The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20663 advisory.

    - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug:
    38310007] {CVE-2025-38499}
    - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() (Minjong Kim) [Orabug:
    38440228] {CVE-2025-39808}
    - HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Qasim Ijaz) [Orabug: 38440310] {CVE-2025-39824}
    - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Li Nan) [Orabug: 38440277] {CVE-2025-39817}
    - sctp: initialize more fields in sctp_v6_from_sk() (Eric Dumazet) [Orabug: 38440251] {CVE-2025-39812}
    - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Kuniyuki Iwashima) [Orabug: 38440347]     {CVE-2025-39828}
    - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Tengda Wu) [Orabug: 38440259]     {CVE-2025-39813}
    - scsi: qla4xxx: Prevent a potential error pointer dereference (Dan Carpenter) [Orabug: 38401514]     {CVE-2025-39676}
    - nfs: fix UAF in direct writes (Josef Bacik) [Orabug: 36596831] {CVE-2024-26958}
    - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) [Orabug: 36154626] {CVE-2023-1192}
    - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [Orabug: 37433654]     {CVE-2024-53237}
    - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [Orabug: 37908492]     {CVE-2025-37798}
    - sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang) [Orabug: 38158396] {CVE-2025-38177}
    - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Gui-Dong Han) [Orabug: 38401677]     {CVE-2025-39713}
    - NFS: Fix the setting of capabilities when automounting a new filesystem (Trond Myklebust) [Orabug:
    38429211] {CVE-2025-39798}
    - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38395081]     {CVE-2025-38724}
    - tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [Orabug: 38324271]     {CVE-2025-38539}
    - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Haoxiang Li) [Orabug: 38351930]     {CVE-2025-38664}
    - ftrace: Also allocate and copy hash for reading of filter files (Steven Rostedt) [Orabug: 38401581]     {CVE-2025-39689}
    - fs/buffer: fix use-after-free when call bh_read() helper (Ye Bin) [Orabug: 38401587] {CVE-2025-39691}
    - media: usbtv: Lock resolution while streaming (Ludwig Disterhof) [Orabug: 38401684] {CVE-2025-39714}
    - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Baokun Li) [Orabug: 38423509] {CVE-2025-39782}
    - serial: 8250: fix panic due to PSLVERR (Yunhui Cui) [Orabug: 38401729] {CVE-2025-39724}
    - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [Orabug: 38394816]     {CVE-2025-38680}
    - pNFS: Fix uninited ptr deref in block/scsi layout (Sergey Bashirov) [Orabug: 38394867] {CVE-2025-38691}
    - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and     w7090p_tuner_read_serpar (Alex Guo) [Orabug: 38394880] {CVE-2025-38693}
    - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (Alex Guo) [Orabug: 38394887]     {CVE-2025-38694}
    - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (Justin Tee) [Orabug:
    38394894] {CVE-2025-38695}
    - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Yury Norov) [Orabug: 38423286]     {CVE-2025-39742}
    - scsi: bfa: Double-free fix (Jackysliu) [Orabug: 38394925] {CVE-2025-38699}
    - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (Showrya M N) [Orabug:
    38394931] {CVE-2025-38700}
    - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Theodore Ts'O) [Orabug: 38394937]     {CVE-2025-38701}
    - rcu: Protect ->defer_qs_iw_pending from data race (Paul E. McKenney) [Orabug: 38423341] {CVE-2025-39749}
    - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Lucy Thrun) [Orabug: 38423359]     {CVE-2025-39751}
    - drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [Orabug: 38394995] {CVE-2025-38708}
    - sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [Orabug: 38395059] {CVE-2025-38718}
    - netfilter: ctnetlink: fix refcount leak on table dump (Florian Westphal) [Orabug: 38395068]     {CVE-2025-38721}
    - ACPI: processor: perflib: Move problematic pr->performance check (Rafael J. Wysocki) [Orabug: 38429229]     {CVE-2025-39799}
    - fs: Prevent file descriptor table allocations exceeding INT_MAX (Sasha Levin) [Orabug: 38423397]     {CVE-2025-39756}
    - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 38401319]     {CVE-2025-38727}
    - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [Orabug: 38423407]     {CVE-2025-39757}
    - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [Orabug: 38395101]     {CVE-2025-38729}
    - usb: gadget : fix use-after-free in composite_dev_cleanup() (Taoxue) [Orabug: 38334898] {CVE-2025-38555}
    - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38351771] {CVE-2025-38618}
    - net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [Orabug: 38351764]     {CVE-2025-38617}
    - perf/core: Prevent VMA split of buffer mappings (Thomas Gleixner) [Orabug: 38334948] {CVE-2025-38563}
    - perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [Orabug: 38334959] {CVE-2025-38565}
    - benet: fix BUG when creating VFs (Michal Schmidt) [Orabug: 38334976] {CVE-2025-38569}
    - net: drop UFO packets in udp_rcv_segment() (Wang Liang) [Orabug: 38351786] {CVE-2025-38622}
    - ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [Orabug: 38334988] {CVE-2025-38572}
    - pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [Orabug: 38335004] {CVE-2025-38574}
    - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [Orabug: 38401745]     {CVE-2025-39730}
    - netfilter: xt_nfacct: don't assume acct name is null-terminated (Florian Westphal) [Orabug: 38351854]     {CVE-2025-38639}
    - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [Orabug:
    38331466] {CVE-2025-38553}
    - iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [Orabug: 38335110]     {CVE-2025-38602}
    - wifi: rtl818x: Kill URBs before clearing tx status queue (Daniil Dulov) [Orabug: 38335120]     {CVE-2025-38604}
    - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Jiayuan Chen) [Orabug: 38335131]     {CVE-2025-38608}
    - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (Abdun Nihaal) [Orabug: 38335153]     {CVE-2025-38612}
    - i2c: qup: jump out of the loop in case of timeout (Yang Xiwen) [Orabug: 38351994] {CVE-2025-38671}
    - regulator: core: fix NULL dereference on unbind due to stale coupling data (Alessandro Carminati)     [Orabug: 38351978] {CVE-2025-38668}
    - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [Orabug: 38158477] {CVE-2025-38193}
    - virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [Orabug:
    38253834] {CVE-2025-38375}
    - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [Orabug: 38254214]     {CVE-2025-38468}
    - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Dong Chenchen) [Orabug:
    38254225] {CVE-2025-38470}
    - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [Orabug: 38254241]     {CVE-2025-38473}
    - usb: net: sierra: check for no status endpoint (Oliver Neukum) [Orabug: 38254249] {CVE-2025-38474}
    - net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [Orabug: 38254266] {CVE-2025-38477}
    - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38254340] {CVE-2025-38494}
    - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires)     [Orabug: 38254348] {CVE-2025-38495}
    - usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [Orabug: 38254358]     {CVE-2025-38497}
    - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao) [Orabug: 38324280]     {CVE-2025-38540}
    - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Somnath Kotur) [Orabug: 38254090]     {CVE-2025-38439}
    - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [Orabug: 38254109]     {CVE-2025-38445}
    - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [Orabug:
    38324161] {CVE-2025-38513}
    - usb: gadget: u_serial: Fix race condition in TTY wakeup (Kuen-Han Tsai) [Orabug: 38254118]     {CVE-2025-38448}
    - drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [Orabug: 38324180]     {CVE-2025-38515}
    - pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Bartosz Golaszewski) [Orabug: 38324186]     {CVE-2025-38516}
    - net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [Orabug: 38254147]     {CVE-2025-38457}
    - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [Orabug: 38254153]     {CVE-2025-38458}
    - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [Orabug: 38254161]     {CVE-2025-38459}
    - atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [Orabug: 38324309] {CVE-2025-38546}
    - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [Orabug: 38254167]     {CVE-2025-38460}
    - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [Orabug: 38254181] {CVE-2025-38464}
    - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima) [Orabug: 38254188] {CVE-2025-38465}
    - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling (Kaustabh Chakraborty) [Orabug:
    38254203] {CVE-2025-38467}
    - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [Orabug: 37206006] {CVE-2024-49935}
    - usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38401436] {CVE-2025-38404}
    - drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253887]     {CVE-2025-38389}
    - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug:
    38253907] {CVE-2025-38395}
    - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253875]     {CVE-2025-38386}
    - wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253946] {CVE-2025-38406}
    - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug:
    38253923] {CVE-2025-38400}
    - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253881]     {CVE-2025-38387}
    - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253894]     {CVE-2025-38391}
    - vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug:
    38253937] {CVE-2025-38403}
    - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval) [Orabug:
    36530119] {CVE-2024-26644}
    - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [Orabug:
    38175045] {CVE-2025-38245}
    - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [Orabug:
    38175065] {CVE-2025-38249}
    - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'Ichiro Kawasaki) [Orabug:
    38158592] {CVE-2025-38211}
    - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [Orabug: 38158692]     {CVE-2025-38229}
    - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Ma Wupeng) [Orabug: 38152869]     {CVE-2025-38102}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-25757 advisory.

