The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0577-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
    - CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
    - CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset     (bsc#1233028).
    - CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
    - CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
    - CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
    - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format     (bsc#1234025).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
    - CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
    - CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
    - CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
    - CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
    - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
    - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
    - CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()     (bsc#1235521).
    - CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
    - CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
    - CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
    - CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
    - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
    - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
    - CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
    - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
    - CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
    - CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
    - CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
    - CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
    - CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
    - CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
    - CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()     (bsc#1235818).
    - CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
    - CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
    - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
    - CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.15.168-114.166. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-056 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    inet: inet_defrag: prevent sk release while still in use (CVE-2024-26921)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo: walk over current view on netlink dump (CVE-2024-27017)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/pci: fix potential memory leak in vfio_intx_enable() (CVE-2024-38632)

    In the Linux kernel, the following vulnerability has been resolved:

    gpio: prevent potential speculation leaks in gpio_device_get_desc() (CVE-2024-44931)

    In the Linux kernel, the following vulnerability has been resolved:

    selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_socket: fix sk refcount leaks (CVE-2024-46855)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)

    In the Linux kernel, the following vulnerability has been resolved:

    fou: fix initialization of grc (CVE-2024-46865)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: avoid leaving partial pfn mappings around in error case (CVE-2024-47674)

    In the Linux kernel, the following vulnerability has been resolved:

    vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: check skb is non-NULL in tcp_rto_delta_us() (CVE-2024-47684)

    syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits     (th->res1)

    Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put() (CVE-2024-47685)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: return -EINVAL when namelen is 0 (CVE-2024-47692)

    In the Linux kernel, the following vulnerability has been resolved:

    IB/core: Fix ib_cache_setup_one error flow cleanup (CVE-2024-47693)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (CVE-2024-47696)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: avoid OOB when system.data xattr changes underneath the filesystem (CVE-2024-47701)

    In the Linux kernel, the following vulnerability has been resolved:

    block: fix potential invalid pointer dereference in blk_add_partition (CVE-2024-47705)

    In the Linux kernel, the following vulnerability has been resolved:

    block, bfq: fix possible UAF for bfqq->bic with merge chain (CVE-2024-47706)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (CVE-2024-47709)

    In the Linux kernel, the following vulnerability has been resolved:

    sock_map: Add a cond_resched() in sock_hash_free() (CVE-2024-47710)

    In the Linux kernel, the following vulnerability has been resolved:

    bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() (CVE-2024-47734)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: call cache_put if xdr_reserve_space returns NULL (CVE-2024-47737)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: use integer wrap around to prevent deadlock on seq_nr overflow (CVE-2024-47739)

    In the Linux kernel, the following vulnerability has been resolved:

    firmware_loader: Block path traversal (CVE-2024-47742)

    In the Linux kernel, the following vulnerability has been resolved:

    tpm: Clean up TPM space after command failure (CVE-2024-49851)

    In the Linux kernel, the following vulnerability has been resolved:

    efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (CVE-2024-49858)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: sysfs: validate return type of _STR method (CVE-2024-49860)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: wait for fixup workers before stopping cleaner kthread during umount (CVE-2024-49867)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (CVE-2024-49868)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: map the EBADMSG to nfserr_io to avoid warning (CVE-2024-49875)

    In the Linux kernel, the following vulnerability has been resolved:

    resource: fix region_intersects() vs add_memory_driver_managed() (CVE-2024-49878)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: update orig_path in ext4_find_extent() (CVE-2024-49881)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix double brelse() the buffer of the extents path (CVE-2024-49882)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: aovid use-after-free in ext4_ext_insert_extent() (CVE-2024-49883)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix slab-use-after-free in ext4_split_extent_at() (CVE-2024-49884)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: avoid use-after-free in ext4_ext_show_leaf() (CVE-2024-49889)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/ioapic: Handle allocation failures gracefully (CVE-2024-49927)

    In the Linux kernel, the following vulnerability has been resolved:

    blk_iocost: fix more out of bound shifts (CVE-2024-49933)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: PAD: fix crash in exit_round_robin() (CVE-2024-49935)

    In the Linux kernel, the following vulnerability has been resolved:

    net/xen-netback: prevent UAF in xenvif_flush_hash() (CVE-2024-49936)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (CVE-2024-49944)

