The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1178-1 advisory.

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
    - CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
    - CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
    - CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
    - CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
    - CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround     (bsc#1235712).
    - CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg     (bsc#1235733).
    - CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
    - CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
    - CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
    - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
    - CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
    - CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
    - CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
    - CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq'     (bsc#1235524).
    - CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
    - CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
    - CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
    - CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
    - CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
    - CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
    - CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
    - CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
    - CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
    - CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
    - CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
    - CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
    - CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
    - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
    - CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
    - CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
    - CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
    - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
    - CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort     (bsc#1238496).
    - CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
    - CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
    - CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
    - CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
    - CVE-2025-21763: neighbour: use RCU protection in __neigh_notify() (bsc#1237897).
    - CVE-2025-21765: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906).
    - CVE-2025-21766: ipv4: use RCU protection in __ip_rt_update_pmtu() (bsc#1238754).
    - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1238512).
    - CVE-2025-21825: selftests/bpf: Add test case for the freeing of bpf_timer (bsc#1238971).
    - CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512).
    - CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479).
    - CVE-2025-21856: s390/ism: add release function for struct device (bsc#1239486).
    - CVE-2025-21857: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478).
    - CVE-2025-21861: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize()     (bsc#1239483).
    - CVE-2025-21862: drop_monitor: fix incorrect initialization order (bsc#1239474).
    - CVE-2025-21864: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482).
    - CVE-2025-21865: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl() (bsc#1239481).
    - CVE-2025-21870: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (bsc#1240191).
    - CVE-2025-21871: tee: optee: Fix supplicant wait loop (bsc#1240183).
    - CVE-2025-21883: ice: Fix deinitializing VF in error path (bsc#1240189).
    - CVE-2025-21890: idpf: fix checksums set in idpf_rx_rsc() (bsc#1240173).
    - CVE-2025-21891: ipvlan: ensure network headers are in skb linear part (bsc#1240186).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5860 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5860-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     February 08, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-36899 CVE-2024-49994 CVE-2024-50014 CVE-2024-50047                      CVE-2024-50164 CVE-2024-50304 CVE-2024-53124 CVE-2024-53128                      CVE-2024-53170 CVE-2024-53229 CVE-2024-53234 CVE-2024-53685                      CVE-2024-56551 CVE-2024-56599 CVE-2024-56608 CVE-2024-56631                      CVE-2024-56664 CVE-2024-56703 CVE-2024-57887 CVE-2024-57892                      CVE-2024-57904 CVE-2024-57906 CVE-2024-57907 CVE-2024-57908                      CVE-2024-57910 CVE-2024-57911 CVE-2024-57912 CVE-2024-57913                      CVE-2024-57915 CVE-2024-57916 CVE-2024-57917 CVE-2024-57922                      CVE-2024-57925 CVE-2024-57929 CVE-2024-57939 CVE-2024-57940                      CVE-2024-57948 CVE-2025-21631 CVE-2025-21636 CVE-2025-21637                      CVE-2025-21638 CVE-2025-21639 CVE-2025-21640 CVE-2025-21646                      CVE-2025-21647 CVE-2025-21648 CVE-2025-21653 CVE-2025-21655                      CVE-2025-21660 CVE-2025-21662 CVE-2025-21664 CVE-2025-21665                      CVE-2025-21666 CVE-2025-21667 CVE-2025-21668 CVE-2025-21669                      CVE-2025-21671 CVE-2025-21675 CVE-2025-21678 CVE-2025-21680                      CVE-2025-21681 CVE-2025-21683

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.128-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7468-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - RAM backed block device driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - EDAC drivers;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - iSCSI Boot Firmware Table Attributes driver;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Voltage and Current Regulator drivers;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - DRM display driver;

    - BPF subsystem;

    - Kernel Samepage Merging mechanism;

    - Network file system (NFS) superblock;

    - Kernel stack handling interfaces;

    - StackDepot library;

    - Task handling mechanism;

    - userfaultfd() syscall;

    - Bluetooth subsystem;

    - IP tunnels definitions;

    - Network namespace;

    - Netfilter;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - DMA mapping infrastructure;

    - Perf events;

    - Kernel fork() syscall;

    - KCSAN framework;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Static call mechanism;

    - Timer subsystem;

    - Vector I/O iterator library;

    - KUnit library;

    - Maple Tree data structure library;

    - Memory management;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - Ethtool driver;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netlink;

