The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7381-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - Ublk userspace block driver;

    - Virtio block driver;

    - Bluetooth drivers;

    - Buffer Sharing and Synchronization framework;

    - DMA engine subsystem;

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - Hardware monitoring drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Microchip PCI driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - PCI subsystem;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Power supply drivers;

    - Voltage and Current Regulator drivers;

    - SCSI subsystem;

    - i.MX SoC drivers;

    - SPI subsystem;

    - UFS subsystem;

    - USB Gadget drivers;

    - TDX Guest driver;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - Overlay file system;

    - Diskquota system;

    - SMB network file system;

    - DRM display driver;

    - BPF subsystem;

    - VLANs driver;

    - KASAN memory debugging framework;

    - Memory management;

    - StackDepot library;

    - Bluetooth subsystem;

    - LAPB network protocol;

    - Network namespace;

    - Netfilter;

    - io_uring subsystem;

    - Control group (cgroup);

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Scheduler infrastructure;

    - Seccomp subsystem;

    - Tracing infrastructure;

    - Workqueue subsystem;

    - KUnit library;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - TIPC protocol;

    - Wireless networking;

    - eXpress Data Path;

    - SELinux security module;

    - ALSA framework;

    - Intel ASoC drivers;

    - SOF drivers; (CVE-2024-56712, CVE-2024-56761, CVE-2025-21661, CVE-2024-56565, CVE-2024-57804,     CVE-2024-57887, CVE-2025-21642, CVE-2024-56779, CVE-2025-21656, CVE-2024-57890, CVE-2024-36476,     CVE-2024-57843, CVE-2024-56594, CVE-2024-41932, CVE-2025-21653, CVE-2024-56567, CVE-2024-56665,     CVE-2024-54191, CVE-2024-57893, CVE-2024-57932, CVE-2024-56656, CVE-2024-57945, CVE-2024-57931,     CVE-2024-56599, CVE-2024-57897, CVE-2024-57903, CVE-2024-57918, CVE-2024-57795, CVE-2024-56662,     CVE-2025-21639, CVE-2024-55881, CVE-2024-57889, CVE-2024-57884, CVE-2024-57934, CVE-2024-39282,     CVE-2024-56718, CVE-2024-56644, CVE-2024-56760, CVE-2024-43098, CVE-2024-47143, CVE-2024-55642,     CVE-2024-56634, CVE-2024-56564, CVE-2024-56768, CVE-2024-56649, CVE-2024-57919, CVE-2024-56620,     CVE-2024-56625, CVE-2024-56655, CVE-2024-56772, CVE-2025-21637, CVE-2024-56617, CVE-2024-57879,     CVE-2024-56715, CVE-2024-56550, CVE-2024-50051, CVE-2024-56673, CVE-2024-51729, CVE-2025-21664,     CVE-2025-21649, CVE-2024-56605, CVE-2024-56622, CVE-2024-56591, CVE-2024-56782, CVE-2024-57801,     CVE-2024-56664, CVE-2024-57916, CVE-2024-53680, CVE-2024-57926, CVE-2024-56637, CVE-2024-56769,     CVE-2024-57924, CVE-2024-56648, CVE-2024-57872, CVE-2024-56593, CVE-2024-57913, CVE-2024-53682,     CVE-2024-56670, CVE-2024-56767, CVE-2024-56778, CVE-2024-56777, CVE-2025-21658, CVE-2025-21646,     CVE-2024-48875, CVE-2024-56758, CVE-2024-56604, CVE-2024-56787, CVE-2024-56581, CVE-2025-21635,     CVE-2024-56641, CVE-2024-56608, CVE-2024-57885, CVE-2024-56716, CVE-2024-56671, CVE-2024-56559,     CVE-2025-21633, CVE-2024-56372, CVE-2024-57888, CVE-2024-56623, CVE-2025-21638, CVE-2024-56600,     CVE-2024-56647, CVE-2025-21659, CVE-2024-41935, CVE-2024-56624, CVE-2024-56574, CVE-2025-21648,     CVE-2024-56621, CVE-2024-54460, CVE-2024-56659, CVE-2024-47141, CVE-2024-57805, CVE-2024-57792,     