The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03207-1 advisory.

    This update for the Linux Kernel 5.14.21-150500_55_100 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant     enqueue adding class to eltree twice Savino says: We are writing to report that this recent patch     (141d34391abbb315d68556b7c67ad97885407547) [1] can be bypassed, and a UAF can still occur when HFSC is     utilized with NETEM. The patch only checks the cl->cl_nactive field to determine whether it is the first     insertion or not [2], but this field is only incremented by init_vf [3]. By using HFSC_RSC (which uses     init_ed) [4], it is possible to bypass the check and insert the class twice in the eltree. Under normal     conditions, this would lead to an infinite loop in hfsc_dequeue for the reasons we already explained in     this report [5]. However, if TBF is added as root qdisc and it is configured with a very low rate, it can     be utilized to prevent packets from being dequeued. This behavior can be exploited to perform subsequent     insertions in the HFSC eltree and cause a UAF. To fix both the UAF and the infinite loop, with netem as     an hfsc child, check explicitly in hfsc_enqueue whether the class is already in the eltree whenever the     HFSC_RSC flag is set. [1] https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?i     d=141d34391abbb315d68556b7c67ad97885407547 [2]     https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L1572 [3]     https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L677 [4]     https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L1574 [5] https://lore.kernel.org/n     etdev/8DuRWwfqjoRDLDmBMlIfbrsZg9Gx50DHJc1ilxsEBNe2D6NMoigR_eIRIG0LOjMc3r10nUUZtArXx4oZBIdUfZQrwjcQhdinnMis
    _0G7VEk=@willsroot.io/T/#u (CVE-2025-38001)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03130-1 advisory.

    This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount     (bsc#1232271).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231676).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231943).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7609-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - InfiniBand drivers;

    - Netfilter;

    - Network traffic control; (CVE-2025-38001, CVE-2025-37798, CVE-2025-37932, CVE-2025-37997,     CVE-2025-38000, CVE-2025-22088, CVE-2025-37890)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc(CVE-2025-37890)

    crypto: lzo - Fix compression buffer overrun(CVE-2025-38068)

    net: pktgen: fix access outside of user given buffer in pktgen_thread_write().(CVE-2025-38061)

    net_sched: drr: Fix double list add in class with netem as child qdisc(CVE-2025-37915)

    page_pool: Fix use-after-free in page_pool_recycle_in_ring(CVE-2025-38129)

    net_sched: qfq: Fix double list add in class with netem as child qdisc(CVE-2025-37913)

    net: avoid race between device unregistration and ethnl ops(CVE-2025-21701)

    sctp: detect and prevent references to a freed transport in sendmsg(CVE-2025-23142)

    codel: remove sch-q.qlen check before qdisc_tree_reduce_backlog().(CVE-2025-37798)

    net: Fix TOCTOU issue in sk_is_readable().(CVE-2025-38112)

    mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().(CVE-2025-38324)

    vhost-scsi: protect vq-log_used with vq-mutex(CVE-2025-38074)

    ftrace: Add cond_resched() to ftrace_graph_set_hash().(CVE-2025-37940)

    crypto: null - Use spin lock instead of mutex(CVE-2025-37808)

    tipc: fix memory leak in tipc_link_xmit(CVE-2025-37757)

    ice: fix Tx scheduler error handling in XDP callback(CVE-2025-38127)

    dmaengine: idxd: Refactor remove call with idxd_cleanup() helper(CVE-2025-38014)

    arm64: set UXN on swapper page tables(CVE-2022-50232)

    tipc: fix NULL pointer dereference in tipc_mon_reinit_self().(CVE-2025-37824)

    ext4: update s_journal_inum if it changes after journal replay(CVE-2023-53091)

    media: cx231xx: set device_caps for 417(CVE-2025-38044)

    net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done(CVE-2025-38052)

    RDMA/core: Silence oversized kvmalloc() warning(CVE-2025-37867)

    tracing: Fix oob write in trace_seq_to_buffer().(CVE-2025-37923)

    arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs(CVE-2025-37948)

    HID: pidff: Fix null pointer dereference in pidff_find_fields(CVE-2025-37862)

    bpf: track changes_pkt_data property for global functions(CVE-2024-58098)

    jbd2: remove wrong sb-s_sequence check(CVE-2025-37839)

    udp: Fix memory accounting leak.(CVE-2025-22058)

    tpm: do not start chip while suspended(CVE-2025-23149)

    tracing: Do not let histogram values have some modifiers(CVE-2023-53093)

    dm cache: prevent BUG_ON by blocking retries on failed device resumes(CVE-2025-38066)

    netfilter: ipset: fix region locking in hash types(CVE-2025-37997)

    bpf: Fix WARN() in get_bpf_raw_tp_regs(CVE-2025-38285)

    block: fix rq-qos breakage from skipping rq_qos_done_bio().(CVE-2022-49266)

    bnxt_en: Fix out-of-bound memcpy() during ethtool -w(CVE-2025-37911)

    VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify(CVE-2025-38102)

    scsi: target: iscsi: Fix timeout on deleted connection(CVE-2025-38075)

    iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid(CVE-2025-37927)

    net: fix memory leak in tcp_conn_request().(CVE-2024-57841)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata().(CVE-2025-38337)

    drm/ nouveau: Fix WARN_ON in nouveau_fence_context_kill().(CVE-2025-37930)

    arm64: set UXN on swapper page tables(CVE-2022-50230)

    cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path(CVE-2025-37788)

    x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave).(CVE-2022-49557)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    net: usb: lan78xx: Limit packet length to skb-len(CVE-2023-53068)

    x86/iopl: Cure TIF_IO_BITMAP inconsistencies(CVE-2025-38100)

    net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too(CVE-2025-37823)

    net_sched: prio: fix a race in prio_tune().(CVE-2025-38083)

    net_sched: red: fix a race in __red_change().(CVE-2025-38108)

    media: cxusb: no longer judge rbuf when the write fails(CVE-2025-38229)

    xsk: Fix race condition in AF_XDP generic RX path(CVE-2025-37920)

    mm/hugetlb: unshare page tables during VMA split, not before(CVE-2025-38084)

    net_sched: hfsc: Fix a UAF vulnerability in class handling(CVE-2025-37797)

    block: mark GFP_NOIO around sysfs -store().(CVE-2025-21817)

    module: ensure that kobject_put() is safe for module type kobjects(CVE-2025-37995)

    bpf: Fix a data-race around bpf_jit_limit.(CVE-2022-49967)

    ext4: ignore xattrs past end(CVE-2025-37738)

    net_sched: hfsc: Address reentrant enqueue adding class to eltree twice(CVE-2025-38001)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue().(CVE-2025-38000)

    arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users(CVE-2025-37963)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1037 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: check folio mapping after unlock in relocate_one_folio() (CVE-2024-56758)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING (CVE-2025-21816)

