The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1241-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
    - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
    - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
    - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
    - CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
    - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync     (bsc#1239095).
    - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
    - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
    - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to     read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs     in Apple firmware code and EFI runtime services are disabled with the following logs: [Firmware Bug]: Page     fault caused by firmware at PA: 0xffffb1edc0068000 WARNING: CPU: 3 PID: 104 at     arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x50/0xf0 (Removed some logs from     here) Call Trace: <TASK> page_fault_oops+0x4f/0x2c0 ? search_bpf_extables+0x6b/0x80 ?     search_module_extables+0x50/0x80 ? search_exception_tables+0x5b/0x60 kernelmode_fixup_or_oops+0x9e/0x110
    __bad_area_nosemaphore+0x155/0x190 bad_area_nosemaphore+0x16/0x20 do_kern_addr_fault+0x8c/0xa0     exc_page_fault+0xd8/0x180 asm_exc_page_fault+0x1e/0x30 (Removed some logs from here) ?
    __efi_call+0x28/0x30 ? switch_mm+0x20/0x30 ? efi_call_rts+0x19a/0x8e0 ? process_one_work+0x222/0x3f0 ?     worker_thread+0x4a/0x3d0 ? kthread+0x17a/0x1a0 ? process_one_work+0x3f0/0x3f0 ?     set_kthread_struct+0x40/0x40 ? ret_from_fork+0x22/0x30 </TASK> ---[ end trace 1f82023595a5927f ]--- efi:
    Froze efi_rts_wq and disabled EFI Runtime Services integrity: Couldn't get size: 0x8000000000000015     integrity: MODSIGN: Couldn't get UEFI db list efi: EFI Runtime Services are disabled! integrity: Couldn't     get size: 0x8000000000000015 integrity: Couldn't get UEFI dbx list integrity: Couldn't get size:
    0x8000000000000015 integrity: Couldn't get mokx list integrity: Couldn't get size: 0x80000000 So we avoid     reading these UEFI variables and thus prevent the crash. (CVE-2022-49357)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989406 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    efi: Do not import certificates from UEFI Secure Boot for T2 Macs

    On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables     at early boot to load UEFI Secure Boot certificates, a page fault occurs     in Apple firmware code and EFI runtime services are disabled with the     following logs:

    [Firmware Bug]: Page fault caused by firmware at PA: 0xffffb1edc0068000     WARNING: CPU: 3 PID: 104 at arch/x86/platform/efi/quirks.c:735     efi_crash_gracefully_on_page_fault+0x50/0xf0     (Removed some logs from here)     Call Trace:
     <TASK>      page_fault_oops+0x4f/0x2c0      ? search_bpf_extables+0x6b/0x80      ? search_module_extables+0x50/0x80      ? search_exception_tables+0x5b/0x60      kernelmode_fixup_or_oops+0x9e/0x110
     __bad_area_nosemaphore+0x155/0x190      bad_area_nosemaphore+0x16/0x20      do_kern_addr_fault+0x8c/0xa0      exc_page_fault+0xd8/0x180      asm_exc_page_fault+0x1e/0x30     (Removed some logs from here)      ? __efi_call+0x28/0x30      ? switch_mm+0x20/0x30      ? efi_call_rts+0x19a/0x8e0      ? process_one_work+0x222/0x3f0      ? worker_thread+0x4a/0x3d0      ? kthread+0x17a/0x1a0      ? process_one_work+0x3f0/0x3f0      ? set_kthread_struct+0x40/0x40      ? ret_from_fork+0x22/0x30      </TASK>
    ---[ end trace 1f82023595a5927f ]---     efi: Froze efi_rts_wq and disabled EFI Runtime Services     integrity: Couldn't get size: 0x8000000000000015     integrity: MODSIGN: Couldn't get UEFI db list     efi: EFI Runtime Services are disabled!     integrity: Couldn't get size: 0x8000000000000015     integrity: Couldn't get UEFI dbx list     integrity: Couldn't get size: 0x8000000000000015     integrity: Couldn't get mokx list     integrity: Couldn't get size: 0x80000000

    So we avoid reading these UEFI variables and thus prevent the crash.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
234407	SUSE SLES15 : Security update for the Linux Kernel (SUSE-SU-2025:1241-1)	Nessus	SuSE Local Security Checks	2025/4/15	2026/10/9	high
225467	Linux Distros Unpatched Vulnerability : CVE-2022-49357	Nessus	Misc.	2025/3/5	2026/7/17	medium
273300	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989406)	Nessus	Unity Linux Local Security Checks	2025/11/5	2025/11/5	medium

检测

插件搜索

high

medium

medium