Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - KVMVMX将 /dev/kvm 暴露给用户空间之前仅进行_all_初始化仅在完成所有设置之后调用 kvm_init()因为 kvm_init() 会将 /dev/kvm 暴露给用户空间并因此允许用户空间创建 VM并调用其他 ioctl 。例如如果用户空间能够在 vmx_init() 配置该列表之前创建 VMKVM 在尝试向 per-CPU load_vmcss_on_cpu 列表添加 vCPU 时会遇到空指针。
    缺陷内核空指针取消引用地址0000000000000008 #PF内核模式下的主管写入访问 #PFerror_code(0x0002) - 不存在页面 PGD 0 P4D 0 Oops0002 [#1] SMP CPU: 6 PID: 1143 Comm其他
    稳定版未受感染 6.0.0-rc7+ #988 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP0010:vmx_vcpu_load_vmcs+0x68/0x230 [kvm_intel] <TASK> vmx_vcpu_load+0x16 /0x60 [kvm_intel] kvm_arch_vcpu_load+0x32/0x1f0 [kvm] vcpu_load+0x2f/0x40 [kvm] kvm_arch_vcpu_create+0x231/0x310 [kvm] kvm_vm_ioctl+0x79f/0xe10 [kvm] ? handle_mm_fault+0xb1/0x220 __x64_sys_ioctl+0x80/0xb0 do_syscall_64+0x2b/0x50 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP0033:0x7f5a6b05743b 中链接的模块vhost_net vhost vhost_iotlb(irq+tap kvmpass kvm) </TASK>CVE-2022-49932

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

因此，會受到 ALAS2023-2023-148 公告中所提及的多個弱點影響。

    在 Linux 核心中，下列弱點已解決：

    KVMVMX將 /dev/kvm 洩漏至使用者空間前執行 _all_ 初始化 (CVE-2022-49932)

    Linux 核心效能事件系統中存在釋放後使用弱點，攻擊者可利用此弱點來提升本機權限。

    perf_group_detach 函式在呼叫 add_event_to_groups() 之前並未檢查事件的同級，但是 remove_on_exec 可以在從其群組卸離之前呼叫 list_del_event()，從而可能使用造成釋放後使用弱點的懸置指標。

    我們建議升級為過往的 commit fd0815f632c24878e325821943edccc7fde947a2。(CVE-2023-2235)

    在 Linux 核心 6.2.6 以及之前的所有版本中，net/tls/tls_main.c 中的 do_tls_getsockopt 缺少 lock_sock 呼叫，可引致爭用條件 (造成釋放後使用或 NULL 指標解除參照)。(CVE-2023-28466)

    在 Linux 核心 6.2.8 及更低版本的 arch/x86/kvm/vmx/nested.c 中發現一個問題。x86_64 上的 nVMX 缺少 CR0 和 CR4 的一致性檢查。(CVE-2023-30456)

    在 Linux 核心中，下列弱點已解決：

    ACPIPPTT修正以避免在 PPTT 不存在時在 atomic 內容中進入睡眠狀態 (CVE-2023-53070)

    在 Linux 核心中，下列弱點已解決：

    ftrace：修正索引為 0 時 lookup_rec() 中的無效位址存取 (CVE-2023-53075)

    在 Linux 核心中，下列弱點已解決：

    ocfs2：修正寫入失敗後的資料損毀 (CVE-2023-53081)

    在 Linux 核心中，下列弱點已解決：

    drm/shmem-helper移除放置在錯誤路徑中的另一個錯誤 (CVE-2023-53084)

    在 Linux 核心中，下列弱點已解決：

    drm/i915/active修正將非閒置障礙物誤用為隔離追踪器的問題 (CVE-2023-53087)

    在 Linux 核心中，下列弱點已解決：

    ext4：修正 ext4_xattr_delete_inode 中的任務懸置 (CVE-2023-53089)