    - Packet sockets;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - ALSA framework;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - HD-audio driver;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2024-49996, CVE-2024-56693, CVE-2024-49928, CVE-2024-47728, CVE-2024-50218,     CVE-2024-50197, CVE-2024-50084, CVE-2024-56698, CVE-2024-56623, CVE-2024-50203, CVE-2024-56786,     CVE-2024-53198, CVE-2024-49939, CVE-2024-49852, CVE-2024-49920, CVE-2024-53117, CVE-2024-50023,     CVE-2024-56581, CVE-2024-49954, CVE-2024-56658, CVE-2024-56688, CVE-2024-56574, CVE-2024-56690,     CVE-2024-53158, CVE-2024-56777, CVE-2024-56582, CVE-2024-56629, CVE-2024-49997, CVE-2024-50041,     CVE-2024-53052, CVE-2024-50126, CVE-2024-56726, CVE-2024-50007, CVE-2024-47712, CVE-2024-50225,     CVE-2024-50269, CVE-2024-50200, CVE-2024-53099, CVE-2024-50083, CVE-2024-53162, CVE-2024-57876,     CVE-2024-50180, CVE-2024-56678, CVE-2024-50179, CVE-2024-56776, CVE-2024-53151, CVE-2024-56631,     CVE-2024-50160, CVE-2024-50302, CVE-2024-53126, CVE-2024-50151, CVE-2024-49917, CVE-2024-49899,     CVE-2024-49927, CVE-2024-48875, CVE-2024-50298, CVE-2024-53148, CVE-2024-53160, CVE-2024-50187,     CVE-2024-50072, CVE-2024-56756, CVE-2024-56625, CVE-2024-44955, CVE-2024-47671, CVE-2024-47141,     CVE-2024-50047, CVE-2024-50048, CVE-2024-50245, CVE-2024-50096, CVE-2024-56602, CVE-2024-53232,     CVE-2024-50284, CVE-2024-53129, CVE-2024-56724, CVE-2024-56632, CVE-2024-49924, CVE-2024-47756,     CVE-2024-53226, CVE-2024-50189, CVE-2024-56573, CVE-2024-50257, CVE-2024-50300, CVE-2024-47673,     CVE-2024-50152, CVE-2024-53215, CVE-2024-50295, CVE-2024-50111, CVE-2024-49865, CVE-2024-47691,     CVE-2024-56649, CVE-2024-56567, CVE-2024-53061, CVE-2024-50153, CVE-2024-53091, CVE-2024-56692,     CVE-2024-41932, CVE-2024-56650, CVE-2024-56645, CVE-2024-47670, CVE-2024-53130, CVE-2024-50066,     CVE-2024-50020, CVE-2024-50154, CVE-2024-49998, CVE-2024-50290, CVE-2024-56594, CVE-2024-56627,     CVE-2024-49882, CVE-2024-50220, CVE-2024-49914, CVE-2024-50019, CVE-2024-53213, CVE-2024-50015,     CVE-2024-53172, CVE-2024-50198, CVE-2024-53051, CVE-2024-50280, CVE-2024-53187, CVE-2024-50136,     CVE-2024-47672, CVE-2024-56606, CVE-2024-47699, CVE-2024-56780, CVE-2024-56672, CVE-2024-56637,     CVE-2024-49946, CVE-2024-56752, CVE-2024-50199, CVE-2024-53119, CVE-2024-53084, CVE-2024-50076,     CVE-2024-49938, CVE-2024-50237, CVE-2024-56779, CVE-2024-50108, CVE-2024-50162, CVE-2024-49936,     CVE-2024-41935, CVE-2024-53046, CVE-2024-56572, CVE-2024-53107, CVE-2024-53150, CVE-2024-56539,     CVE-2024-49949, CVE-2024-41014, CVE-2024-53217, CVE-2024-49977, CVE-2025-21702, CVE-2024-50267,     CVE-2024-50138, CVE-2024-50229, CVE-2024-56586, CVE-2024-50057, CVE-2024-50070, CVE-2024-49898,     CVE-2024-50085, CVE-2024-56746, CVE-2024-53106, CVE-2024-47695, CVE-2024-50009, CVE-2024-50103,     CVE-2024-47693, CVE-2024-53135, CVE-2024-53127, CVE-2024-50067, CVE-2024-57850, CVE-2024-56615,     CVE-2024-50167, CVE-2024-50042, CVE-2024-56546, CVE-2024-47749, CVE-2024-47705, CVE-2024-47747,     