The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02333-1 advisory.

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
    - CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg     (bsc#1235728).
    - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
    - CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()     (bsc#1237895).
    - CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
    - CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
    - CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
    - CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
    - CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
    - CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
    - CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
    - CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()     (bsc#1240814).
    - CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
    - CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching     (bsc#1241544).
    - CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
    - CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
    - CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
    - CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
    - CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
    - CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
    - CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
    - CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
    - CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
    - CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
    - CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
    - CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
    - CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
    - CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
    - CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported     (bsc#1242954).
    - CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
    - CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
    - CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
    - CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
    - CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
    - CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
    - CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
    - CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
    - CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
    - CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
    - CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY     (bsc#1243538).
    - CVE-2025-37954: smb: client: Avoid race in open_cached_dir with lease breaks (bsc#1243664).
    - CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
    - CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
    - CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access (bsc#1243571).
    - CVE-2025-37987: pds_core: Prevent possible adminq overflow/stuck condition (bsc#1243542).
    - CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
    - CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
    - CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
    - CVE-2025-37998: openvswitch: Fix unsafe attribute parsing in output_userspace() (bsc#1243836).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
    - CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
    - CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
    - CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
    - CVE-2025-38055: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (bsc#1244747).
    - CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
    - CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
    - CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20480 advisory.

    - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug: 38178286]     {CVE-2025-38089}
    - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38023239]  {CVE-2024-36350} {CVE-2024-36357}
    - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38023239]     {CVE-2024-36350} {CVE-2024-36357}
    - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38023239]  {CVE-2024-36350} {CVE-2024-36357}
    - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38023239]     {CVE-2024-36350} {CVE-2024-36357}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38023239]     {CVE-2024-36350} {CVE-2024-36357}
    - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38023239]     {CVE-2024-36350} {CVE-2024-36357}
    - block: fix adding folio to bio (Ming Lei) [Orabug: 37844657] {CVE-2025-22122}
    - f2fs: fix to avoid accessing uninitialized curseg (Chao Yu) [Orabug: 37844644] {CVE-2025-22123}
    - gpio: virtuser: fix potential out-of-bound write (Markus Burri) [Orabug: 38095181] {CVE-2025-38082}
    - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [Orabug:
    38049363] {CVE-2025-38001}
    - smb: client: Fix use-after-free in cifs_fill_dirent (Zhaolong Wang) [Orabug: 38094970] {CVE-2025-38051}
    - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Vladimir Moskovkin)     [Orabug: 38095141] {CVE-2025-38077}
    - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [Orabug: 38095145] {CVE-2025-38078}
    - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [Orabug: 38049369]     {CVE-2025-38003}
    - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 38049374] {CVE-2025-38004}
    - padata: do not leak refcount in reorder_work (Dominik Grzegorzek) [Orabug: 38094842] {CVE-2025-38031}
    - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [Orabug: 38095153] {CVE-2025-38079}
    - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Wang Liang) [Orabug: 38094978]     {CVE-2025-38052}
    - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [Orabug: 38049357]     {CVE-2025-38000}
    - idpf: fix null-ptr-deref in idpf_features_check (Pavan Kumar Linga) [Orabug: 38094982] {CVE-2025-38053}
    - ptp: ocp: Limit signal/freq counts in summary output functions (Sagi Maimon) [Orabug: 38094984]     {CVE-2025-38054}
    - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Adrian Hunter) [Orabug: 38094988]     {CVE-2025-38055}
    - ASoC: SOF: Intel: hda: Fix UAF when reloading module (Tavian Barnes) [Orabug: 38094991] {CVE-2025-38056}
    - espintcp: fix skb leaks (Sabrina Dubroca) [Orabug: 38094993] {CVE-2025-38057}
    - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [Orabug: 38095000]     {CVE-2025-38058}
    - x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 (Pawel Anikiel) [Orabug: 38094847]     {CVE-2025-38033}
    - btrfs: avoid NULL pointer dereference if no valid csum tree (Qu Wenruo) [Orabug: 38095010]     {CVE-2025-38059}
    - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [Orabug:
    38094856] {CVE-2025-38034}
    - nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [Orabug: 38094863] {CVE-2025-38035}
    - vxlan: Annotate FDB data races (Ido Schimmel) [Orabug: 38094879] {CVE-2025-38037}
    - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Dhananjay Ugwekar) [Orabug: 38094888]     {CVE-2025-38038}
    - drm/amd/display: Increase block_sequence array size (Joshua Aberback) [Orabug: 38095164]     {CVE-2025-38080}
    - bpf: copy_verifier_state() should copy 'loop_entry' field (Eduard Zingerman) [Orabug: 38095018]     {CVE-2025-38060}
    - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (Alexis Lothore) [Orabug: 38094901]     {CVE-2025-38040}
    - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [Orabug:
    38095024] {CVE-2025-38061}
    - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jason Gunthorpe) [Orabug:
    38095031] {CVE-2025-38062}
    - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Jinliang Zheng) [Orabug: 38095038]     {CVE-2025-38063}
    - firmware: arm_ffa: Set dma_mask for ffa devices (Viresh Kumar) [Orabug: 38094925] {CVE-2025-38043}
    - media: cx231xx: set device_caps for 417 (Hans Verkuil) [Orabug: 38094934] {CVE-2025-38044}
    - orangefs: Do not truncate file size (Matthew Wilcox) [Orabug: 38095056] {CVE-2025-38065}
    - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [Orabug:
    38095063] {CVE-2025-38066}
    - crypto: lzo - Fix compression buffer overrun (Herbert Xu) [Orabug: 38095079] {CVE-2025-38068}
    - PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops (Christian Bruel) [Orabug:
    38095087] {CVE-2025-38069}
    - wifi: iwlwifi: fix debug actions order (Johannes Berg) [Orabug: 38094942] {CVE-2025-38045}
    - x86/mm: Check return value from memblock_phys_alloc_range() (Philip Redkin) [Orabug: 38095101]     {CVE-2025-38071}
    - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [Orabug: 38095109]     {CVE-2025-38072}
    - spi-rockchip: Fix register out of bounds access (Luis de Arquer) [Orabug: 38095173] {CVE-2025-38081}
    - x86/fred: Fix system hang during S4 resume with FRED enabled (Xin Li) [Orabug: 38094951]     {CVE-2025-38047}
    - block: fix race between set_blocksize and read paths (Darrick J. Wong) [Orabug: 38095117]     {CVE-2025-38073}
    - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN (Zhongqiu Han) [Orabug:
    38094958] {CVE-2025-38048}
    - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [Orabug: 38095134]     {CVE-2025-38075}
    - usb: typec: ucsi: displayport: Fix deadlock (Andrei Kuchynski) [Orabug: 37977018] {CVE-2025-37967}
    - Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [Orabug: 37844459]     {CVE-2025-22102}
    - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug: 37977026]     {CVE-2025-37968}