    - i40e: add validation for ring_len param (Lukasz Czapnik)  [Orabug: 38607608]  {CVE-2025-39973}
    - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)  [Orabug: 38575804]     {CVE-2025-39964}
    - i2c: tegra: check msg length in SMBUS block read (Akhil R) [Orabug: 38254038,38471683] {CVE-2025-38425}
    - device-dax: correct pgoff align in dax_set_mapping() (Kun(Llfl)) [Orabug: 37206403] {CVE-2024-50022}
    - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (Yishai Hadas) [Orabug: 37434467]     {CVE-2024-56742}
    - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima) [Orabug: 38528187]     {CVE-2025-38236}
    - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Li Qiong) [Orabug: 38494760]     {CVE-2025-39902}
    - dma-buf: insert memory barrier before updating num_fences (Hyejeong Choi) [Orabug: 38152833]     {CVE-2025-38095}
    - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug: 37977027]     {CVE-2025-37968}
    - e1000e: fix heap overflow in e1000_set_eeprom (Vitaly Lifshits) [Orabug: 38494739] {CVE-2025-39898}
    - scsi: lpfc: Fix buffer free/clear order in deferred receive path (John Evans) [Orabug: 38456753]     {CVE-2025-39841}
    - wifi: mwifiex: Initialize the chan_stats array to zero (Rong Qianfeng) [Orabug: 38494722]     {CVE-2025-39891}
    - mm: move page table sync declarations to linux/pgtable.h (Harry Yoo) [Orabug: 38456763] {CVE-2025-39844}
    - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Harry Yoo) [Orabug:
    38456766] {CVE-2025-39845}
    - net: phy: mscc: Fix memory leak when using one step timestamping (Horatiu Vultur) [Orabug: 38153076]     {CVE-2025-38148}
    - ppp: fix memory leak in pad_compress_skb (Qingfang Deng) [Orabug: 38456780] {CVE-2025-39847}
    - i40e: Fix potential invalid access when MAC list is empty (Zhen Ni) [Orabug: 38456813] {CVE-2025-39853}
    - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (Kuniyuki Iwashima) [Orabug: 38456833]     {CVE-2025-39860}
    - netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (Wang Liang)     [Orabug: 38494730] {CVE-2025-39894}
    - wifi: cfg80211: fix use-after-free in cmp_bss() (Dmitry Antipov) [Orabug: 38456858] {CVE-2025-39864}
    - tee: fix NULL pointer dereference in tee_shm_put (Pei Xiao) [Orabug: 38456865] {CVE-2025-39865}
    - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38456870,38528183]     {CVE-2025-39866}
    - bpf: Fix oob access in cgroup local storage (Daniel Borkmann) [Orabug: 38324117] {CVE-2025-38502}
    - xfs: do not propagate ENODATA disk errors into xattr code (Eric Sandeen) [Orabug: 38440385]     {CVE-2025-39835}
    - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() (Minjong Kim) [Orabug:
    38440227] {CVE-2025-39808}
    - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (Qasim Ijaz) [Orabug: 38440223]     {CVE-2025-39806}
    - HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Qasim Ijaz) [Orabug: 38440309] {CVE-2025-39824}
    - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Li Nan) [Orabug: 38440276] {CVE-2025-39817}
    - sctp: initialize more fields in sctp_v6_from_sk() (Eric Dumazet) [Orabug: 38440249] {CVE-2025-39812}
    - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Kuniyuki Iwashima) [Orabug: 38440345]     {CVE-2025-39828}
    - NFS: Fix a race when updating an existing write (Trond Myklebust) [Orabug: 38401609] {CVE-2025-39697}
    - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Tengda Wu) [Orabug: 38440258]     {CVE-2025-39813}
    - netfilter: nf_reject: don't leak dst refcount for loopback packets (Florian Westphal) [Orabug: 38401481]     {CVE-2025-38732}
    - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (William Liu) [Orabug: 38423456]     {CVE-2025-39766}
    - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (Yuichiro Tsuji) [Orabug:
    38516727] {CVE-2025-38736}
    - ppp: fix race conditions in ppp_fill_forward_path (Qingfang Deng) [Orabug: 38401500] {CVE-2025-39673}
    - drm/hisilicon/hibmc: fix the hibmc loaded failed bug (Baihan Li) [Orabug: 38423473] {CVE-2025-39772}
    - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Kees Cook) [Orabug: 38360925]     {CVE-2025-38676}
    - scsi: qla4xxx: Prevent a potential error pointer dereference (Dan Carpenter) [Orabug: 38401513]     {CVE-2025-39676}
    - net: bridge: fix soft lockup in br_multicast_query_expired() (Wang Liang) [Orabug: 38423478]     {CVE-2025-39773}
    - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper (Tianxiang Peng) [Orabug: 38401541]     {CVE-2025-39681}
    - tracing: Limit access to parser->buffer when trace_get_user failed (Pu Lehui) [Orabug: 38401546]     {CVE-2025-39683}
    - soc: qcom: mdt_loader: Ensure we don't read past the ELF header (Bjorn Andersson) [Orabug: 38423523]     {CVE-2025-39787}
    - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (Selvarasu Ganesan) [Orabug: 38435009]     {CVE-2025-39801}
    - ftrace: Also allocate and copy hash for reading of filter files (Steven Rostedt) [Orabug: 38401580]     {CVE-2025-39689}
    - fs/buffer: fix use-after-free when call bh_read() helper (Ye Bin) [Orabug: 38401586] {CVE-2025-39691}
    - drm/amd/display: Avoid a NULL pointer dereference (Mario Limonciello) [Orabug: 38401596]     {CVE-2025-39693}
    - sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 38516621] {CVE-2025-37953}
    - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) [Orabug: 37908491]     {CVE-2025-37798}
    - net/sched: ets: use old 'nbands' while purging unused classes (Davide Caratti) [Orabug: 38394836]     {CVE-2025-38684}
    - bus: mhi: host: Detect events pointing to unexpected TREs (Youssef Samir) [Orabug: 38423539]     {CVE-2025-39790}
    - NFS: Fix the setting of capabilities when automounting a new filesystem (Trond Myklebust) [Orabug:
    38429210] {CVE-2025-39798}
    - hv_netvsc: Fix panic during namespace deletion with VF (Haiyang Zhang) [Orabug: 38394830]     {CVE-2025-38683}
    - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (Ada Couprie Diaz) [Orabug: 38351990]     {CVE-2025-38670}
    - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Haoxiang Li) [Orabug: 38351929]     {CVE-2025-38664}
    - sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang) [Orabug: 38158395] {CVE-2025-38177}
    - sch_htb: make htb_qlen_notify() idempotent (Cong Wang) [Orabug: 37976859] {CVE-2025-37932}
    - net, hsr: reject HSR frame if skb can't hold tag (Jakub Acs) [Orabug: 38401632] {CVE-2025-39703}
    - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Gui-Dong Han) [Orabug: 38401676]     {CVE-2025-39713}
    - media: usbtv: Lock resolution while streaming (Ludwig Disterhof) [Orabug: 38401683] {CVE-2025-39714}
    - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Baokun Li) [Orabug: 38423508] {CVE-2025-39782}
    - serial: 8250: fix panic due to PSLVERR (Yunhui Cui) [Orabug: 38401728] {CVE-2025-39724}
    - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [Orabug: 38394815]     {CVE-2025-38680}
    - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Sravan Kumar Gundu) [Orabug: 38394843]     {CVE-2025-38685}
    - btrfs: do not allow relocation of partially dropped subvolumes (Qu Wenruo) [Orabug: 38423271]     {CVE-2025-39738}
    - usb: core: config: Prevent OOB read in SS endpoint companion parsing (Xinyu Liu) [Orabug: 38423420]     {CVE-2025-39760}
    - pNFS: Fix uninited ptr deref in block/scsi layout (Sergey Bashirov) [Orabug: 38394865] {CVE-2025-38691}
    - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (John Garry) [Orabug:
    38429192] {CVE-2025-39795}
    - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and     w7090p_tuner_read_serpar (Alex Guo) [Orabug: 38394879] {CVE-2025-38693}
    - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (Alex Guo) [Orabug: 38394886]     {CVE-2025-38694}
    - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (Justin Tee) [Orabug:
    38394893] {CVE-2025-38695}
    - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Yury Norov) [Orabug: 38423285]     {CVE-2025-39742}
    - scsi: bfa: Double-free fix (Jackysliu) [Orabug: 38394923] {CVE-2025-38699}
    - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (Showrya M N) [Orabug:
    38394930] {CVE-2025-38700}
    - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Theodore Ts'O) [Orabug: 38394936]     {CVE-2025-38701}
    - rcu: Protect ->defer_qs_iw_pending from data race (Paul E. McKenney) [Orabug: 38423340] {CVE-2025-39749}
    - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (Peter Ujfalusi) [Orabug: 38394977]     {CVE-2025-38706}
    - drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [Orabug: 38394994] {CVE-2025-38708}
    - sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [Orabug: 38395058] {CVE-2025-38718}
    - netfilter: ctnetlink: fix refcount leak on table dump (Florian Westphal) [Orabug: 38395066]     {CVE-2025-38721}
    - eventpoll: Fix semi-unbounded recursion (Jann Horn) [Orabug: 38335161] {CVE-2025-38614}
