The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5070-1 advisory.

    Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in     the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An     attacker in a guest VM could use this to read or write portions of the host's physical memory.
    (CVE-2021-3656)

    Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel     did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM     could use this to write to portions of the host's physical memory. (CVE-2021-3653)

    It was discovered that the Linux kernel did not properly enforce certain types of entries in the Secure     Boot Forbidden Signature Database (aka dbx) protection mechanism. An attacker could use this to bypass     UEFI Secure Boot restrictions. (CVE-2020-26541)

    It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly perform     reference counting in some situations, leading to a use-after-free vulnerability. An attacker who could     start and control a VM could possibly use this to expose sensitive information or execute arbitrary code.
    (CVE-2021-22543)

    Norbert Slusarek discovered that the CAN broadcast manger (bcm) protocol implementation in the Linux     kernel did not properly initialize memory in some situations. A local attacker could use this to expose     sensitive information (kernel memory). (CVE-2021-34693)

    Murray McAllister discovered that the joystick device interface in the Linux kernel did not properly     validate data passed via an ioctl(). A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code on systems with a joystick device registered. (CVE-2021-3612)

    It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly compute the     access permissions for shadow pages in some situations. A local attacker could use this to cause a denial     of service. (CVE-2021-38198)

    It was discovered that the perf subsystem in the Linux kernel for the PowerPC architecture contained a     null pointer dereference in some situations. An attacker could use this to cause a denial of service     (system crash). (CVE-2021-38200)

    Ben Greear discovered that the mac80211 subsystem in the Linux kernel contained a null pointer dereference     in some situations. A physically proximate attacker could possibly use this to cause a denial of service     (system crash). (CVE-2021-38206)

    It was discovered that the Xilinx LL TEMAC device driver in the Linux kernel did not properly calculate     the number of buffers to be used in certain situations. A remote attacker could use this to cause a denial     of service (system crash). (CVE-2021-38207)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2172-1 advisory.

  - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    (CVE-2020-26541)

  - A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the     small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of     service problem. (CVE-2022-1012)

  - A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition     between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN     privilege to leak kernel information. (CVE-2022-1974)

  - There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by     simulating a nfc device from user-space. (CVE-2022-1975)

  - In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead     to local escalation of privilege when opening and closing inet sockets with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android     kernelAndroid ID: A-112551163References: Upstream kernel (CVE-2022-20141)

  - net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create     user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to     a use-after-free. (CVE-2022-32250)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2251:15 advisory.

    * kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)
      * kernel: security bypass in certs/blacklist.c and certs/system_keyring.c (CVE-2020-26541)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2393-1 advisory.

  - In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and     unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. (CVE-2019-19377)

  - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    (CVE-2020-26541)

  - Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result     in data leakage. (CVE-2021-26341)

  - An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in     the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could     potentially use this flaw to crash the system or escalate privileges on the system. (CVE-2021-4157)

  - A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel's filesystem sub-     component. This flaw allows a local attacker with a user privilege to cause a denial of service.
    (CVE-2022-1184)

  - A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user     forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local     user to crash or potentially escalate their privileges on the system. (CVE-2022-1679)

  - A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged     user to gain root privileges. The bug allows to build several exploit primitives such as kernel address     information leak, arbitrary execution, etc. (CVE-2022-1729)

  - A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition     between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN     privilege to leak kernel information. (CVE-2022-1974)

  - There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by     simulating a nfc device from user-space. (CVE-2022-1975)

  - In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds     read due to improper input validation. This could lead to local information disclosure if a malicious USB     HID device were plugged in, with no additional execution privileges needed. User interaction is not needed     for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream     kernel (CVE-2022-20132)

  - In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead     to local escalation of privilege when opening and closing inet sockets with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android     kernelAndroid ID: A-112551163References: Upstream kernel (CVE-2022-20141)

  - In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead     to local escalation of privilege with System execution privileges needed. User interaction is not needed     for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream     kernel (CVE-2022-20154)

  - KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown.
    An attacker with access to a serial port could trigger the debugger so it is important that the debugger     respect the lockdown mode when/if it is triggered. (CVE-2022-21499)

  - There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that     allow attackers to crash linux kernel without any privileges. (CVE-2022-2318)

  - Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text     explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device     frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740).
    Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to     unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend     (CVE-2022-33741, CVE-2022-33742). (CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742)

  - Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution     under certain microarchitecture-dependent conditions. (CVE-2022-29900)

  - Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their     retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can     hijack return instructions to achieve arbitrary speculative code execution under certain     microarchitecture-dependent conditions. (CVE-2022-29901)

  - drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of     a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.
    (CVE-2022-33981)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2570 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)

    * kernel: security bypass in certs/blacklist.c and certs/system_keyring.c (CVE-2020-26541)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [ESXi][RHEL-8] VMXNET3 v4 causes invalid checksums of inner packets of VXLAN tunnel (BZ#1960702)

    * fnic crash from invalid request pointer (BZ#1961705)

    * GFS2: Failed FS thaw call makes the entire snapshot failed. (BZ#1961849)

    * dm writecache: fix performance degradation in ssd mode (BZ#1962241)

    * Kernel BUG with act_ct and IP fragments (BZ#1963940)

    * core: backports from upstream (BZ#1963952)

    * Hibernate resume on RHEL fails in Amazon EC2 C5.18xlarge instance (BZ#1964930)

    * [SanityOnly] panic caused by i40e_msix_clean_rings (BZ#1964962)

    * tc reclassification limit is too low for OVN (BZ#1965148)

    * tc action ct nat src addr does not work while used with ct nat dst addr together (BZ#1965150)

    * CNB: Rebase/update TC subsystem for RHEL 8.5 (BZ#1965457)

    * sctp: crash due to use after free of sctp_transport structure (BZ#1965632)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4611-1 advisory.