CVE-2024-45828, CVE-2024-53681, CVE-2024-56568, CVE-2024-56764, CVE-2025-21650, CVE-2024-56601,     CVE-2024-56663, CVE-2025-21660, CVE-2025-21629, CVE-2024-56595, CVE-2024-57917, CVE-2024-53685,     CVE-2024-57882, CVE-2024-57894, CVE-2024-56651, CVE-2024-56657, CVE-2024-57876, CVE-2024-56717,     CVE-2024-57935, CVE-2024-56667, CVE-2024-57910, CVE-2024-57793, CVE-2024-56631, CVE-2024-56638,     CVE-2025-21640, CVE-2024-56710, CVE-2024-56583, CVE-2024-56557, CVE-2024-56658, CVE-2025-21632,     CVE-2024-56645, CVE-2024-56646, CVE-2024-56640, CVE-2024-57944, CVE-2024-56598, CVE-2024-57857,     CVE-2024-56709, CVE-2024-56654, CVE-2024-57809, CVE-2024-57895, CVE-2025-21834, CVE-2024-56763,     CVE-2024-48881, CVE-2024-57841, CVE-2024-57878, CVE-2024-56774, CVE-2024-57791, CVE-2024-56575,     CVE-2024-56619, CVE-2024-56570, CVE-2024-56616, CVE-2024-56569, CVE-2025-21636, CVE-2024-56572,     CVE-2024-56552, CVE-2024-56596, CVE-2025-21654, CVE-2024-56573, CVE-2024-56784, CVE-2024-56626,     CVE-2024-56642, CVE-2024-56643, CVE-2024-56719, CVE-2024-56632, CVE-2024-57839, CVE-2024-56578,     CVE-2024-53690, CVE-2024-56609, CVE-2024-56562, CVE-2024-56589, CVE-2024-56781, CVE-2024-56672,     CVE-2024-56775, CVE-2024-56713, CVE-2024-56580, CVE-2024-57874, CVE-2024-56369, CVE-2024-56711,     CVE-2025-21651, CVE-2024-56584, CVE-2024-57904, CVE-2024-54680, CVE-2024-56577, CVE-2024-56558,     CVE-2024-56780, CVE-2024-58087, CVE-2024-57892, CVE-2025-21644, CVE-2024-57911, CVE-2024-56579,     CVE-2025-21663, CVE-2024-56618, CVE-2024-56766, CVE-2024-56653, CVE-2025-21655, CVE-2024-56669,     CVE-2024-56759, CVE-2024-48876, CVE-2025-21631, CVE-2024-56765, CVE-2024-56770, CVE-2024-57838,     CVE-2025-21634, CVE-2024-56650, CVE-2024-57939, CVE-2024-56606, CVE-2024-56610, CVE-2025-21662,     CVE-2024-56785, CVE-2024-55916, CVE-2025-21643, CVE-2024-56586, CVE-2024-56582, CVE-2024-56614,     CVE-2024-49571, CVE-2024-49569, CVE-2024-57798, CVE-2024-56633, CVE-2024-55641, CVE-2025-21647,     CVE-2025-21652, CVE-2024-56757, CVE-2024-56597, CVE-2024-47794, CVE-2024-57902, CVE-2024-57925,     CVE-2024-54683, CVE-2024-57938, CVE-2024-56615, CVE-2024-57906, CVE-2024-53687, CVE-2024-57899,     CVE-2024-56783, CVE-2024-56786, CVE-2024-56635, CVE-2024-56551, CVE-2024-53179, CVE-2024-56588,     CVE-2024-47408, CVE-2024-57849, CVE-2024-52319, CVE-2024-56576, CVE-2024-57905, CVE-2024-57946,     CVE-2024-56607, CVE-2024-57806, CVE-2024-57933, CVE-2024-55639, CVE-2024-56561, CVE-2024-48873,     CVE-2024-52332, CVE-2025-21645, CVE-2024-56602, CVE-2024-56590, CVE-2024-57799, CVE-2024-57929,     CVE-2024-56639, CVE-2024-56613, CVE-2024-56675, CVE-2024-57912, CVE-2024-57883, CVE-2024-56636,     CVE-2024-56592, CVE-2024-57802, CVE-2024-54455, CVE-2024-57908, CVE-2024-56603, CVE-2024-57875,     CVE-2024-56773, CVE-2024-47809, CVE-2024-56630, CVE-2024-56587, CVE-2024-56627, CVE-2024-57921,     CVE-2024-56660, CVE-2024-56771, CVE-2024-57886, CVE-2024-57896, CVE-2024-57807, CVE-2024-57907,     CVE-2024-49568, CVE-2024-54193, CVE-2024-56652, CVE-2024-57940, CVE-2024-57898, CVE-2024-57901,     CVE-2024-56714, CVE-2024-56566, CVE-2024-56563, CVE-2024-56368, CVE-2024-56611, CVE-2024-56776,     CVE-2024-57850, CVE-2024-56629, CVE-2024-57881, CVE-2024-57880, CVE-2024-57900)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7513-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - RISC-V architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - Ublk userspace block driver;

