The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03194-1 advisory.

    This update for the Linux Kernel 5.14.21-150500_55_97 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03182-1 advisory.

    This update for the Linux Kernel 5.14.21-150400_24_167 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03222-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_23_50 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03210-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_23_33 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236207).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03235-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_23_42 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236207).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7609-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - InfiniBand drivers;

    - Netfilter;

    - Network traffic control; (CVE-2025-38001, CVE-2025-37798, CVE-2025-37932, CVE-2025-37997,     CVE-2025-38000, CVE-2025-22088, CVE-2025-37890)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    HID: core: ensure the allocated report buffer can contain the reserved report ID(CVE-2025-38495)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()(CVE-2025-38399)

    usb: typec: altmodes/displayport: do not index invalid pin_assignments(CVE-2025-38391)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()(CVE-2025-38337)

    mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().(CVE-2025-38324)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    bpf: Fix WARN() in get_bpf_raw_tp_regs(CVE-2025-38285)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    media: cxusb: no longer judge rbuf when the write fails(CVE-2025-38229)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38215)

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38214)

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction(CVE-2025-38211)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    bpf: fix ktls panic with sockmap(CVE-2025-38166)

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation(CVE-2025-38162)

    ice: fix Tx scheduler error handling in XDP callback(CVE-2025-38127)

    net: fix udp gso skb_segment after pull from frag_list(CVE-2025-38124)

    netfilter: nf_set_pipapo_avx2: fix initial map fill(CVE-2025-38120)

    net_sched: sch_sfq: fix a potential crash on gso_skb handling(CVE-2025-38115)

    net/mdiobus: Fix potential out-of-bounds read/write access(CVE-2025-38111)

    net_sched: red: fix a race in __red_change()(CVE-2025-38108)

    VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify(CVE-2025-38102)

    x86/iopl: Cure TIF_IO_BITMAP inconsistencies(CVE-2025-38100)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    mm/hugetlb: unshare page tables during VMA split, not before(CVE-2025-38084)

    net_sched: prio: fix a race in prio_tune()(CVE-2025-38083)

    scsi: target: iscsi: Fix timeout on deleted connection(CVE-2025-38075)

    vhost-scsi: protect vq-log_used with vq-mutex(CVE-2025-38074)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    crypto: lzo - Fix compression buffer overrun(CVE-2025-38068)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    dm cache: prevent BUG_ON by blocking retries on failed device resumes(CVE-2025-38066)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    net: pktgen: fix access outside of user given buffer in pktgen_thread_write()(CVE-2025-38061)

    net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done(CVE-2025-38052)

    media: cx231xx: set device_caps for 417(CVE-2025-38044)

    dmaengine: idxd: Refactor remove call with idxd_cleanup() helper(CVE-2025-38014)

    net_sched: hfsc: Address reentrant enqueue adding class to eltree twice(CVE-2025-38001)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()(CVE-2025-38000)

    openvswitch: Fix unsafe attribute parsing in output_userspace()(CVE-2025-37998)

    netfilter: ipset: fix region locking in hash types(CVE-2025-37997)

    net_sched: Flush gso_skb list too during -change()(CVE-2025-37992)

    net: phy: leds: fix memory leak(CVE-2025-37989)

    ipvs: fix uninit-value for saddr in do_output_route4(CVE-2025-37961)

    bpf: Scrub packet on bpf_redirect_peer(CVE-2025-37959)

    arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs(CVE-2025-37948)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    xsk: Fix race condition in AF_XDP generic RX path(CVE-2025-37920)

    net_sched: drr: Fix double list add in class with netem as child qdisc(CVE-2025-37915)

    net_sched: qfq: Fix double list add in class with netem as child qdisc(CVE-2025-37913)

    net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc(CVE-2025-37890)

    HID: pidff: Fix null pointer dereference in pidff_find_fields(CVE-2025-37862)

    page_pool: avoid infinite loop to schedule delayed worker(CVE-2025-37859)

    tipc: fix NULL pointer dereference in tipc_mon_reinit_self()(CVE-2025-37824)

    net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too(CVE-2025-37823)

    codel: remove sch-q.qlen check before qdisc_tree_reduce_backlog()(CVE-2025-37798)

    net_sched: hfsc: Fix a UAF vulnerability in class handling(CVE-2025-37797)

    net: openvswitch: fix nested key length validation in the set() action(CVE-2025-37789)

    cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path(CVE-2025-37788)

    tipc: fix memory leak in tipc_link_xmit(CVE-2025-37757)

    net: tls: explicitly disallow disconnect(CVE-2025-37756)

    net: ppp: Add bound checking for skb data on ppp_sync_txmung(CVE-2025-37749)

    sctp: detect and prevent references to a freed transport in sendmsg(CVE-2025-23142)

    net: fix NULL pointer dereference in l3mdev_l3_rcv(CVE-2025-22103)