    In the Linux kernel, the following vulnerability has been resolved:

    net: add more sanity checks to qdisc_pkt_len_init() (CVE-2024-49948)

    In the Linux kernel, the following vulnerability has been resolved:

    net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: prevent nf_skb_duplicated corruption (CVE-2024-49952)

    In the Linux kernel, the following vulnerability has been resolved:

    static_call: Replace pointless WARN_ON() in static_call_module_notify() (CVE-2024-49954)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: battery: Fix possible crash when unregistering a battery hook (CVE-2024-49955)

    In the Linux kernel, the following vulnerability has been resolved:

    ocfs2: fix null-ptr-deref when journal load failed. (CVE-2024-49957)

    In the Linux kernel, the following vulnerability has been resolved:

    jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (CVE-2024-49959)

    In the Linux kernel, the following vulnerability has been resolved:

    uprobes: fix kernel info leak via [uprobes] vma (CVE-2024-49975)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (CVE-2024-49983)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (CVE-2024-50000)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Fix error path in multi-packet WQE transmit (CVE-2024-50001)

    In the Linux kernel, the following vulnerability has been resolved:

    static_call: Handle module init failure correctly in static_call_del_module() (CVE-2024-50002)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix i_data_sem unlock order in ext4_ind_migrate() (CVE-2024-50006)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix memory leak in exfat_load_bitmap() (CVE-2024-50013)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: dax: fix overflowing extents beyond inode size when partially writing (CVE-2024-50015)

    In the Linux kernel, the following vulnerability has been resolved:

    kthread: unpark only parked kthread (CVE-2024-50019)

    In the Linux kernel, the following vulnerability has been resolved:

    net: Fix an unsafe loop on the list (CVE-2024-50024)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xtables: avoid NFPROTO_UNSPEC where needed (CVE-2024-50038)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: accept TCA_STAB only for root qdisc (CVE-2024-50039)

    In the Linux kernel, the following vulnerability has been resolved:

    igb: Do not bring the device up after non-fatal error (CVE-2024-50040)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: br_netfilter: fix panic with metadata_dst skb (CVE-2024-50045)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (CVE-2024-50046)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mad: Improve handling of timed out WRs of mad agent (CVE-2024-50095)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: remove the incorrect Fw reference check when dirtying pages (CVE-2024-50179)

    In the Linux kernel, the following vulnerability has been resolved:

    net: explicitly clear the sk pointer, when pf->create fails (CVE-2024-50186)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: don't set SB_RDONLY after filesystem errors (CVE-2024-50191)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7155-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Android drivers;

    - ATM drivers;

    - Drivers core;

    - Ublk userspace block driver;

    - Bluetooth drivers;

    - Character device driver;

    - Hardware crypto device drivers;

    - Buffer Sharing and Synchronization framework;

    - DMA engine subsystem;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Miscellaneous) drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Fastrpc Driver;

    - VMware VMCI Driver;

    - MMC subsystem;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - Near Field Communication (NFC) drivers;

    - NVME drivers;

    - Device tree and open firmware driver;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI subsystem;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - Userspace I/O drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - USB over IP driver;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - Tracing file system;

    - Bitmap API;

    - BPF subsystem;

    - Memory Management;

    - Objagg library;

    - Perf events;

    - Virtio network driver;

    - VMware vSockets driver;

    - KCM (Kernel Connection Multiplexor) sockets driver;

    - Control group (cgroup);

    - DMA mapping infrastructure;

    - Locking primitives;

    - Padata parallel execution mechanism;

    - Scheduler infrastructure;

    - Tracing infrastructure;

    - Radix Tree data structure library;

    - Kernel userspace event delivery library;

    - KUnit for arithmetic overflow checks;

    - Memory management;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - Ethtool driver;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - TIPC protocol;

    - Wireless networking;

    - AppArmor security module;

    - Landlock security;

    - SELinux security module;

    - Simplified Mandatory Access Control Kernel framework;

    - FireWire sound drivers;

    - AMD SoC Alsa drivers;

    - Texas InstrumentS Audio (ASoC/HDA) drivers;

