The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14744 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: driver: base: fix UAF when driver_attach failed (CVE-2022-49385)

    * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)

    * kernel: tee: amdtee: fix race condition in amdtee_open_session (CVE-2023-53047)

    * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)

    * kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (CVE-2025-38001)

    * kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (CVE-2025-38000)

    * kernel: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead     (CVE-2022-49977)

    * kernel: net: qrtr: start MHI channel after endpoit creation (CVE-2022-50044)

    * kernel: mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (CVE-2022-49991)

    * kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (CVE-2025-38177)

    * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03104-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_10_39 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03130-1 advisory.

    This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount     (bsc#1232271).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231676).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231943).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03156-1 advisory.

    This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount     (bsc#1232271).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231676).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231943).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03186-1 advisory.

    This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount     (bsc#1232271).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231676).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231943).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03208-1 advisory.

    This update for the Linux Kernel 5.14.21-150500_55_94 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03217-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236207).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03212-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_23_47 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1245791).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:16538 advisory.

    This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the     code of a running kernel.  This patch module is targeted for kernel-5.14.0-570.17.1.el9_6.

    Security Fix(es):

    * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)

    * kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (CVE-2025-38001)

    * kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (CVE-2025-38000)

    * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

    * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16540 advisory.

    This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the     code of a running kernel.  This patch module is targeted for kernel-5.14.0-427.44.1.el9_4.

    Security Fix(es):

    * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)

    * kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (CVE-2025-38001)

    * kernel: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (CVE-2025-38000)

    * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

    * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7627-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - Block layer subsystem;

    - ACPI drivers;

    - NILFS2 file system;

    - File systems infrastructure;

    - Memory management;

    - Network traffic control;

    - USB sound devices; (CVE-2025-37932, CVE-2024-53197, CVE-2024-50116, CVE-2021-47379, CVE-2024-49958,     CVE-2022-49179, CVE-2024-46787, CVE-2024-41070, CVE-2025-38000, CVE-2024-56662, CVE-2022-49176,     CVE-2025-37798)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7671-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ACPI drivers;

    - GPU drivers;

    - SMB network file system;

    - Memory management;

    - Netfilter;

    - Network traffic control; (CVE-2024-53051, CVE-2024-46787, CVE-2024-50047, CVE-2024-56662,     CVE-2025-37890, CVE-2025-38001, CVE-2025-37997, CVE-2025-37932, CVE-2025-37798, CVE-2025-38177,     CVE-2025-38000)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
259932	RHEL 9 : kernel (RHSA-2025:14744)	Nessus	Red Hat Local Security Checks	2025/8/31	2025/8/31	high
264439	SUSE SLES15: kernel-livepatch-6_4_0-150600_10_39-rt / etc (SUSE-SU-2025:03104-1)	Nessus	SuSE Local Security Checks	2025/9/10	2026/6/26	high
264509	SUSE SLES15 Security Update : kernel (Live Patch 47 for SLE 15 SP3) (SUSE-SU-2025:03130-1)	Nessus	SuSE Local Security Checks	2025/9/11	2025/9/11	medium
264606	SUSE SLES15 Security Update : kernel (Live Patch 31 for SLE 15 SP4) (SUSE-SU-2025:03156-1)	Nessus	SuSE Local Security Checks	2025/9/12	2025/9/12	medium
264679	SUSE SLES15 Security Update : kernel (Live Patch 19 for SLE 15 SP5) (SUSE-SU-2025:03186-1)	Nessus	SuSE Local Security Checks	2025/9/13	2025/9/13	medium
264882	SUSE SLES15 Security Update : kernel (Live Patch 23 for SLE 15 SP5) (SUSE-SU-2025:03208-1)	Nessus	SuSE Local Security Checks	2025/9/16	2025/9/16	high
264885	SUSE SLES15 Security Update : kernel (Live Patch 6 for SLE 15 SP6) (SUSE-SU-2025:03217-1)	Nessus	SuSE Local Security Checks	2025/9/16	2025/9/16	high
264887	SUSE SLES15 Security Update : kernel (Live Patch 10 for SLE 15 SP6) (SUSE-SU-2025:03212-1)	Nessus	SuSE Local Security Checks	2025/9/16	2025/9/16	high
265782	RHEL 9 : kpatch-patch-5_14_0-570_17_1 (RHSA-2025:16538)	Nessus	Red Hat Local Security Checks	2025/9/24	2025/9/24	high
265795	RHEL 9 : kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 (RHSA-2025:16540)	Nessus	Red Hat Local Security Checks	2025/9/24	2025/9/24	high
241626	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7627-1)	Nessus	Ubuntu Local Security Checks	2025/7/9	2025/7/9	high
242901	Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7671-1)	Nessus	Ubuntu Local Security Checks	2025/7/28	2026/6/11	high

检测

插件搜索

high

high

medium

medium

medium

high

high

high

high

high

high

high