The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010710 advisory.

    Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to     a race condition. This could lead to local escalation of privilege with no additional execution privileges     needed. User interaction is not needed for exploitation.(CVE-2021-39686)

    net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create     user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to     a use-after-free.(CVE-2022-32250)

    A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in     net/netfilter/nf_tables_api.c. This flaw allows a local attacker with user access to cause a privilege     escalation issue.(CVE-2022-1966)

    With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID     is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer     dereference.(CVE-2022-1789)

    Due to the small table perturb size, a memory leak flaw was found in the Linux kernels TCP source port     generation algorithm in the net/ipv4/tcp.c function. This flaw allows an attacker to leak information and     may cause a denial of service.(CVE-2022-1012)

    Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency     use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker     could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the     system.(CVE-2022-1652)

    Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to     cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14     and later versions.(CVE-2022-29581)

    A use-after-free vulnerability was found in drivers/block/floppy.c in the floppy driver module in the     Linux kernel between raw_cmd_ioctl and seek_interrupt. This flaw allows an attacker to cause a denial of     service, leading to a leak of internal kernel information.(CVE-2022-1836)

    An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP     pacing can lead to memory/netns leak, which can be used by remote clients.(CVE-2022-1678)

    A use-after-free flaw was found in the Linux kernels performance events functionality. A user triggers     a race condition in setting up performance monitoring between the leading PERF_TYPE_TRACEPOINT and sub     PERF_EVENT_HARDWARE plus the PERF_EVENT_SOFTWARE using the perf_event_open() function with these three     types. This flaw allows a local user to crash the system.(CVE-2022-1729)

    A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use     after free both read or write when non synchronized between cleanup routine and firmware download     routine.(CVE-2022-1734)

    The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers     to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.(CVE-2022-30594)

    A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a     local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device     is detached and reclaim resources early.(CVE-2022-1195)

    Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access.(CVE-2021-33061)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2079-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated.

    The following security bugs were fixed:

    - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently     disclose information via spectre like attacks. (bsc#1199650)
    - CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019)
    - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
    - CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a     corrupted image. (bsc#1198577)
    - CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
    - CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
    - CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers     and Adapters that may have allowed an authenticated user to potentially enable denial of service via local     access (bnc#1196426).
    - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs     filesystem image. (bnc#1158266)
    - CVE-2022-20008: Fixed bug that allows to read kernel heap memory due to uninitialized data in     mmc_blk_read_single of block.c. (bnc#1199564)
    - CVE-2022-0168: Fixed a NULL pointer dereference in smb2_ioctl_query_info. (bsc#1197472)
    - CVE-2022-24448: Fixed an issue if an application sets the O_DIRECTORY flag, and tries to open a regular     file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have     occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2104-1 advisory.

  - In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and     unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. (CVE-2019-19377)

  - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    (CVE-2020-26541)

  - A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users     do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.
    (CVE-2021-20321)

  - Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access. (CVE-2021-33061)

  - A denial of service (DOS) issue was found in the Linux kernel's smb2_ioctl_query_info function in the     fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user     function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system.
    (CVE-2022-0168)

  - A use-after-free flaw was found in the Linux kernel's FUSE filesystem in the way a user triggers write().
    This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in     privilege escalation. (CVE-2022-1011)

  - A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the     offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw     allows unprivileged local users on the host to write outside the userspace region and potentially corrupt     the kernel, resulting in a denial of service condition. (CVE-2022-1158)

  - A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel's filesystem sub-     component. This flaw allows a local attacker with a user privilege to cause a denial of service.
    (CVE-2022-1184)

  - A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This     flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a     leak of internal kernel information. (CVE-2022-1353)

  - A NULL pointer dereference flaw was found in the Linux kernel's X.25 set of standardized network protocols     functionality in the way a user terminates their session using a simulated Ethernet card and continued     usage of this connection. This flaw allows a local user to crash the system. (CVE-2022-1516)

  - Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency     use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker     could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the     system. (CVE-2022-1652)

  - A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged     user to gain root privileges. The bug allows to build several exploit primitives such as kernel address     information leak, arbitrary execution, etc. (CVE-2022-1729)

  - A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use     after free both read or write when non synchronized between cleanup routine and firmware download routine.
    (CVE-2022-1734)

  - A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition     between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN     privilege to leak kernel information. (CVE-2022-1974)

  - There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by     simulating a nfc device from user-space. (CVE-2022-1975)

  - Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated     user to potentially enable information disclosure via local access. (CVE-2022-21123)

  - Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21125)

  - Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21127)

  - Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21166)

  - Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially     cause a denial of service via local access. (CVE-2022-21180)

  - The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets     are in the intended state. (CVE-2022-28893)

  - The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers     to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. (CVE-2022-30594)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access.(CVE-2021-33061)

    A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in     net/netfilter/nf_tables_api.c. This flaw allows a local attacker with user access to cause a privilege     escalation issue.(CVE-2022-1966)

    In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to     a race condition. This could lead to local escalation of privilege with no additional execution privileges     needed. User interaction is not needed for exploitation.(CVE-2021-39686)

    Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency     use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker     could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the     system.(CVE-2022-1652)

    A use-after-free flaw was found in the Linux kernels performance events functionality. A user triggers     a race condition in setting up performance monitoring between the leading PERF_TYPE_TRACEPOINT and sub     PERF_EVENT_HARDWARE plus the PERF_EVENT_SOFTWARE using the perf_event_open() function with these three     types. This flaw allows a local user to crash the system.(CVE-2022-1729)

    With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID     is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer     dereference.(CVE-2022-1789)

    A use-after-free vulnerability was found in drivers/block/floppy.c in the floppy driver module in the     Linux kernel between raw_cmd_ioctl and seek_interrupt. This flaw allows an attacker to cause a denial of     service, leading to a leak of internal kernel information.(CVE-2022-1836)

    An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP     pacing can lead to memory/netns leak, which can be used by remote clients.(CVE-2022-1678)

    Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to     cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14     and later versions.(CVE-2022-29581)

    A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use     after free both read or write when non synchronized between cleanup routine and firmware download     routine.(CVE-2022-1734)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5600-1 advisory.

    Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe) Ethernet driver for the Linux     kernel performed insufficient control flow management. A local attacker could possibly use this to cause a     denial of service. (CVE-2021-33061)

    It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console     font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2021-33656)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5602-1 advisory.

    Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe) Ethernet driver for the Linux     kernel performed insufficient control flow management. A local attacker could possibly use this to cause a     denial of service. (CVE-2021-33061)

    Moshe Kol, Amit Klein and Yossi Gilad discovered that the IP implementation in the Linux kernel did not     provide sufficient randomization when calculating port offsets. An attacker could possibly use this to     expose sensitive information. (CVE-2022-1012)

    Norbert Slusarek discovered that a race condition existed in the perf subsystem in the Linux kernel,     resulting in a use-after-free vulnerability. A privileged local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-1729)

    Qiuhao Li, Gaoning Pan, and Yongkang Jia discovered that the KVM hypervisor implementation in the Linux     kernel did not properly handle an illegal instruction in a guest, resulting in a null pointer dereference.
    An attacker in a guest VM could use this to cause a denial of service (system crash) in the host OS.
    (CVE-2022-1852)

    It was discovered that the UDF file system implementation in the Linux kernel contained an out-of-bounds     write vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2022-1943)

    Gerald Lee discovered that the NTFS file system implementation in the Linux kernel did not properly handle     certain error conditions, leading to a use- after-free vulnerability. A local attacker could use this to     cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2022-1973)

    It was discovered that the device-mapper verity (dm-verity) driver in the Linux kernel did not properly     verify targets being loaded into the device- mapper table. A privileged attacker could use this to cause a     denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2503)

    Zheyu Ma discovered that the Intel iSMT SMBus host controller driver in the Linux kernel contained an out-     of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system     crash). (CVE-2022-2873)

    Selim Enes Karaduman discovered that a race condition existed in the pipe buffers implementation of the     Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly     escalate privileges. (CVE-2022-2959)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5616-1 advisory.

    Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe) Ethernet driver for the Linux     kernel performed insufficient control flow management. A local attacker could possibly use this to cause a     denial of service. (CVE-2021-33061)

    Moshe Kol, Amit Klein and Yossi Gilad discovered that the IP implementation in the Linux kernel did not     provide sufficient randomization when calculating port offsets. An attacker could possibly use this to     expose sensitive information. (CVE-2022-1012, CVE-2022-32296)

    Norbert Slusarek discovered that a race condition existed in the perf subsystem in the Linux kernel,     resulting in a use-after-free vulnerability. A privileged local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-1729)

    Qiuhao Li, Gaoning Pan, and Yongkang Jia discovered that the KVM hypervisor implementation in the Linux     kernel did not properly handle an illegal instruction in a guest, resulting in a null pointer dereference.
    An attacker in a guest VM could use this to cause a denial of service (system crash) in the host OS.
    (CVE-2022-1852)

    It was discovered that the UDF file system implementation in the Linux kernel contained an out-of-bounds     write vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2022-1943)

    Gerald Lee discovered that the NTFS file system implementation in the Linux kernel did not properly handle     certain error conditions, leading to a use- after-free vulnerability. A local attacker could use this to     cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2022-1973)

    It was discovered that the device-mapper verity (dm-verity) driver in the Linux kernel did not properly     verify targets being loaded into the device- mapper table. A privileged attacker could use this to cause a     denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2503)

    Zheyu Ma discovered that the Intel iSMT SMBus host controller driver in the Linux kernel contained an out-     of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system     crash). (CVE-2022-2873)

    Selim Enes Karaduman discovered that a race condition existed in the pipe buffers implementation of the     Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly     escalate privileges. (CVE-2022-2959)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.234-225.917. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-085 advisory.

    Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access. (CVE-2021-33061)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS (CVE-2024-46830)

    In the Linux kernel, the following vulnerability has been resolved:

    sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

    In the Linux kernel, the following vulnerability has been resolved:

    pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

    In the Linux kernel, the following vulnerability has been resolved:

    netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (CVE-2025-21703)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access. (CVE-2021-33061)

  - When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
    (CVE-2021-33656)

  - Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel     (CVE-2021-39713)

  - Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may     allow an authorized user to potentially enable information disclosure via local access. (CVE-2022-0001)

  - Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an     authorized user to potentially enable information disclosure via local access. (CVE-2022-0002)

  - An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the Linux     Kernel. This flaw allows an attacker with normal user privileges to leak kernel information.
    (CVE-2022-0812)

  - A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a     use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel     information leak problem caused by a local, unprivileged attacker. (CVE-2022-1016)

  - A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This     flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a     leak of internal kernel information. (CVE-2022-1353)

  - The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount     of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will     access the freed drm_vgem_gem_object. (CVE-2022-1419)

  - An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP     pacing can lead to memory/netns leak, which can be used by remote clients. (CVE-2022-1678)

  - A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged     user to gain root privileges. The bug allows to build several exploit primitives such as kernel address     information leak, arbitrary execution, etc. (CVE-2022-1729)

  - In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized     data. This could lead to local information disclosure if reading from an SD card that triggers errors,     with no additional execution privileges needed. User interaction is not needed for exploitation.Product:
    AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel (CVE-2022-20008)

  - In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds     read due to improper input validation. This could lead to local information disclosure if a malicious USB     HID device were plugged in, with no additional execution privileges needed. User interaction is not needed     for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream     kernel (CVE-2022-20132)