    在 Linux 核心中，下列弱點已解決：

    ext4如果 s_journal_inum 在日誌記錄重播後有所變更則對其進行更新 (CVE-2023-53091)

    在 Linux 核心中，下列弱點已解決：

    drm/ttm修正 NULL 指標解除參照 (CVE-2023-53095)

    在 Linux 核心中，下列弱點已解決：

    互連釋放節點時修正記憶體洩漏 (CVE-2023-53096)

    在 Linux 核心中，下列弱點已解決：

    ext4：修正 ext4_update_inline_data 中的警告 (CVE-2023-53100)

    在 Linux 核心中，下列弱點已解決：

    ext4：初始化 bootloader inode 時將 i_disksize 歸零 (CVE-2023-53101)

    在 Linux 核心中，下列弱點已解決：

    連結如果非 eth 裝置從屬失敗則還原連結的 IFF_SLAVE 旗標 (CVE-2023-53103)

    在 Linux 核心中，下列弱點已解決：

    veth修正 XDP_REDIRECT 中的釋放後使用 (CVE-2023-53107)

    在 Linux 核心中，下列弱點已解決：

    net：tunnels：註釋 dev->needed_headroom 的無鎖定存取 (CVE-2023-53109)

    在 Linux 核心中，下列弱點已解決：

    loop修正釋放後使用問題 (CVE-2023-53111)

    在 Linux 核心中，下列弱點已解決：

    drm/i915/sseu修正 max_subslices array-index-out-of-bounds 存取 (CVE-2023-53112)

    在 Linux 核心中，下列弱點已解決：

    fs：關閉檔案描述符號時防止超出邊界陣列推測 (CVE-2023-53117)

    在 Linux 核心中，下列弱點已解決：

    tcp: 現可從處理程序背景資訊呼叫 tcp_make_synack() (CVE-2023-53121)

    在 Linux 核心中，下列弱點已解決：

    PCIs390修正按函式熱插拔的 PCI 資源釋放後使用 (CVE-2023-53123)

    在 Linux 核心中，下列弱點已解決：

    SUNRPC：修正伺服器關機洩漏 (CVE-2023-53131)

    在 Linux 核心中，下列弱點已解決：

    bpf、sockmap修正 tcp_bpf_recvmsg_parser() 中 len 為 0 時的無限迴圈錯誤 (CVE-2023-53133)

    在 Linux 核心中，下列弱點已解決：

    af_unix修正 OOB 支援中的結構 pid 洩漏 (CVE-2023-53136)

    在 Linux 核心中，下列弱點已解決：

    ext4：修正移動目錄時可能發生的損毀問題 (CVE-2023-53137)

    在 Linux 核心中，下列弱點已解決：

    scsicore移除之前的 /proc/scsi/${proc_name} 目錄 (CVE-2023-53140)

    在 Linux 核心中，下列弱點已解決：

    ila：不在 ila_xlat_nl_cmd_get_mapping() 中產生空白訊息 (CVE-2023-53141)

    在 Linux 核心中，下列弱點已解決：

    ext4：修正 1k 區塊檔案系統上的另一個差一 fsmap 錯誤 (CVE-2023-53143)

    在 Linux 核心中，下列弱點已解決：

    x86/resctrl在使用之前和之後清除 staged_config[] (CVE-2023-53169)

Tenable 已直接從所測試產品的安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

因此，该软件受到 ALAS2023-2023-148 公告中提及的多个漏洞影响。

    在 Linux 内核中，以下漏洞已修复：

    KVMVMX将 /dev/kvm 暴露给用户空间之前进行 _all_ 初始化 (CVE-2022-49932)

    Linux 内核性能事件系统中存在一个释放后使用漏洞，攻击者可利用此漏洞实现本地特权提升。

    perf_group_detach 函数在调用 add_event_to_groups() 前未检查事件同级组件的 attach_state，但是 remove_on_exec 可以在从其群组分离之前调用 list_del_event()，从而可以使用悬摆指针造成释放后使用漏洞。

