The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3681-1 advisory.

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local     attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
    - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate     privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
    - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN     privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service     (bsc#1213666).
    - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that     could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
    - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user     with special privileges to impact a kernel information leak issue (bsc#1213601).
    - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to     perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel     information leak issue (bsc#1214149).
    - CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a     local user to crash the system, causing a denial of service condition (bsc#1213969).
    - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
    - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
    - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
    - CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to     crash the system due to a missing sanity check (bsc#1214348).
    - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to     crash the system due to a double-free (bsc#1214350).
    - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local     attacker with normal user privilege to cause a denial of service (bsc#1214451).
    - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return     speculative data resulting in loss of confidentiality (bsc#1213927).
    - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
    - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3680-1 advisory.

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local     attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
    - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate     privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
    - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return     speculative data resulting in loss of confidentiality (bsc#1213927).
    - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN     privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service     (bsc#1213666).
    - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that     could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
    - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user     with special privileges to impact a kernel information leak issue (bsc#1213601).
    - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to     perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel     information leak issue (bsc#1214149).
    - CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a     local user to crash the system, causing a denial of service condition (bsc#1213969).
    - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
    - CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to     crash the system due to a missing sanity check (bsc#1214348).
    - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to     crash the system due to a double-free (bsc#1214350).
    - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local     attacker with normal user privilege to cause a denial of service (bsc#1214451).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3749-1 advisory.

    This update for the Linux Kernel 4.12.14-122_133 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
    - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
    - CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
    - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that     could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3812-1 advisory.

    This update for the Linux Kernel 5.3.18-150200_24_129 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
    - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
    - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged     attacker to overflow the kernel stack (bsc#1214123).
    - CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
    - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that     could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3846-1 advisory.

    This update for the Linux Kernel 5.3.18-150200_24_145 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
    - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
    - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged     attacker to overflow the kernel stack (bsc#1214123).
    - CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
    - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that     could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6799 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

    * kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

    * kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7411 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

    * kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

    * kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)

    * kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free     (CVE-2023-4147)

    * kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-bounds memory access flaw was found in the Linux kernel's TUN/TAP device driver functionality in     how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows     a local user to crash or potentially escalate their privileges on the system. (CVE-2023-3812)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1961 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1257 advisory.

    This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.2. It addresses 6 CVEs:
    CVE-2025-21785, CVE-2023-53107, CVE-2025-21927, CVE-2023-3812, CVE-2024-53150, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1255 advisory.

    This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 9.2 Compliant. It addresses 3     CVEs: CVE-2024-53141, CVE-2023-3812, CVE-2023-3609.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7549 advisory.

  - An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-     after-free, related to dvb_register_device dynamically allocating fops. (CVE-2022-45884)

  - An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a     .disconnect versus dvb_device_open race condition that leads to a use-after-free. (CVE-2022-45886)

  - An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a     use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event.
    (CVE-2022-45919)

  - A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS     transfers response data to a system call, there are still local variable points to the memory region, and     if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a     denial of service. (CVE-2023-1192)

  - Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly     marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and     container escape. (CVE-2023-2163)

  - An out-of-bounds memory access flaw was found in the Linux kernel's TUN/TAP device driver functionality in     how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows     a local user to crash or potentially escalate their privileges on the system. (CVE-2023-3812)

  - A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a     logical bug in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a malicious local     privileged user to cause a use-after-free and double-free problem, which may permit remote code execution     or lead to local privilege escalation problem. (CVE-2023-5178)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1256 advisory.

    This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.2. It addresses 6 CVEs:
    CVE-2023-53107, CVE-2025-21756, CVE-2025-21927, CVE-2025-21785, CVE-2024-53150, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
181659	SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2023:3681-1)	Nessus	SuSE Local Security Checks	2023/9/20	2026/6/26	high
181664	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:3680-1)	Nessus	SuSE Local Security Checks	2023/9/20	2026/6/26	high
181872	SUSE SLES12 Security Update : kernel (Live Patch 35 for SLE 12 SP5) (SUSE-SU-2023:3749-1)	Nessus	SuSE Local Security Checks	2023/9/26	2026/6/26	high
182121	SUSE SLES15 Security Update : kernel (Live Patch 30 for SLE 15 SP2) (SUSE-SU-2023:3812-1)	Nessus	SuSE Local Security Checks	2023/9/28	2026/6/26	high
182180	SUSE SLES15 Security Update : kernel (Live Patch 34 for SLE 15 SP2) (SUSE-SU-2023:3846-1)	Nessus	SuSE Local Security Checks	2023/9/29	2026/6/26	high
185419	RHEL 8 : kpatch-patch (RHSA-2023:6799)	Nessus	Red Hat Local Security Checks	2023/11/9	2024/11/7	critical
186054	RHEL 9 : kpatch-patch (RHSA-2023:7411)	Nessus	Red Hat Local Security Checks	2023/11/21	2024/11/7	critical
226402	Linux Distros Unpatched Vulnerability : CVE-2023-3812	Nessus	Misc.	2025/3/5	2026/7/17	high
193734	RHEL 8 : kpatch-patch (RHSA-2024:1961)	Nessus	Red Hat Local Security Checks	2024/4/23	2024/11/7	high
355420	Rocky Linux 9.2 [CIQ] Security Update: bpftool / bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1257)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	high
355662	Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1255)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
186633	Rocky Linux 8 : kernel (RLSA-2023:7549)	Nessus	Rocky Linux Local Security Checks	2023/12/6	2024/8/9	high
355344	Rocky Linux 9.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_1256)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/5	high

检测

插件搜索

high

high

high

high

high

critical

critical

high

high

high

high

high

high