The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22072 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes     prior to [POWERPC] spufs: Fix gang destroy leaks we used to have a problem with gang lifetimes -     creation of a gang returns opened gang directory, which normally gets removed when that gets closed, but     if somebody has created a context belonging to that gang and kept it alive until the gang got closed,     removal failed and we ended up with a leak. Unfortunately, it had been fixed the wrong way. Dentry of gang     directory was no longer pinned, and rmdir on close was gone. One problem was that failure of open kept     calling simple_rmdir() as cleanup, which meant an unbalanced dput(). Another bug was in the success case -     gang creation incremented link count on root directory, but that was no longer undone when gang got     destroyed. Fix consists of * reverting the commit in question * adding a counter to gang, protected by
    ->i_rwsem of gang directory inode. * having it set to 1 at creation time, dropped in both     spufs_dir_close() and spufs_gang_close() and bumped in spufs_create_context(), provided that it's not 0. *     using simple_recursive_removal() to take the gang directory out when counter reaches zero.
    (CVE-2025-22072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20530 advisory.

    - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug: 38137447]     {CVE-2025-38089}
    - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
295876	Azure Linux 3.0 Security Update: kernel (CVE-2025-22072)	Nessus	Azure Linux Local Security Checks	2026/1/22	2026/1/22	medium
252244	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20530)	Nessus	Oracle Linux Local Security Checks	2025/8/19	2026/2/9	medium

检测

插件搜索

medium

medium