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow(CVE-2025-22086)

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported(CVE-2025-22075)

    net: decrease cached dst counters in dst_release(CVE-2025-22057)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    netfilter: socket: Lookup orig tuple for IPv6 SNAT(CVE-2025-22021)

    regulator: check that dummy regulator has been probed before using it(CVE-2025-22008)

    block: mark GFP_NOIO around sysfs -store()(CVE-2025-21817)

    ata: libata-sff: Ensure that we cannot write outside the allocated buffer(CVE-2025-21738)

    net: avoid race between device unregistration and ethnl ops(CVE-2025-21701)

    bpf: check changes_pkt_data property for extension programs(CVE-2024-58100)

    bpf: track changes_pkt_data property for global functions(CVE-2024-58098)

    net: fix memory leak in tcp_conn_request()(CVE-2024-57841)

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including     the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.(CVE-2024-2201)

    net/mlx5e: Fix cleanup null-ptr deref on encap lock(CVE-2023-53105)

    net: usb: lan78xx: Limit packet length to skb-len(CVE-2023-53068)

    HID: intel-ish-hid: ipc: Fix potential use-after-free in work function(CVE-2023-53039)

    netfilter: allow exp not to be removed in nf_ct_find_expectation(CVE-2023-52927)

    arm64: set UXN on swapper page tables(CVE-2022-50232)

    arm64: set UXN on swapper page tables(CVE-2022-50230)

    bpf: fix potential 32-bit overflow when accessing ARRAY map element(CVE-2022-50167)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    bpf: Fix a data-race around bpf_jit_limit.(CVE-2022-49967)

    netdevsim: Fix memory leak of nsim_dev-fa_cookie(CVE-2022-49803)

    x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)(CVE-2022-49557)

    block: fix rq-qos breakage from skipping rq_qos_done_bio()(CVE-2022-49266)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc(CVE-2025-37890)

    crypto: lzo - Fix compression buffer overrun(CVE-2025-38068)

    net: pktgen: fix access outside of user given buffer in pktgen_thread_write().(CVE-2025-38061)

    net_sched: drr: Fix double list add in class with netem as child qdisc(CVE-2025-37915)

    page_pool: Fix use-after-free in page_pool_recycle_in_ring(CVE-2025-38129)

    net_sched: qfq: Fix double list add in class with netem as child qdisc(CVE-2025-37913)

    net: avoid race between device unregistration and ethnl ops(CVE-2025-21701)

    sctp: detect and prevent references to a freed transport in sendmsg(CVE-2025-23142)

    codel: remove sch-q.qlen check before qdisc_tree_reduce_backlog().(CVE-2025-37798)

    net: Fix TOCTOU issue in sk_is_readable().(CVE-2025-38112)

    mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().(CVE-2025-38324)

    vhost-scsi: protect vq-log_used with vq-mutex(CVE-2025-38074)

    ftrace: Add cond_resched() to ftrace_graph_set_hash().(CVE-2025-37940)

    crypto: null - Use spin lock instead of mutex(CVE-2025-37808)

    tipc: fix memory leak in tipc_link_xmit(CVE-2025-37757)

    ice: fix Tx scheduler error handling in XDP callback(CVE-2025-38127)

    dmaengine: idxd: Refactor remove call with idxd_cleanup() helper(CVE-2025-38014)

    arm64: set UXN on swapper page tables(CVE-2022-50232)

    tipc: fix NULL pointer dereference in tipc_mon_reinit_self().(CVE-2025-37824)

    ext4: update s_journal_inum if it changes after journal replay(CVE-2023-53091)

    media: cx231xx: set device_caps for 417(CVE-2025-38044)

    net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done(CVE-2025-38052)

    RDMA/core: Silence oversized kvmalloc() warning(CVE-2025-37867)

    tracing: Fix oob write in trace_seq_to_buffer().(CVE-2025-37923)

    arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs(CVE-2025-37948)