    - mm/page_alloc: fix race condition in unaccepted memory handling (Kirill A. Shutemov) [Orabug: 38094767]     {CVE-2025-38008}
    - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Shuai Xue) [Orabug: 38094790]     {CVE-2025-38014}
    - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Shuai Xue) [Orabug: 38094793]     {CVE-2025-38015}
    - dmaengine: ti: k3-udma: Add missing locking (Ronald Wahl) [Orabug: 38094756] {CVE-2025-38005}
    - wifi: mt76: disable napi on driver removal (Fedor Pchelkin) [Orabug: 38094770] {CVE-2025-38009}
    - phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (Wayne Chang) [Orabug: 38094777]     {CVE-2025-38010}
    - drm/amdgpu: csa unmap use uninterruptible lock (Philip Yang) [Orabug: 38094779] {CVE-2025-38011}
    - HID: bpf: abort dispatch if device destroyed (Rongrong) [Orabug: 38094796] {CVE-2025-38016}
    - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Tejun Heo) [Orabug: 38094786]     {CVE-2025-38012}
    - net/tls: fix kernel panic when alloc_page failed (Pengtao He) [Orabug: 38094802] {CVE-2025-38018}
    - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ido Schimmel) [Orabug:
    38094804] {CVE-2025-38019}
    - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request (Kees Cook) [Orabug:
    38094788] {CVE-2025-38013}
    - regulator: max20086: fix invalid memory access (Cosmin Tanislav) [Orabug: 38094833] {CVE-2025-38027}
    - net/mlx5e: Disable MACsec offload for uplink representor profile (Carolina Jubran) [Orabug: 38094808]     {CVE-2025-38020}
    - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [Orabug: 37998128] {CVE-2025-37992}
    - RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (Zhu Yanjun) [Orabug:
    38094813] {CVE-2025-38022}
    - nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094818]     {CVE-2025-38023}
    - HID: uclogic: Add NULL check in uclogic_input_configured() (Henry Martin) [Orabug: 38094764]     {CVE-2025-38007}
    - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094827]     {CVE-2025-38024}
    - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (James Morse) [Orabug: 37977004]     {CVE-2025-37963}
    - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (James Morse) [Orabug: 37976926]     {CVE-2025-37948}
    - usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015126]     {CVE-2025-37994}
    - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug: 38015131]     {CVE-2025-37995}
    - memblock: Accept allocated memory before use in memblock_double_array() (Tom Lendacky) [Orabug:
    37976994] {CVE-2025-37960}
    - xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976934] {CVE-2025-37949}
    - smb: client: Avoid race in open_cached_dir with lease breaks (Paul Aurich) [Orabug: 37976959]     {CVE-2025-37954}
    - drm/amd/display: Fix invalid context error in dml helper (Roman Li) [Orabug: 37977185] {CVE-2025-37965}
    - drm/v3d: Add job to pending list if the reset was skipped (Maira Canal) [Orabug: 37976942]     {CVE-2025-37951}
    - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug:
    37977031] {CVE-2025-37969}
    - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug: 37977037]     {CVE-2025-37970}
    - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Mikhail Lobanov) [Orabug: 37976977]     {CVE-2025-37957}
    - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976982]     {CVE-2025-37958}
    - x86/mm: Eliminate window where TLB flushes may be inadvertently skipped (Dave Hansen) [Orabug: 37977013]     {CVE-2025-37964}
    - staging: bcm2835-camera: Initialise dev in v4l2_dev (Dave Stevenson) [Orabug: 37977042] {CVE-2025-37971}
    - Input: mtk-pmic-keys - fix possible null pointer dereference (Gary Bisson) [Orabug: 37977044]     {CVE-2025-37972}
    - bpf: Scrub packet on bpf_redirect_peer (Paul Chaignon) [Orabug: 37976990] {CVE-2025-37959}
    - netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015141]     {CVE-2025-37997}
    - ipvs: fix uninit-value for saddr in do_output_route4 (Julian Anastasov) [Orabug: 37976996]     {CVE-2025-37961}
    - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Antonios Salios) [Orabug:
    38015123] {CVE-2025-37993}
    - virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() (Jakub Kicinski) [Orabug: 37976969]     {CVE-2025-37955}
    - sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 37977176] {CVE-2025-37953}
    - ksmbd: fix memory leak in parse_lease_state() (Zhaolong Wang) [Orabug: 37977180] {CVE-2025-37962}
    - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug: 38015148]     {CVE-2025-37998}
    - ksmbd: Fix UAF in __close_file_table_ids (Sean Heelan) [Orabug: 37976951] {CVE-2025-37952}
    - ksmbd: prevent out-of-bounds stream writes by validating *pos (Norbert Szetei) [Orabug: 37976923]     {CVE-2025-37947}
    - ksmbd: prevent rename with empty string (Namjae Jeon) [Orabug: 37976972] {CVE-2025-37956}
    - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Niklas Schnelle) [Orabug:
    37976920] {CVE-2025-37946}
    - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (Veerendranath     Jakkam) [Orabug: 37977046] {CVE-2025-37973}
    - s390/pci: Fix missing check for zpci_create_device() error return (Niklas Schnelle) [Orabug: 37977050]     {CVE-2025-37974}
    - fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() (Max Kellermann) [Orabug:
    38015155] {CVE-2025-37999}
    - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [Orabug:
    37964051,38037120] {CVE-2025-37866}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8669 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: vsock/virtio: discard packets if the transport changes (CVE-2025-21669)

    * kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)

    * kernel: xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997)

    * kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055)

    * kernel: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8669 advisory.

    [6.12.0-55.19.1.0.1_0.OL10]
    - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
    - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
    - Disable UKI signing [Orabug: 36571828]
    - Update Oracle Linux certificates (Kevin Lyons)
    - Disable signing for aarch64 (Ilya Okomin)
    - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem)     [Orabug: 29539237]
    - Update x509.genkey [Orabug: 24817676]
    - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
    - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
    - Add Oracle Linux IMA certificates
    - Update module name for cryptographic module [Orabug: 37400433]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10584:46 advisory.

    kernel: net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)         kernel: vlan: enforce underlying device type (CVE-2025-21920)         kernel: xsk: fix an integer overflow in xp_create_and_assign_umem()     (CVE-2025-21997)         kernel: net: fix geneve_opt length integer overflow (CVE-2025-22055)         kernel: ext4: fix OOB read when checking dotdot dir (CVE-2025-37785)         kernel: wifi: ath12k: Fix invalid data access in     ath12k_dp_rx_h_undecap_nwifi (CVE-2025-37943)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4193 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4193-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     May 30, 2025                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.137-1~deb11u1     CVE ID         : CVE-2023-52857 CVE-2023-52927 CVE-2023-53034 CVE-2024-24855                      CVE-2024-26656 CVE-2024-26739 CVE-2024-26767 CVE-2024-26982                      CVE-2024-27056 CVE-2024-35866 CVE-2024-36908 CVE-2024-38541                      CVE-2024-38611 CVE-2024-40973 CVE-2024-42129 CVE-2024-43831                      CVE-2024-46733 CVE-2024-46742 CVE-2024-46753 CVE-2024-46772                      CVE-2024-46774 CVE-2024-46816 CVE-2024-46823 CVE-2024-47753                      CVE-2024-47754 CVE-2024-50056 CVE-2024-50063 CVE-2024-50246                      CVE-2024-53166 CVE-2024-56609 CVE-2024-57977 CVE-2024-58002                      CVE-2024-58005 CVE-2024-58079 CVE-2024-58090 CVE-2025-21702                      CVE-2025-21712 CVE-2025-21721 CVE-2025-21756 CVE-2025-21838                      CVE-2025-21844 CVE-2025-21846 CVE-2025-21848 CVE-2025-21853                      CVE-2025-21855 CVE-2025-21858 CVE-2025-21859 CVE-2025-21862                      CVE-2025-21864 CVE-2025-21865 CVE-2025-21866 CVE-2025-21867                      CVE-2025-21871 CVE-2025-21875 CVE-2025-21877 CVE-2025-21878                      CVE-2025-21881 CVE-2025-21887 CVE-2025-21891 CVE-2025-21898                      CVE-2025-21899 CVE-2025-21904 CVE-2025-21905 CVE-2025-21909                      CVE-2025-21910 CVE-2025-21912 CVE-2025-21913 CVE-2025-21914                      CVE-2025-21916 CVE-2025-21917 CVE-2025-21918 CVE-2025-21919                      CVE-2025-21920 CVE-2025-21922 CVE-2025-21924 CVE-2025-21925                      CVE-2025-21926 CVE-2025-21928 CVE-2025-21934 CVE-2025-21935                      CVE-2025-21936 CVE-2025-21937 CVE-2025-21938 CVE-2025-21941                      CVE-2025-21943 CVE-2025-21944 CVE-2025-21945 CVE-2025-21947                      CVE-2025-21948 CVE-2025-21950 CVE-2025-21951 CVE-2025-21956                      CVE-2025-21957 CVE-2025-21959 CVE-2025-21960 CVE-2025-21962                      CVE-2025-21963 CVE-2025-21964 CVE-2025-21968 CVE-2025-21970                      CVE-2025-21971 CVE-2025-21975 CVE-2025-21978 CVE-2025-21979                      CVE-2025-21980 CVE-2025-21981 CVE-2025-21986 CVE-2025-21991                      CVE-2025-21992 CVE-2025-21993 CVE-2025-21994 CVE-2025-21996                      CVE-2025-21997 CVE-2025-21999 CVE-2025-22004 CVE-2025-22005                      CVE-2025-22007 CVE-2025-22008 CVE-2025-22010 CVE-2025-22014                      CVE-2025-22015 CVE-2025-22018 CVE-2025-22020 CVE-2025-22021                      CVE-2025-22025 CVE-2025-22027 CVE-2025-22033 CVE-2025-22035                      CVE-2025-22038 CVE-2025-22040 CVE-2025-22041 CVE-2025-22042                      CVE-2025-22044 CVE-2025-22045 CVE-2025-22049 CVE-2025-22050                      CVE-2025-22054 CVE-2025-22055 CVE-2025-22056 CVE-2025-22058                      CVE-2025-22060 CVE-2025-22063 CVE-2025-22066 CVE-2025-22071                      CVE-2025-22072 CVE-2025-22073 CVE-2025-22075 CVE-2025-22079                      CVE-2025-22081 CVE-2025-22086 CVE-2025-22088 CVE-2025-22089                      CVE-2025-22093 CVE-2025-22095 CVE-2025-22097 CVE-2025-22126                      CVE-2025-23136 CVE-2025-23138 CVE-2025-23140 CVE-2025-23141                      CVE-2025-23142 CVE-2025-23144 CVE-2025-23145 CVE-2025-23146                      CVE-2025-23147 CVE-2025-23148 CVE-2025-23150 CVE-2025-23151                      CVE-2025-23156 CVE-2025-23157 CVE-2025-23158 CVE-2025-23159                      CVE-2025-23161 CVE-2025-23163 CVE-2025-37738 CVE-2025-37739                      CVE-2025-37740 CVE-2025-37741 CVE-2025-37742 CVE-2025-37748                      CVE-2025-37749 CVE-2025-37752 CVE-2025-37756 CVE-2025-37757                      CVE-2025-37758 CVE-2025-37765 CVE-2025-37766 CVE-2025-37767                      CVE-2025-37768 CVE-2025-37769 CVE-2025-37770 CVE-2025-37771                      CVE-2025-37772 CVE-2025-37773 CVE-2025-37775 CVE-2025-37778                      CVE-2025-37780 CVE-2025-37781 CVE-2025-37782 CVE-2025-37785                      CVE-2025-37787 CVE-2025-37788 CVE-2025-37789 CVE-2025-37790                      CVE-2025-37792 CVE-2025-37794 CVE-2025-37796 CVE-2025-37797                      CVE-2025-37798 CVE-2025-37801 CVE-2025-37803 CVE-2025-37805                      CVE-2025-37808 CVE-2025-37810 CVE-2025-37811 CVE-2025-37812                      CVE-2025-37815 CVE-2025-37817 CVE-2025-37818 CVE-2025-37820                      CVE-2025-37823 CVE-2025-37824 CVE-2025-37829 CVE-2025-37830                      CVE-2025-37836 CVE-2025-37838 CVE-2025-37839 CVE-2025-37840                      CVE-2025-37841 CVE-2025-37844 CVE-2025-37849 CVE-2025-37850                      CVE-2025-37851 CVE-2025-37852 CVE-2025-37854 CVE-2025-37857                      CVE-2025-37858 CVE-2025-37859 CVE-2025-37862 CVE-2025-37865                      CVE-2025-37867 CVE-2025-37871 CVE-2025-37875 CVE-2025-37879                      CVE-2025-37881 CVE-2025-37883 CVE-2025-37884 CVE-2025-37885                      CVE-2025-37889 CVE-2025-37892 CVE-2025-37937 CVE-2025-37938                      CVE-2025-37940 CVE-2025-37979 CVE-2025-37982 CVE-2025-37983                      CVE-2025-37985 CVE-2025-37989 CVE-2025-38152 CVE-2025-38575                      CVE-2025-38637 CVE-2025-39728 CVE-2025-39735     Debian Bug     : 1050352 1086175 1088682 1100746 1100928 1103277