    The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c     (bsc#1204631).
    - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and     gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
    - CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c     (bsc#1203960).
    - CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in     net/bluetooth/l2cap_core.c (bsc#1205796).
    - CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac     (bsc#1204868).
    - CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
    - CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
    - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
    - CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
    - CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
    - CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
    - CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS     file-system with an unintended group ownership and with group execution and SGID permission bits set     (bsc#1198702).
    - CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's     internal memory (bsc#1204653).
    - CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism     (bsc#1177282).
    - CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c     (bsc#1204402).
    - CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
    - CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
    - CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
    - CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c     (bsc#1204574).
    - CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
    - CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to     cause a denial of service (bsc#1204439).
    - CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
    - CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
    - CVE-2022-2663: Fixed an issue which allowed a firewall to be bypassed when users are using unencrypted     IRC with nf_conntrack_irc configured (bsc#1202097).
    - CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive     information from kernel memory (bsc#1203514).
    - CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
    - CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET     (bsc#1203290).
    - CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the     efi firmware capsule-loader.c (bsc#1203322).
    - CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and     mgslpc_detach (bsc#1203987).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2719 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909)

    * kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)

    * kernel: perf_event_parse_addr_filter memory (CVE-2020-25704)

    * kernel: security bypass in certs/blacklist.c and certs/system_keyring.c (CVE-2020-26541)

    * kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (CVE-2020-35508)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest RHEL-8.2.z10 Batch source tree (BZ#1968022)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2718 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909)

    * kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034)

    * kernel: perf_event_parse_addr_filter memory (CVE-2020-25704)

    * kernel: security bypass in certs/blacklist.c and certs/system_keyring.c (CVE-2020-26541)

    * kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (CVE-2020-35508)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * RHEL8.2 Snapshot2 -  tpm: ibmvtpm: Wait for buffer to be set before proceeding (BZ#1933986)

    * fnic crash from invalid request pointer (BZ#1961707)

    * [Azure][RHEL8.4] Two Patches Needed To Enable Azure Host Time-syncing in VMs (BZ#1963051)

    * RHEL kernel 8.2 and higher are affected by data corruption bug in raid1 arrays using bitmaps.
    (BZ#1969338)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414675 advisory.

    The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2111-1 advisory.

    The SUSE Linux Enterprise 15 SP1 kernel was updated.

    The following security bugs were fixed:

    - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs     filesystem image. (bnc#1158266)
    - CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a     corrupted image. (bsc#1198577)
    - CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive     information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table.
    (bnc#1055710)
    - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
    - CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
    - CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to     Incorrect Size Value. This could lead to local information disclosure with System execution privileges     needed. User interaction is not needed for exploitation (bnc#1197219).
    - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
    - CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers     and Adapters that may have allowed an authenticated user to potentially enable denial of service via local     access (bnc#1196426).
    - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
    - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users     do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system     (bnc#1191647).
    - CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-     sysfs.c, where a reference count is mishandled (bnc#1172456).
    - CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
    - CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy     driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send     the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data     and bypass kernel security protections such as KASLR (bnc#1084513).
    - CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
    - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
    - CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in     drivers/isdn/capi/kcapi.c (bnc#1191958).
    - CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname     call after a certain type of failure of a bind call (bnc#1187055).
    - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c     (bnc#1198516).
    - CVE-2021-20292: Fixed object validation prior to performing operations on the object in     nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
    - CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve     (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems.
    (bnc#1197343)
    - CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from     user-space. (bsc#1200144).
    - CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism.
    (bnc#1177282)
    - CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device     from user-space. (bsc#1200143)
    - CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it     with kgdb or kdb. (bsc#1199426)
    - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware     download routine. (bnc#1199605).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
153174	Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5070-1)	Nessus	Ubuntu Local Security Checks	2021/9/9	2024/9/19	high
160459	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	2022/5/2	2026/2/9	high
162538	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2172-1)	Nessus	SuSE Local Security Checks	2022/6/25	2024/1/16	high
294600	MiracleLinux 8 : kernel-4.18.0-305.7.1.el8_4 (AXSA:2021-2251:15)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
163241	SUSE SLES12 Security Update : kernel (SUSE-SU-2022:2393-1)	Nessus	SuSE Local Security Checks	2022/7/15	2023/7/13	high
151138	RHEL 8 : kernel (RHSA-2021:2570)	Nessus	Red Hat Local Security Checks	2021/6/29	2025/3/6	high
169291	SUSE SLES12: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2022:4611-1)	Nessus	SuSE Local Security Checks	2022/12/24	2026/6/26	high
151856	RHEL 8 : kernel-rt (RHSA-2021:2719)	Nessus	Red Hat Local Security Checks	2021/7/21	2024/11/7	high
151857	RHEL 8 : kernel (RHSA-2021:2718)	Nessus	Red Hat Local Security Checks	2021/7/21	2024/11/7	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/11/2	high
203838	Photon OS 3.0: Linux PHSA-2021-3.0-0316	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high
267439	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414675)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/15	medium
162399	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2111-1)	Nessus	SuSE Local Security Checks	2022/6/18	2025/9/25	high
152492	Photon OS 4.0: Linux PHSA-2021-4.0-0078	Nessus	PhotonOS Local Security Checks	2021/8/11	2026/11/2	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

medium

high

high