CVE-2024-56570, CVE-2024-56604, CVE-2024-53112, CVE-2024-49988, CVE-2024-56597, CVE-2024-50268,     CVE-2024-53121, CVE-2024-56635, CVE-2024-50002, CVE-2024-50127, CVE-2024-56603, CVE-2024-56531,     CVE-2024-49890, CVE-2024-53157, CVE-2024-50246, CVE-2024-56562, CVE-2024-56722, CVE-2024-49912,     CVE-2024-56774, CVE-2024-49893, CVE-2024-56593, CVE-2024-53131, CVE-2024-57798, CVE-2024-50275,     CVE-2024-50075, CVE-2024-53174, CVE-2024-53087, CVE-2024-50155, CVE-2024-47696, CVE-2024-53155,     CVE-2024-50201, CVE-2024-53134, CVE-2024-49922, CVE-2024-53138, CVE-2024-47711, CVE-2024-47742,     CVE-2024-53043, CVE-2024-48881, CVE-2024-53203, CVE-2024-53053, CVE-2024-56589, CVE-2024-56679,     CVE-2024-49892, CVE-2024-56677, CVE-2024-53144, CVE-2024-50107, CVE-2024-56583, CVE-2025-21701,     CVE-2024-49911, CVE-2024-50244, CVE-2024-49969, CVE-2024-50098, CVE-2024-50166, CVE-2024-47809,     CVE-2024-56781, CVE-2024-49894, CVE-2025-21700, CVE-2024-49930, CVE-2024-56548, CVE-2024-50134,     CVE-2024-53194, CVE-2024-50285, CVE-2024-42122, CVE-2024-53171, CVE-2024-53120, CVE-2024-50279,     CVE-2024-57838, CVE-2024-50082, CVE-2024-50168, CVE-2024-53175, CVE-2024-47710, CVE-2024-49972,     CVE-2024-56727, CVE-2024-49919, CVE-2024-53066, CVE-2024-56708, CVE-2024-53142, CVE-2024-49896,     CVE-2024-49950, CVE-2024-53114, CVE-2024-47737, CVE-2024-56721, CVE-2024-50030, CVE-2024-50063,     CVE-2024-56704, CVE-2024-56694, CVE-2024-49937, CVE-2024-56596, CVE-2024-49855, CVE-2024-53231,     CVE-2024-50259, CVE-2024-50163, CVE-2024-50263, CVE-2024-56579, CVE-2024-50148, CVE-2024-50252,     CVE-2024-56775, CVE-2024-53195, CVE-2024-56771, CVE-2024-56765, CVE-2024-50192, CVE-2024-56705,     CVE-2024-56566, CVE-2024-49851, CVE-2024-56575, CVE-2024-53222, CVE-2024-50014, CVE-2024-49891,     CVE-2024-53128, CVE-2024-49921, CVE-2024-50024, CVE-2024-56703, CVE-2024-56787, CVE-2024-56723,     CVE-2024-56687, CVE-2024-47718, CVE-2024-49902, CVE-2024-49963, CVE-2024-56691, CVE-2024-53173,     CVE-2024-56599, CVE-2024-50080, CVE-2024-47704, CVE-2024-49934, CVE-2024-56707, CVE-2024-49958,     CVE-2024-49888, CVE-2024-53095, CVE-2024-53089, CVE-2024-49935, CVE-2024-50022, CVE-2024-47748,     CVE-2024-56634, CVE-2024-53090, CVE-2024-50242, CVE-2024-53085, CVE-2024-50073, CVE-2024-50068,     CVE-2024-49877, CVE-2024-56642, CVE-2024-53067, CVE-2024-50118, CVE-2024-50061, CVE-2024-49948,     CVE-2024-53100, CVE-2024-50194, CVE-2024-50116, CVE-2024-48873, CVE-2024-53180, CVE-2024-56663,     CVE-2024-50303, CVE-2024-50250, CVE-2024-50045, CVE-2024-50296, CVE-2024-49961, CVE-2024-56549,     CVE-2024-50027, CVE-2024-53227, CVE-2024-50292, CVE-2024-49900, CVE-2024-50074, CVE-2024-53115,     CVE-2024-56747, CVE-2024-50078, CVE-2024-56772, CVE-2024-53141, CVE-2024-50301, CVE-2024-53079,     CVE-2024-50255, CVE-2024-56565, CVE-2024-53165, CVE-2024-52332, CVE-2024-53140, CVE-2024-50286,     CVE-2024-53088, CVE-2024-53139, CVE-2024-49881, CVE-2024-49859, CVE-2024-50247, CVE-2024-50278,     CVE-2024-50124, CVE-2024-47709, CVE-2024-50128, CVE-2024-49962, CVE-2024-50258, CVE-2024-56532,     CVE-2024-47684, CVE-2024-56633, CVE-2024-53210, CVE-2024-49867, CVE-2024-50056, CVE-2024-50137,     