    - fs: Prevent file descriptor table allocations exceeding INT_MAX (Sasha Levin) [Orabug: 38423396]     {CVE-2025-39756}
    - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38395080]     {CVE-2025-38724}
    - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (Xu Yang) [Orabug: 38395088] {CVE-2025-38725}
    - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [Orabug: 38423406]     {CVE-2025-39757}
    - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [Orabug: 38395100]     {CVE-2025-38729}
    - usb: gadget : fix use-after-free in composite_dev_cleanup() (Taoxue) [Orabug: 38334897] {CVE-2025-38555}
    - net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [Orabug: 38351763]     {CVE-2025-38617}
    - perf/core: Prevent VMA split of buffer mappings (Thomas Gleixner) [Orabug: 38334947] {CVE-2025-38563}
    - perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [Orabug: 38334957] {CVE-2025-38565}
    - net: drop UFO packets in udp_rcv_segment() (Wang Liang) [Orabug: 38351785] {CVE-2025-38622}
    - ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [Orabug: 38334987] {CVE-2025-38572}
    - pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [Orabug: 38335003] {CVE-2025-38574}
    - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [Orabug: 38401744]     {CVE-2025-39730}
    - netfilter: xt_nfacct: don't assume acct name is null-terminated (Florian Westphal) [Orabug: 38351853]     {CVE-2025-38639}
    - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [Orabug:
    38331465] {CVE-2025-38553}
    - net/mlx5: Check device memory pointer before usage (Stav Aviram) [Orabug: 38351877] {CVE-2025-38645}
    - wifi: ath11k: clear initialized flag for deinit-ed srng lists (Sergey Senozhatsky) [Orabug: 38335105]     {CVE-2025-38601}
    - iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [Orabug: 38335109]     {CVE-2025-38602}
    - wifi: rtl818x: Kill URBs before clearing tx status queue (Daniil Dulov) [Orabug: 38335118]     {CVE-2025-38604}
    - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Jiayuan Chen) [Orabug: 38335130]     {CVE-2025-38608}
    - PM / devfreq: Check governor before using governor->name (Lifeng Zheng) [Orabug: 38335134]     {CVE-2025-38609}
    - i2c: qup: jump out of the loop in case of timeout (Yang Xiwen) [Orabug: 38351993] {CVE-2025-38671}
    - regulator: core: fix NULL dereference on unbind due to stale coupling data (Alessandro Carminati)     [Orabug: 38351977] {CVE-2025-38668}
    - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (Fabrice Gasnier) [Orabug: 38180692]     {CVE-2025-38335}
    - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [Orabug: 38254213]     {CVE-2025-38468}
    - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Dong Chenchen) [Orabug:
    38254224] {CVE-2025-38470}
    - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Yue Haibing) [Orabug: 38324326] {CVE-2025-38550}
    - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [Orabug: 38254240]     {CVE-2025-38473}
    - usb: net: sierra: check for no status endpoint (Oliver Neukum) [Orabug: 38254248] {CVE-2025-38474}
    - net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [Orabug: 38254265] {CVE-2025-38477}
    - bpf: Reject %p% format string in bprintf-like helpers (Paul Chaignon) [Orabug: 38324226]     {CVE-2025-38528}
    - tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [Orabug: 38324269]     {CVE-2025-38539}
    - usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [Orabug: 38254357]     {CVE-2025-38497}
    - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Wayne Chang) [Orabug: 38324257]     {CVE-2025-38535}
    - pds_core: remove write-after-free of client_id (Shannon Nelson) [Orabug: 37976798,38467344]     {CVE-2025-37916}
    - pds_core: make wait_context part of q_info (Shannon Nelson) [Orabug: 37937540,38467344] {CVE-2025-37886}
    - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (Brett Creeley) [Orabug: 37937543,38467344]     {CVE-2025-37887}
    - pds_core: Prevent possible adminq overflow/stuck condition (Brett Creeley) [Orabug: 37977106,38467344]     {CVE-2025-37987}
    - pds_core: Fix pdsc_check_pci_health function to use work thread (Brett Creeley) [Orabug:
    38467344,38498854] {CVE-2024-35968}
    - net: pds_core: Fix possible double free in error handling path (Yongzhi Liu) [Orabug: 36530186]     {CVE-2024-26652}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03337-1 advisory.