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.137-1~deb11u1.  This additionally includes many more bug fixes     from stable updates 6.1.130-6.1.137 and an update of the Microsoft     Azure Network Adapter (mana) driver.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7765-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - Bus devices;

    - AMD CDX bus driver;

    - DPLL subsystem;

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Network drivers;

    - Mellanox network drivers;

    - NVME drivers;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - Network file system (NFS) client;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Scheduler infrastructure;

    - SoC audio core drivers;

    - Perf events;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - Netfilter;

    - Network traffic control;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path; (CVE-2025-21980, CVE-2025-21999, CVE-2025-21991, CVE-2025-21937, CVE-2025-22016,     CVE-2025-21920, CVE-2025-21979, CVE-2025-21919, CVE-2025-21969, CVE-2025-21872, CVE-2025-21996,     CVE-2025-21927, CVE-2025-21904, CVE-2025-22013, CVE-2025-21928, CVE-2025-21891, CVE-2025-21889,     CVE-2025-21972, CVE-2025-21981, CVE-2025-38569, CVE-2025-21910, CVE-2025-21945, CVE-2025-22011,     CVE-2025-21916, CVE-2025-21924, CVE-2025-21922, CVE-2025-21975, CVE-2025-21880, CVE-2025-21995,     CVE-2025-21977, CVE-2025-21947, CVE-2025-21914, CVE-2025-21905, CVE-2025-22009, CVE-2025-21892,     CVE-2025-22005, CVE-2024-58090, CVE-2025-21926, CVE-2025-37889, CVE-2025-21966, CVE-2025-21955,     CVE-2025-22007, CVE-2025-21894, CVE-2025-21909, CVE-2025-21883, CVE-2025-21992, CVE-2025-21976,     CVE-2025-21890, CVE-2025-21898, CVE-2025-21982, CVE-2025-21877, CVE-2025-21925, CVE-2025-21970,     CVE-2025-21930, CVE-2025-21946, CVE-2025-22017, CVE-2025-21908, CVE-2025-21944, CVE-2025-21885,     CVE-2025-22010, CVE-2025-21917, CVE-2025-21918, CVE-2025-21934, CVE-2025-21950, CVE-2025-21963,     CVE-2025-22003, CVE-2025-21961, CVE-2025-21967, CVE-2025-21878, CVE-2025-21895, CVE-2025-21913,     CVE-2025-21875, CVE-2025-21959, CVE-2025-22008, CVE-2025-21968, CVE-2025-21936, CVE-2025-21956,     CVE-2025-21903, CVE-2025-22004, CVE-2025-21986, CVE-2025-21915, CVE-2025-21964, CVE-2025-22014,     CVE-2025-21994, CVE-2025-21912, CVE-2025-21873, CVE-2025-21957, CVE-2025-22015, CVE-2025-21997,     CVE-2025-21948, CVE-2025-21951, CVE-2025-21962, CVE-2025-22001, CVE-2025-21978, CVE-2025-21960,     CVE-2025-22047, CVE-2025-21935, CVE-2025-21899, CVE-2025-21911, CVE-2025-21881, CVE-2025-21929,     CVE-2025-21941)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02254-1 advisory.