CVE-2024-47730, CVE-2024-49960, CVE-2024-50060, CVE-2024-49925, CVE-2024-50195, CVE-2024-50031,     CVE-2024-50099, CVE-2024-49863, CVE-2024-49992, CVE-2024-53083, CVE-2024-56751, CVE-2024-50141,     CVE-2024-47701, CVE-2024-53122, CVE-2024-56576, CVE-2024-47689, CVE-2024-50121, CVE-2024-50147,     CVE-2024-50226, CVE-2024-50239, CVE-2024-56578, CVE-2024-50062, CVE-2024-50033, CVE-2024-49982,     CVE-2024-56545, CVE-2024-53118, CVE-2024-50231, CVE-2024-50125, CVE-2024-50191, CVE-2024-49875,     CVE-2024-47794, CVE-2024-49983, CVE-2024-56595, CVE-2024-50224, CVE-2024-47690, CVE-2024-50272,     CVE-2024-49901, CVE-2024-56538, CVE-2024-50010, CVE-2024-49959, CVE-2024-53154, CVE-2024-53221,     CVE-2024-49886, CVE-2024-50145, CVE-2024-49884, CVE-2024-50028, CVE-2024-50232, CVE-2024-53208,     CVE-2024-50000, CVE-2024-56728, CVE-2024-50304, CVE-2024-49989, CVE-2024-47739, CVE-2024-56550,     CVE-2024-50055, CVE-2024-56590, CVE-2024-53055, CVE-2024-50270, CVE-2024-53164, CVE-2024-49856,     CVE-2024-57849, CVE-2024-47697, CVE-2024-43098, CVE-2024-50170, CVE-2024-53196, CVE-2024-50251,     CVE-2024-56533, CVE-2024-41016, CVE-2024-53105, CVE-2024-53230, CVE-2024-50164, CVE-2024-50101,     CVE-2024-56607, CVE-2024-50186, CVE-2024-50105, CVE-2024-47679, CVE-2024-48876, CVE-2024-50243,     CVE-2024-47720, CVE-2024-53239, CVE-2024-53062, CVE-2024-50021, CVE-2024-56614, CVE-2024-53224,     CVE-2024-56619, CVE-2024-53072, CVE-2024-53223, CVE-2024-50039, CVE-2024-49981, CVE-2024-50230,     CVE-2024-47143, CVE-2024-53082, CVE-2024-50216, CVE-2024-47713, CVE-2024-56720, CVE-2024-56543,     CVE-2024-53094, CVE-2024-53111, CVE-2024-50036, CVE-2024-50065, CVE-2024-57874, CVE-2024-56689,     CVE-2024-53183, CVE-2024-53108, CVE-2024-56643, CVE-2024-49868, CVE-2024-56611, CVE-2024-50185,     CVE-2024-50223, CVE-2024-50193, CVE-2024-56616, CVE-2024-50265, CVE-2024-56701, CVE-2024-50112,     CVE-2024-50297, CVE-2024-50207, CVE-2024-56558, CVE-2024-56782, CVE-2024-53081, CVE-2024-50044,     CVE-2024-50040, CVE-2024-49991, CVE-2024-50013, CVE-2024-53170, CVE-2024-56540, CVE-2024-47723,     CVE-2024-49913, CVE-2024-53169, CVE-2024-49974, CVE-2024-50256, CVE-2024-49858, CVE-2024-56609,     CVE-2024-50282, CVE-2024-53168, CVE-2024-50182, CVE-2024-49973, CVE-2024-56638, CVE-2024-56683,     CVE-2024-50059, CVE-2024-56648, CVE-2024-45828, CVE-2024-56610, CVE-2024-47740, CVE-2024-47692,     CVE-2024-50026, CVE-2024-50117, CVE-2024-50221, CVE-2024-49931, CVE-2024-49994, CVE-2024-50184,     CVE-2024-50171, CVE-2024-50261, CVE-2024-50283, CVE-2024-50233, CVE-2024-53184, CVE-2024-53220,     CVE-2024-53191, CVE-2024-53190, CVE-2024-56592, CVE-2024-47703, CVE-2024-53048, CVE-2024-49955,     CVE-2024-50150, CVE-2024-50208, CVE-2024-56577, CVE-2024-50159, CVE-2024-50131, CVE-2024-56755,     CVE-2024-50172, CVE-2024-53146, CVE-2024-53161, CVE-2024-50222, CVE-2024-49879, CVE-2024-50146,     CVE-2024-53063, CVE-2024-49889, CVE-2024-50287, CVE-2024-56647, CVE-2024-56613, CVE-2024-50017,     CVE-2024-56551, CVE-2024-53145, CVE-2024-53166, CVE-2024-56622, CVE-2025-21993, CVE-2024-50133,     