    HID: pidff: Fix null pointer dereference in pidff_find_fields(CVE-2025-37862)

    bpf: track changes_pkt_data property for global functions(CVE-2024-58098)

    jbd2: remove wrong sb-s_sequence check(CVE-2025-37839)

    udp: Fix memory accounting leak.(CVE-2025-22058)

    tpm: do not start chip while suspended(CVE-2025-23149)

    tracing: Do not let histogram values have some modifiers(CVE-2023-53093)

    dm cache: prevent BUG_ON by blocking retries on failed device resumes(CVE-2025-38066)

    netfilter: ipset: fix region locking in hash types(CVE-2025-37997)

    bpf: Fix WARN() in get_bpf_raw_tp_regs(CVE-2025-38285)

    block: fix rq-qos breakage from skipping rq_qos_done_bio().(CVE-2022-49266)

    bnxt_en: Fix out-of-bound memcpy() during ethtool -w(CVE-2025-37911)

    VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify(CVE-2025-38102)

    scsi: target: iscsi: Fix timeout on deleted connection(CVE-2025-38075)

    iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid(CVE-2025-37927)

    net: fix memory leak in tcp_conn_request().(CVE-2024-57841)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata().(CVE-2025-38337)

    drm/ nouveau: Fix WARN_ON in nouveau_fence_context_kill().(CVE-2025-37930)

    arm64: set UXN on swapper page tables(CVE-2022-50230)

    cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path(CVE-2025-37788)

    x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave).(CVE-2022-49557)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    net: usb: lan78xx: Limit packet length to skb-len(CVE-2023-53068)

    x86/iopl: Cure TIF_IO_BITMAP inconsistencies(CVE-2025-38100)

    net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too(CVE-2025-37823)

    net_sched: prio: fix a race in prio_tune().(CVE-2025-38083)

    net_sched: red: fix a race in __red_change().(CVE-2025-38108)

    media: cxusb: no longer judge rbuf when the write fails(CVE-2025-38229)

    xsk: Fix race condition in AF_XDP generic RX path(CVE-2025-37920)

    mm/hugetlb: unshare page tables during VMA split, not before(CVE-2025-38084)

    net_sched: hfsc: Fix a UAF vulnerability in class handling(CVE-2025-37797)

    block: mark GFP_NOIO around sysfs -store().(CVE-2025-21817)

    module: ensure that kobject_put() is safe for module type kobjects(CVE-2025-37995)

    bpf: Fix a data-race around bpf_jit_limit.(CVE-2022-49967)

    ext4: ignore xattrs past end(CVE-2025-37738)

    net_sched: hfsc: Address reentrant enqueue adding class to eltree twice(CVE-2025-38001)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue().(CVE-2025-38000)

    arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users(CVE-2025-37963)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4123-1 advisory.

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.231 fixes various security issues

    The following security issues were fixed:

    - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1232637).
    - CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1232818).
    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).
    - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324).
    - CVE-2022-49179: block, bfq: don't move oom_bfqq (bsc#1241331).
    - CVE-2022-49465: blk-throttle: set BIO_THROTTLED when bio has been throttled (bsc#1238920).
    - CVE-2022-49545: ALSA: usb-audio: cancel pending work at closing a MIDI substream (bsc#1238730).
    - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238788).
    - CVE-2022-49564: crypto: qat - add param check for DH (bsc#1238790).
    - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847).
    - CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250302).
    - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998).
    - CVE-2024-46818: drm/amd/display: check gpio_id before used as array index (bsc#1231204).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231676).
    - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231943).
    - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862).
    - CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1233019).
    - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232929).
    - CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink() (bsc#1233072).
    - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans     (bsc#1233712).
    - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233708).
    - CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233680).
    - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
    - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format     (bsc#1236783).
    - CVE-2024-53146: NFSD: prevent a potential integer overflow (bsc#1234854).
    - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847).
    - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650).
    - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234892).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235005).
    - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235218).
    - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).
    - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()     (bsc#1235062).
    - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).
    - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250).
    - CVE-2024-57893: ALSA: seq: oss: fix races at processing SysEx messages (bsc#1235921).
    - CVE-2024-57996: net_sched: sch_sfq: don't allow 1 packet limit (bsc#1239077).
    - CVE-2024-8805: BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability     (bsc#1240840).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
    - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912).
    - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744).
    - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218).
    - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350).
    - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356).
    - CVE-2025-38181: calipso: fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
    - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
    - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350).
    - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID     (bsc#1247351).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).
    - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns     (bsc#1248673).
    - CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208).
    - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207).
    - CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).