    The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
    - CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg     (bsc#1235728).
    - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
    - CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()     (bsc#1237895).
    - CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
    - CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
    - CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
    - CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
    - CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
    - CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
    - CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
    - CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()     (bsc#1240814).
    - CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
    - CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching     (bsc#1241544).
    - CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
    - CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
    - CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
    - CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
    - CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
    - CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
    - CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
    - CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
    - CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
    - CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
    - CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
    - CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
    - CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
    - CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
    - CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported     (bsc#1242954).
    - CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
    - CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
    - CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
    - CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
    - CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
    - CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
    - CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
    - CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
    - CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
    - CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
    - CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY     (bsc#1243538).
    - CVE-2025-37954: smb: client: Avoid race in open_cached_dir with lease breaks (bsc#1243664).
    - CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
    - CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
    - CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access (bsc#1243571).
    - CVE-2025-37987: pds_core: Prevent possible adminq overflow/stuck condition (bsc#1243542).
    - CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
    - CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
    - CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
    - CVE-2025-37998: openvswitch: Fix unsafe attribute parsing in output_userspace() (bsc#1243836).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
    - CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
    - CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
    - CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
    - CVE-2025-38055: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (bsc#1244747).
    - CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
    - CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
    - CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02335-1 advisory.

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
    - CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg     (bsc#1235728).
    - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
    - CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
    - CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
    - CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
    - CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
    - CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
    - CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
    - CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
    - CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()     (bsc#1240814).
    - CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
    - CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching     (bsc#1241544).
    - CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
    - CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
    - CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
    - CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
    - CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
    - CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
    - CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
    - CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
    - CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
    - CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
    - CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
    - CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
    - CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
    - CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported     (bsc#1242954).
    - CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
    - CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
    - CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
    - CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
    - CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
    - CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
    - CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
    - CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
    - CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
    - CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
    - CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY     (bsc#1243538).
    - CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
    - CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
    - CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access (bsc#1243571).
    - CVE-2025-37987: pds_core: Prevent possible adminq overflow/stuck condition (bsc#1243542).
    - CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
    - CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
    - CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
    - CVE-2025-37998: openvswitch: Fix unsafe attribute parsing in output_userspace() (bsc#1243836).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
    - CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
    - CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
    - CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
    - CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
    - CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
    - CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7790-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - Bus devices;

    - AMD CDX bus driver;

    - DPLL subsystem;

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Network drivers;

    - Mellanox network drivers;

    - NVME drivers;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - Network file system (NFS) client;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Scheduler infrastructure;

    - SoC audio core drivers;

    - Perf events;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - Netfilter;

    - Network traffic control;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path; (CVE-2025-21944, CVE-2025-21927, CVE-2025-21996, CVE-2025-21928, CVE-2025-21888,     CVE-2025-21995, CVE-2025-21929, CVE-2025-21873, CVE-2025-21875, CVE-2025-21894, CVE-2025-21878,     CVE-2025-21977, CVE-2024-58090, CVE-2025-21872, CVE-2025-21905, CVE-2025-21963, CVE-2025-21991,     CVE-2025-21947, CVE-2025-21924, CVE-2025-21899, CVE-2025-21992, CVE-2025-21909, CVE-2025-21920,     CVE-2025-21917, CVE-2025-21972, CVE-2025-21997, CVE-2025-21999, CVE-2025-21895, CVE-2025-22013,     CVE-2025-21936, CVE-2025-21881, CVE-2025-21956, CVE-2025-22010, CVE-2025-22015, CVE-2025-21959,     CVE-2025-21980, CVE-2025-22017, CVE-2025-22005, CVE-2025-21935, CVE-2025-21911, CVE-2025-21914,     CVE-2025-22001, CVE-2025-21913, CVE-2025-22007, CVE-2025-21966, CVE-2025-21962, CVE-2025-21908,     CVE-2025-21910, CVE-2025-22014, CVE-2025-22016, CVE-2025-21957, CVE-2025-21968, CVE-2025-21986,     CVE-2025-21981, CVE-2025-21880, CVE-2025-21950, CVE-2025-21982, CVE-2025-21976, CVE-2025-21979,     CVE-2025-21912, CVE-2025-21951, CVE-2025-21994, CVE-2025-21946, CVE-2025-21955, CVE-2025-21898,     CVE-2025-21960, CVE-2025-21883, CVE-2025-21970, CVE-2025-21891, CVE-2025-21919, CVE-2025-21964,     CVE-2025-21926, CVE-2025-21877, CVE-2025-21903, CVE-2025-21978, CVE-2025-21885, CVE-2025-21948,     CVE-2025-21930, CVE-2025-22009, CVE-2025-21918, CVE-2025-21890, CVE-2025-21925, CVE-2025-22003,     CVE-2025-22008, CVE-2025-21934, CVE-2025-21961, CVE-2025-22004, CVE-2025-21941, CVE-2025-21915,     CVE-2025-21967, CVE-2025-21904, CVE-2025-21916, CVE-2025-37889, CVE-2025-21922, CVE-2025-21892,     CVE-2025-21975, CVE-2025-21945, CVE-2025-21889, CVE-2025-21937, CVE-2025-21969)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50261 advisory.

    - xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman)  [Orabug: 39344515]  {CVE-2026-43284}
    - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen)  [Orabug: 39344515]     {CVE-2026-43284}
    - x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia)  [Orabug: 39327141]  {CVE-2025-54518}
    - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu)  [Orabug: 39250686]  {CVE-2026-31431}
    - x86/CPU: Fix FPDSS on Zen1 (Borislav Petkov) [Orabug: 39241228,39273722] {CVE-2026-31628}
    - net/handshake: duplicate handshake cancellations leak socket (Scott Mayhew) [Orabug: 38847720]     {CVE-2025-68775}
    - ipv6: use RCU in ip6_xmit() (Eric Dumazet) [Orabug: 38649062] {CVE-2025-40135}
    - scsi: qla2xxx: Sanitize payload size to prevent member overflow (Jiasheng Jiang) [Orabug: 38930868]     {CVE-2026-23059}
    - bpf: Fix reference count leak in bpf_prog_test_run_xdp() (Tetsuo Handa) [Orabug: 38887702]     {CVE-2026-22994}
    - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [Orabug: 38887682]     {CVE-2026-22989}
    - net/mlx5e: TC, delete flows only for existing peers (Mark Bloch) [Orabug: 38970398] {CVE-2026-23173}
    - net/handshake: restore destructor on submit failure (Caoping) [Orabug: 38887601] {CVE-2025-71148}
    - scsi: qla2xxx: Fix improper freeing of purex item (Zilin Guan) [Orabug: 38798929] {CVE-2025-68741}
    - bnxt_en: Fix XDP_TX path (Michael Chan) [Orabug: 38847684] {CVE-2025-68770}
    - perf/x86/amd: Check event before enable to avoid GPF (George Kennedy) [Orabug: 38847849]     {CVE-2025-68798}
    - scsi: smartpqi: Fix device resources accessed after device removal (Mike Mcgowen) [Orabug: 38798848]     {CVE-2025-68371}
    - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (Omar Sandoval) [Orabug: 38773579]     {CVE-2025-68259}
    - x86/fpu: Ensure XFD state on signal delivery (Chang S. Bae) [Orabug: 38773165] {CVE-2025-68171}
    - virtio-net: fix received length check in big packets (Bui Quang Minh) [Orabug: 38737152]     {CVE-2025-40292}
    - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Yunhui Cui) [Orabug: 38641284]     {CVE-2025-38113}
    - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller (Qiuxu Zhuo) [Orabug: 38649173]     {CVE-2025-40157}
    - sunrpc: fix null pointer dereference on zero-length checksum (Lei Lu) [Orabug: 38649042]     {CVE-2025-40129}
    - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Jinjie Ruan) [Orabug: 38641275]     {CVE-2024-53230}
    - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Jinjie Ruan) [Orabug: 38641272]     {CVE-2024-53231}
    - vhost: vringh: Fix copy_to_iter return value check (Michael S. Tsirkin) [Orabug: 38592117]     {CVE-2025-40056}
    - crypto: qat - flush misc workqueue during device shutdown (Giovanni Cabiddu) [Orabug: 38401717]     {CVE-2025-39721}
    - vhost: vringh: Modify the return value check (Zhang Jiao) [Orabug: 38592085] {CVE-2025-40051}
    - virtio-net: fix recursived rtnl_lock() during probe() (Zigit Zo) [Orabug: 38324330] {CVE-2025-38551}
    - gve: prevent ethtool ops after shutdown (Jordan Rhee) [Orabug: 38401492] {CVE-2025-38735}
    - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (Sean Christopherson)     [Orabug: 38254140] {CVE-2025-38455}
    - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect (Oleksij Rempel) [Orabug: 38253871]     {CVE-2025-38385}
    - net/mlx5e: Disable MACsec offload for uplink representor profile (Carolina Jubran) [Orabug: 38094809]     {CVE-2025-38020}
    - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Shuai Xue) [Orabug: 38094794]     {CVE-2025-38015}
    - net/mlx5: Fix ECVF vports unload on shutdown flow (Amir Tzin) [Orabug: 38152903] {CVE-2025-38109}