    - Virtio block driver;

    - DMA engine subsystem;

    - GPU drivers;

    - Microsoft Hyper-V drivers;

    - Hardware monitoring drivers;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Media drivers;

    - Microchip PCI driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - SCSI subsystem;

    - USB Gadget drivers;

    - TDX Guest driver;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - EROFS file system;

    - File systems infrastructure;

    - Network file systems library;

    - NILFS2 file system;

    - Overlay file system;

    - SMB network file system;

    - VLANs driver;

    - Memory management;

    - LAPB network protocol;

    - io_uring subsystem;

    - BPF subsystem;

    - Control group (cgroup);

    - Tracing infrastructure;

    - Workqueue subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Wireless networking;

    - SELinux security module;

    - ALSA framework;

    - SOF drivers; (CVE-2024-56372, CVE-2025-21639, CVE-2024-57897, CVE-2024-56770, CVE-2024-57898,     CVE-2025-21655, CVE-2024-56667, CVE-2024-41013, CVE-2024-57888, CVE-2025-21658, CVE-2024-57911,     CVE-2024-56654, CVE-2024-57904, CVE-2024-56664, CVE-2024-57806, CVE-2024-56758, CVE-2024-57912,     CVE-2025-21649, CVE-2024-56369, CVE-2025-21656, CVE-2025-21643, CVE-2024-57884, CVE-2025-21640,     CVE-2024-56769, CVE-2024-57939, CVE-2025-21635, CVE-2024-57902, CVE-2024-36476, CVE-2025-21646,     CVE-2024-57887, CVE-2024-57882, CVE-2024-57792, CVE-2024-56759, CVE-2024-57901, CVE-2024-56764,     CVE-2025-21654, CVE-2024-57899, CVE-2025-21664, CVE-2024-56715, CVE-2024-56760, CVE-2024-57926,     CVE-2024-57938, CVE-2025-21637, CVE-2024-55881, CVE-2024-57916, CVE-2024-57908, CVE-2024-57910,     CVE-2024-57892, CVE-2024-57890, CVE-2024-56662, CVE-2024-57793, CVE-2024-47408, CVE-2024-49568,     CVE-2024-57946, CVE-2024-53690, CVE-2024-56716, CVE-2024-57801, CVE-2024-56670, CVE-2024-56709,     CVE-2024-57885, CVE-2024-57791, CVE-2024-38608, CVE-2024-56763, CVE-2024-57906, CVE-2024-47736,     CVE-2024-56761, CVE-2024-56659, CVE-2025-21636, CVE-2024-57913, CVE-2024-56710, CVE-2025-21660,     CVE-2024-57945, CVE-2024-39282, CVE-2024-53687, CVE-2024-57907, CVE-2024-53179, CVE-2025-21659,     CVE-2024-57805, CVE-2024-57889, CVE-2024-57940, CVE-2025-21645, CVE-2024-56660, CVE-2024-56718,     CVE-2024-57802, CVE-2024-56767, CVE-2024-56717, CVE-2024-58087, CVE-2025-21647, CVE-2025-21650,     CVE-2024-57895, CVE-2025-21632, CVE-2024-54193, CVE-2024-57893, CVE-2025-21652, CVE-2025-21634,     CVE-2024-56652, CVE-2024-57929, CVE-2024-57804, CVE-2024-57925, CVE-2024-57932, CVE-2024-54683,     CVE-2025-21663, CVE-2024-56665, CVE-2024-54455, CVE-2025-21642, CVE-2024-57931, CVE-2025-21971,     CVE-2024-56656, CVE-2025-21651, CVE-2024-49571, CVE-2025-21631, CVE-2024-56675, CVE-2024-53125,     CVE-2025-21938, CVE-2024-57879, CVE-2024-56657, CVE-2024-57807, CVE-2024-57841, CVE-2024-57903,     CVE-2024-53685, CVE-2024-57896, CVE-2024-57900, CVE-2024-57883, CVE-2024-58237, CVE-2025-21638,     CVE-2024-55639, CVE-2025-21653, CVE-2025-21648, CVE-2024-54460, CVE-2024-57933, CVE-2024-55916,     CVE-2024-57917, CVE-2025-21662)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1177-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
    - CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
    - CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
    - CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
    - CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
    - CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround     (bsc#1235712).
    - CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg     (bsc#1235733).
    - CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
    - CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
    - CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
    - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
    - CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
    - CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
    - CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
    - CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq'     (bsc#1235524).
    - CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
    - CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
    - CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
    - CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
    - CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
    - CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
    - CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
    - CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
    - CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
    - CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
    - CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
    - CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
    - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
    - CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
    - CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
    - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
    - CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
    - CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
    - CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
    - CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
    - CVE-2025-21763: neighbour: use RCU protection in __neigh_notify() (bsc#1237897).
    - CVE-2025-21765: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906).
    - CVE-2025-21766: ipv4: use RCU protection in __ip_rt_update_pmtu() (bsc#1238754).
    - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1238512).
    - CVE-2025-21825: selftests/bpf: Add test case for the freeing of bpf_timer (bsc#1238971).
    - CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512).
    - CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479).
    - CVE-2025-21856: s390/ism: add release function for struct device (bsc#1239486).
    - CVE-2025-21857: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478).
    - CVE-2025-21861: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize()     (bsc#1239483).
    - CVE-2025-21862: drop_monitor: fix incorrect initialization order (bsc#1239474).
    - CVE-2025-21864: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482).
    - CVE-2025-21865: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl() (bsc#1239481).
    - CVE-2025-21870: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (bsc#1240191).
    - CVE-2025-21871: tee: optee: Fix supplicant wait loop (bsc#1240183).
    - CVE-2025-21883: ice: Fix deinitializing VF in error path (bsc#1240189).
    - CVE-2025-21890: idpf: fix checksums set in idpf_rx_rsc() (bsc#1240173).
    - CVE-2025-21891: ipvlan: ensure network headers are in skb linear part (bsc#1240186).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1178-1 advisory.

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
    - CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
    - CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
    - CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
    - CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
    - CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround     (bsc#1235712).
    - CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg     (bsc#1235733).
    - CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
    - CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
    - CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
    - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
    - CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
    - CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
    - CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
    - CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq'     (bsc#1235524).
    - CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
    - CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
    - CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
    - CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
    - CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
    - CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
    - CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
    - CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
    - CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
    - CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
    - CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
    - CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
    - CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
    - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
    - CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
    - CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
    - CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
    - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
    - CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort     (bsc#1238496).
    - CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
    - CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
    - CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
    - CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
    - CVE-2025-21763: neighbour: use RCU protection in __neigh_notify() (bsc#1237897).
    - CVE-2025-21765: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906).
    - CVE-2025-21766: ipv4: use RCU protection in __ip_rt_update_pmtu() (bsc#1238754).
    - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1238512).
    - CVE-2025-21825: selftests/bpf: Add test case for the freeing of bpf_timer (bsc#1238971).
    - CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512).
    - CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479).
    - CVE-2025-21856: s390/ism: add release function for struct device (bsc#1239486).
    - CVE-2025-21857: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478).
    - CVE-2025-21861: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize()     (bsc#1239483).
    - CVE-2025-21862: drop_monitor: fix incorrect initialization order (bsc#1239474).
    - CVE-2025-21864: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482).
    - CVE-2025-21865: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl() (bsc#1239481).
    - CVE-2025-21870: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (bsc#1240191).
    - CVE-2025-21871: tee: optee: Fix supplicant wait loop (bsc#1240183).
    - CVE-2025-21883: ice: Fix deinitializing VF in error path (bsc#1240189).
    - CVE-2025-21890: idpf: fix checksums set in idpf_rx_rsc() (bsc#1240173).
    - CVE-2025-21891: ipvlan: ensure network headers are in skb linear part (bsc#1240186).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7514-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - RISC-V architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - Ublk userspace block driver;

