According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    (CVE-2020-26541)

  - An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux     kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped.
    However, the handler may not have time to run if the frontend quickly toggles between the states connect     and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving     guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege     escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
    (CVE-2020-29569)

  - In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This     could lead to local escalation of privilege with System execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References:
    Upstream kernel (CVE-2021-0920)

  - In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory     due to a use after free. This could lead to local escalation of privilege with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android     kernelAndroid ID: A-187527909References: Upstream kernel (CVE-2021-0929)

  - In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This     could lead to local escalation of privilege with System execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References:
    Upstream kernel (CVE-2021-0941)

  - A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket     file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race     condition. This flaw allows a local user to crash the system or escalate their privileges on the system.
    This flaw affects Linux kernel versions prior to 5.16-rc4. (CVE-2021-4083)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4561-1 advisory.

    The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c     (bsc#1204631).
    - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and     gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
    - CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c     (bsc#1203960).
    - CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in     net/bluetooth/l2cap_core.c (bsc#1205796).
    - CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac     (bsc#1204868).
    - CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
    - CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
    - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
    - CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
    - CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
    - CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
    - CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS     file-system with an unintended group ownership and with group execution and SGID permission bits set     (bsc#1198702).
    - CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's     internal memory (bsc#1204653).
    - CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism     (bsc#1177282).
    - CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c     (bsc#1204402).
    - CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
    - CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
    - CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
    - CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c     (bsc#1204574).
    - CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
    - CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to     cause a denial of service (bsc#1204439).
    - CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
    - CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
    - CVE-2022-2663: Fixed an issue which allowed a firewall to be bypassed when users are using unencrypted     IRC with nf_conntrack_irc configured (bsc#1202097).
    - CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive     information from kernel memory (bsc#1203514).
    - CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
    - CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET     (bsc#1203290).
    - CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the     efi firmware capsule-loader.c (bsc#1203322).
    - CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and     mgslpc_detach (bsc#1203987).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2111-1 advisory.

    The SUSE Linux Enterprise 15 SP1 kernel was updated.

    The following security bugs were fixed:

    - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs     filesystem image. (bnc#1158266)
    - CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a     corrupted image. (bsc#1198577)
    - CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive     information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table.
    (bnc#1055710)
    - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
    - CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
    - CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to     Incorrect Size Value. This could lead to local information disclosure with System execution privileges     needed. User interaction is not needed for exploitation (bnc#1197219).
    - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
    - CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers     and Adapters that may have allowed an authenticated user to potentially enable denial of service via local     access (bnc#1196426).
    - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
    - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users     do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system     (bnc#1191647).
    - CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-     sysfs.c, where a reference count is mishandled (bnc#1172456).
    - CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
    - CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy     driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send     the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data     and bypass kernel security protections such as KASLR (bnc#1084513).
    - CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
    - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
    - CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in     drivers/isdn/capi/kcapi.c (bnc#1191958).
    - CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname     call after a certain type of failure of a bind call (bnc#1187055).
    - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c     (bnc#1198516).
    - CVE-2021-20292: Fixed object validation prior to performing operations on the object in     nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
    - CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve     (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems.
    (bnc#1197343)
    - CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from     user-space. (bsc#1200144).
    - CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism.
    (bnc#1177282)
    - CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device     from user-space. (bsc#1200143)
    - CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it     with kgdb or kdb. (bsc#1199426)
    - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware     download routine. (bnc#1199605).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414675 advisory.

    The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
158524	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1292)	Nessus	Huawei Local Security Checks	2022/3/2	2023/4/25	high
168943	SUSE SLES12 Security Update : kernel (SUSE-SU-2022:4561-1)	Nessus	SuSE Local Security Checks	2022/12/20	2025/9/24	high
152492	Photon OS 4.0: Linux PHSA-2021-4.0-0078	Nessus	PhotonOS Local Security Checks	2021/8/11	2025/9/19	high
162399	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2111-1)	Nessus	SuSE Local Security Checks	2022/6/18	2025/9/25	high
203838	Photon OS 3.0: Linux PHSA-2021-3.0-0316	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high
267439	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414675)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/15	medium

检测

插件搜索

high

high

high

high

high

medium