    我们建议升级过去的提交 fd0815f632c24878e325821943edccc7fde947a2。(CVE-2023-2235)

    在 Linux 内核 6.2.6 及其之前所有版本中，net/tls/tls_main.c 的 do_tls_getsockopt 缺少 lock_sock 调用，从而导致争用条件（造成释放后使用或空指针取消引用）。(CVE-2023-28466)

    在 6.2.8 及之前版本的 Linux 内核的 arch/x86/kvm/vmx/nested.c 中发现了一个问题。x86_64 上的 nVMX 缺少对 CR0 和 CR4 的一致性检查。(CVE-2023-30456)

    在 Linux 内核中，以下漏洞已修复：

    ACPIPPTT修复以避免缺少 PPTT 时 atomic 上下文中的休眠 (CVE-2023-53070)

    在 Linux 内核中，以下漏洞已修复：

    ftrace：修复索引为 0 时 lookup_rec() 中的无效地址访问 (CVE-2023-53075)

    在 Linux 内核中，以下漏洞已修复：

    ocfs2：修复写入失败后的数据损坏 (CVE-2023-53081)

    在 Linux 内核中，以下漏洞已修复：

    drm/shmem-helper删除错误路径中另一个错误的放置 (CVE-2023-53084)

    在 Linux 内核中，以下漏洞已修复：

    drm/i915/active修复将非空闲屏障误用为屏障跟踪器 (CVE-2023-53087)

    在 Linux 内核中，以下漏洞已修复：

    ext4：修复 ext4_xattr_delete_inode 中任务挂起（CVE-2023-53089）

    在 Linux 内核中，以下漏洞已修复：

    ext4如果 s_journal_inum 在日志重播后发生更改则更新 s_journal_inum (CVE-2023-53091)

    在 Linux 内核中，以下漏洞已修复：

    drm/ttm修复空指针取消引用 (CVE-2023-53095)

    在 Linux 内核中，以下漏洞已修复：

    互连修复释放节点时的内存泄漏 (CVE-2023-53096)

    在 Linux 内核中，以下漏洞已修复：

    ext4：修复 ext4_update_inline_data 中的警告 (CVE-2023-53100)

    在 Linux 内核中，以下漏洞已修复：

    ext4：初始化 bootloader inode 时，i_disksize 为零 (CVE-2023-53101)

    在 Linux 内核中，以下漏洞已修复：

    bonding如果 non-eth dev enslave 失败则还原绑定的 IFF_SLAVE 标记 (CVE-2023-53103)

    在 Linux 内核中，以下漏洞已修复：

    veth修复 XDP_REDIRECT 中的释放后使用 (CVE-2023-53107)

    在 Linux 内核中，以下漏洞已修复：

    net：tunnels：对 dev->needed_headroom 的无锁访问进行注解 (CVE-2023-53109)

    在 Linux 内核中，以下漏洞已修复：

    loop修复释放后使用问题 (CVE-2023-53111)

    在 Linux 内核中，以下漏洞已修复：

    drm/i915/sseu修复 max_subslices array-index-out-of-bounds 访问 (CVE-2023-53112)

    在 Linux 内核中，以下漏洞已修复：

    fs：关闭文件描述符时防止越界数组推测 (CVE-2023-53117)

    在 Linux 内核中，以下漏洞已修复：

    tcp：可从进程上下文调用 tcp_make_synack() (CVE-2023-53121)

    在 Linux 内核中，以下漏洞已修复：

    PCIs390通过按功能热插拔修复 PCI 资源的释放后使用 (CVE-2023-53123)

    在 Linux 内核中，以下漏洞已修复：

    SUNRPC：修复服务器关机泄漏 (CVE-2023-53131)

    在 Linux 内核中，以下漏洞已修复：

    bpfsockmap修复当 len 为 tcp_bpf_recvmsg_parser() 中的 0 时出现的无限循环错误 (CVE-2023-53133)