    - Virtio block driver;

    - DMA engine subsystem;

    - GPU drivers;

    - Microsoft Hyper-V drivers;

    - Hardware monitoring drivers;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Media drivers;

    - Microchip PCI driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - SCSI subsystem;

    - USB Gadget drivers;

    - TDX Guest driver;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - EROFS file system;

    - File systems infrastructure;

    - Network file systems library;

    - NILFS2 file system;

    - Overlay file system;

    - SMB network file system;

    - VLANs driver;

    - Memory management;

    - LAPB network protocol;

    - io_uring subsystem;

    - BPF subsystem;

    - Control group (cgroup);

    - Tracing infrastructure;

    - Workqueue subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Wireless networking;

    - SELinux security module;

    - ALSA framework;

    - SOF drivers; (CVE-2024-57901, CVE-2024-57889, CVE-2024-53687, CVE-2024-57804, CVE-2024-56709,     CVE-2025-21631, CVE-2024-57908, CVE-2025-21645, CVE-2024-47736, CVE-2024-57896, CVE-2024-38608,     CVE-2025-21637, CVE-2024-57898, CVE-2024-53179, CVE-2024-56710, CVE-2024-57802, CVE-2025-21659,     CVE-2024-57903, CVE-2024-56764, CVE-2024-57892, CVE-2024-56717, CVE-2024-57938, CVE-2024-55881,     CVE-2024-56718, CVE-2025-21647, CVE-2024-39282, CVE-2024-57879, CVE-2025-21643, CVE-2024-57792,     CVE-2024-56657, CVE-2024-53685, CVE-2024-54455, CVE-2024-56656, CVE-2025-21638, CVE-2024-57907,     CVE-2024-54193, CVE-2024-57806, CVE-2025-21655, CVE-2024-56670, CVE-2024-57904, CVE-2024-56369,     CVE-2024-57945, CVE-2024-56759, CVE-2024-56716, CVE-2025-21651, CVE-2024-57911, CVE-2024-56372,     CVE-2024-36476, CVE-2024-57888, CVE-2024-41013, CVE-2024-57882, CVE-2025-21636, CVE-2025-21971,     CVE-2024-57841, CVE-2024-56760, CVE-2024-57805, CVE-2024-56758, CVE-2025-21648, CVE-2024-57917,     CVE-2024-57913, CVE-2025-21658, CVE-2024-57926, CVE-2024-57939, CVE-2024-57791, CVE-2024-57883,     CVE-2024-58087, CVE-2024-56665, CVE-2024-57887, CVE-2025-21635, CVE-2024-56662, CVE-2024-57893,     CVE-2024-57916, CVE-2024-56675, CVE-2024-56763, CVE-2024-56664, CVE-2024-53690, CVE-2025-21663,     CVE-2024-56761, CVE-2024-57910, CVE-2025-21660, CVE-2024-57885, CVE-2024-57899, CVE-2025-21650,     CVE-2025-21888, CVE-2024-57801, CVE-2024-58237, CVE-2024-56767, CVE-2024-57895, CVE-2024-57912,     CVE-2024-56654, CVE-2025-21646, CVE-2024-54683, CVE-2024-57931, CVE-2024-49568, CVE-2025-21639,     CVE-2025-21632, CVE-2024-56769, CVE-2024-57807, CVE-2025-21656, CVE-2024-55639, CVE-2024-56652,     CVE-2024-57933, CVE-2024-57793, CVE-2025-21662, CVE-2024-57940, CVE-2024-56715, CVE-2024-57906,     CVE-2024-57900, CVE-2024-56660, CVE-2024-57897, CVE-2024-49571, CVE-2024-57890, CVE-2025-21642,     CVE-2025-21634, CVE-2025-21938, CVE-2024-57929, CVE-2025-21664, CVE-2024-53125, CVE-2024-54460,     CVE-2024-57925, CVE-2025-21652, CVE-2025-21653, CVE-2024-55916, CVE-2024-47408, CVE-2024-57902,     CVE-2025-21654, CVE-2025-21649, CVE-2024-56770, CVE-2024-57932, CVE-2024-57946, CVE-2025-21640,     CVE-2024-57884, CVE-2024-56667, CVE-2024-56659)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1180-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:


    - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
    - CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
    - CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
    - CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
    - CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
    - CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround     (bsc#1235712).
    - CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg     (bsc#1235733).
    - CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
    - CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
    - CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
    - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
    - CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
    - CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
    - CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
    - CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq'     (bsc#1235524).
    - CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
    - CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
    - CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
    - CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
    - CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
    - CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
    - CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
    - CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
    - CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
    - CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
    - CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
    - CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
    - CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
    - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
    - CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
    - CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
    - CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
    - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
    - CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort     (bsc#1238496).
    - CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
    - CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
    - CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
    - CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
    - CVE-2025-21763: neighbour: use RCU protection in __neigh_notify() (bsc#1237897).
    - CVE-2025-21765: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906).
    - CVE-2025-21766: ipv4: use RCU protection in __ip_rt_update_pmtu() (bsc#1238754).
    - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1238512).
    - CVE-2025-21825: selftests/bpf: Add test case for the freeing of bpf_timer (bsc#1238971).
    - CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512).
    - CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479).
    - CVE-2025-21856: s390/ism: add release function for struct device (bsc#1239486).
    - CVE-2025-21857: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478).
    - CVE-2025-21861: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize()     (bsc#1239483).
    - CVE-2025-21862: drop_monitor: fix incorrect initialization order (bsc#1239474).
    - CVE-2025-21864: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482).
    - CVE-2025-21865: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl() (bsc#1239481).
    - CVE-2025-21870: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (bsc#1240191).
    - CVE-2025-21871: tee: optee: Fix supplicant wait loop (bsc#1240183).
    - CVE-2025-21883: ice: Fix deinitializing VF in error path (bsc#1240189).
    - CVE-2025-21890: idpf: fix checksums set in idpf_rx_rsc() (bsc#1240173).
    - CVE-2025-21891: ipvlan: ensure network headers are in skb linear part (bsc#1240186).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy As mentioned in a previous commit of this     series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency:
    getting info from the reader's/writer's netns vs only from the opener's netns. - current->nsproxy can be     NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as     spotted by syzbot [1] using acct(2). The per-netns structure can be obtained from the table->data using     container_of(), then the 'net' one can be retrieved from the listen socket (if available).
    (CVE-2025-21635)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006645 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

    As mentioned in a previous commit of this series, using the 'net'     structure via 'current' is not recommended for different reasons:

    - Inconsistency: getting info from the reader's/writer's netns vs only       from the opener's netns.

    - current->nsproxy can be NULL in some cases, resulting in an 'Oops'       (null-ptr-deref), e.g. when the current task is exiting, as spotted by       syzbot [1] using acct(2).

    The per-netns structure can be obtained from the table->data using     container_of(), then the 'net' one can be retrieved from the listen     socket (if available).

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7524-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Ublk userspace block driver;

    - Virtio block driver;

    - Compressed RAM block device driver;

    - Bluetooth drivers;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - iSCSI Boot Firmware Table Attributes driver;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - Hardware monitoring drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - Microchip PCI driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Power supply drivers;

    - Voltage and Current Regulator drivers;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Framebuffer layer;

    - TDX Guest driver;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - DRM display driver;

    - BPF subsystem;

    - VLANs driver;

    - Kernel Samepage Merging mechanism;

    - Memory management;

    - Network file system (NFS) superblock;

    - Kernel stack handling interfaces;

    - StackDepot library;

    - Task handling mechanism;

    - userfaultfd() syscall;

    - Bluetooth subsystem;

    - IP tunnels definitions;

    - LAPB network protocol;

    - Network namespace;

    - Netfilter;

    - Network traffic control;

    - Network sockets;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - Control group (cgroup);

    - DMA mapping infrastructure;

    - Kernel fork() syscall;

    - KCSAN framework;

    - Kernel thread helper (kthread);

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Timer subsystem;

    - Workqueue subsystem;

    - Vector I/O iterator library;

    - KUnit library;