    - SoC Audio for Freescale CPUs drivers;

    - Intel ASoC drivers;

    - Amlogic Meson SoC drivers;

    - SoC audio core drivers;

    - USB sound devices;

    - Real-Time Linux Analysis tools; (CVE-2024-43845, CVE-2024-42311, CVE-2024-46757, CVE-2024-46738,     CVE-2024-44961, CVE-2024-44935, CVE-2024-46845, CVE-2024-46783, CVE-2024-42315, CVE-2023-52918,     CVE-2024-46708, CVE-2024-44934, CVE-2024-42298, CVE-2024-46786, CVE-2024-46778, CVE-2024-44960,     CVE-2024-42295, CVE-2024-43881, CVE-2024-44971, CVE-2024-43849, CVE-2024-43914, CVE-2024-44962,     CVE-2024-43841, CVE-2024-46794, CVE-2024-46752, CVE-2024-46853, CVE-2024-46861, CVE-2024-47664,     CVE-2024-46717, CVE-2024-46806, CVE-2024-46797, CVE-2024-42261, CVE-2024-46828, CVE-2024-45013,     CVE-2024-46870, CVE-2024-42258, CVE-2024-46689, CVE-2024-43818, CVE-2024-46762, CVE-2024-46825,     CVE-2024-46698, CVE-2024-46816, CVE-2024-46728, CVE-2024-46726, CVE-2024-43835, CVE-2024-45000,     CVE-2024-43850, CVE-2024-43840, CVE-2024-46846, CVE-2024-43846, CVE-2024-46725, CVE-2024-46867,     CVE-2024-42310, CVE-2024-42274, CVE-2024-46760, CVE-2024-46683, CVE-2024-42304, CVE-2024-43839,     CVE-2024-44954, CVE-2024-43895, CVE-2024-44967, CVE-2024-43889, CVE-2024-46854, CVE-2024-46860,     CVE-2024-45029, CVE-2024-44938, CVE-2024-46785, CVE-2024-46713, CVE-2024-46715, CVE-2024-46731,     CVE-2024-42297, CVE-2024-43912, CVE-2024-46751, CVE-2024-46711, CVE-2024-46695, CVE-2024-42317,     CVE-2024-44957, CVE-2024-46792, CVE-2024-45020, CVE-2024-44985, CVE-2024-46746, CVE-2024-43868,     CVE-2024-45017, CVE-2024-46824, CVE-2024-46787, CVE-2024-42288, CVE-2024-46681, CVE-2024-42306,     CVE-2024-46755, CVE-2024-46826, CVE-2024-46777, CVE-2024-46844, CVE-2024-44972, CVE-2024-43883,     CVE-2024-43909, CVE-2024-46676, CVE-2024-46798, CVE-2024-42273, CVE-2024-44990, CVE-2024-46744,     CVE-2024-42305, CVE-2024-45006, CVE-2024-42309, CVE-2024-46722, CVE-2024-44956, CVE-2024-46739,     CVE-2024-46680, CVE-2024-46765, CVE-2024-46714, CVE-2024-46771, CVE-2024-46847, CVE-2024-43879,     CVE-2024-46703, CVE-2024-46733, CVE-2024-46815, CVE-2024-46802, CVE-2024-45027, CVE-2024-42281,     CVE-2024-43891, CVE-2024-45030, CVE-2024-47662, CVE-2024-43887, CVE-2024-46836, CVE-2024-46782,     CVE-2024-46835, CVE-2024-43907, CVE-2024-46779, CVE-2024-43869, CVE-2024-43821, CVE-2024-44978,     CVE-2024-42286, CVE-2023-52889, CVE-2024-43852, CVE-2024-42320, CVE-2024-44931, CVE-2024-44993,     CVE-2024-46829, CVE-2024-46701, CVE-2024-42272, CVE-2024-47660, CVE-2024-49984, CVE-2024-44973,     CVE-2024-43817, CVE-2024-42322, CVE-2024-43830, CVE-2024-42301, CVE-2024-44969, CVE-2024-47674,     CVE-2024-46702, CVE-2024-45025, CVE-2024-46710, CVE-2024-43866, CVE-2024-46718, CVE-2024-46773,     CVE-2024-43834, CVE-2024-46754, CVE-2024-46871, CVE-2024-44942, CVE-2024-43913, CVE-2024-46818,     CVE-2024-42318, CVE-2024-43831, CVE-2024-43832, CVE-2024-43908, CVE-2024-43827, CVE-2024-46737,     CVE-2024-47665, CVE-2024-43854, CVE-2024-46707, CVE-2024-42303, CVE-2024-43860, CVE-2024-43824,     CVE-2024-45019, CVE-2024-44984, CVE-2024-46813, CVE-2024-45022, CVE-2024-44970, CVE-2024-46791,     CVE-2024-45012, CVE-2024-43829, CVE-2024-46850, CVE-2024-44987, CVE-2024-44940, CVE-2024-43864,     CVE-2024-46723, CVE-2024-44999, CVE-2024-43884, CVE-2024-42287, CVE-2024-46675, CVE-2024-44974,     CVE-2024-46721, CVE-2024-44937, CVE-2024-45008, CVE-2024-43853, CVE-2024-46697, CVE-2024-43899,     