CVE-2024-53234, CVE-2024-53133, CVE-2024-47735, CVE-2024-49861, CVE-2024-50143, CVE-2024-50169,     CVE-2024-50046, CVE-2024-50069, CVE-2024-56742, CVE-2024-50104, CVE-2024-56636, CVE-2024-56745,     CVE-2024-56630, CVE-2024-50276, CVE-2024-53228, CVE-2024-49945, CVE-2025-21756, CVE-2024-50142,     CVE-2024-56729, CVE-2024-49569, CVE-2024-49952, CVE-2024-50006, CVE-2024-50273, CVE-2024-49906,     CVE-2024-53058, CVE-2024-49895, CVE-2024-50240, CVE-2024-49987, CVE-2024-53233, CVE-2024-53086,     CVE-2024-50110, CVE-2024-50064, CVE-2024-49878, CVE-2024-56644, CVE-2024-56605, CVE-2024-47698,     CVE-2024-53147, CVE-2024-47745, CVE-2024-56685, CVE-2024-50016, CVE-2024-49871, CVE-2024-47757,     CVE-2024-53103, CVE-2024-56580, CVE-2024-49883, CVE-2024-53163, CVE-2024-53110, CVE-2024-50058,     CVE-2024-56640, CVE-2024-53101, CVE-2024-53156, CVE-2022-49034, CVE-2024-53109, CVE-2024-49978,     CVE-2024-50235, CVE-2024-53680, CVE-2024-50299, CVE-2024-53177, CVE-2024-50008, CVE-2024-56744,     CVE-2025-21831, CVE-2024-50038, CVE-2024-50271, CVE-2024-53178, CVE-2024-50012, CVE-2024-53188,     CVE-2024-49860, CVE-2024-53237, CVE-2024-50188, CVE-2024-49880, CVE-2024-50077, CVE-2024-49968,     CVE-2024-50236, CVE-2024-50206, CVE-2024-53197, CVE-2024-56587, CVE-2024-53236, CVE-2024-50139,     CVE-2024-50120, CVE-2024-56681, CVE-2024-53059, CVE-2024-53113, CVE-2024-50209, CVE-2024-49957,     CVE-2024-49944, CVE-2024-50087, CVE-2024-56754, CVE-2024-49903, CVE-2024-56600, CVE-2024-47706,     CVE-2024-49907, CVE-2024-53202, CVE-2024-50215, CVE-2024-47734, CVE-2024-56785, CVE-2024-53229,     CVE-2024-53050, CVE-2024-50051, CVE-2024-53209, CVE-2024-56739, CVE-2024-50262, CVE-2024-50088,     CVE-2024-56621, CVE-2024-49929, CVE-2024-57843, CVE-2024-56569, CVE-2024-50140, CVE-2024-50135,     CVE-2024-57872, CVE-2024-49866, CVE-2024-53214, CVE-2024-50090, CVE-2024-49985, CVE-2024-56608,     CVE-2024-56598, CVE-2024-49915, CVE-2024-53104, CVE-2024-50035, CVE-2024-53047, CVE-2024-53176,     CVE-2024-56700, CVE-2024-49975, CVE-2024-53200, CVE-2024-50274, CVE-2024-56748, CVE-2024-56601,     CVE-2024-50289, CVE-2024-50086, CVE-2024-53044, CVE-2024-50029, CVE-2024-49909, CVE-2024-47738,     CVE-2024-47726, CVE-2024-56568, CVE-2024-53181, CVE-2024-53218, CVE-2024-56725, CVE-2024-56778,     CVE-2024-50115, CVE-2024-50288, CVE-2024-50291, CVE-2024-50049, CVE-2024-56773, CVE-2024-50001,     CVE-2024-49933, CVE-2024-50211, CVE-2024-50095, CVE-2024-56651, CVE-2024-50238, CVE-2024-47707,     CVE-2024-50205, CVE-2024-50093, CVE-2024-50183, CVE-2024-56588, CVE-2024-49965, CVE-2024-56584,     CVE-2024-53096, CVE-2024-50248, CVE-2024-50234, CVE-2024-49926, CVE-2024-49923, CVE-2024-49918,     CVE-2024-50130, CVE-2024-53093, CVE-2024-56626, CVE-2024-50156, CVE-2024-56557, CVE-2024-50196,     CVE-2024-56620, CVE-2024-49870, CVE-2024-50294, CVE-2024-53042, CVE-2024-53076, CVE-2024-49905,     CVE-2024-53045, CVE-2024-50202, CVE-2024-56641, CVE-2024-53219, CVE-2024-50158, CVE-2024-50025,     CVE-2024-47685, CVE-2024-49966, CVE-2024-53123, CVE-2024-53068, CVE-2024-47678)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01951-1 advisory.