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues.

    The following security issues were fixed:

    - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862).
    - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356).
    - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03319-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_10_26 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356).
    - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685).
    - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).
    - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248298).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03023-1 advisory.

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may     (bsc#1139073)
    - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
    - CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing     before MONITOR (bsc#1238896).
    - CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
    - CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
    - CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
    - CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
    - CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
    - CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
    - CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
    - CVE-2025-37885: KVM: x86: Reset IRTE to host control if *new* route isn't postable (bsc#1242960).
    - CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
    - CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
    - CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
    - CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
    - CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
    - CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
    - CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write()     (bsc#1245440).
    - CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
    - CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
    - CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
    - CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
    - CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
    - CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
    - CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
    - CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers     (bsc#1245671).
    - CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
    - CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
    - CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
    - CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
    - CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping     (bsc#1245708).
    - CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
    - CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
    - CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
    - CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
    - CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
    - CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
    - CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
    - CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
    - CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()     (bsc#1246006).
    - CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
    - CVE-2025-38188: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (bsc#1246098).
    - CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
    - CVE-2025-38202: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (bsc#1245980).
    - CVE-2025-38203: jfs: Fix null-ptr-deref in jfs_ioc_trim (bsc#1246044).
    - CVE-2025-38204: jfs: fix array-index-out-of-bounds read in add_missing_indices (bsc#1245983).
    - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
    - CVE-2025-38210: configfs-tsm-report: Fix NULL dereference of tsm_ops (bsc#1246020).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
    - CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
    - CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
    - CVE-2025-38236: af_unix: Disable MSG_OOB for unprivileged users (bsc#1246093).
    - CVE-2025-38239: scsi: megaraid_sas: Fix invalid node index (bsc#1246178).
    - CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
    - CVE-2025-38248: bridge: mcast: Fix use-after-free during router port configuration (bsc#1246173).
    - CVE-2025-38250: kABI workaround for bluetooth hci_dev changes (bsc#1246182).
    - CVE-2025-38264: llist: add interface to check if a node is on a list (bsc#1246387).
    - CVE-2025-38272: net: dsa: b53: do not enable EEE on bcm63xx (bsc#1246268).
    - CVE-2025-38279: selftests/bpf: Add tests with stack ptr register in conditional jmp (bsc#1246264).
    - CVE-2025-38283: hisi_acc_vfio_pci: bugfix live migration function without VF device driver     (bsc#1246273).
    - CVE-2025-38303: Bluetooth: eir: Fix possible crashes on eir_create_adv_data (bsc#1246354).
    - CVE-2025-38310: seg6: Fix validation of nexthop addresses (bsc#1246361).
    - CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
    - CVE-2025-38334: x86/sgx: Prevent attempts to reclaim poisoned pages (bsc#1246384).
    - CVE-2025-38335: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (bsc#1246250).
    - CVE-2025-38337: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (bsc#1246253).
    - CVE-2025-38349: eventpoll: do not decrement ep refcount while still holding the ep mutex (bsc#1246777).
    - CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
    - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()     (bsc#1246911).
    - CVE-2025-38364: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (bsc#1247091).
    - CVE-2025-38365: btrfs: fix a race between renames and directory logging (bsc#1247023).
    - CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
    - CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
    - CVE-2025-38382: btrfs: fix iteration of extrefs during log replay (bsc#1247031).
    - CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
    - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247156).
    - CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()     (bsc#1247097).
    - CVE-2025-38403: vsock/vmci: Clear the vmci transport packet properly when initializing it (bsc#1247141).
    - CVE-2025-38414: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (bsc#1247145).
    - CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
    - CVE-2025-38429: bus: mhi: ep: Update read pointer only after buffer is written (bsc#1247253).
    - CVE-2025-38455: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight     (bsc#1247101).
    - CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
    - CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
    - CVE-2025-38461: vsock: Fix transport_* TOCTOU (bsc#1247103).
    - CVE-2025-38462: vsock: Fix transport_{g2h,h2g} TOCTOU (bsc#1247104).
    - CVE-2025-38463: tcp: Correct signedness in skb remaining space calculation (bsc#1247113).
    - CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
    - CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
    - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
    - CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4327 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4327-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     October 13, 2025                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.244-1     CVE ID         : CVE-2021-46987 CVE-2021-47037 CVE-2021-47070 CVE-2021-47076                      CVE-2021-47183 CVE-2021-47193 CVE-2021-47412 CVE-2021-47421                      CVE-2021-47455 CVE-2021-47498 CVE-2022-21546 CVE-2022-49063                      CVE-2022-50327 CVE-2023-52935 CVE-2023-53259 CVE-2024-26739                      CVE-2024-28956 CVE-2024-35790 CVE-2024-36350 CVE-2024-36357                      CVE-2024-38541 CVE-2024-43863 CVE-2024-46751 CVE-2024-46855                      CVE-2024-49935 CVE-2024-53203 CVE-2024-57883 CVE-2024-57996                      CVE-2025-21912 CVE-2025-37798 CVE-2025-37819 CVE-2025-37890                      CVE-2025-37909 CVE-2025-37913 CVE-2025-37914 CVE-2025-37915                      CVE-2025-37923 CVE-2025-37927 CVE-2025-37930 CVE-2025-37932                      CVE-2025-37948 CVE-2025-37949 CVE-2025-37958 CVE-2025-37963                      CVE-2025-37968 CVE-2025-37969 CVE-2025-37970 CVE-2025-37990                      CVE-2025-37992 CVE-2025-37994 CVE-2025-37995 CVE-2025-37997                      CVE-2025-37998 CVE-2025-38000 CVE-2025-38001 CVE-2025-38003                      CVE-2025-38004 CVE-2025-38005 CVE-2025-38009 CVE-2025-38023                      CVE-2025-38024 CVE-2025-38031 CVE-2025-38034 CVE-2025-38035                      CVE-2025-38037 CVE-2025-38044 CVE-2025-38051 CVE-2025-38052                      CVE-2025-38058 CVE-2025-38061 CVE-2025-38065 CVE-2025-38066                      CVE-2025-38067 CVE-2025-38072 CVE-2025-38074 CVE-2025-38075                      CVE-2025-38078 CVE-2025-38079 CVE-2025-38083 CVE-2025-38084                      CVE-2025-38085 CVE-2025-38086 CVE-2025-38090 CVE-2025-38094                      CVE-2025-38095 CVE-2025-38100 CVE-2025-38102 CVE-2025-38103                      CVE-2025-38107 CVE-2025-38108 CVE-2025-38111 CVE-2025-38112                      CVE-2025-38115 CVE-2025-38135 CVE-2025-38136 CVE-2025-38138                      CVE-2025-38143 CVE-2025-38145 CVE-2025-38146 CVE-2025-38147                      CVE-2025-38153 CVE-2025-38157 CVE-2025-38160 CVE-2025-38161                      CVE-2025-38163 CVE-2025-38173 CVE-2025-38174 CVE-2025-38177                      CVE-2025-38180 CVE-2025-38181 CVE-2025-38184 CVE-2025-38185                      CVE-2025-38190 CVE-2025-38193 CVE-2025-38194 CVE-2025-38197                      CVE-2025-38200 CVE-2025-38203 CVE-2025-38204 CVE-2025-38206                      CVE-2025-38211 CVE-2025-38212 CVE-2025-38214 CVE-2025-38218                      CVE-2025-38219 CVE-2025-38222 CVE-2025-38226 CVE-2025-38227                      CVE-2025-38229 CVE-2025-38230 CVE-2025-38231 CVE-2025-38237                      CVE-2025-38245 CVE-2025-38249 CVE-2025-38251 CVE-2025-38263                      CVE-2025-38273 CVE-2025-38285 CVE-2025-38286 CVE-2025-38293                      CVE-2025-38298 CVE-2025-38312 CVE-2025-38313 CVE-2025-38320                      CVE-2025-38323 CVE-2025-38324 CVE-2025-38326 CVE-2025-38328                      CVE-2025-38332 CVE-2025-38336 CVE-2025-38337 CVE-2025-38342                      CVE-2025-38344 CVE-2025-38345 CVE-2025-38346 CVE-2025-38347                      CVE-2025-38348 CVE-2025-38350 CVE-2025-38352 CVE-2025-38363                      CVE-2025-38371 CVE-2025-38375 CVE-2025-38377 CVE-2025-38386                      CVE-2025-38387 CVE-2025-38389 CVE-2025-38391 CVE-2025-38393                      CVE-2025-38395 CVE-2025-38399 CVE-2025-38400 CVE-2025-38401                      CVE-2025-38403 CVE-2025-38404 CVE-2025-38406 CVE-2025-38415                      CVE-2025-38416 CVE-2025-38420 CVE-2025-38424 CVE-2025-38428                      CVE-2025-38430 CVE-2025-38439 CVE-2025-38445 CVE-2025-38448                      CVE-2025-38457 CVE-2025-38458 CVE-2025-38459 CVE-2025-38460                      CVE-2025-38461 CVE-2025-38462 CVE-2025-38464 CVE-2025-38465                      CVE-2025-38466 CVE-2025-38467 CVE-2025-38468 CVE-2025-38470                      CVE-2025-38473 CVE-2025-38474 CVE-2025-38476 CVE-2025-38477                      CVE-2025-38478 CVE-2025-38480 CVE-2025-38481 CVE-2025-38482                      CVE-2025-38483 CVE-2025-38487 CVE-2025-38488 CVE-2025-38494                      CVE-2025-38495 CVE-2025-38497 CVE-2025-38498 CVE-2025-38513                      CVE-2025-38514 CVE-2025-38515 CVE-2025-38516 CVE-2025-38529                      CVE-2025-38530 CVE-2025-38535 CVE-2025-38538 CVE-2025-38539                      CVE-2025-38540 CVE-2025-38542 CVE-2025-38546 CVE-2025-38548                      CVE-2025-38553 CVE-2025-38555 CVE-2025-38563 CVE-2025-38565                      CVE-2025-38569 CVE-2025-38572 CVE-2025-38574 CVE-2025-38577                      CVE-2025-38578 CVE-2025-38581 CVE-2025-38601 CVE-2025-38602                      CVE-2025-38604 CVE-2025-38608 CVE-2025-38612 CVE-2025-38617                      CVE-2025-38618 CVE-2025-38622 CVE-2025-38635 CVE-2025-38639                      CVE-2025-38650 CVE-2025-38652 CVE-2025-38663 CVE-2025-38664                      CVE-2025-38666 CVE-2025-38668 CVE-2025-38671 CVE-2025-38676                      CVE-2025-38677 CVE-2025-38680 CVE-2025-38681 CVE-2025-38683                      CVE-2025-38684 CVE-2025-38687 CVE-2025-38691 CVE-2025-38693                      CVE-2025-38694 CVE-2025-38695 CVE-2025-38697 CVE-2025-38698                      CVE-2025-38699 CVE-2025-38700 CVE-2025-38701 CVE-2025-38706                      CVE-2025-38708 CVE-2025-38712 CVE-2025-38713 CVE-2025-38714                      CVE-2025-38715 CVE-2025-38718 CVE-2025-38721 CVE-2025-38724                      CVE-2025-38727 CVE-2025-38729 CVE-2025-38732 CVE-2025-39676                      CVE-2025-39681 CVE-2025-39683 CVE-2025-39687 CVE-2025-39689                      CVE-2025-39691 CVE-2025-39697 CVE-2025-39703 CVE-2025-39709                      CVE-2025-39710 CVE-2025-39713 CVE-2025-39714 CVE-2025-39724                      CVE-2025-39730 CVE-2025-39736 CVE-2025-39737 CVE-2025-39742                      CVE-2025-39743 CVE-2025-39749 CVE-2025-39752 CVE-2025-39756                      CVE-2025-39757 CVE-2025-39760 CVE-2025-39766 CVE-2025-39782                      CVE-2025-39783 CVE-2025-39787 CVE-2025-39788 CVE-2025-39794                      CVE-2025-39795 CVE-2025-39798 CVE-2025-39808 CVE-2025-39812                      CVE-2025-39813 CVE-2025-39817 CVE-2025-39823 CVE-2025-39824                      CVE-2025-39828 CVE-2025-39835 CVE-2025-39839 CVE-2025-39841                      CVE-2025-39846 CVE-2025-39847 CVE-2025-39848 CVE-2025-39853                      CVE-2025-39860 CVE-2025-39864 CVE-2025-39865 CVE-2025-39891                      CVE-2025-39898 CVE-2025-39902 CVE-2025-39920 CVE-2025-40300     Debian Bug     : 1040901 1109891