CVE-2024-43823, CVE-2024-46747, CVE-2024-45007, CVE-2024-46822, CVE-2024-42262, CVE-2024-47661,     CVE-2024-44953, CVE-2024-46859, CVE-2024-46694, CVE-2024-42279, CVE-2024-43873, CVE-2024-43828,     CVE-2024-46851, CVE-2024-42296, CVE-2024-46719, CVE-2024-46677, CVE-2024-42259, CVE-2024-44941,     CVE-2024-44946, CVE-2024-46745, CVE-2024-42299, CVE-2024-46724, CVE-2024-46749, CVE-2024-46706,     CVE-2024-42267, CVE-2024-46774, CVE-2024-46685, CVE-2024-42292, CVE-2024-47667, CVE-2024-42319,     CVE-2024-43888, CVE-2024-46729, CVE-2024-44947, CVE-2024-45003, CVE-2024-46827, CVE-2024-46693,     CVE-2024-46705, CVE-2024-46767, CVE-2024-46838, CVE-2024-46805, CVE-2024-43904, CVE-2024-43906,     CVE-2024-42265, CVE-2024-42278, CVE-2024-46750, CVE-2024-46692, CVE-2024-43847, CVE-2024-44995,     CVE-2024-43825, CVE-2024-46803, CVE-2024-47669, CVE-2024-46830, CVE-2024-46784, CVE-2024-46840,     CVE-2024-44939, CVE-2024-46848, CVE-2024-42313, CVE-2024-46823, CVE-2024-44989, CVE-2024-42270,     CVE-2024-43856, CVE-2024-46716, CVE-2024-43859, CVE-2024-46841, CVE-2024-47658, CVE-2024-46811,     CVE-2024-45028, CVE-2024-46781, CVE-2024-42290, CVE-2024-44991, CVE-2024-43894, CVE-2024-44979,     CVE-2024-46804, CVE-2024-43826, CVE-2024-43877, CVE-2024-42284, CVE-2024-43876, CVE-2024-45011,     CVE-2024-43819, CVE-2024-46709, CVE-2024-43867, CVE-2024-44963, CVE-2024-45010, CVE-2024-46753,     CVE-2024-46759, CVE-2024-43880, CVE-2024-44977, CVE-2024-46772, CVE-2024-44950, CVE-2024-46687,     CVE-2024-46834, CVE-2024-43911, CVE-2024-45015, CVE-2024-46819, CVE-2024-43875, CVE-2024-44996,     CVE-2024-44988, CVE-2024-46673, CVE-2024-44943, CVE-2024-42316, CVE-2024-47683, CVE-2024-42307,     CVE-2024-46788, CVE-2024-43892, CVE-2024-47659, CVE-2024-46857, CVE-2024-43820, CVE-2024-46832,     CVE-2024-42312, CVE-2024-43910, CVE-2024-43886, CVE-2024-43905, CVE-2024-46766, CVE-2024-42263,     CVE-2024-46821, CVE-2024-43842, CVE-2024-43857, CVE-2024-42276, CVE-2024-42268, CVE-2024-46740,     CVE-2024-46843, CVE-2024-46807, CVE-2024-46780, CVE-2024-46678, CVE-2024-44944, CVE-2024-42264,     CVE-2024-43863, CVE-2024-39472, CVE-2024-46691, CVE-2024-44959, CVE-2024-44958, CVE-2024-46679,     CVE-2024-43843, CVE-2024-43900, CVE-2024-45021, CVE-2024-44982, CVE-2024-46793, CVE-2024-42260,     CVE-2024-43890, CVE-2024-43871, CVE-2024-42269, CVE-2024-42277, CVE-2024-46720, CVE-2024-45005,     CVE-2024-46727, CVE-2024-46808, CVE-2024-46852, CVE-2024-47668, CVE-2024-42321, CVE-2024-46743,     CVE-2024-45002, CVE-2024-46763, CVE-2024-46817, CVE-2024-42285, CVE-2024-46770, CVE-2024-45026,     CVE-2024-46768, CVE-2024-42314, CVE-2024-42291, CVE-2024-46756, CVE-2024-42283, CVE-2024-45018,     CVE-2024-44966, CVE-2024-42289, CVE-2024-42294, CVE-2024-46814, CVE-2024-44986, CVE-2024-43870,     CVE-2024-44980, CVE-2024-43902, CVE-2024-47666, CVE-2024-46864, CVE-2024-46761, CVE-2024-46831,     CVE-2024-46758, CVE-2024-46735, CVE-2024-46858, CVE-2024-46795, CVE-2024-46810, CVE-2024-46849,     CVE-2024-46775, CVE-2024-46868, CVE-2024-46809, CVE-2024-46776, CVE-2024-46866, CVE-2024-44983,     CVE-2024-46741, CVE-2024-43837, CVE-2024-43833, CVE-2024-46672, CVE-2024-43861, CVE-2024-42302,     CVE-2024-47663, CVE-2024-46812, CVE-2024-43893, CVE-2024-46686, CVE-2024-44948, CVE-2024-46732,     CVE-2024-44965, CVE-2024-46855, CVE-2024-45009, CVE-2024-46842, CVE-2024-46730, CVE-2024-44975,     CVE-2024-44998)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9050:39 advisory.

