: Fix flipped sign in tls_err_abort() calls (CVE-2021-47496)

    A use-after-free flaw was found in the Linux kernel's Ext4 File System in how a user triggers several file     operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially     escalate their privileges on the system. (CVE-2023-1252)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1641-1 advisory.

    The SUSE Linux Enterprise 15 SP4 LTSS kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
    - CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
    - CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
    - CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found()     (bsc#1222618).
    - CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
    - CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
    - CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
    - CVE-2024-26727: Fixed assertion if a newly created btrfs subvolume already gets read (bsc#1222536).
    - CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
    - CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
    - CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
    - CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
    - CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
    - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
    - CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
    - CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
    - CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
    - CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5     modules (bsc#1219169).
    - CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
    - CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs     (HugeTLB pages) functionality (bsc#1219264).
    - CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in     net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
    - CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()     (bsc#1218336).
    - CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
    - CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).
    - CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
    - CVE-2023-52607: Fixed NULL pointer dereference in pgtable_cache_add kasprintf() (bsc#1221061).
    - CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
    - CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).
    - CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command     (bsc#1220883).
    - CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system     (bsc#1209657).
    - CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
    - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
    - CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)
    - CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).
    - CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work     functions in btrfs (bsc#1222706).
    - CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
    - CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145,     bsc#1222664).
    - CVE-2021-47182: Fixed scsi_mode_sense() buffer length handling (bsc#1222662).
    - CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource()     (bsc#1222660).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989014 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

    When parsing the txq list in lpfc_drain_txq(), the driver attempts to pass     the requests to the adapter. If such an attempt fails, a local fail_msg     string is set and a log message output.  The job is then added to a     completions list for cancellation.

    Processing of any further jobs from the txq list continues, but since     fail_msg remains set, jobs are added to the completions list regardless     of whether a wqe was passed to the adapter.  If successfully added to     txcmplq, jobs are added to both lists resulting in list corruption.

    Fix by clearing the fail_msg string after adding a job to the completions     list. This stops the subsequent jobs from being added to the completions     list unless they had an appropriate failure.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987036 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

    When parsing the txq list in lpfc_drain_txq(), the driver attempts to pass     the requests to the adapter. If such an attempt fails, a local fail_msg     string is set and a log message output.  The job is then added to a     completions list for cancellation.

    Processing of any further jobs from the txq list continues, but since     fail_msg remains set, jobs are added to the completions list regardless     of whether a wqe was passed to the adapter.  If successfully added to     txcmplq, jobs are added to both lists resulting in list corruption.

    Fix by clearing the fail_msg string after adding a job to the completions     list. This stops the subsequent jobs from being added to the completions     list unless they had an appropriate failure.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986587 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

    When parsing the txq list in lpfc_drain_txq(), the driver attempts to pass     the requests to the adapter. If such an attempt fails, a local fail_msg     string is set and a log message output.  The job is then added to a     completions list for cancellation.

    Processing of any further jobs from the txq list continues, but since     fail_msg remains set, jobs are added to the completions list regardless     of whether a wqe was passed to the adapter.  If successfully added to     txcmplq, jobs are added to both lists resulting in list corruption.

    Fix by clearing the fail_msg string after adding a job to the completions     list. This stops the subsequent jobs from being added to the completions     list unless they had an appropriate failure.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
161047	RHEL 8 : kernel (RHSA-2022:1988)	Nessus	Red Hat Local Security Checks	2022/5/11	2025/8/15	critical
155973	Amazon Linux 2 : kernel (ALAS-2021-1727)	Nessus	Amazon Linux Local Security Checks	2021/12/10	2026/2/24	high
214927	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2025-093)	Nessus	Amazon Linux Local Security Checks	2025/2/4	2026/1/26	high
202959	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2024-2038)	Nessus	Huawei Local Security Checks	2024/7/22	2025/9/29	high
190033	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-049)	Nessus	Amazon Linux Local Security Checks	2024/2/6	2026/2/26	high
197051	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2024:1641-1)	Nessus	SuSE Local Security Checks	2024/5/15	2026/6/26	high
276342	TencentOS Server 2: kernel (TSSA-2024:0557)	Nessus	Tencent Local Security Checks	2025/11/20	2026/3/10	high
273790	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989014)	Nessus	Unity Linux Local Security Checks	2025/11/5	2025/11/5	medium
268275	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987036)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/15	medium
268785	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986587)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/15	medium

检测

插件搜索

critical

high

high

high

high

high

high

medium

medium

medium