    In the Linux kernel, the following vulnerability has been resolved:

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (CVE-2025-38000)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (CVE-2025-38001)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: add missing rcu read protection for procfs content (CVE-2025-38003)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: do not leak refcount in reorder_work (CVE-2025-38031)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (CVE-2025-38034)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: Annotate FDB data races (CVE-2025-38037)

    In the Linux kernel, the following vulnerability has been resolved:

    serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (CVE-2025-38040)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN (CVE-2025-38048)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051)

    In the Linux kernel, the following vulnerability has been resolved:

    __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (CVE-2025-38058)

    In the Linux kernel, the following vulnerability has been resolved:

    genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (CVE-2025-38062)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH (CVE-2025-38063)

    In the Linux kernel, the following vulnerability has been resolved:

    dm cache: prevent BUG_ON by blocking retries on failed device resumes (CVE-2025-38066)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: lzo - Fix compression buffer overrun (CVE-2025-38068)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/mm: Check return value from memblock_phys_alloc_range() (CVE-2025-38071)

    In the Linux kernel, the following vulnerability has been resolved:

    libnvdimm/labels: Fix divide error in nd_label_data_init() (CVE-2025-38072)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: iscsi: Fix timeout on deleted connection (CVE-2025-38075)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

    In the Linux kernel, the following vulnerability has been resolved:

    espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14744 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: driver: base: fix UAF when driver_attach failed (CVE-2022-49385)

    * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)

    * kernel: tee: amdtee: fix race condition in amdtee_open_session (CVE-2023-53047)

    * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)

    * kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (CVE-2025-38001)

    * kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (CVE-2025-38000)

    * kernel: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead     (CVE-2022-49977)

    * kernel: net: qrtr: start MHI channel after endpoit creation (CVE-2022-50044)

    * kernel: mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (CVE-2022-49991)

    * kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (CVE-2025-38177)

    * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14742 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)

    * kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (CVE-2025-38001)

    * kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (CVE-2025-38000)

    * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

    * kernel: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead     (CVE-2022-49977)

    * kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (CVE-2025-38177)

    * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)

    * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02307-1 advisory.