    The following non security issues were fixed:

    - Add the git commit and branch to the package description (bsc#920633)
    - Fix description in rpm spec file Spec file description mentions initial kGraft patch which is only true     for real initial patch. Make it more neutral. (bsc#930408)
    - Mark the module as supported (bsc#904970)
    - Provide common kallsyms wrapper API With bsc#1103203, the need for disambiguating between a multiply     defined symbol arose. This is something the kallsyms_lookup_name() based code snippet we used to     copy&paste to every individual CVE fix can't handle. Implement a proper wrapper API for doing the kallsyms     lookups.
    - Require exact kernel version in the patch (bsc#920615)
    - Revert 'Require exact kernel version in the patch' This needs to be done differently, so that modprobe
    --force works as expected. (bsc#920615) This reverts commit c62c11aecd4e3f8822e1b835fea403acc3148c5a.
    - Set immediate flag for the initial patch Setting immediate to true will simplify installation of the     initial patch and possibly also of the further updates. (bsc#907150)
    - The stubs' signatures have changed: each argument used to get mapped to either long or long long, but on     x86_64, the stubs are now receiving a single struct pt_regs only -- it's their responsibility to extract     the arguments as appropriate. In order to not require each and every live patch touching syscalls to     include an insane amount of ifdeffery, provide a set of #defines hiding it: 1.) KLP_SYSCALL_SYM(name)     expands to the syscall stub name for 64 bits as defined by _SYSCALL_DEFINEx(x, _name, ...). 2.) If the     architeture requires 32bit specific stubs for syscalls sharing a common implementation between 32 and     64bits, the KLP_ARCH_HAS_SYSCALL_COMPAT_STUBS macro is defined. 3.) If KLP_ARCH_HAS_SYSCALL_COMPAT_STUBS     is defined, then KLP_SYSCALL_COMPAT_STUB_SYM(name) expands to the syscall stub name for 32 bits as defined     by _SYSCALL_DEFINEx(x, _name, ...). 4.) For syscalls not sharing a common implementation between 32 and 64     bits, i.e. those defined by COMPAT_SYSCALL_DEFINEx(), the macro KLP_COMPAT_SYSCALL_SYM(name) expands to     the stub name defined as defined by COMPAT_SYSCALL_DEFINEx(x, _name, ...). 5.) Finally, for hiding     differences between the signatures, provide the macro KLP_SYSCALL_DECLx(x, sym, ...) which expands to a     declaration of sym, with the x arguments either mapped to long resp. long long each, or collapsed to a     single struct pt_regs argument as appropriate for the architecture. Note that these macros are defined as     appropriate on kernels before and after 4.17, so that live patch code can be shared. (bsc#1149841)
    - bsc#1249208: fix livepatching target module name (bsc#1252946)
    - uname_patch: convert to the syscall stub wrapper macros from klp_syscalls.h In order to make the live     patch to the newuname() syscall work on kernels >= 4.17 again, convert it to the KLP_SYSCALL_*() wrapper     macros provided by klp_syscalls.h. (bsc#1149841)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02307-1 advisory.

    The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
    - CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg     (bsc#1235728).
    - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
    - CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()     (bsc#1237895).
    - CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
    - CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
    - CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
    - CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
    - CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
    - CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
    - CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
    - CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()     (bsc#1240814).
    - CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
    - CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching     (bsc#1241544).
    - CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
    - CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
    - CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
    - CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
    - CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
    - CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
    - CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
    - CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
    - CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
    - CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
    - CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
    - CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
    - CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
    - CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
    - CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported     (bsc#1242954).
    - CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
    - CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
    - CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
    - CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
    - CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
    - CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
    - CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
    - CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
    - CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
    - CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
    - CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY     (bsc#1243538).
    - CVE-2025-37954: smb: client: Avoid race in open_cached_dir with lease breaks (bsc#1243664).
    - CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
    - CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
    - CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access (bsc#1243571).
    - CVE-2025-37987: pds_core: Prevent possible adminq overflow/stuck condition (bsc#1243542).
    - CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
    - CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
    - CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
    - CVE-2025-37998: openvswitch: Fix unsafe attribute parsing in output_userspace() (bsc#1243836).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
    - CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
    - CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
    - CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
    - CVE-2025-38055: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (bsc#1244747).
    - CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
    - CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
    - CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7655-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PA-RISC architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - Bluetooth drivers;

    - Bus devices;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Buffer Sharing and Synchronization framework;

    - DMA engine subsystem;

    - ARM SCMI message protocol;

    - GPU drivers;

    - HID subsystem;

    - HSI subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - MCB driver;