  - In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead     to local escalation of privilege when opening and closing inet sockets with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android     kernelAndroid ID: A-112551163References: Upstream kernel (CVE-2022-20141)

  - In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead     to local escalation of privilege with System execution privileges needed. User interaction is not needed     for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream     kernel (CVE-2022-20154)

  - In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer     overflow. This could lead to local escalation of privilege with System execution privileges needed. User     interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:
    A-182388481References: Upstream kernel (CVE-2022-20166)

  - Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation,     aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to     influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive     information. (CVE-2022-23960)

  - Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to     cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14     and later versions. (CVE-2022-29581)

  - The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers     to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. (CVE-2022-30594)

  - net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create     user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to     a use-after-free. (CVE-2022-32250)

  - The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are     used. (CVE-2022-32296)

  - An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init     (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different     vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an     unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data     in net/netfilter/nf_tables_api.c. (CVE-2022-34918)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2177-1 advisory.

  - In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and     unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. (CVE-2019-19377)

  - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    (CVE-2020-26541)

  - Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access. (CVE-2021-33061)

  - A denial of service (DOS) issue was found in the Linux kernel's smb2_ioctl_query_info function in the     fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user     function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system.
    (CVE-2022-0168)

  - A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel's filesystem sub-     component. This flaw allows a local attacker with a user privilege to cause a denial of service.
    (CVE-2022-1184)

  - Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency     use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker     could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the     system. (CVE-2022-1652)

  - A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged     user to gain root privileges. The bug allows to build several exploit primitives such as kernel address     information leak, arbitrary execution, etc. (CVE-2022-1729)

  - A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition     between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN     privilege to leak kernel information. (CVE-2022-1974)

  - There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by     simulating a nfc device from user-space. (CVE-2022-1975)

  - In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized     data. This could lead to local information disclosure if reading from an SD card that triggers errors,     with no additional execution privileges needed. User interaction is not needed for exploitation.Product:
    AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel (CVE-2022-20008)

  - In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead     to local escalation of privilege when opening and closing inet sockets with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android     kernelAndroid ID: A-112551163References: Upstream kernel (CVE-2022-20141)

  - Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated     user to potentially enable information disclosure via local access. (CVE-2022-21123)

  - Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21125)

  - Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21127)

  - Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21166)

  - Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially     cause a denial of service via local access. (CVE-2022-21180)

  - The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers     to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. (CVE-2022-30594)

  - net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create     user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to     a use-after-free. (CVE-2022-32250)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
308693	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010710)	Nessus	Unity Linux Local Security Checks	2026/4/21	2026/4/21	medium
164207	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2244)	Nessus	Huawei Local Security Checks	2022/8/17	2026/1/7	high
162233	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2079-1)	Nessus	SuSE Local Security Checks	2022/6/15	2025/9/24	high
162379	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2104-1)	Nessus	SuSE Local Security Checks	2022/6/17	2024/1/16	high
164244	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2257)	Nessus	Huawei Local Security Checks	2022/8/17	2026/1/6	high
164681	Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerabilities (USN-5600-1)	Nessus	Ubuntu Local Security Checks	2022/9/5	2024/8/28	medium
164891	Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5602-1)	Nessus	Ubuntu Local Security Checks	2022/9/8	2024/8/27	high
165220	Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-5616-1)	Nessus	Ubuntu Local Security Checks	2022/9/16	2024/8/28	high
232919	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2025-085)	Nessus	Amazon Linux Local Security Checks	2025/3/19	2026/1/26	high
265107	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2025-2169)	Nessus	Huawei Local Security Checks	2025/9/16	2025/9/16	high
165375	EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2022-2348)	Nessus	Huawei Local Security Checks	2022/9/23	2023/1/13	high
162531	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:2177-1)	Nessus	SuSE Local Security Checks	2022/6/25	2024/1/16	high

检测

插件搜索

medium

high

high

high

high

medium

high

high

high

high

high

high