    在 Linux 内核中，以下漏洞已修复：

    af_unix修复 OOB 支持中的结构 pid 泄漏 (CVE-2023-53136)

    在 Linux 内核中，以下漏洞已修复：

    ext4：修复移动目录时可能发生损坏的问题 (CVE-2023-53137)

    在 Linux 内核中，以下漏洞已修复：

    scsicore提前删除 /proc/scsi/${proc_name} 目录 (CVE-2023-53140)

    在 Linux 内核中，以下漏洞已修复：

    ila：不在 ila_xlat_nl_cmd_get_mapping() 中生成空消息 (CVE-2023-53141)

    在 Linux 内核中，以下漏洞已修复：

    ext4：修复 1k 块文件系统上的另一个 off-by-one fsmap 错误 (CVE-2023-53143)

    在 Linux 内核中，以下漏洞已修复：

    x86/resctrl清除使用之前和之后的 staged_config[] (CVE-2023-53169)

Tenable 已直接从测试产品的安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - KVMVMX將 /dev/kvm 暴露給使用者空間前進行 _all_ 初始化。只在 _all_ 設定完成後才呼叫 kvm_init()因為 kvm_init() 會將 /dev/kvm 暴露給使用者空間因此允許使用者空間建立 VM (並呼叫其他 ioctl )。例如嘗試將 vCPU 新增至每個 CPU 的 delayed_vmcss_on_cpu 清單時如果使用者空間能夠在 vmx_init() 設定所述清單之前建立 VM則 KVM 會遇到 NULL 指標。
    錯誤核心 NULL 指標解除參照、位址0000000000000008 #PF在核心模式中監督寫入存取 #PFerror_code(0x0002) - 不存在頁面 PGD 0 P4D 0 Oops0002 [#1] SMP CPU6 PID 1143 Comm在
    穩定 未受污染的 6.0.0-rc7+ #988 硬體名稱QEMU Standard PC (Q35 + ICH9, 2009)、BIOS 0.0.0 2015 年 2 月 6 日 RIP 0010:vmx_vcpu_load_vmcs+0x68/0x230 [kvm_intel] <TASK> vmx_vcpu_load+0x16 /0x60 [kvm_intel] kvm_arch_vcpu_load+0x32/0x1f0 [kvm] vcpu_load+0x2f/0x40 [kvm] kvm_arch_vcpu_create+0x231/0x310 [kvm] kvm_vm_ioctl+0x79f/0xe10 [kvm] handle_mm_fault+0xb1/0x220 __x64_sys_ioctl+0x80/0xb0 do_syscall_64+0x2b/0x50 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP 0033:0x7f5a6b05743b </TASK> 模組連結vhost_net vhost vhost_iotlb tap kvm_ (CVE-2022-49932[in ]vhost_iotlb tap kvm_)

請注意，Nessus 依賴供應商報告的套件存在。

したがって、ALAS2023-2023-148 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

    Linux カーネルで、以下の脆弱性が解決されています。

    KVMVMX/dev/kvm をユーザー空間に漏洩する前に _all_ initialization を行いますCVE-2022-49932

    Linux カーネルのパフォーマンスイベントシステムにメモリ解放後使用 (use-after-free) の脆弱性があり、これが悪用されてローカルの権限昇格が引き起こされる可能性があります。

    perf_group_detach 関数は、add_event_to_groups() を呼び出す前にイベントの兄弟の attach_state をチェックしませんでしたが、remove_on_exec によりグループからデタッチする前に list_del_event() を呼び出せるため、ダングリングポインターを使用してメモリ解放後使用 (use-after-free) の脆弱性を引き起こす可能性があります。

    過去のコミット fd0815f632c24878e325821943edccc7fde947a2 をアップグレードすることを推奨します。(CVE-2023-2235)

    6.2.6 までの Linux カーネルの net/tls/tls_main.c の do_tls_getsockopt に lock_sock 呼び出しが欠如しているため、競合状態 (結果としてメモリ解放後使用 (Use After Free) または NULL ポインターデリファレンス) が発生します。(CVE-2023-28466)