    The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
    - CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg     (bsc#1235728).
    - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
    - CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()     (bsc#1237895).
    - CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
    - CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
    - CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
    - CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
    - CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
    - CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
    - CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
    - CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()     (bsc#1240814).
    - CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
    - CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching     (bsc#1241544).
    - CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
    - CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
    - CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
    - CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
    - CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
    - CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
    - CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
    - CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
    - CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
    - CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
    - CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
    - CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
    - CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
    - CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
    - CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported     (bsc#1242954).
    - CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
    - CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
    - CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
    - CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
    - CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
    - CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
    - CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
    - CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
    - CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
    - CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
    - CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY     (bsc#1243538).
    - CVE-2025-37954: smb: client: Avoid race in open_cached_dir with lease breaks (bsc#1243664).
    - CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
    - CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
    - CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access (bsc#1243571).
    - CVE-2025-37987: pds_core: Prevent possible adminq overflow/stuck condition (bsc#1243542).
    - CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
    - CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
    - CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
    - CVE-2025-37998: openvswitch: Fix unsafe attribute parsing in output_userspace() (bsc#1243836).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
    - CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
    - CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
    - CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
    - CVE-2025-38055: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (bsc#1244747).
    - CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
    - CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
    - CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5973 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5973-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     August 12, 2025                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-36350 CVE-2024-36357 CVE-2024-36913 CVE-2024-41013                      CVE-2024-56758 CVE-2024-57883 CVE-2025-21816 CVE-2025-22119                      CVE-2025-27558 CVE-2025-37958 CVE-2025-38000 CVE-2025-38001                      CVE-2025-38003 CVE-2025-38004 CVE-2025-38031 CVE-2025-38034                      CVE-2025-38035 CVE-2025-38037 CVE-2025-38040 CVE-2025-38043                      CVE-2025-38044 CVE-2025-38048 CVE-2025-38051 CVE-2025-38052                      CVE-2025-38058 CVE-2025-38061 CVE-2025-38062 CVE-2025-38063                      CVE-2025-38065 CVE-2025-38066 CVE-2025-38067 CVE-2025-38068                      CVE-2025-38071 CVE-2025-38072 CVE-2025-38074 CVE-2025-38075                      CVE-2025-38077 CVE-2025-38078 CVE-2025-38079 CVE-2025-38083                      CVE-2025-38084 CVE-2025-38085 CVE-2025-38086 CVE-2025-38088                      CVE-2025-38090 CVE-2025-38097 CVE-2025-38100 CVE-2025-38102                      CVE-2025-38103 CVE-2025-38107 CVE-2025-38108 CVE-2025-38111                      CVE-2025-38112 CVE-2025-38113 CVE-2025-38115 CVE-2025-38118                      CVE-2025-38119 CVE-2025-38120 CVE-2025-38122 CVE-2025-38124                      CVE-2025-38126 CVE-2025-38131 CVE-2025-38135 CVE-2025-38136                      CVE-2025-38138 CVE-2025-38142 CVE-2025-38143 CVE-2025-38145                      CVE-2025-38146 CVE-2025-38147 CVE-2025-38148 CVE-2025-38151                      CVE-2025-38153 CVE-2025-38154 CVE-2025-38157 CVE-2025-38158                      CVE-2025-38159 CVE-2025-38160 CVE-2025-38161 CVE-2025-38163                      CVE-2025-38165 CVE-2025-38166 CVE-2025-38167 CVE-2025-38170                      CVE-2025-38173 CVE-2025-38174 CVE-2025-38180 CVE-2025-38181                      CVE-2025-38183 CVE-2025-38184 CVE-2025-38185 CVE-2025-38190                      CVE-2025-38191 CVE-2025-38193 CVE-2025-38194 CVE-2025-38197                      CVE-2025-38198 CVE-2025-38200 CVE-2025-38202 CVE-2025-38211                      CVE-2025-38212 CVE-2025-38214 CVE-2025-38215 CVE-2025-38218                      CVE-2025-38219 CVE-2025-38222 CVE-2025-38225 CVE-2025-38226                      CVE-2025-38227 CVE-2025-38229 CVE-2025-38230 CVE-2025-38231                      CVE-2025-38236 CVE-2025-38239 CVE-2025-38245 CVE-2025-38249                      CVE-2025-38251 CVE-2025-38257 CVE-2025-38259 CVE-2025-38260                      CVE-2025-38262 CVE-2025-38263 CVE-2025-38273 CVE-2025-38275                      CVE-2025-38277 CVE-2025-38280 CVE-2025-38282 CVE-2025-38285                      CVE-2025-38286 CVE-2025-38293 CVE-2025-38298 CVE-2025-38300                      CVE-2025-38304 CVE-2025-38305 CVE-2025-38310 CVE-2025-38312                      CVE-2025-38313 CVE-2025-38319 CVE-2025-38320 CVE-2025-38323                      CVE-2025-38324 CVE-2025-38326 CVE-2025-38328 CVE-2025-38331                      CVE-2025-38332 CVE-2025-38334 CVE-2025-38336 CVE-2025-38337                      CVE-2025-38342 CVE-2025-38344 CVE-2025-38345 CVE-2025-38346                      CVE-2025-38348 CVE-2025-38350 CVE-2025-38352 CVE-2025-38354                      CVE-2025-38362 CVE-2025-38363 CVE-2025-38364 CVE-2025-38365                      CVE-2025-38371 CVE-2025-38375 CVE-2025-38377 CVE-2025-38380                      CVE-2025-38382 CVE-2025-38384 CVE-2025-38385 CVE-2025-38386                      CVE-2025-38387 CVE-2025-38389 CVE-2025-38391 CVE-2025-38393                      CVE-2025-38395 CVE-2025-38396 CVE-2025-38399 CVE-2025-38400                      CVE-2025-38401 CVE-2025-38403 CVE-2025-38404 CVE-2025-38406                      CVE-2025-38409 CVE-2025-38410 CVE-2025-38412 CVE-2025-38415                      CVE-2025-38416 CVE-2025-38418 CVE-2025-38419 CVE-2025-38420                      CVE-2025-38422 CVE-2025-38424 CVE-2025-38425 CVE-2025-38428                      CVE-2025-38430 CVE-2025-38437 CVE-2025-38439 CVE-2025-38441                      CVE-2025-38443 CVE-2025-38444 CVE-2025-38445 CVE-2025-38448                      CVE-2025-38451 CVE-2025-38455 CVE-2025-38456 CVE-2025-38457                      CVE-2025-38458 CVE-2025-38459 CVE-2025-38460 CVE-2025-38461                      CVE-2025-38462 CVE-2025-38464 CVE-2025-38465 CVE-2025-38466                      CVE-2025-38467 CVE-2025-38468 CVE-2025-38470 CVE-2025-38471                      CVE-2025-38472 CVE-2025-38473 CVE-2025-38474 CVE-2025-38476                      CVE-2025-38477 CVE-2025-38478 CVE-2025-38480 CVE-2025-38481                      CVE-2025-38482 CVE-2025-38483 CVE-2025-38485 CVE-2025-38487                      CVE-2025-38488 CVE-2025-38494 CVE-2025-38495 CVE-2025-38497                      CVE-2025-38498 CVE-2025-38499

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 6.1.147-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20552 advisory.

    - usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38309912] {CVE-2025-38404}
    - i2c/designware: Fix an initialization issue (Michael J. Ruhl) [Orabug: 38253850] {CVE-2025-38380}
    - drm/v3d: Disable interrupts before resetting the GPU (Maira Canal) [Orabug: 38253820] {CVE-2025-38371}
    - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug:
    38253906] {CVE-2025-38395}
    - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [Orabug: 38253863]     {CVE-2025-38384}
    - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253874]     {CVE-2025-38386}
    - wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253945] {CVE-2025-38406}
    - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (Maurizio Lombardi)     [Orabug: 38253914] {CVE-2025-38399}
    - drm/msm: Fix a fence leak in submit error path (Rob Clark) [Orabug: 38253967] {CVE-2025-38410}
    - rose: fix dangling neighbour pointers in rose_rt_device_down() (Kohei Enju) [Orabug: 38253841]     {CVE-2025-38377}
    - drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253886]     {CVE-2025-38389}
    - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (Kurt Borja) [Orabug:
    38253976] {CVE-2025-38412}
    - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [Orabug: 38253900]     {CVE-2025-38393}
    - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug:
    38253922] {CVE-2025-38400}
    - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253880]     {CVE-2025-38387}
    - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu) [Orabug: 38253927]     {CVE-2025-38401}
    - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253893]     {CVE-2025-38391}
    - vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug:
    38253936] {CVE-2025-38403}
    - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [Orabug: 36530624]     {CVE-2024-26726}
    - drm/amd/display: Add null pointer check for get_first_active_display() (Xu Wang) [Orabug: 38253794]     {CVE-2025-38362}
    - drm/tegra: Fix a possible null pointer dereference (Qiu-Ji Chen) [Orabug: 38253800] {CVE-2025-38363}
    - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [Orabug:
    38175043] {CVE-2025-38245}
    - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [Orabug:
    38175063] {CVE-2025-38249}
    - atm: clip: prevent NULL deref in clip_push() (Eric Dumazet) [Orabug: 38175077] {CVE-2025-38251}
    - s390/pkey: Prevent overflow in size calculation for memdup_user() (Fedor Pchelkin) [Orabug: 38175091]     {CVE-2025-38257}
    - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev) [Orabug: 38158700]     {CVE-2025-38230}
    - tty: serial: uartlite: register uart driver in init (Jakub Lewalski) [Orabug: 38175113] {CVE-2025-38262}
    - bcache: fix NULL pointer in cache_set_flush() (Linggang Zeng) [Orabug: 38175119] {CVE-2025-38263}
    - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [Orabug: 38180595]     {CVE-2025-38320}
    - perf: Fix sample vs do_exit() (Peter Zijlstra) [Orabug: 38254029] {CVE-2025-38424}
    - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976983]     {CVE-2025-37958}
    - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [Orabug: 38158476] {CVE-2025-38193}
    - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (James Morse) [Orabug: 37977005]     {CVE-2025-37963}
    - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (James Morse) [Orabug: 37976929]     {CVE-2025-37948}
    - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [Orabug: 38158405] {CVE-2025-38180}
    - net: atm: add lec_mutex (Eric Dumazet) [Orabug: 38180611] {CVE-2025-38323}
    - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) [Orabug: 38158412]     {CVE-2025-38181}
    - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) [Orabug: 38158424]     {CVE-2025-38184}
    - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) [Orabug: 38158433]     {CVE-2025-38185}
    - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) [Orabug: 38180617]     {CVE-2025-38324}
    - wifi: carl9170: do not ping device which has failed to load firmware (Dmitry Antipov) [Orabug: 38254010]     {CVE-2025-38420}
    - aoe: clean device rq_list in aoedev_downdev() (Justin Sanders) [Orabug: 38180627] {CVE-2025-38326}
    - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn) [Orabug: 38132180] {CVE-2025-38085}
    - mm: hugetlb: independent PMD page table shared count (Liu Shixin) [Orabug: 37484959] {CVE-2024-57883}
    - mm/hugetlb: unshare page tables during VMA split, not before (Jann Horn) [Orabug: 38132171]     {CVE-2025-38084}
    - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [Orabug: 38152876]     {CVE-2025-38103}
    - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [Orabug: 38158457]     {CVE-2025-38190}
    - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin) [Orabug:
    38180635] {CVE-2025-38328}
    - jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov) [Orabug:
    38158483] {CVE-2025-38194}
    - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) [Orabug: 38137453]     {CVE-2025-38090}
    - platform/x86: dell_rbu: Fix list usage (Stuart Hayes) [Orabug: 38158494] {CVE-2025-38197}
    - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) [Orabug: 38158517]     {CVE-2025-38200}
    - scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner) [Orabug: 38180667] {CVE-2025-38332}
    - software node: Correct a OOB check in software_node_get_reference_args() (Zijun Hu) [Orabug: 38180730]     {CVE-2025-38342}
    - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Xu Wang) [Orabug:
    38175013] {CVE-2025-38237}
    - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [Orabug: 38158545] {CVE-2025-38203}
    - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [Orabug: 38158552]     {CVE-2025-38204}
    - exfat: fix double free in delayed_free (Namjae Jeon) [Orabug: 38158566] {CVE-2025-38206}
    - ACPICA: fix acpi parse and parseext cache leaks (Seunghun Han) [Orabug: 38180747] {CVE-2025-38344}
    - ACPICA: fix acpi operand cache leak in dswstate.c (Seunghun Han) [Orabug: 38180755] {CVE-2025-38345}
    - remoteproc: core: Release rproc->clean_table after rproc_attach() fails (Xiaolei Wang) [Orabug:
    38254002] {CVE-2025-38418}
    - remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()     (Xiaolei Wang) [Orabug: 38254006] {CVE-2025-38419}
    - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) [Orabug: 38132188]     {CVE-2025-38086}
    - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [Orabug: 38180767] {CVE-2025-38346}
    - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'Ichiro Kawasaki) [Orabug:
    38158591] {CVE-2025-38211}
    - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [Orabug: 38158597] {CVE-2025-38212}
    - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [Orabug:
    38158614] {CVE-2025-38214}
    - NFC: nci: uart: Set tty->disc_data only in success path (Krzysztof Kozlowski) [Orabug: 38253991]     {CVE-2025-38416}
    - f2fs: fix to do sanity check on sit_bitmap_size (Chao Yu) [Orabug: 38158639] {CVE-2025-38218}
    - f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Jaegeuk Kim) [Orabug:
    38158647] {CVE-2025-38219}
    - Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Dan Carpenter) [Orabug: 38254053]     {CVE-2025-38428}
    - ext4: inline: fix len overflow in ext4_prepare_inline_data (Thadeu Lima de Souza Cascardo) [Orabug:
    38158661] {CVE-2025-38222}
    - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tasos Sahanidis) [Orabug: 38180696]     {CVE-2025-38336}
    - media: vivid: Change the siize of the composing (Denis Arefev) [Orabug: 38158680] {CVE-2025-38226}
    - media: vidtv: Terminating the subsequent process of initialization failure (Edward Adam Davis) [Orabug:
    38158685] {CVE-2025-38227}
    - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [Orabug: 38158691]     {CVE-2025-38229}
    - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) [Orabug:
    38180706] {CVE-2025-38337}
    - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Li Lingfeng) [Orabug: 38158706]     {CVE-2025-38231}
    - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Neil Brown) [Orabug: 38254061]     {CVE-2025-38430}
    - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Christian Lamparter) [Orabug: 38180782]     {CVE-2025-38348}
    - x86/iopl: Cure TIF_IO_BITMAP inconsistencies (Thomas Gleixner) [Orabug: 38152863] {CVE-2025-38100}
    - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Ma Wupeng) [Orabug: 38152868]     {CVE-2025-38102}
    - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov)     [Orabug: 38223086] {CVE-2025-38352}
    - net_sched: ets: fix a race in ets_qdisc_change() (Eric Dumazet) [Orabug: 38152893] {CVE-2025-38107}
    - net_sched: red: fix a race in __red_change() (Eric Dumazet) [Orabug: 38152898] {CVE-2025-38108}
    - net_sched: prio: fix a race in prio_tune() (Eric Dumazet) [Orabug: 38105333] {CVE-2025-38083}
    - net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski) [Orabug: 38152911]     {CVE-2025-38111}
    - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj) [Orabug: 38152915] {CVE-2025-38112}
    - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Ritesh Harjani) [Orabug: 38137444]     {CVE-2025-38088}
    - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) [Orabug: 38152922]     {CVE-2025-38115}
    - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (Jeongjun Park) [Orabug: 38180545]     {CVE-2025-38305}
    - scsi: core: ufs: Fix a hang in the error handler (Sanjeev Yadav) [Orabug: 38152945] {CVE-2025-38119}
    - do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro) [Orabug: 38256449]     {CVE-2025-38498}
    - seg6: Fix validation of nexthop addresses (Ido Schimmel) [Orabug: 38180555] {CVE-2025-38310}
    - netfilter: nf_set_pipapo_avx2: fix initial map fill (Florian Westphal) [Orabug: 38152957]     {CVE-2025-38120}
    - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Alok Tiwari) [Orabug: 38152965]     {CVE-2025-38122}
    - serial: Fix potential null-ptr-deref in mlb_usio_probe() (Henry Martin) [Orabug: 38153011]     {CVE-2025-38135}
    - usb: renesas_usbhs: Reorder clock handling and power management in probe (Lad Prabhakar) [Orabug:
    38153016] {CVE-2025-38136}
    - dmaengine: ti: Add NULL check in udma_probe() (Henry Martin) [Orabug: 38153029] {CVE-2025-38138}
    - backlight: pm8941: Add NULL check in wled_configure() (Henry Martin) [Orabug: 38153050] {CVE-2025-38143}
    - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) [Orabug: 38180565]     {CVE-2025-38312}
    - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Henry Martin) [Orabug: 38153059]     {CVE-2025-38145}
    - bus: fsl-mc: fix double-free on mc_dev (Ioana Ciornei) [Orabug: 38180572] {CVE-2025-38313}
    - Squashfs: check return result of sb_min_blocksize (Phillip Lougher) [Orabug: 38253984] {CVE-2025-38415}
    - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo) [Orabug: 38153064] {CVE-2025-38146}
    - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) [Orabug: 38153069]     {CVE-2025-38147}
    - bpf: Avoid __bpf_prog_ret0_warn when jit fails (Kafai Wan) [Orabug: 38180470] {CVE-2025-38280}
    - net: usb: aqc111: fix error handling of usbnet read calls (Nikita Zhandarovich) [Orabug: 38153088]     {CVE-2025-38153}
    - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen) [Orabug: 38153094]     {CVE-2025-38154}
    - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Hoiland-Jorgensen) [Orabug: 38153109]     {CVE-2025-38157}
    - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev) [Orabug:
    38153121] {CVE-2025-38159}
    - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) [Orabug: 38180488] {CVE-2025-38285}
    - pinctrl: at91: Fix possible out-of-boundary access (Andy Shevchenko) [Orabug: 38180494] {CVE-2025-38286}
    - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (Henry Martin) [Orabug: 38153131]     {CVE-2025-38160}
    - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Patrisious Haddad) [Orabug:
    38153138] {CVE-2025-38161}
    - f2fs: fix to do sanity check on sbi->total_valid_block_count (Chao Yu) [Orabug: 38153149]     {CVE-2025-38163}
    - wifi: ath11k: fix node corruption in ar->arvifs list (Stone Zhang) [Orabug: 38180515] {CVE-2025-38293}
    - fs/ntfs3: handle hdr_first_de() return value (Andrey Vatoropin) [Orabug: 38153172] {CVE-2025-38167}
    - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han)     [Orabug: 38180589] {CVE-2025-38319}
    - EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo) [Orabug: 38180524] {CVE-2025-38298}
    - crypto: marvell/cesa - Handle zero-length skcipher requests (Herbert Xu) [Orabug: 38153188]     {CVE-2025-38173}
    - thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky) [Orabug: 38158383]     {CVE-2025-38174}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    HID: core: ensure the allocated report buffer can contain the reserved report ID(CVE-2025-38495)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()(CVE-2025-38399)