    The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
    - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
    - CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
    - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
    - CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
    - CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
    - CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround     (bsc#1235712).
    - CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
    - CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg     (bsc#1235733).
    - CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
    - CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
    - CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
    - CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
    - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
    - CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
    - CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
    - CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
    - CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
    - CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq'     (bsc#1235524).
    - CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
    - CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
    - CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
    - CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
    - CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
    - CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
    - CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
    - CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
    - CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
    - CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
    - CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
    - CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
    - CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
    - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
    - CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
    - CVE-2024-58091: drm/fbdev-dma: Add shadow buffering for deferred I/O (bsc#1240174).
    - CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
    - CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21717: net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq     (bsc#1238866).
    - CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
    - CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
    - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
    - CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
    - CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
    - CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
    - CVE-2025-21763: neighbour: use RCU protection in __neigh_notify() (bsc#1237897).
    - CVE-2025-21765: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906).
    - CVE-2025-21766: ipv4: use RCU protection in __ip_rt_update_pmtu() (bsc#1238754).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21800: net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset (bsc#1238743).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
    - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
    - CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
    - CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
    - CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
    - CVE-2025-21837: io_uring/uring_cmd: unconditionally copy SQEs at prep time (bsc#1239064).
    - CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512).
    - CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479).
    - CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
    - CVE-2025-21856: s390/ism: add release function for struct device (bsc#1239486).
    - CVE-2025-21857: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478).
    - CVE-2025-21861: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize()     (bsc#1239483).
    - CVE-2025-21862: drop_monitor: fix incorrect initialization order (bsc#1239474).
    - CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
    - CVE-2025-21864: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482).
    - CVE-2025-21865: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl() (bsc#1239481).
    - CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
    - CVE-2025-21870: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (bsc#1240191).
    - CVE-2025-21871: tee: optee: Fix supplicant wait loop (bsc#1240183).
    - CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
    - CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21882: net/mlx5: Fix vport QoS cleanup on error (bsc#1240187).
    - CVE-2025-21883: ice: Fix deinitializing VF in error path (bsc#1240189).
    - CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
    - CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
    - CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
    - CVE-2025-21890: idpf: fix checksums set in idpf_rx_rsc() (bsc#1240173).
    - CVE-2025-21891: ipvlan: ensure network headers are in skb linear part (bsc#1240186).
    - CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
    - CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
    - CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
    - CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
    - CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
    - CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
    - CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
    - CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
    - CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error (bsc#1240720).
    - CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
    - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
    - CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
    - CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
    - CVE-2025-21973: eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (bsc#1240803).
    - CVE-2025-21974: eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (bsc#1240800).
    - CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
    - CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
    - CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
    - CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
    - CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
    - CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
    - CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
    - CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
    - CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
    - CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
    - CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
    - CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
    - CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
    - CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
    - CVE-2025-22094: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (bsc#1241512).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22105, CVE-2025-37860: Add missing bugzilla references (bsc#1241452 bsc#1241548).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593).
    - CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).
    - CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error     (bsc#1242763).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
    - CVE-2025-23154: io_uring/net: fix io_req_post_cqe abuse by send bundle (bsc#1242533).
    - CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW     initialization (bsc#1242507).
    - CVE-2025-37747: kABI workaround for perf-Fix-hang-while-freeing-sigtrap-event (References: bsc#1242520).
    - CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
    - CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
    - CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
    - CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
    - CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
    - CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered     (bsc#1242585).
    - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
    - CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
    - CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
    - CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
    - CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
    - CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
    - CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
    - CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
    - CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
    - CVE-2025-37842: spi: fsl-qspi: Fix double cleanup in probe error path (bsc#1242951).
    - CVE-2025-37870: drm/amd/display: prevent hang on link training fail (bsc#1243056).
    - CVE-2025-37879: 9p/net: fix improper handling of bogus negative read/write replies (bsc#1243077).
    - CVE-2025-37886: pds_core: make wait_context part of q_info (bsc#1242944).
    - CVE-2025-37887: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (bsc#1242962).
    - CVE-2025-37949: xenbus: Use kref to track req lifetime (bsc#1243541).
    - CVE-2025-37957: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (bsc#1243513).
    - CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
    - CVE-2025-37960: memblock: Accept allocated memory before use in memblock_double_array() (bsc#1243519).
    - CVE-2025-37974: s390/pci: Fix missing check for zpci_create_device() error return (bsc#1243547).
    - CVE-2025-38152: remoteproc: core: Clear table_sz when rproc_shutdown (bsc#1241627).
    - CVE-2025-38637: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657).
    - CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in     BLKSECDISCARD I independently rediscovered commit 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155 block: fix     overflow in blk_ioctl_discard() but for secure erase. Same problem: uint64_t r[2] = {512,     18446744073709551104ULL}; ioctl(fd, BLKSECDISCARD, r); will enter near infinite loop inside     blkdev_issue_secure_erase(): a.out: attempt to access beyond end of device loop0: rw=5, sector=3399043073,     nr_sectors = 1024 limit=2048 bio_check_eod: 3286214 callbacks suppressed (CVE-2024-49994)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01600-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-47659: drm/plane: Move range check for format_count earlier (bsc#1237839).
    - CVE-2022-49044: dm integrity: fix memory corruption when tag_size is less than digest size     (bsc#1237840).
    - CVE-2022-49055: drm/amdkfd: Check for potential null return of kmalloc_array() (bsc#1237868).
    - CVE-2022-49060: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (bsc#1237845).
    - CVE-2022-49086: net: openvswitch: fix leak of nested actions (bsc#1238037).
    - CVE-2022-49111: Bluetooth: Fix use after free in hci_send_acl (bsc#1237984).
    - CVE-2022-49118: scsi: hisi_sas: Free irq vectors in order for v3 HW (bsc#1237979).
    - CVE-2022-49121: scsi: pm8001: Fix tag leaks on error (bsc#1237926).
    - CVE-2022-49137: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (bsc#1238155).
    - CVE-2022-49175: PM: core: keep irq flags in device_pm_check_callbacks() (bsc#1238099).
    - CVE-2022-49176: bfq: fix use-after-free in bfq_dispatch_request (bsc#1238097).
    - CVE-2022-49179: block, bfq: do not move oom_bfqq (bsc#1238092).
    - CVE-2022-49188: remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (bsc#1238138).
    - CVE-2022-49197: af_netlink: Fix shift out of bounds in group mask calculation (bsc#1238455).
    - CVE-2022-49205: bpf, sockmap: Fix double uncharge the mem of sk_msg (bsc#1238335).
    - CVE-2022-49232: drm/amd/display: Fix a NULL pointer dereference in     amdgpu_dm_connector_add_common_modes() (bsc#1238139).
    - CVE-2022-49290: mac80211: fix potential double free on mesh join (bsc#1238156).
    - CVE-2022-49305: drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (bsc#1238645).
    - CVE-2022-49325: tcp: add accessors to read/set tp->snd_cwnd (bsc#1238398).
    - CVE-2022-49335: drm/amdgpu/cs: make commands with 0 chunks illegal behaviour (bsc#1238377).
    - CVE-2022-49351: net: altera: Fix refcount leak in altera_tse_mdio_create (bsc#1237939).
    - CVE-2022-49385: driver: base: fix UAF when driver_attach failed (bsc#1237951).
    - CVE-2022-49390: macsec: fix UAF bug for real_dev (bsc#1238233).
    - CVE-2022-49411: bfq: Make sure bfqg for which we are queueing requests is online (bsc#1238307).
    - CVE-2022-49442: drivers/base/node.c: fix compaction sysfs file leak (bsc#1238243).
    - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
    - CVE-2022-49478: media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (bsc#1238000).