    6.2.8より前の Linux カーネルの arch/x86/kvm/vmx/nested.c で問題が発見されました。x86_64 の nVMX には、CR0 および CR4 に対する一貫性チェックがありません。(CVE-2023-30456)

    Linux カーネルで、以下の脆弱性が解決されています。

    ACPIPPTTPPTT が存在しない際にアトミックコンテキストでのスリープを回避するために修正しますCVE-2023-53070

    Linux カーネルで、以下の脆弱性が解決されています。

    ftrace: インデックスが 0 の場合の lookup_rec() での無効なアドレスアクセスを修正 (CVE-2023-53075)

    Linux カーネルで、以下の脆弱性が解決されています。

    ocfs2: 書き込みに失敗した後のデータ破損を修正 (CVE-2023-53081)

    Linux カーネルで、以下の脆弱性が解決されています。

    drm/shmem-helperエラーパスに配置される別の errant put を削除しますCVE-2023-53084

    Linux カーネルで、以下の脆弱性が解決されています。

    drm/i915/active非アイドルバリアのフェンストラッカーとしての誤用を修正CVE-2023-53087

    Linux カーネルで、以下の脆弱性が解決されています。

    ext4: ext4_xattr_delete_inode でハングアップしたタスクを修正 (CVE-2023-53089)

    Linux カーネルで、以下の脆弱性が解決されています。

    ext4ジャーナルリプレイ後に変更される場合は s_journal_inum を更新しますCVE-2023-53091

    Linux カーネルで、以下の脆弱性が解決されています。

    drm/ttmNULL ポインターデリファレンスを修正CVE-2023-53095

    Linux カーネルで、以下の脆弱性が解決されています。

    Interconnectノードを解放する際の mem 漏洩を修正しますCVE-2023-53096

    Linux カーネルで、以下の脆弱性が解決されています。

    ext4: ext4_update_inline_data の警告を修正 (CVE-2023-53100)

    Linux カーネルで、以下の脆弱性が解決されています。

    ext4: ブートローダーの inode を初期化する際に i_disksize をゼロにする (CVE-2023-53101)

    Linux カーネルで、以下の脆弱性が解決されています。

    bondingnon-eth devenslave が失敗した場合は、bond の IFF_SLAVE フラグを復元しますCVE-2023-53103

    Linux カーネルで、以下の脆弱性が解決されています。

    vethXDP_REDIRECT の use-after-free を修正しますCVE-2023-53107

    Linux カーネルで、以下の脆弱性が解決されています。

    net: tunnels: dev->needed_headroom へのロックレスアクセスに注釈を付ける (CVE-2023-53109)

    Linux カーネルで、以下の脆弱性が解決されています。

    loopuse-after-free の問題を修正しますCVE-2023-53111

    Linux カーネルで、以下の脆弱性が解決されています。

    drm/i915/sseumax_subslices を修正します array-index-out-of-bounds アクセスCVE-2023-53112]

    Linux カーネルで、以下の脆弱性が解決されています。

    fs: ファイル記述子を閉じる際に領域外の配列投機を防ぐ (CVE-2023-53117)

    Linux カーネルで、以下の脆弱性が解決されています。

    tcp: tcp_make_synack() は、プロセスコンテキストから呼び出される可能性がある (CVE-2023-53121)

    Linux カーネルで、以下の脆弱性が解決されています。

    PCIs390機能ごとのホットプラグで PCI リソースの use-after-free を修正しますCVE-2023-53123

    Linux カーネルで、以下の脆弱性が解決されています。

    SUNRPC: サーバーのシャットダウンの漏洩を修正します (CVE-2023-53131)

    Linux カーネルで、以下の脆弱性が解決されています。

    bpf、sockmaptcp_bpf_recvmsg_parser() で len が 0 の場合に発生する無限ループエラーを修正しますCVE-2023-53133