    usb: typec: altmodes/displayport: do not index invalid pin_assignments(CVE-2025-38391)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()(CVE-2025-38337)

    mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().(CVE-2025-38324)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    bpf: Fix WARN() in get_bpf_raw_tp_regs(CVE-2025-38285)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    media: cxusb: no longer judge rbuf when the write fails(CVE-2025-38229)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38215)

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38214)

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction(CVE-2025-38211)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    bpf: fix ktls panic with sockmap(CVE-2025-38166)

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation(CVE-2025-38162)

    ice: fix Tx scheduler error handling in XDP callback(CVE-2025-38127)

    net: fix udp gso skb_segment after pull from frag_list(CVE-2025-38124)

    netfilter: nf_set_pipapo_avx2: fix initial map fill(CVE-2025-38120)

    net_sched: sch_sfq: fix a potential crash on gso_skb handling(CVE-2025-38115)

    net/mdiobus: Fix potential out-of-bounds read/write access(CVE-2025-38111)

    net_sched: red: fix a race in __red_change()(CVE-2025-38108)

    VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify(CVE-2025-38102)

    x86/iopl: Cure TIF_IO_BITMAP inconsistencies(CVE-2025-38100)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    mm/hugetlb: unshare page tables during VMA split, not before(CVE-2025-38084)

    net_sched: prio: fix a race in prio_tune()(CVE-2025-38083)

    scsi: target: iscsi: Fix timeout on deleted connection(CVE-2025-38075)

    vhost-scsi: protect vq-log_used with vq-mutex(CVE-2025-38074)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    crypto: lzo - Fix compression buffer overrun(CVE-2025-38068)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    dm cache: prevent BUG_ON by blocking retries on failed device resumes(CVE-2025-38066)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    net: pktgen: fix access outside of user given buffer in pktgen_thread_write()(CVE-2025-38061)

    net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done(CVE-2025-38052)

    media: cx231xx: set device_caps for 417(CVE-2025-38044)

    dmaengine: idxd: Refactor remove call with idxd_cleanup() helper(CVE-2025-38014)

    net_sched: hfsc: Address reentrant enqueue adding class to eltree twice(CVE-2025-38001)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()(CVE-2025-38000)

    openvswitch: Fix unsafe attribute parsing in output_userspace()(CVE-2025-37998)

    netfilter: ipset: fix region locking in hash types(CVE-2025-37997)

    net_sched: Flush gso_skb list too during -change()(CVE-2025-37992)

    net: phy: leds: fix memory leak(CVE-2025-37989)

    ipvs: fix uninit-value for saddr in do_output_route4(CVE-2025-37961)

    bpf: Scrub packet on bpf_redirect_peer(CVE-2025-37959)

    arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs(CVE-2025-37948)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    xsk: Fix race condition in AF_XDP generic RX path(CVE-2025-37920)

    net_sched: drr: Fix double list add in class with netem as child qdisc(CVE-2025-37915)

    net_sched: qfq: Fix double list add in class with netem as child qdisc(CVE-2025-37913)

    net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc(CVE-2025-37890)