    - Multiple devices driver;

    - Media drivers;

    - MemoryStick subsystem;

    - Multifunction device drivers;

    - PCI Endpoint Test driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - Device tree and open firmware driver;

    - PCI subsystem;

    - TI SCI PM domains driver;

    - PWM drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI subsystem;

    - QCOM SoC drivers;

    - Samsung SoC drivers;

    - TCM subsystem;

    - Thermal drivers;

    - UFS subsystem;

    - Cadence USB3 driver;

    - ChipIdea USB driver;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Type-C support driver;

    - USB Type-C Connector System Software Interface driver;

    - Backlight driver;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - File systems infrastructure;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - Kernel stack handling interfaces;

    - Bluetooth subsystem;

    - IPv6 networking;

    - Network traffic control;

    - SCTP protocol;

    - RDMA verbs API;

    - SoC audio core drivers;

    - BPF subsystem;

    - Kernel command line parsing driver;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Networking core;

    - IPv4 networking;

    - MAC80211 subsystem;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - Netfilter;

    - Open vSwitch;

    - Phonet protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - SoC Audio for Freescale CPUs drivers;

    - Virtio sound driver;

    - CPU Power monitoring subsystem; (CVE-2025-37989, CVE-2025-22071, CVE-2025-37808, CVE-2025-37983,     CVE-2025-38001, CVE-2024-46816, CVE-2024-50125, CVE-2025-38575, CVE-2025-37766, CVE-2022-49168,     CVE-2025-22025, CVE-2025-22035, CVE-2025-37923, CVE-2024-49989, CVE-2025-23148, CVE-2024-53051,     CVE-2025-39728, CVE-2025-21956, CVE-2025-37741, CVE-2025-37970, CVE-2025-37798, CVE-2025-23157,     CVE-2025-38177, CVE-2022-49535, CVE-2025-22027, CVE-2025-37756, CVE-2025-38023, CVE-2025-22066,     CVE-2025-37780, CVE-2025-37995, CVE-2025-37739, CVE-2025-37932, CVE-2025-37982, CVE-2025-37812,     CVE-2025-23156, CVE-2025-38005, CVE-2025-21839, CVE-2025-37892, CVE-2025-22073, CVE-2024-35866,     CVE-2023-52757, CVE-2025-37785, CVE-2025-23150, CVE-2024-58093, CVE-2025-21992, CVE-2025-37905,     CVE-2025-37836, CVE-2025-21964, CVE-2025-23140, CVE-2025-22056, CVE-2025-37915, CVE-2025-22054,     CVE-2025-37859, CVE-2025-22050, CVE-2025-37811, CVE-2024-38540, CVE-2025-37794, CVE-2025-37839,     CVE-2022-21546, CVE-2025-22089, CVE-2025-22079, CVE-2024-56751, CVE-2025-37789, CVE-2025-37790,     CVE-2025-23159, CVE-2025-22097, CVE-2025-37883, CVE-2025-37829, CVE-2023-52572, CVE-2025-21962,     CVE-2025-37823, CVE-2024-53203, CVE-2025-38000, CVE-2025-38152, CVE-2025-37771, CVE-2025-39735,     CVE-2025-37992, CVE-2025-37937, CVE-2025-22081, CVE-2024-35943, CVE-2025-37803, CVE-2025-37940,     CVE-2025-22005, CVE-2025-22014, CVE-2025-37742, CVE-2022-49063, CVE-2025-37890, CVE-2025-37969,     CVE-2025-37788, CVE-2022-48893, CVE-2025-23161, CVE-2024-46753, CVE-2025-21853, CVE-2025-37817,     CVE-2022-49636, CVE-2025-37985, CVE-2025-37787, CVE-2025-37810, CVE-2025-22008, CVE-2025-37824,     CVE-2025-37765, CVE-2025-23145, CVE-2025-37830, CVE-2025-37913, CVE-2025-37881, CVE-2025-37967,     CVE-2025-37912, CVE-2024-42230, CVE-2024-46821, CVE-2024-56608, CVE-2025-37805, CVE-2025-37838,     CVE-2025-38637, CVE-2025-38024, CVE-2025-23138, CVE-2025-37949, CVE-2024-46751, CVE-2025-22007,     CVE-2025-37844, CVE-2024-46812, CVE-2025-37889, CVE-2023-53034, CVE-2025-37927, CVE-2025-37998,     CVE-2024-42322, CVE-2024-50280, CVE-2025-22086, CVE-2025-21963, CVE-2024-50272, CVE-2024-54458,     CVE-2024-36908, CVE-2025-22062, CVE-2025-37994, CVE-2025-22044, CVE-2025-22018, CVE-2025-22010,     CVE-2024-49960, CVE-2025-37768, CVE-2025-37911, CVE-2025-22060, CVE-2025-37781, CVE-2024-26686,     CVE-2024-50047, CVE-2025-37850, CVE-2024-46742, CVE-2025-37797, CVE-2025-37767, CVE-2025-23136,     CVE-2025-23158, CVE-2025-37792, CVE-2025-37749, CVE-2025-38009, CVE-2024-35867, CVE-2025-37885,     CVE-2025-37914, CVE-2024-46774, CVE-2025-38094, CVE-2025-23163, CVE-2024-38541, CVE-2025-37819,     CVE-2025-22020, CVE-2025-37857, CVE-2025-21975, CVE-2024-53144, CVE-2025-21991, CVE-2025-37867,     CVE-2025-37930, CVE-2025-37796, CVE-2025-21968, CVE-2025-22075, CVE-2025-37997, CVE-2025-22063,     CVE-2025-37840, CVE-2025-37909, CVE-2025-22045, CVE-2024-46787, CVE-2025-37738, CVE-2025-22055,     CVE-2025-37862, CVE-2024-56664, CVE-2025-21959, CVE-2025-22004, CVE-2024-50258, CVE-2025-23146,     CVE-2025-22021, CVE-2025-21994, CVE-2025-21957, CVE-2025-37758, CVE-2024-26739, CVE-2025-37858,     CVE-2025-37757, CVE-2025-23142, CVE-2025-23151, CVE-2025-21996, CVE-2025-21970, CVE-2025-37770,     CVE-2024-35790, CVE-2025-37773, CVE-2025-37990, CVE-2025-21941, CVE-2025-21999, CVE-2024-53128,     CVE-2025-37851, CVE-2025-23147, CVE-2025-37964, CVE-2025-37841, CVE-2025-37875, CVE-2024-53168,     CVE-2022-49728, CVE-2025-23144, CVE-2025-37991, CVE-2024-56551, CVE-2025-21981, CVE-2024-27402,     CVE-2025-37740, CVE-2024-36945)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02334-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2021-47212: net/mlx5: Update error handler for UCTX and UMEM (bsc#1222709).