    Linux カーネルで、以下の脆弱性が解決されています。

    af_unixOOB サポートの struct pid の漏洩を修正しますCVE-2023-53136

    Linux カーネルで、以下の脆弱性が解決されています。

    ext4: ディレクトリを移動する際の破損の可能性を修正 (CVE-2023-53137)

    Linux カーネルで、以下の脆弱性が解決されています。

    scsicore/proc/scsi/${proc_name} ディレクトリを早期に削除しますCVE-2023-53140

    Linux カーネルで、以下の脆弱性が解決されています。

    ila: ila_xlat_nl_cmd_get_mapping() で空のメッセージを生成しない (CVE-2023-53141)

    Linux カーネルで、以下の脆弱性が解決されています。

    ext4: 1k ブロックファイルシステムでの別の off-by-one fsmap エラーを修正 (CVE-2023-53143)

    Linux カーネルで、以下の脆弱性が解決されています。

    x86/resctrl使用する前と後に staged_config[] をクリアしますCVE-2023-53169

Tenable は、前述の記述ブロックをテスト済み製品のセキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - KVMVMXkvm_init() が /dev/kvm をユーザー空間に漏洩するため、ユーザー空間に /dev/kvm を漏洩する前に _all_ 初期化を行い、_all_ setup が完了してから kvm_init() を呼び出します。これにより、ユーザー空間は VM を作成し、他の ioctl を呼び出すことができるためです。例：ユーザー空間が vmx_init() によるリストの構成前に VM を作成できる場合、CPU ごとの load_vmcss_on_cpu リストに vCPU を追加しようとする際に、KVM は NULL ポインターに遭遇します。
    BUGカーネル NULL ポインターデリファレンス、アドレス000000000000008 #PFカーネルモードのスーパーバイザー書き込みアクセス #PFerror_code(0x0002) - 存在しないページ PGD 0 P4D 0 Oops0002 [#1] SMP CPU6 PID1143 Comm :
    安定版stable 汚染されていない 6.0.0-rc7+ #988 ハードウェア名QEMU Standard PCQ35 + ICH9、2009、BIOS 0.0.0 02/06/2015 RIP: 0010:vmx_vcpu_load_vmcs+0x68/0x230 [kvm_intel] <TASK> vmx_vcpu_load+0x16 /0x60 [kvm_intel] kvm_arch_vcpu_load+0x32/0x1f0 [kvm] vcpu_load+0x2f/0x40 [kvm] kvm_arch_vcpu_create+0x231/0x310 [kvm] kvm_vm_ioctl+0x79f/0xe10 [kvm] ? handle_mm_fault+0xb1/0x220 __x64_sys_ioctl+0x80/0xb0 do_syscall_64CVE-2022-49932+ 0x2b/0x50 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP 0033:0x7f5a6b05743b </TASK> モジュールがリンクされていますvhost_net vhost vhost_iotlbirkvhost_iotlbir

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    tracing: Add down_write(trace_event_sem) when adding trace event(CVE-2025-38539)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    pinmux: fix race causing mux_owner NULL with active mux_usecount(CVE-2025-38632)

    openvswitch: Fix unsafe attribute parsing in output_userspace()(CVE-2025-37998)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38214)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    padata: do not leak refcount in reorder_work(CVE-2025-38031)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow(CVE-2025-22086)

    HID: core: ensure the allocated report buffer can contain the reserved report ID(CVE-2025-38495)

    net_sched: sch_sfq: fix a potential crash on gso_skb handling(CVE-2025-38115)

    pinctrl: qcom: msm: mark certain pins as invalid for interrupts(CVE-2025-38516)

    fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass(CVE-2025-38396)

    ata: libata-sff: Ensure that we cannot write outside the allocated buffer(CVE-2025-21738)