    HID: pidff: Fix null pointer dereference in pidff_find_fields(CVE-2025-37862)

    page_pool: avoid infinite loop to schedule delayed worker(CVE-2025-37859)

    tipc: fix NULL pointer dereference in tipc_mon_reinit_self()(CVE-2025-37824)

    net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too(CVE-2025-37823)

    codel: remove sch-q.qlen check before qdisc_tree_reduce_backlog()(CVE-2025-37798)

    net_sched: hfsc: Fix a UAF vulnerability in class handling(CVE-2025-37797)

    net: openvswitch: fix nested key length validation in the set() action(CVE-2025-37789)

    cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path(CVE-2025-37788)

    tipc: fix memory leak in tipc_link_xmit(CVE-2025-37757)

    net: tls: explicitly disallow disconnect(CVE-2025-37756)

    net: ppp: Add bound checking for skb data on ppp_sync_txmung(CVE-2025-37749)

    sctp: detect and prevent references to a freed transport in sendmsg(CVE-2025-23142)

    net: fix NULL pointer dereference in l3mdev_l3_rcv(CVE-2025-22103)

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow(CVE-2025-22086)

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported(CVE-2025-22075)

    net: decrease cached dst counters in dst_release(CVE-2025-22057)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    netfilter: socket: Lookup orig tuple for IPv6 SNAT(CVE-2025-22021)

    regulator: check that dummy regulator has been probed before using it(CVE-2025-22008)

    block: mark GFP_NOIO around sysfs -store()(CVE-2025-21817)

    ata: libata-sff: Ensure that we cannot write outside the allocated buffer(CVE-2025-21738)

    net: avoid race between device unregistration and ethnl ops(CVE-2025-21701)

    bpf: check changes_pkt_data property for extension programs(CVE-2024-58100)

    bpf: track changes_pkt_data property for global functions(CVE-2024-58098)

    net: fix memory leak in tcp_conn_request()(CVE-2024-57841)

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including     the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.(CVE-2024-2201)

    net/mlx5e: Fix cleanup null-ptr deref on encap lock(CVE-2023-53105)

    net: usb: lan78xx: Limit packet length to skb-len(CVE-2023-53068)

    HID: intel-ish-hid: ipc: Fix potential use-after-free in work function(CVE-2023-53039)

    netfilter: allow exp not to be removed in nf_ct_find_expectation(CVE-2023-52927)

    arm64: set UXN on swapper page tables(CVE-2022-50232)

    arm64: set UXN on swapper page tables(CVE-2022-50230)

    bpf: fix potential 32-bit overflow when accessing ARRAY map element(CVE-2022-50167)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    bpf: Fix a data-race around bpf_jit_limit.(CVE-2022-49967)

    netdevsim: Fix memory leak of nsim_dev-fa_cookie(CVE-2022-49803)

    x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)(CVE-2022-49557)

    block: fix rq-qos breakage from skipping rq_qos_done_bio()(CVE-2022-49266)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20530 advisory.

    - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug: 38137447]     {CVE-2025-38089}
    - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4328 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4328-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     October 13, 2025                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.153-1     CVE ID         : CVE-2024-36331 CVE-2024-36350 CVE-2024-36357 CVE-2024-36913                      CVE-2024-41013 CVE-2024-47704 CVE-2024-56758 CVE-2024-57883                      CVE-2024-57924 CVE-2024-58240 CVE-2025-21816 CVE-2025-22119                      CVE-2025-23143 CVE-2025-23160 CVE-2025-27558 CVE-2025-37925                      CVE-2025-37931 CVE-2025-37958 CVE-2025-37968 CVE-2025-38000                      CVE-2025-38001 CVE-2025-38003 CVE-2025-38004 CVE-2025-38031                      CVE-2025-38034 CVE-2025-38035 CVE-2025-38037 CVE-2025-38040                      CVE-2025-38043 CVE-2025-38044 CVE-2025-38048 CVE-2025-38051                      CVE-2025-38052 CVE-2025-38058 CVE-2025-38061 CVE-2025-38062                      CVE-2025-38063 CVE-2025-38065 CVE-2025-38066 CVE-2025-38067                      CVE-2025-38068 CVE-2025-38071 CVE-2025-38072 CVE-2025-38074                      CVE-2025-38075 CVE-2025-38077 CVE-2025-38078 CVE-2025-38079                      CVE-2025-38083 CVE-2025-38084 CVE-2025-38085 CVE-2025-38086                      CVE-2025-38088 CVE-2025-38090 CVE-2025-38097 CVE-2025-38100                      CVE-2025-38102 CVE-2025-38103 CVE-2025-38107 CVE-2025-38108                      CVE-2025-38111 CVE-2025-38112 CVE-2025-38113 CVE-2025-38115                      CVE-2025-38118 CVE-2025-38119 CVE-2025-38120 CVE-2025-38122                      CVE-2025-38124 CVE-2025-38126 CVE-2025-38131 CVE-2025-38135                      CVE-2025-38136 CVE-2025-38138 CVE-2025-38142 CVE-2025-38143                      CVE-2025-38145 CVE-2025-38146 CVE-2025-38147 CVE-2025-38148                      CVE-2025-38151 CVE-2025-38153 CVE-2025-38154 CVE-2025-38157                      CVE-2025-38158 CVE-2025-38159 CVE-2025-38160 CVE-2025-38161                      CVE-2025-38163 CVE-2025-38165 CVE-2025-38166 CVE-2025-38167                      CVE-2025-38170 CVE-2025-38173 CVE-2025-38174 CVE-2025-38180                      CVE-2025-38181 CVE-2025-38183 CVE-2025-38184 CVE-2025-38185                      CVE-2025-38190 CVE-2025-38191 CVE-2025-38193 CVE-2025-38194                      CVE-2025-38197 CVE-2025-38198 CVE-2025-38200 CVE-2025-38202                      CVE-2025-38211 CVE-2025-38212 CVE-2025-38214 CVE-2025-38215                      CVE-2025-38218 CVE-2025-38219 CVE-2025-38222 CVE-2025-38225                      CVE-2025-38226 CVE-2025-38227 CVE-2025-38229 CVE-2025-38230                      CVE-2025-38231 CVE-2025-38236 CVE-2025-38239 CVE-2025-38245                      CVE-2025-38249 CVE-2025-38251 CVE-2025-38257 CVE-2025-38259                      CVE-2025-38260 CVE-2025-38262 CVE-2025-38263 CVE-2025-38273                      CVE-2025-38275 CVE-2025-38277 CVE-2025-38280 CVE-2025-38282                      CVE-2025-38285 CVE-2025-38286 CVE-2025-38293 CVE-2025-38298                      CVE-2025-38300 CVE-2025-38304 CVE-2025-38305 CVE-2025-38310                      CVE-2025-38312 CVE-2025-38313 CVE-2025-38319 CVE-2025-38320                      CVE-2025-38322 CVE-2025-38323 CVE-2025-38324 CVE-2025-38326                      CVE-2025-38328 CVE-2025-38331 CVE-2025-38332 CVE-2025-38334                      CVE-2025-38335 CVE-2025-38336 CVE-2025-38337 CVE-2025-38342                      CVE-2025-38344 CVE-2025-38345 CVE-2025-38346 CVE-2025-38347                      CVE-2025-38348 CVE-2025-38350 CVE-2025-38352 CVE-2025-38354                      CVE-2025-38362 CVE-2025-38363 CVE-2025-38364 CVE-2025-38365                      CVE-2025-38371 CVE-2025-38375 CVE-2025-38377 CVE-2025-38382                      CVE-2025-38384 CVE-2025-38385 CVE-2025-38386 CVE-2025-38387                      CVE-2025-38389 CVE-2025-38391 CVE-2025-38393 CVE-2025-38395                      CVE-2025-38396 CVE-2025-38399 CVE-2025-38400 CVE-2025-38401                      CVE-2025-38403 CVE-2025-38404 CVE-2025-38406 CVE-2025-38409                      CVE-2025-38410 CVE-2025-38412 CVE-2025-38415 CVE-2025-38416                      CVE-2025-38418 CVE-2025-38419 CVE-2025-38420 CVE-2025-38422                      CVE-2025-38424 CVE-2025-38425 CVE-2025-38428 CVE-2025-38430                      CVE-2025-38437 CVE-2025-38439 CVE-2025-38441 CVE-2025-38443                      CVE-2025-38444 CVE-2025-38445 CVE-2025-38448 CVE-2025-38451                      CVE-2025-38455 CVE-2025-38456 CVE-2025-38457 CVE-2025-38458                      CVE-2025-38459 CVE-2025-38460 CVE-2025-38461 CVE-2025-38462                      CVE-2025-38464 CVE-2025-38465 CVE-2025-38466 CVE-2025-38467                      CVE-2025-38468 CVE-2025-38470 CVE-2025-38471 CVE-2025-38472                      CVE-2025-38473 CVE-2025-38474 CVE-2025-38476 CVE-2025-38477                      CVE-2025-38478 CVE-2025-38480 CVE-2025-38481 CVE-2025-38482                      CVE-2025-38483 CVE-2025-38485 CVE-2025-38487 CVE-2025-38488                      CVE-2025-38491 CVE-2025-38494 CVE-2025-38495 CVE-2025-38497                      CVE-2025-38498 CVE-2025-38499 CVE-2025-38500 CVE-2025-38501                      CVE-2025-38502 CVE-2025-38503 CVE-2025-38510 CVE-2025-38512                      CVE-2025-38513 CVE-2025-38514 CVE-2025-38515 CVE-2025-38516                      CVE-2025-38520 CVE-2025-38527 CVE-2025-38528 CVE-2025-38529                      CVE-2025-38530 CVE-2025-38535 CVE-2025-38538 CVE-2025-38539                      CVE-2025-38540 CVE-2025-38542 CVE-2025-38543 CVE-2025-38546                      CVE-2025-38548 CVE-2025-38550 CVE-2025-38552 CVE-2025-38553                      CVE-2025-38555 CVE-2025-38560 CVE-2025-38561 CVE-2025-38562                      CVE-2025-38563 CVE-2025-38565 CVE-2025-38569 CVE-2025-38572                      CVE-2025-38574 CVE-2025-38576 CVE-2025-38577 CVE-2025-38578                      CVE-2025-38579 CVE-2025-38581 CVE-2025-38583 CVE-2025-38587                      CVE-2025-38588 CVE-2025-38601 CVE-2025-38602 CVE-2025-38604                      CVE-2025-38608 CVE-2025-38609 CVE-2025-38610 CVE-2025-38612                      CVE-2025-38614 CVE-2025-38617 CVE-2025-38618 CVE-2025-38622                      CVE-2025-38623 CVE-2025-38624 CVE-2025-38630 CVE-2025-38634                      CVE-2025-38635 CVE-2025-38639 CVE-2025-38644 CVE-2025-38645                      CVE-2025-38650 CVE-2025-38652 CVE-2025-38653 CVE-2025-38663                      CVE-2025-38664 CVE-2025-38665 CVE-2025-38666 CVE-2025-38668                      CVE-2025-38670 CVE-2025-38671 CVE-2025-38676 CVE-2025-38677                      CVE-2025-38679 CVE-2025-38680 CVE-2025-38681 CVE-2025-38683                      CVE-2025-38684 CVE-2025-38685 CVE-2025-38687 CVE-2025-38691                      CVE-2025-38693 CVE-2025-38694 CVE-2025-38695 CVE-2025-38696                      CVE-2025-38697 CVE-2025-38698 CVE-2025-38699 CVE-2025-38700                      CVE-2025-38701 CVE-2025-38702 CVE-2025-38706 CVE-2025-38707                      CVE-2025-38708 CVE-2025-38711 CVE-2025-38712 CVE-2025-38713                      CVE-2025-38714 CVE-2025-38715 CVE-2025-38721 CVE-2025-38723                      CVE-2025-38724 CVE-2025-38725 CVE-2025-38727 CVE-2025-38728                      CVE-2025-38729 CVE-2025-38732 CVE-2025-38735 CVE-2025-38736                      CVE-2025-39673 CVE-2025-39675 CVE-2025-39676 CVE-2025-39681                      CVE-2025-39682 CVE-2025-39683 CVE-2025-39684 CVE-2025-39685                      CVE-2025-39686 CVE-2025-39687 CVE-2025-39689 CVE-2025-39691                      CVE-2025-39692 CVE-2025-39693 CVE-2025-39694 CVE-2025-39697                      CVE-2025-39701 CVE-2025-39702 CVE-2025-39703 CVE-2025-39706                      CVE-2025-39709 CVE-2025-39710 CVE-2025-39713 CVE-2025-39714                      CVE-2025-39715 CVE-2025-39716 CVE-2025-39718 CVE-2025-39719                      CVE-2025-39724 CVE-2025-39730 CVE-2025-39731 CVE-2025-39734                      CVE-2025-39736 CVE-2025-39737 CVE-2025-39738 CVE-2025-39742                      CVE-2025-39743 CVE-2025-39749 CVE-2025-39752 CVE-2025-39756                      CVE-2025-39757 CVE-2025-39759 CVE-2025-39760 CVE-2025-39766                      CVE-2025-39770 CVE-2025-39772 CVE-2025-39773 CVE-2025-39776                      CVE-2025-39782 CVE-2025-39783 CVE-2025-39787 CVE-2025-39788                      CVE-2025-39790 CVE-2025-39794 CVE-2025-39795 CVE-2025-39798                      CVE-2025-39800 CVE-2025-39801 CVE-2025-39806 CVE-2025-39808                      CVE-2025-39812 CVE-2025-39813 CVE-2025-39817 CVE-2025-39819                      CVE-2025-39823 CVE-2025-39824 CVE-2025-39825 CVE-2025-39826                      CVE-2025-39827 CVE-2025-39828 CVE-2025-39835 CVE-2025-39838                      CVE-2025-39839 CVE-2025-39841 CVE-2025-39842 CVE-2025-39843                      CVE-2025-39844 CVE-2025-39845 CVE-2025-39846 CVE-2025-39847                      CVE-2025-39848 CVE-2025-39849 CVE-2025-39853 CVE-2025-39857                      CVE-2025-39860 CVE-2025-39864 CVE-2025-39865 CVE-2025-39866                      CVE-2025-39869 CVE-2025-39870 CVE-2025-39873 CVE-2025-39876                      CVE-2025-39877 CVE-2025-39880 CVE-2025-39881 CVE-2025-39883                      CVE-2025-39885 CVE-2025-39891 CVE-2025-39894 CVE-2025-39898                      CVE-2025-39902 CVE-2025-39907 CVE-2025-39909 CVE-2025-39911                      CVE-2025-39913 CVE-2025-39914 CVE-2025-39916 CVE-2025-39920                      CVE-2025-39923 CVE-2025-40300     Debian Bug     : 1040901 1107479 1107511 1108065 1108069 1108271 1108430                      1109734 1111017 1114773