    - Maple Tree data structure library;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Ethtool driver;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2025-21651, CVE-2024-55881, CVE-2024-50223, CVE-2024-50033, CVE-2024-57907,     CVE-2024-53233, CVE-2024-57798, CVE-2024-50262, CVE-2024-50265, CVE-2024-50197, CVE-2024-50066,     CVE-2024-50271, CVE-2024-57892, CVE-2024-56767, CVE-2024-50237, CVE-2024-56638, CVE-2024-50084,     CVE-2025-21638, CVE-2024-56630, CVE-2024-50193, CVE-2024-50093, CVE-2024-49914, CVE-2024-50221,     CVE-2024-50202, CVE-2025-21659, CVE-2024-50009, CVE-2024-53059, CVE-2024-50206, CVE-2024-53239,     CVE-2024-53219, CVE-2024-53139, CVE-2024-56752, CVE-2024-50125, CVE-2024-53226, CVE-2024-57940,     CVE-2024-57925, CVE-2024-53081, CVE-2024-53053, CVE-2024-56627, CVE-2024-57882, CVE-2025-21645,     CVE-2025-21642, CVE-2024-50120, CVE-2024-50240, CVE-2024-53168, CVE-2024-53178, CVE-2024-53166,     CVE-2024-50030, CVE-2024-50299, CVE-2024-57926, CVE-2024-55916, CVE-2024-56593, CVE-2024-53083,     CVE-2024-56641, CVE-2024-50049, CVE-2024-56761, CVE-2024-56664, CVE-2024-50242, CVE-2024-56589,     CVE-2024-50248, CVE-2024-41013, CVE-2024-50291, CVE-2024-53061, CVE-2024-50105, CVE-2024-53171,     CVE-2024-56568, CVE-2024-50133, CVE-2024-56594, CVE-2024-56582, CVE-2024-53100, CVE-2024-50021,     CVE-2024-56603, CVE-2024-50055, CVE-2024-56637, CVE-2024-50273, CVE-2025-21660, CVE-2024-50083,     CVE-2024-53063, CVE-2024-56599, CVE-2024-56783, CVE-2025-21993, CVE-2024-50019, CVE-2024-53177,     CVE-2024-50038, CVE-2024-53113, CVE-2024-50215, CVE-2024-50036, CVE-2024-44955, CVE-2024-56602,     CVE-2024-54193, CVE-2024-56685, CVE-2024-50137, CVE-2025-21640, CVE-2024-57838, CVE-2024-50024,     CVE-2024-57849, CVE-2024-50304, CVE-2024-50263, CVE-2024-50048, CVE-2024-53176, CVE-2024-50191,     CVE-2024-56781, CVE-2024-56548, CVE-2024-50278, CVE-2024-57906, CVE-2024-53114, CVE-2025-21646,     CVE-2024-53196, CVE-2024-50135, CVE-2024-50286, CVE-2025-21831, CVE-2024-50163, CVE-2024-56694,     CVE-2024-50023, CVE-2024-50031, CVE-2024-56709, CVE-2024-50107, CVE-2024-56672, CVE-2024-57887,     CVE-2024-50162, CVE-2024-50207, CVE-2024-53155, CVE-2024-50095, CVE-2024-56703, CVE-2024-50268,     CVE-2024-56607, CVE-2024-53115, CVE-2024-56739, CVE-2024-53091, CVE-2024-50086, CVE-2024-56580,     CVE-2024-56572, CVE-2024-56693, CVE-2024-57904, CVE-2025-21938, CVE-2024-56698, CVE-2024-50039,     CVE-2024-50233, CVE-2024-50282, CVE-2024-50251, CVE-2024-53184, CVE-2025-21700, CVE-2024-56565,     CVE-2024-53117, CVE-2024-50288, CVE-2024-50171, CVE-2024-56583, CVE-2024-50115, CVE-2024-53687,     CVE-2024-49568, CVE-2024-53047, CVE-2024-53150, CVE-2024-56549, CVE-2024-50148, CVE-2024-56679,     CVE-2024-57888, CVE-2024-53680, CVE-2024-50155, CVE-2024-56751, CVE-2024-56610, CVE-2024-50272,     CVE-2024-50182, CVE-2024-57916, CVE-2024-53237, CVE-2024-50211, CVE-2024-56605, CVE-2024-56601,     CVE-2024-48873, CVE-2024-50166, CVE-2024-50085, CVE-2024-50108, CVE-2024-57792, CVE-2024-50224,     CVE-2024-56779, CVE-2024-50068, CVE-2024-53151, CVE-2024-56657, CVE-2024-50026, CVE-2024-53138,     CVE-2024-57896, CVE-2024-53222, CVE-2024-50164, CVE-2024-53230, CVE-2024-56614, CVE-2024-53089,     CVE-2024-57895, CVE-2024-56755, CVE-2024-50096, CVE-2024-56645, CVE-2024-53162, CVE-2024-56566,     CVE-2024-53086, CVE-2024-56718, CVE-2024-50062, CVE-2024-50065, CVE-2024-56763, CVE-2024-56538,     CVE-2024-53127, CVE-2024-49893, CVE-2024-53087, CVE-2024-53058, CVE-2024-57945, CVE-2024-53174,     CVE-2024-53096, CVE-2024-56546, CVE-2024-56754, CVE-2024-49865, CVE-2024-56635, CVE-2024-56539,     CVE-2024-56551, CVE-2024-53044, CVE-2024-56700, CVE-2024-56787, CVE-2024-56586, CVE-2024-56687,     CVE-2024-53236, CVE-2024-50058, CVE-2024-53146, CVE-2024-50269, CVE-2024-50056, CVE-2024-56608,     CVE-2024-49899, CVE-2024-53099, CVE-2024-57902, CVE-2024-56656, CVE-2024-50126, CVE-2024-50274,     CVE-2025-21654, CVE-2025-21971, CVE-2024-53130, CVE-2024-49571, CVE-2024-56742, CVE-2024-56613,     CVE-2024-56575, CVE-2024-56540, CVE-2024-53194, CVE-2024-50044, CVE-2024-49906, CVE-2024-53163,     CVE-2024-56774, CVE-2024-50143, CVE-2024-49968, CVE-2024-53202, CVE-2024-57876, CVE-2024-56650,     CVE-2024-53685, CVE-2025-21656, CVE-2024-56648, CVE-2025-21636, CVE-2024-56782, CVE-2024-50198,     CVE-2024-50110, CVE-2024-56775, CVE-2024-50239, CVE-2024-53156, CVE-2024-50045, CVE-2024-53045,     