    - CVE-2021-47455: ptp: Fix possible memory leak in ptp_clock_register() (bsc#1225254).
    - CVE-2021-47527: serial: core: fix transmit-buffer reset and memleak (bsc#1227768).
    - CVE-2022-21546: scsi: target: Fix WRITE_SAME No Data Buffer crash (bsc#1242243).
    - CVE-2022-49154: KVM: SVM: fix panic on out-of-bounds guest IRQ (bsc#1238167).
    - CVE-2022-49622: netfilter: nf_tables: fix crash when nf_trace is enabled (bsc#1239042).
    - CVE-2022-49731: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() (bsc#1239071).
    - CVE-2022-49764: kABI: workaround 'bpf: Prevent bpf program recursion for raw tracepoint probes' changes     (bsc#1242301).
    - CVE-2022-49780: scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()     (bsc#1242262).
    - CVE-2022-49814: kcm: close race conditions on sk_receive_queue (bsc#1242498).
    - CVE-2022-49879: ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1242733).
    - CVE-2022-49881: wifi: cfg80211: fix memory leak in query_regdb_file() (bsc#1242481).
    - CVE-2022-49917: ipvs: fix WARNING in ip_vs_app_net_cleanup() (bsc#1242406).
    - CVE-2022-49921: net: sched: Fix use after free in red_enqueue() (bsc#1242359).
    - CVE-2022-50055: iavf: Fix adminq error handling (bsc#1245039).
    - CVE-2022-50087: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (bsc#1245119).
    - CVE-2022-50134: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (bsc#1244802).
    - CVE-2022-50200: selinux: Add boundary check in put_entry() (bsc#1245149).
    - CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command     (bsc#1220883).
    - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
    - CVE-2023-53020: l2tp: fix lockdep splat (bsc#1240224).
    - CVE-2023-53090: drm/amdkfd: Fix an illegal memory access (bsc#1242753).
    - CVE-2023-53091: ext4: update s_journal_inum if it changes after journal replay (bsc#1242767).
    - CVE-2023-53133: bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()     (bsc#1242423).
    - CVE-2024-26586: mlxsw: spectrum_acl_tcam: Fix stack corruption (bsc#1220243).
    - CVE-2024-26825: nfc: nci: free rx_data_reassembly skb on NCI device cleanup (bsc#1223065).
    - CVE-2024-26872: RDMA/srpt: Do not register event handler until srpt device is fully setup (bsc#1223115).
    - CVE-2024-26875: media: pvrusb2: fix uaf in pvr2_context_set_notify (bsc#1223118).
    - CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device     attribute group (bsc#1224712).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-38588: ftrace: Fix possible use-after-free issue in ftrace_location() (bsc#1226837).
    - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
    - CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
    - CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
    - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
    - CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching     (bsc#1241544).
    - CVE-2025-23149: tpm: do not start chip while suspended (bsc#1242758).
    - CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
    - CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
    - CVE-2025-37781: i2c: cros-ec-tunnel: defer probe if parent EC is not present (bsc#1242575).
    - CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
    - CVE-2025-37810: usb: dwc3: gadget: check that event count does not exceed event buffer length     (bsc#1242906).
    - CVE-2025-37836: PCI: Fix reference leak in pci_register_host_bridge() (bsc#1242957).
    - CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
    - CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
    - CVE-2025-37892: mtd: inftlcore: Add error check for inftl_read_oob() (bsc#1243536).
    - CVE-2025-37911: bnxt_en: Fix out-of-bound memcpy() during ethtool -w (bsc#1243469).
    - CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
    - CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
    - CVE-2025-37928: dm-bufio: do not schedule in atomic context (bsc#1243621).
    - CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
    - CVE-2025-37980: block: fix resource leak in blk_register_queue() error path (bsc#1243522).
    - CVE-2025-37982: wifi: wl1251: fix memory leak in wl1251_tx_work (bsc#1243524).
    - CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
    - CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
    - CVE-2025-37998: openvswitch: Fix unsafe attribute parsing in output_userspace() (bsc#1243836).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38004: can: bcm: add locking for bcm_op runtime updates (bsc#1244274).
    - CVE-2025-38023: nfs: handle failure of nfs_get_lock_context in unlock path (bsc#1245004).
    - CVE-2025-38024: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (bsc#1245025).
    - CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write()     (bsc#1245440).
    - CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).
    - CVE-2025-38078: ALSA: pcm: Fix race of buffer access at PCM OSS layer (bsc#1244737).
    - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    sfc: fix use after free when disabling sriov(CVE-2022-49626)