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.153-1~deb11u1.  Starting with this version, modules are signed     with an ephemeral key on all architectures, and the broken pktcdvd     driver is disabled.  This version additionally includes many more bug     fixes from stable updates 6.1.141-6.1.153.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
264881	SUSE SLES15 Security Update : kernel (Live Patch 25 for SLE 15 SP5) (SUSE-SU-2025:03207-1)	Nessus	SuSE Local Security Checks	2025/9/16	2025/9/16	high
249384	Linux Distros Unpatched Vulnerability : CVE-2025-38001	Nessus	Misc.	2025/8/15	2025/11/12	high
264509	SUSE SLES15 Security Update : kernel (Live Patch 47 for SLE 15 SP3) (SUSE-SU-2025:03130-1)	Nessus	SuSE Local Security Checks	2025/9/11	2025/9/11	medium
240519	Photon OS 4.0: Linux PHSA-2025-4.0-0814	Nessus	PhotonOS Local Security Checks	2025/6/25	2025/10/10	high
241173	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7609-1)	Nessus	Ubuntu Local Security Checks	2025/7/2	2025/7/2	high
261882	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2043)	Nessus	Huawei Local Security Checks	2025/9/10	2025/9/10	medium
264474	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2012)	Nessus	Huawei Local Security Checks	2025/9/10	2025/9/10	medium
240328	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1037)	Nessus	Amazon Linux Local Security Checks	2025/6/23	2025/10/30	medium
259932	RHEL 9 : kernel (RHSA-2025:14744)	Nessus	Red Hat Local Security Checks	2025/8/31	2025/8/31	high
260039	RHEL 8 : kernel (RHSA-2025:14742)	Nessus	Red Hat Local Security Checks	2025/8/31	2025/8/31	high
242099	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2025:02307-1)	Nessus	SuSE Local Security Checks	2025/7/15	2025/9/24	high
249177	Debian dsa-5973 : affs-modules-6.1.0-37-4kc-malta-di - security update	Nessus	Debian Local Security Checks	2025/8/13	2025/10/28	high
261791	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20552)	Nessus	Oracle Linux Local Security Checks	2025/9/9	2025/9/23	medium
270016	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-2230)	Nessus	Huawei Local Security Checks	2025/10/11	2025/10/11	medium
252244	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20530)	Nessus	Oracle Linux Local Security Checks	2025/8/19	2025/8/19	medium
270134	Debian dla-4328 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	2025/10/13	2025/10/28	high

检测

插件搜索

high

high

medium

high

high

medium

medium

medium

high

high

high

high

medium

medium

medium

high