    - CVE-2022-49489: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm     runtime resume (bsc#1238244).
    - CVE-2022-49504: scsi: lpfc: Inhibit aborts if external loopback plug is inserted (bsc#1238835).
    - CVE-2022-49521: scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() (bsc#1238938).
    - CVE-2022-49525: media: cx25821: Fix the warning when removing the module (bsc#1238022).
    - CVE-2022-49534: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT (bsc#1238893).
    - CVE-2022-49535: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI     (bsc#1238937).
    - CVE-2022-49536: scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock (bsc#1238838).
    - CVE-2022-49537: scsi: lpfc: Fix call trace observed during I/O with CMF enabled (bsc#1238930).
    - CVE-2022-49542: scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (bsc#1238722).
    - CVE-2022-49561: netfilter: conntrack: re-fetch conntrack after insertion (bsc#1238537).
    - CVE-2022-49590: igmp: Fix data-races around sysctl_igmp_llm_reports (bsc#1238844).
    - CVE-2022-49658: bpf, selftests: Add verifier test case for imm=0,umin=0,umax=1 scalar (bsc#1238803).
    - CVE-2022-49668: PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (bsc#1237957).
    - CVE-2022-49693: drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (bsc#1237954).
    - CVE-2022-49725: i40e: Fix call trace in setup_tx_descriptors (bsc#1238016).
    - CVE-2022-49728: kABI workaround for changeing the variable length type to size_t (bsc#1239111).
    - CVE-2022-49730: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (bsc#1239070).
    - CVE-2022-49749: i2c: designware: use casting of u64 in clock multiplication to avoid overflow     (bsc#1240243).
    - CVE-2022-49753: dmaengine: Fix double increment of client_count in dma_chan_get() (bsc#1240250).
    - CVE-2023-53023: net: nfc: Fix use-after-free in local_cleanup() (bsc#1240309).
    - CVE-2023-53032: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function     (bsc#1240270).
    - CVE-2024-49994: block: fix integer overflow in BLKSECDISCARD (bsc#1237757).
    - CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
    - CVE-2024-50272: filemap: Fix bounds checking in filemap_read() (bsc#1233461 bsc#1234209).
    - CVE-2024-52559: drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() (bsc#1238507).
    - CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
    - CVE-2024-56590: skbuff: introduce skb_pull_data (bsc#1235038).
    - CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-57980: media: uvcvideo: Fix double free in error path (bsc#1237911).
    - CVE-2024-57981: usb: xhci: Fix NULL pointer dereference on certain command aborts (bsc#1237912).
    - CVE-2024-58005: tpm: Change to kvalloc() in eventlog/acpi.c (bsc#1237873).
    - CVE-2024-58009: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (bsc#1238760).
    - CVE-2024-58017: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (bsc#1237950     bsc#1239112).
    - CVE-2024-58063: wifi: rtlwifi: fix memory leaks and invalid access at probe error path (bsc#1238984).
    - CVE-2024-58093: PCI/ASPM: Fix link state exit during switch upstream function removal (bsc#1241347).
    - CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
    - CVE-2025-21735: NFC: nci: Add bounds checking in nci_hci_create_pipe() (bsc#1238497).
    - CVE-2025-21750: wifi: brcmfmac: Check the return value of of_property_read_string_index() (bsc#1238905).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
    - CVE-2025-21779: KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel     (bsc#1238768).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21862: drop_monitor: fix incorrect initialization order (bsc#1239474).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21909: wifi: nl80211: reject cooked mode if it is set along with other flags (bsc#1240590).
    - CVE-2025-21910: wifi: cfg80211: regulatory: improve invalid hints checking (bsc#1240583).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21927: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (bsc#1240714).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21941: drm/amd/display: Fix null check for pipe_ctx->plane_state in (bsc#1240701).
    - CVE-2025-21948: HID: appleir: Fix potential NULL dereference at raw event handle (bsc#1240703).
    - CVE-2025-21956: drm/amd/display: Assign normalized_pix_clk when color depth = 14 (bsc#1240739).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21976: fbdev: hyperv_fb: Allow graceful removal of framebuffer (bsc#1241145).
    - CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
    - CVE-2025-22008: regulator: check that dummy regulator has been probed before using it (bsc#1240942).
    - CVE-2025-22010: RDMA/hns: Fix soft lockup during bt pages loop (bsc#1240943).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22086: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (bsc#1241458).
    - CVE-2025-23131: dlm: prevent NPD when writing a positive value to event_done (bsc#1241601).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
234058	SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2025:1178-1)	Nessus	SuSE Local Security Checks	2025/4/9	2026/6/26	high
237324	RHEL 9 : kernel (RHSA-2025:6966)	Nessus	Red Hat Local Security Checks	2025/5/27	2025/10/28	critical
215144	Debian dsa-5860 : affs-modules-6.1.0-21-4kc-malta-di - security update	Nessus	Debian Local Security Checks	2025/2/7	2025/10/28	high
239190	TencentOS Server 4: kernel (TSSA-2024:0979)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
234911	Ubuntu 24.04 LTS : Linux kernel (Azure, N-Series) vulnerabilities (USN-7468-1)	Nessus	Ubuntu Local Security Checks	2025/4/28	2026/1/6	critical
240801	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:01967-1)	Nessus	SuSE Local Security Checks	2025/6/27	2025/9/24	medium
240805	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2025:01951-1)	Nessus	SuSE Local Security Checks	2025/6/27	2025/9/24	medium
282947	MiracleLinux 9 : kernel-5.14.0-570.12.1.el9_6 (AXSA:2025-10392:38)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	critical
230983	Linux Distros Unpatched Vulnerability : CVE-2024-49994	Nessus	Misc.	2025/3/6	2026/10/6	medium
237099	SUSE SLES12 Security Update : kernel (SUSE-SU-2025:01600-1)	Nessus	SuSE Local Security Checks	2025/5/22	2025/12/30	high

检测

插件搜索

high

critical

high

high

critical

medium

medium

critical

medium

high