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.244-1.  Starting with this version, the hyperv-daemons package is     also provided on arm64, and modules are signed with an ephemeral key     on all architectures.  This version additionally includes many more     bug fixes from stable updates 5.10.238-5.10.244.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03374-1 advisory.

    This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues.

    The following security issues were fixed:

    - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862).
    - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356).
    - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).
    - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248298).
    - CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain     (bsc#1245772).
    - CVE-2025-21756: vsock: Keep the binding until socket destruction (bsc#1245795).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1245795).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03397-1 advisory.

    This update for the Linux Kernel 5.14.21-150500_55_103 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356).
    - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).
    - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248298).
    - CVE-2025-21756: vsock: Keep the binding until socket destruction (bsc#1245795).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1245795).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03387-1 advisory.

    This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356).
    - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).
    - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248298).
    - CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain     (bsc#1245772).
    - CVE-2025-21756: vsock: Keep the binding until socket destruction (bsc#1245795).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1245795).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
270144	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20663)	Nessus	Oracle Linux Local Security Checks	2025/10/13	2026/2/9	high
275178	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-25757)	Nessus	Oracle Linux Local Security Checks	2025/11/12	2026/2/9	high
265839	SUSE SLES12 Security Update : kernel (Live Patch 60 for SLE 12 SP5) (SUSE-SU-2025:03337-1)	Nessus	SuSE Local Security Checks	2025/9/25	2025/9/25	high
265841	SUSE SLES15: kernel-livepatch-6_4_0-150600_10_26-rt / etc (SUSE-SU-2025:03319-1)	Nessus	SuSE Local Security Checks	2025/9/25	2026/6/26	high
258133	SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2025:03023-1)	Nessus	SuSE Local Security Checks	2025/8/30	2026/6/26	high
270133	Debian dla-4327 : ata-modules-5.10.0-35-armmp-di - security update	Nessus	Debian Local Security Checks	2025/10/13	2025/10/28	medium
297384	EulerOS Virtualization 2.10.0 : kernel (EulerOS-SA-2026-1172)	Nessus	Huawei Local Security Checks	2026/1/31	2026/1/31	high
266010	SUSE SLES15 Security Update : kernel (Live Patch 31 for SLE 15 SP4) (SUSE-SU-2025:03374-1)	Nessus	SuSE Local Security Checks	2025/9/27	2025/9/27	high
266198	SUSE SLES15 Security Update : kernel (Live Patch 26 for SLE 15 SP5) (SUSE-SU-2025:03397-1)	Nessus	SuSE Local Security Checks	2025/9/30	2025/9/30	high
266211	SUSE SLES15 Security Update : kernel (Live Patch 33 for SLE 15 SP4) (SUSE-SU-2025:03387-1)	Nessus	SuSE Local Security Checks	2025/9/30	2025/9/30	high
297592	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1224)	Nessus	Huawei Local Security Checks	2026/2/2	2026/2/4	high
302971	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-1629)	Nessus	Huawei Local Security Checks	2026/3/18	2026/3/18	high

检测

插件搜索

high

high

high

high

high

medium

high

high

high

high

high

high