CVE-2024-58237, CVE-2024-50167, CVE-2024-50060, CVE-2024-56372, CVE-2024-56756, CVE-2024-54455,     CVE-2024-56543, CVE-2024-56772, CVE-2024-50131, CVE-2024-56616, CVE-2024-50185, CVE-2024-53154,     CVE-2024-50138, CVE-2024-53111, CVE-2024-50025, CVE-2024-50156, CVE-2024-39282, CVE-2024-53140,     CVE-2024-57872, CVE-2024-50077, CVE-2025-21652, CVE-2025-21655, CVE-2024-57901, CVE-2024-57791,     CVE-2024-50259, CVE-2024-57890, CVE-2024-56770, CVE-2024-53170, CVE-2024-56705, CVE-2024-56597,     CVE-2024-50047, CVE-2024-53101, CVE-2024-50128, CVE-2024-50287, CVE-2024-50186, CVE-2024-56745,     CVE-2024-56720, CVE-2024-57889, CVE-2024-56590, CVE-2024-57807, CVE-2024-50158, CVE-2024-53198,     CVE-2024-57843, CVE-2024-53095, CVE-2024-56678, CVE-2024-56758, CVE-2024-53120, CVE-2024-50087,     CVE-2024-50147, CVE-2024-56652, CVE-2024-56692, CVE-2024-56724, CVE-2024-50226, CVE-2024-56609,     CVE-2024-56769, CVE-2024-47408, CVE-2024-53187, CVE-2024-56596, CVE-2024-48875, CVE-2024-50236,     CVE-2024-50284, CVE-2024-49921, CVE-2024-53229, CVE-2024-50256, CVE-2024-57946, CVE-2024-53175,     CVE-2024-56619, CVE-2024-50257, CVE-2024-53210, CVE-2024-53203, CVE-2025-21658, CVE-2024-56683,     CVE-2024-50302, CVE-2024-56570, CVE-2024-50187, CVE-2025-21650, CVE-2024-50082, CVE-2024-50194,     CVE-2024-53072, CVE-2024-50118, CVE-2024-53043, CVE-2024-50160, CVE-2025-21635, CVE-2024-57900,     CVE-2024-57879, CVE-2024-50294, CVE-2024-48876, CVE-2024-50250, CVE-2024-50220, CVE-2025-21648,     CVE-2024-50032, CVE-2024-56765, CVE-2024-56369, CVE-2024-53109, CVE-2024-47143, CVE-2025-21643,     CVE-2024-50261, CVE-2024-56558, CVE-2024-49920, CVE-2024-56689, CVE-2024-56647, CVE-2024-50290,     CVE-2024-57908, CVE-2024-53209, CVE-2024-53220, CVE-2024-50073, CVE-2024-47711, CVE-2024-50183,     CVE-2024-56690, CVE-2024-50067, CVE-2024-56778, CVE-2024-56622, CVE-2024-56729, CVE-2024-53157,     CVE-2024-53213, CVE-2024-50130, CVE-2024-56629, CVE-2024-57885, CVE-2025-21637, CVE-2024-50078,     CVE-2024-53224, CVE-2024-50116, CVE-2024-53068, CVE-2024-50300, CVE-2024-53084, CVE-2024-50099,     CVE-2024-56723, CVE-2024-50230, CVE-2024-56636, CVE-2024-50252, CVE-2024-56587, CVE-2024-53131,     CVE-2024-50046, CVE-2024-50200, CVE-2024-56588, CVE-2024-47726, CVE-2024-56615, CVE-2024-57917,     CVE-2024-50063, CVE-2024-50246, CVE-2024-53055, CVE-2024-53133, CVE-2024-50205, CVE-2024-53076,     CVE-2024-50283, CVE-2024-56660, CVE-2024-56707, CVE-2024-50180, CVE-2024-56746, CVE-2025-21756,     CVE-2024-50127, CVE-2024-50145, CVE-2024-56625, CVE-2024-56760, CVE-2024-53121, CVE-2024-53122,     CVE-2024-53062, CVE-2024-53046, CVE-2024-56764, CVE-2024-57801, CVE-2024-56728, CVE-2022-49034,     CVE-2024-53094, CVE-2024-53147, CVE-2024-56776, CVE-2024-57898, CVE-2024-53148, CVE-2024-56704,     CVE-2024-50035, CVE-2024-50152, CVE-2024-50169, CVE-2024-56600, CVE-2024-56681, CVE-2024-45828,     CVE-2024-53052, CVE-2024-56574, CVE-2024-56531, CVE-2024-50303, CVE-2024-57897, CVE-2024-53123,     CVE-2024-57874, CVE-2024-57939, CVE-2024-47141, CVE-2024-56659, CVE-2024-50069, CVE-2024-50141,     CVE-2024-50201, CVE-2024-50270, CVE-2024-56621, CVE-2024-56606, CVE-2024-53129, CVE-2024-57938,     CVE-2024-50203, CVE-2024-56708, CVE-2024-53197, CVE-2024-53208, CVE-2024-50028, CVE-2024-56677,     CVE-2025-21664, CVE-2024-50121, CVE-2024-56644, CVE-2024-57804, CVE-2024-53145, CVE-2024-56780,     CVE-2024-50112, CVE-2024-56759, CVE-2024-50192, CVE-2024-53181, CVE-2024-50170, CVE-2024-50080,     CVE-2024-50238, CVE-2024-57912, CVE-2024-50222, CVE-2024-36476, CVE-2024-53107, CVE-2024-53119,     CVE-2024-43098, CVE-2024-56604, CVE-2024-56567, CVE-2024-47736, CVE-2024-53180, CVE-2024-38608,     CVE-2024-53227, CVE-2024-50136, CVE-2024-53105, CVE-2024-50225, CVE-2024-56649, CVE-2024-57899,     CVE-2024-41014, CVE-2024-50188, CVE-2024-53160, CVE-2024-53183, CVE-2024-54460, CVE-2024-56725,     CVE-2024-56642, CVE-2024-53223, CVE-2024-56631, CVE-2024-50134, CVE-2024-53135, CVE-2024-56573,     CVE-2024-50104, CVE-2024-53126, CVE-2024-56667, CVE-2025-21662, CVE-2024-53221, CVE-2024-56786,     CVE-2024-50040, CVE-2024-53085, CVE-2024-50051, CVE-2024-56721, CVE-2024-52332, CVE-2024-50075,     CVE-2024-50208, CVE-2024-50209, CVE-2024-56710, CVE-2024-50296, CVE-2024-53066, CVE-2025-21701,     