    gfs2: Check sb_bsize_shift after reading superblock(CVE-2022-49769)

    dm ioctl: fix misbehavior if list_versions races with module loading(CVE-2022-49771)

    mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()(CVE-2022-49787)

    misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()(CVE-2022-49788)

    ata: libata-transport: fix double ata_host_put() in ata_tport_add()(CVE-2022-49826)

    udf: Fix a slab-out-of-bounds write bug in udf_find_entry()(CVE-2022-49846)

    tipc: fix the msg-req tlv len check in tipc_nl_compat_name_table_dump_header(CVE-2022-49862)

    ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network(CVE-2022-49865)

    HID: hyperv: fix possible memory leak in mousevsc_probe()(CVE-2022-49874)

    ipv6: fix WARNING in ip6_route_net_exit_late()(CVE-2022-49903)

    net: mdio: fix undefined behavior in bit shift for __mdiobus_register(CVE-2022-49907)

    net: sched: Fix use after free in red_enqueue()(CVE-2022-49921)

    media: pvrusb2: fix memory leak in pvr_probe(CVE-2022-49982)

    scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq(CVE-2022-49986)

    md: call __md_stop_writes in md_stop(CVE-2022-49987)

    xen/privcmd: fix error exit of privcmd_ioctl_dm_op()(CVE-2022-49989)

    drivers:md:fix a potential use-after-free bug(CVE-2022-50022)

    iavf: Fix reset error handling(CVE-2022-50053)

    net: atlantic: fix aq_vec index out of range error(CVE-2022-50066)

    iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)(CVE-2022-50093)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    sched, cpuset: Fix dl_cpu_busy() panic due to empty cs-cpus_allowed(CVE-2022-50103)

    RDMA/rxe: Fix error unwind in rxe_create_qp()(CVE-2022-50127)

    PM: hibernate: defer device probing when resuming from hibernation(CVE-2022-50202)

    md-raid10: fix KASAN warning(CVE-2022-50211)

    usbnet: Fix linkwatch use-after-free on disconnect(CVE-2022-50220)

    KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0(CVE-2022-50228)

    net: usb: smsc95xx: Limit packet length to skb-len(CVE-2023-53062)

    ext4: update s_journal_inum if it changes after journal replay(CVE-2023-53091)

    nvmet: avoid potential UAF in nvmet_req_complete()(CVE-2023-53116)

    net: usb: smsc75xx: Limit packet length to skb-len(CVE-2023-53125)

    media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()(CVE-2023-53146)

    xfrm: state: fix out-of-bounds read during lookup(CVE-2024-57982)

    ipv6: mcast: extend RCU protection in igmp6_send()(CVE-2025-21759)

    ndisc: extend RCU protection in ndisc_send_skb()(CVE-2025-21760)

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info()(CVE-2025-21761)

    arp: use RCU protection in arp_xmit()(CVE-2025-21762)

    neighbour: use RCU protection in __neigh_notify()(CVE-2025-21763)

    ndisc: use RCU protection in ndisc_alloc_skb()(CVE-2025-21764)

    ext4: fix off-by-one error in do_split(CVE-2025-23150)

    mm/vmscan: don't try to reclaim hwpoison folio(CVE-2025-37834)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    block: fix resource leak in blk_register_queue() error path(CVE-2025-37980)

    module: ensure that kobject_put() is safe for module type kobjects(CVE-2025-37995)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()(CVE-2025-38000)

    nfs: handle failure of nfs_get_lock_context in unlock path(CVE-2025-38023)

    RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug(CVE-2025-38024)

    nvmet-tcp: don't restore null sk_state_change(CVE-2025-38035)

    smb: client: Fix use-after-free in cifs_fill_dirent(CVE-2025-38051)

    __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock(CVE-2025-38058)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    ipc: fix to protect IPCS lookups using RCU(CVE-2025-38212)

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38215)

    media: cxusb: no longer judge rbuf when the write fails(CVE-2025-38229)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()(CVE-2025-38337)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20530 advisory.

    - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug: 38137447]     {CVE-2025-38089}
    - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
264663	SUSE SLES15 Security Update : kernel (Live Patch 24 for SLE 15 SP5) (SUSE-SU-2025:03194-1)	Nessus	SuSE Local Security Checks	2025/9/13	2025/9/13	high
264674	SUSE SLES15 Security Update : kernel (Live Patch 41 for SLE 15 SP4) (SUSE-SU-2025:03182-1)	Nessus	SuSE Local Security Checks	2025/9/13	2025/9/13	high
264888	SUSE SLES15 Security Update : kernel (Live Patch 1 for SLE 15 SP7) (SUSE-SU-2025:03222-1)	Nessus	SuSE Local Security Checks	2025/9/16	2025/9/16	high
264889	SUSE SLES15 Security Update : kernel (Live Patch 7 for SLE 15 SP6) (SUSE-SU-2025:03210-1)	Nessus	SuSE Local Security Checks	2025/9/16	2025/9/16	high
265313	SUSE SLES15 Security Update : kernel (Live Patch 9 for SLE 15 SP6) (SUSE-SU-2025:03235-1)	Nessus	SuSE Local Security Checks	2025/9/17	2025/9/17	high
241173	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7609-1)	Nessus	Ubuntu Local Security Checks	2025/7/2	2025/7/2	high
270016	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-2230)	Nessus	Huawei Local Security Checks	2025/10/11	2025/10/11	medium
283191	MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.14.el7.AXS7 (AXSA:2025-10933:76)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/13	high
264474	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2012)	Nessus	Huawei Local Security Checks	2025/9/10	2025/9/10	medium
275755	SUSE SLES12 Security Update : kernel (Live Patch 61 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2025:4123-1)	Nessus	SuSE Local Security Checks	2025/11/19	2025/11/19	high
242099	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2025:02307-1)	Nessus	SuSE Local Security Checks	2025/7/15	2025/9/24	high
242345	Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-7655-1)	Nessus	Ubuntu Local Security Checks	2025/7/18	2025/7/18	high
242218	SUSE SLES12 Security Update : kernel (SUSE-SU-2025:02334-1)	Nessus	SuSE Local Security Checks	2025/7/17	2025/9/24	critical
287964	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-1101)	Nessus	Huawei Local Security Checks	2026/1/16	2026/1/16	high
252244	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20530)	Nessus	Oracle Linux Local Security Checks	2025/8/19	2026/2/9	medium

检测

插件搜索

high

high

high

high

high

high

medium

high

medium

high

high

high

critical

high

medium