    HID: intel-ish-hid: ipc: Fix potential use-after-free in work function(CVE-2023-53039)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation(CVE-2025-38162)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns(CVE-2025-38499)

    crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)

    pptp: ensure minimal skb length in pptp_xmit()(CVE-2025-38574)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    net: openvswitch: Fix the dead loop of MPLS parse(CVE-2025-38146)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()(CVE-2025-38399)

    i2c: qup: jump out of the loop in case of timeout(CVE-2025-38671)

    x86/sgx: Prevent attempts to reclaim poisoned pages(CVE-2025-38334)

    nvmet-tcp: don't restore null(CVE-2025-38035)

    net: fix udp gso skb_segment after pull from frag_list(CVE-2025-38124)

    net/mlx5e: Fix cleanup null-ptr deref on encap lock(CVE-2023-53105)

    net: fix NULL pointer dereference in l3mdev_l3_rcv(CVE-2025-22103)

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    bpf: check changes_pkt_data property for extension programs(CVE-2024-58100)

    bpf: fix ktls panic with sockmap(CVE-2025-38166)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported(CVE-2025-22075)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace(CVE-2022-49932)

    net/mdiobus: Fix potential out-of-bounds read/write access(CVE-2025-38111)

    dmaengine: idxd: fix memory leak in error handling path of idxd_alloc(CVE-2025-38015)

    tcp: add accessors to read/set tp-snd_cwnd(CVE-2022-49325)

    perf: Fix sample vs do_exit()(CVE-2025-38424)

    regulator: core: fix NULL dereference on unbind due to stale coupling data(CVE-2025-38668)

    calipso: Don't call calipso functions for AF_INET sk.(CVE-2025-38147)

    Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If     fb_add_videomode()(CVE-2025-38215)

    usb: typec: altmodes/displayport: do not index invalid pin_assignments(CVE-2025-38391)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    netdevsim: Fix memory leak of nsim_dev-fa_cookie(CVE-2022-49803)

    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()(CVE-2025-38103)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    netlink: Fix wraparounds of sk-sk_rmem_alloc(CVE-2025-38465)

    EDAC/skx_common: Fix general protection fault(CVE-2025-38298)

    drm/nouveau: prime: fix ttm_bo_delayed_delete oops(CVE-2025-37765)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    netfilter: nf_set_pipapo_avx2: fix initial map fill(CVE-2025-38120)

    bpf, sockmap: Fix panic when calling skb_linearize(CVE-2025-38165)

    nvme-tcp: sanitize request list handling(CVE-2025-38264)

    bpf, sockmap: Avoid using sk_socket after free when sending(CVE-2025-38154)

    bpf: consider that tail calls invalidate packet pointers(CVE-2024-58237)

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction(CVE-2025-38211)

    NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN(CVE-2025-38393)

    ipc: fix to protect IPCS lookups using(CVE-2025-38212)

    net_sched: Flush gso_skb list too during -change()(CVE-2025-37992)

    netfilter: socket: Lookup orig tuple for IPv6 SNAT(CVE-2025-22021)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    net: tls: explicitly disallow disconnect(CVE-2025-37756)

    bpf: Scrub packet on bpf_redirect_peer(CVE-2025-37959)

    netfilter: allow exp not to be removed in nf_ct_find_expectation(CVE-2023-52927)

    net: ppp: Add bound checking for skb data on ppp_sync_txmung(CVE-2025-37749)

    net: decrease cached dst counters in dst_release(CVE-2025-22057)

    net: openvswitch: fix nested key length validation in the set() action(CVE-2025-37789)

    netfilter: conntrack: revisit gc autotuning(CVE-2022-49110)

    bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()(CVE-2023-53133)

    blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()(CVE-2023-53421)

    writeback: fix use-after-free in __mark_inode_dirty()(CVE-2025-39866)

    scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure(CVE-2025-38695)

    serial: mctrl_gpio: split disable_ms into sync and no_sync APIs(CVE-2025-38040)