CVE-2024-56584, CVE-2024-41932, CVE-2024-50059, CVE-2024-57911, CVE-2024-56785, CVE-2024-50216,     CVE-2024-50249, CVE-2024-49569, CVE-2024-50098, CVE-2024-56777, CVE-2024-53093, CVE-2024-53067,     CVE-2025-21634, CVE-2024-53190, CVE-2024-50199, CVE-2024-56577, CVE-2024-56653, CVE-2024-50027,     CVE-2024-50285, CVE-2025-21632, CVE-2025-21702, CVE-2024-57893, CVE-2024-50235, CVE-2024-56658,     CVE-2024-57802, CVE-2024-58087, CVE-2024-53112, CVE-2024-47809, CVE-2024-50111, CVE-2024-57910,     CVE-2024-53142, CVE-2024-50196, CVE-2024-56578, CVE-2024-53200, CVE-2024-50276, CVE-2024-53188,     CVE-2024-53048, CVE-2024-56771, CVE-2024-53228, CVE-2024-57850, CVE-2024-49972, CVE-2025-21647,     CVE-2024-50072, CVE-2024-56701, CVE-2024-53232, CVE-2024-50088, CVE-2024-56557, CVE-2024-56632,     CVE-2024-50142, CVE-2024-57806, CVE-2024-53051, CVE-2024-57931, CVE-2024-50103, CVE-2024-50258,     CVE-2024-53172, CVE-2024-53106, CVE-2024-53158, CVE-2024-56595, CVE-2024-53108, CVE-2024-56626,     CVE-2024-56691, CVE-2024-50289, CVE-2024-53217, CVE-2024-50234, CVE-2024-54683, CVE-2024-53042,     CVE-2024-56675, CVE-2024-50195, CVE-2024-53195, CVE-2024-56654, CVE-2024-56715, CVE-2025-21639,     CVE-2024-57913, CVE-2024-56717, CVE-2024-56651, CVE-2024-56688, CVE-2024-53128, CVE-2024-53169,     CVE-2024-56620, CVE-2024-50189, CVE-2024-56550, CVE-2024-50244, CVE-2024-50279, CVE-2024-42122,     CVE-2024-58099, CVE-2024-53179, CVE-2024-56532, CVE-2024-53215, CVE-2024-50232, CVE-2024-50029,     CVE-2024-57933, CVE-2024-56662, CVE-2024-53690, CVE-2024-53134, CVE-2024-48881, CVE-2024-56727,     CVE-2024-56576, CVE-2024-56670, CVE-2024-56598, CVE-2024-53161, CVE-2024-50061, CVE-2024-50117,     CVE-2025-21653, CVE-2024-50101, CVE-2024-55639, CVE-2025-21649, CVE-2024-53231, CVE-2024-50041,     CVE-2024-50231, CVE-2024-57932, CVE-2024-50076, CVE-2024-53165, CVE-2024-57793, CVE-2024-53082,     CVE-2024-50020, CVE-2024-50267, CVE-2024-57883, CVE-2024-50298, CVE-2024-56643, CVE-2024-56640,     CVE-2024-50074, CVE-2024-53125, CVE-2024-56748, CVE-2024-56634, CVE-2024-50064, CVE-2024-50172,     CVE-2024-50255, CVE-2024-50042, CVE-2024-57929, CVE-2024-56773, CVE-2024-53214, CVE-2024-53110,     CVE-2024-56569, CVE-2024-56581, CVE-2024-56716, CVE-2024-50090, CVE-2024-53218, CVE-2024-57884,     CVE-2024-56611, CVE-2024-50243, CVE-2024-56545, CVE-2024-56623, CVE-2024-53173, CVE-2024-53090,     CVE-2025-21631, CVE-2024-56744, CVE-2024-56722, CVE-2024-50297, CVE-2024-56726, CVE-2024-56592,     CVE-2024-50275, CVE-2025-21663, CVE-2024-57841, CVE-2024-50150, CVE-2024-50301, CVE-2024-56579,     CVE-2024-53088, CVE-2024-50153, CVE-2024-50280, CVE-2024-50124, CVE-2024-50229, CVE-2024-50146,     CVE-2024-50057, CVE-2024-56562, CVE-2024-50070, CVE-2024-50218, CVE-2024-53118, CVE-2024-47794,     CVE-2024-50295, CVE-2024-56747, CVE-2024-56663, CVE-2024-50292, CVE-2024-50140, CVE-2024-50154,     CVE-2024-53050, CVE-2024-41935, CVE-2024-56533, CVE-2024-50139, CVE-2024-56633, CVE-2024-50184,     CVE-2024-53191, CVE-2024-50022, CVE-2024-50010, CVE-2024-50245, CVE-2024-53079, CVE-2024-50151,     CVE-2024-53234, CVE-2024-50247, CVE-2024-50159, CVE-2024-57903)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
233673	Ubuntu 24.04 LTS : Linux kernel (Low Latency) vulnerabilities (USN-7381-1)	Nessus	Ubuntu Local Security Checks	2025/4/1	2026/1/6	high
236873	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7513-1)	Nessus	Ubuntu Local Security Checks	2025/5/16	2025/5/16	high
234057	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:1177-1)	Nessus	SuSE Local Security Checks	2025/4/9	2025/4/9	high
234058	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:1178-1)	Nessus	SuSE Local Security Checks	2025/4/9	2025/4/9	high
236874	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-7514-1)	Nessus	Ubuntu Local Security Checks	2025/5/16	2025/5/16	high
234120	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:1180-1)	Nessus	SuSE Local Security Checks	2025/4/10	2025/4/10	high
231895	Linux Distros Unpatched Vulnerability : CVE-2025-21635	Nessus	Misc.	2025/3/6	2026/2/6	medium
305491	Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006645)	Nessus	Unity Linux Local Security Checks	2026/4/8	2026/4/8	medium
237257	Ubuntu 24.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-7524-1)	Nessus	Ubuntu Local Security Checks	2025/5/26	2026/1/6	high

检测

插件搜索

high

high

high

high

high

high

medium

medium

high