The remote NewStart CGSL host, running version MAIN 6.02, has kernel packages installed that are affected by multiple vulnerabilities:

  - In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic     error. This could lead to local escalation of privilege with no additional execution privileges needed.
    User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:
    A-147802478References: Upstream kernel (CVE-2020-0466)

  - A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be     used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified     other impact, aka CID-17743798d812. (CVE-2020-25285)

  - A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption     and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause     the system to crash or cause a denial of service. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2020-25643)

  - A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using     PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of     service. (CVE-2020-25704)

  - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    (CVE-2020-26541)

  - In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking     in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal     in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a network if the attacker     has access to one iSCSI LUN. The attacker gains control over file access because I/O operations are     proxied via an attacker-selected backstore. (CVE-2020-28374)

  - In pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check. This     could lead to local information disclosure in the kernel with System execution privileges needed. User     interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-110373476     (CVE-2021-0605)

  - An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine     the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI     subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at     /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in     drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the     pointer to an iscsi_transport struct in the kernel module's global variables. (CVE-2021-27363)

  - An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is     adversely affected by the ability of an unprivileged user to craft Netlink messages. (CVE-2021-27364)

  - An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have     appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can     send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a     Netlink message. (CVE-2021-27365)

  - net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI     controller. (CVE-2021-32399)

  - In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an     hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value. (CVE-2021-33034)

  - An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free     during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
    (CVE-2021-3347)

  - fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer     allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an     unprivileged user, aka CID-8cae8cd89f05. (CVE-2021-33909)

  - A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API,     is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-     of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
    (CVE-2021-3501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2177-1 advisory.

  - In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and     unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. (CVE-2019-19377)

  - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    (CVE-2020-26541)

  - Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access. (CVE-2021-33061)

  - A denial of service (DOS) issue was found in the Linux kernel's smb2_ioctl_query_info function in the     fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user     function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system.
    (CVE-2022-0168)

  - A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel's filesystem sub-     component. This flaw allows a local attacker with a user privilege to cause a denial of service.
    (CVE-2022-1184)

  - Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency     use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker     could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the     system. (CVE-2022-1652)

  - A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged     user to gain root privileges. The bug allows to build several exploit primitives such as kernel address     information leak, arbitrary execution, etc. (CVE-2022-1729)

  - A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition     between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN     privilege to leak kernel information. (CVE-2022-1974)

  - There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by     simulating a nfc device from user-space. (CVE-2022-1975)

  - In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized     data. This could lead to local information disclosure if reading from an SD card that triggers errors,     with no additional execution privileges needed. User interaction is not needed for exploitation.Product:
    AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel (CVE-2022-20008)

  - In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead     to local escalation of privilege when opening and closing inet sockets with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android     kernelAndroid ID: A-112551163References: Upstream kernel (CVE-2022-20141)

  - Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated     user to potentially enable information disclosure via local access. (CVE-2022-21123)

  - Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21125)

  - Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21127)

  - Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21166)

  - Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially     cause a denial of service via local access. (CVE-2022-21180)

  - The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers     to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. (CVE-2022-30594)

  - net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create     user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to     a use-after-free. (CVE-2022-32250)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414675 advisory.

    The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2111-1 advisory.

    The SUSE Linux Enterprise 15 SP1 kernel was updated.

    The following security bugs were fixed:

    - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs     filesystem image. (bnc#1158266)
    - CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a     corrupted image. (bsc#1198577)
    - CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive     information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table.
    (bnc#1055710)
    - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
    - CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
    - CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to     Incorrect Size Value. This could lead to local information disclosure with System execution privileges     needed. User interaction is not needed for exploitation (bnc#1197219).
    - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
    - CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers     and Adapters that may have allowed an authenticated user to potentially enable denial of service via local     access (bnc#1196426).
    - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
    - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users     do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system     (bnc#1191647).
    - CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-     sysfs.c, where a reference count is mishandled (bnc#1172456).
    - CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
    - CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy     driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send     the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data     and bypass kernel security protections such as KASLR (bnc#1084513).
    - CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
    - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
    - CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in     drivers/isdn/capi/kcapi.c (bnc#1191958).
    - CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname     call after a certain type of failure of a bind call (bnc#1187055).
    - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c     (bnc#1198516).
    - CVE-2021-20292: Fixed object validation prior to performing operations on the object in     nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
    - CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve     (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems.
    (bnc#1197343)
    - CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from     user-space. (bsc#1200144).
    - CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism.
    (bnc#1177282)
    - CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device     from user-space. (bsc#1200143)
    - CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it     with kgdb or kdb. (bsc#1199426)
    - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware     download routine. (bnc#1199605).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
160868	NewStart CGSL MAIN 6.02 : kernel Multiple Vulnerabilities (NS-SA-2022-0059)	Nessus	NewStart CGSL Local Security Checks	2022/5/10	2022/5/11	high
162531	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2177-1)	Nessus	SuSE Local Security Checks	2022/6/25	2024/1/16	high
152492	Photon OS 4.0: Linux PHSA-2021-4.0-0078	Nessus	PhotonOS Local Security Checks	2021/8/11	2025/9/19	high
203838	Photon OS 3.0: Linux PHSA-2021-3.0-0316	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high
267439	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414675)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/15	medium
162399	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2111-1)	Nessus	SuSE Local Security Checks	2022/6/18	2025/9/25	high

检测

插件搜索

high

high

high

high

medium

high