    kernel: media: edia: dvbdev: fix a use-after-free (CVE-2024-27043)         kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout     (CVE-2024-27399)         kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in     BPF_LINK_CREATE (CVE-2024-38564)         kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9508:43 advisory.

    * kernel: net: nexthop: Initialize all fields in dumped nexthops (CVE-2024-42283)
      * kernel: iommufd: Require drivers to supply the cache_invalidate_user ops (CVE-2024-46824)
      * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013399 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: pm: Fix uaf in __timer_delete_sync

    There are two paths to access mptcp_pm_del_add_timer, result in a race     condition:

         CPU1                               CPU2          ====                               ====          net_rx_action          napi_poll                          netlink_sendmsg
         __napi_poll                        netlink_unicast          process_backlog                    netlink_unicast_kernel
         __netif_receive_skb                genl_rcv
         __netif_receive_skb_one_core       netlink_rcv_skb          NF_HOOK                            genl_rcv_msg          ip_local_deliver_finish            genl_family_rcv_msg          ip_protocol_deliver_rcu            genl_family_rcv_msg_doit          tcp_v4_rcv                         mptcp_pm_nl_flush_addrs_doit          tcp_v4_do_rcv                      mptcp_nl_remove_addrs_list          tcp_rcv_established                mptcp_pm_remove_addrs_and_subflows          tcp_data_queue                     remove_anno_list_by_saddr          mptcp_incoming_options             mptcp_pm_del_add_timer          mptcp_pm_del_add_timer             kfree(entry)

    In remove_anno_list_by_saddr(running on CPU2), after leaving the critical     zone protected by pm.lock, the entry will be released, which leads to the     occurrence of uaf in the mptcp_pm_del_add_timer(running on CPU1).

    Keeping a reference to add_timer inside the lock, and calling     sk_stop_timer_sync() with this reference, instead of entry->add_timer.

    Move list_del(&entry->list) to mptcp_pm_del_add_timer and inside the pm lock,     do not directly access any members of the entry outside the pm lock, which     can avoid similar entry->x uaf.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10281 advisory.