    - bnxt: properly flush XDP redirect lists (Yan Zhai) [Orabug: 38175054] {CVE-2025-38246}
    - eth: bnxt: fix missing ring index trim on error path (Jakub Kicinski) [Orabug: 37937451]     {CVE-2025-37873}
    - net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Henry Martin) [Orabug: 37938078]     {CVE-2025-37888}
    - nfsd: fix possible badness in FREE_STATEID (Olga Kornievskaia) [Orabug: 37989102] {CVE-2024-50043}
    - devlink: fix xa_alloc_cyclic() error handling (Michal Swiatkowski) [Orabug: 37828271] {CVE-2025-22017}
    - xsk: fix an integer overflow in xp_create_and_assign_umem() (Gavrilov Ilia) [Orabug: 37828202]     {CVE-2025-21997}
    - RDMA/mlx5: Fix the recovery flow of the UMR QP (Yishai Hadas) [Orabug: 37766306] {CVE-2025-21892}
    - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (Vimal Agrawal) [Orabug: 37678552]     {CVE-2024-58078}
    - net/sched: cls_api: fix error handling causing NULL dereference (Pierre Riteau) [Orabug: 37702083]     {CVE-2025-21857}
    - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Shigeru Yoshida) [Orabug: 37766220]     {CVE-2025-21867}
    - net: xdp: Disallow attaching device-bound programs in generic mode (Toke Hoiland-Jorgensen) [Orabug:
    37650238] {CVE-2025-21808}
    - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Qasim Ijaz) [Orabug:
    37649891] {CVE-2025-21724}
    - xfrm: delete intermediate secpath entry in packet offload mode (Alexandre Cassen) [Orabug: 37649866]     {CVE-2025-21720}
    - gpiolib: Fix crash on error in gpiochip_get_ngpios() (Andy Shevchenko) [Orabug: 37650154]     {CVE-2025-21783}
    - scsi: mpi3mr: Fix possible crash when setting up bsg fails (Guixin Liu) [Orabug: 37649886]     {CVE-2025-21723}
    - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson)     [Orabug: 39151165,39159089] {CVE-2026-23401}
    - scsi: core: Fix refcount leak for tagset_refcnt (Junxiao Bi) [Orabug: 38976650,39130775]     {CVE-2026-23296}
    - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (Jiayuan Chen) [Orabug: 39188477]     {CVE-2026-31411}
    - RDMA/umad: Reject negative data_len in ib_umad_write (Yunje Shin) [Orabug: 39103109] {CVE-2026-23243}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
242230	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:02333-1)	Nessus	SuSE Local Security Checks	2025/7/17	2025/9/24	high
242347	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20480)	Nessus	Oracle Linux Local Security Checks	2025/7/18	2026/2/9	medium
240690	RHEL 10 : kernel (RHSA-2025:8669)	Nessus	Red Hat Local Security Checks	2025/6/26	2025/10/9	medium
241358	Oracle Linux 10 : kernel (ELSA-2025-8669)	Nessus	Oracle Linux Local Security Checks	2025/7/4	2026/2/9	high
283273	MiracleLinux 9 : kernel-5.14.0-570.21.1.el9_6 (AXSA:2025-10584:46)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/13	high
237504	Debian dla-4193 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	2025/5/29	2025/9/24	high
265927	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-7765-1)	Nessus	Ubuntu Local Security Checks	2025/9/25	2026/6/3	high
241617	SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2025:02254-1)	Nessus	SuSE Local Security Checks	2025/7/9	2026/6/25	high
242213	SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2025:02335-1)	Nessus	SuSE Local Security Checks	2025/7/17	2026/6/26	high
266401	Ubuntu 24.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-7790-1)	Nessus	Ubuntu Local Security Checks	2025/10/2	2025/10/2	high
314332	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50261)	Nessus	Oracle Linux Local Security Checks	2026/5/12	2026/5/13	high

检测

插件搜索

high

medium

medium

high

high

high

high

high

high

high

high