    * kernel: media: edia: dvbdev: fix a use-after-free (CVE-2024-27043)

    * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399)

    * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)

    * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0564-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security     bugfixes.


    The following security bugs were fixed:

    - CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
    - CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
    - CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
    - CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
    - CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset     (bsc#1233028).
    - CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum()     (bsc#1233248).
    - CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
    - CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
    - CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
    - CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
    - CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
    - CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
    - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
    - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
    - CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
    - CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
    - CVE-2024-56633: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (bsc#1235485).
    - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
    - CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
    - CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
    - CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
    - CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
    - CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
    - CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
    - CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
    - CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
    - CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
    - CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
    - CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
    - CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
    - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
    - CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()     (bsc#1235948).
    - CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
    - CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
    - CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
    - CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
    - CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
    - CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
    - CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
    - CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
    - CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
    - CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
    - CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
    - CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
    - CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
    - CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
    - CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
    - CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
    - CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
    - CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
    - CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
    - CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
    - CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
    - CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9498 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)

    * kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)

    * kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)

    * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (CVE-2024-26772)

    * kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)

    * kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)

    * kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (CVE-2024-31076)

    * kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)

    * kernel: firmware: cs_dsp: Fix overflow checking of wmfw header (CVE-2024-41039)

    * kernel: net/iucv: fix use after free in iucv_sock_close() (CVE-2024-42271)

    * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9546 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)

    * kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (CVE-2024-26772)

    * kernel: net: bridge: switchdev: Skip MDB replays of deferred events on offload (CVE-2024-26837)

    * kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)

    * kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)

    * kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984)

    * kernel: drm/client: Fully protect modes[] with dev->mode_config.mutex (CVE-2024-35950)

    * kernel: spi: Fix null dereference on suspend (CVE-2023-52749)

    * kernel: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (CVE-2024-38596)

    * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)

    * kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (CVE-2024-31076)

    * kernel: drm/i915/dpt: Make DPT object unshrinkable (CVE-2024-40924)

    * kernel: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (CVE-2024-40956)

    * kernel: drm/radeon: fix UBSAN warning in kv_dpm.c (CVE-2024-40988)

    * kernel: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CVE-2024-40901)

    * kernel: sched/deadline: Fix task_struct reference leak (CVE-2024-41023)

    * kernel: drm/radeon: check bo_va->bo is non-NULL before using it (CVE-2024-41060)

    * kernel: ibmvnic: Add tx check to prevent skb leak (CVE-2024-41066)

    * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
216460	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:0577-1)	Nessus	SuSE Local Security Checks	2025/2/19	2026/6/26	high
210067	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2024-056 (ALASKERNEL-5.15-2024-056)	Nessus	Amazon Linux Local Security Checks	2024/11/1	2026/2/26	critical
212723	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-7155-1)	Nessus	Ubuntu Local Security Checks	2024/12/12	2026/6/3	high
291994	MiracleLinux 8 : kernel-4.18.0-553.30.1.el8_10 (AXSA:2024-9050:39)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293168	MiracleLinux 9 : kernel-5.14.0-503.14.1.el9_5 (AXSA:2024-9508:43)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
309173	Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-013399)	Nessus	Unity Linux Local Security Checks	2026/4/22	2026/4/22	high
213222	RockyLinux 8 : kernel:4.18.0 (RLSA-2024:10281)	Nessus	Rocky Linux Local Security Checks	2024/12/19	2025/1/15	high
216456	SUSE SLES15: kernel-coco / kernel-coco-devel / kernel-coco_debug / etc (SUSE-SU-2025:0564-1)	Nessus	SuSE Local Security Checks	2025/2/19	2026/6/26	high
276179	TencentOS Server 4: kernel (TSSA-2025:0046)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	high
213470	Debian dla-4008 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	2025/1/3	2026/2/9	critical
210887	RHEL 9 : kernel-rt (RHSA-2024:9498)	Nessus	Red Hat Local Security Checks	2024/11/13	2024/11/13	high
232850	RHEL 9 : kernel (RHSA-2024:9546)	Nessus	Red Hat Local Security Checks	2025/3/19	2025/3/19	high

检测

插件搜索

high

critical

high

high

high

high

high

high

high

critical

high

high