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including     the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.(CVE-2024-2201)

    perf/core: Prevent VMA split of buffer mappings(CVE-2025-38563)

    ipvs: fix uninit-value for saddr in do_output_route4(CVE-2025-37961)

    net: phy: leds: fix memory leak(CVE-2025-37989)

    seg6: Fix validation of nexthop addresses(CVE-2025-38310)

    page_pool: avoid infinite loop to schedule delayed worker(CVE-2025-37859)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    perf/core: Exit early on perf_mmap() fail(CVE-2025-38565)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    scsi: qla2xxx: Fix warning message due to adisc being flushed(CVE-2022-49158)

    scsi: qla2xxx: Implement ref count for SRB(CVE-2022-49159)

    tcp: add accessors to read/set tp-snd_cwnd(CVE-2022-49325)

    KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace(CVE-2022-49932)

    mmc: rtsx_pci: fix return value check of mmc_add_host()(CVE-2022-50267)

    ext4: fix potential out of bound read in ext4_fc_replay_scan()(CVE-2022-50306)

    net: do not sense pfmemalloc status in skb_append_pagefrags()(CVE-2022-50323)

    scsi: target: iscsi: Fix a race condition between login_work and the login thread(CVE-2022-50350)

    drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED(CVE-2022-50390)

    scsi: qla2xxx: Fix crash when I/O abort times out(CVE-2022-50493)

    vfio/type1: prevent underflow of locked_vm via exec()(CVE-2023-53171)

    mm: fix zswap writeback race condition(CVE-2023-53178)

    sched/fair: Don't balance task to its current running CPU(CVE-2023-53215)

    media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()(CVE-2023-53220)

    bpf: Fix memleak due to fentry attach failure(CVE-2023-53221)

    firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle(CVE-2023-53250)

    scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue(CVE-2023-53280)

    ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer(CVE-2023-53395)

    mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()(CVE-2023-53401)

    blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()(CVE-2023-53421)

    kobject: Add sanity check for kset-kobj.ktype in kset_register()(CVE-2023-53480)

    drm/dp_mst: Fix MST sideband message body length check(CVE-2024-56616)

    tls: stop recv() if initial process_rx_list gave us non-DATA(CVE-2024-58239)

    netfilter: nf_tables: reject mismatching sum of field_len with set key length(CVE-2025-21826)

    drm/nouveau: prime: fix ttm_bo_delayed_delete oops(CVE-2025-37765)

    dmaengine: idxd: fix memory leak in error handling path of idxd_alloc(CVE-2025-38015)

    nvmet-tcp: don't restore null sk_state_change(CVE-2025-38035)

    serial: mctrl_gpio: split disable_ms into sync and no_sync APIs(CVE-2025-38040)

    crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)

    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()(CVE-2025-38103)

    net: Fix TOCTOU issue in sk_is_readable()(CVE-2025-38112)

    page_pool: Fix use-after-free in page_pool_recycle_in_ring(CVE-2025-38129)

    net: openvswitch: Fix the dead loop of MPLS parse(CVE-2025-38146)

    calipso: Don't call calipso functions for AF_INET sk.(CVE-2025-38147)

    thunderbolt: Do not double dequeue a configuration request(CVE-2025-38174)

    calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().(CVE-2025-38181)

    mm: fix uprobe pte be overwritten when expanding vma(CVE-2025-38207)

    ipc: fix to protect IPCS lookups using RCU(CVE-2025-38212)

    nvme-tcp: sanitize request list handling(CVE-2025-38264)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    scsi: lpfc: Use memcpy() for BIOS version(CVE-2025-38332)

    x86/sgx: Prevent attempts to reclaim poisoned pages(CVE-2025-38334)

    NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN(CVE-2025-38393)

    perf: Fix sample vs do_exit()(CVE-2025-38424)

    netlink: Fix wraparounds of sk-sk_rmem_alloc.(CVE-2025-38465)

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns(CVE-2025-38499)

    drm/sched: Increment job count before swapping tail spsc queue(CVE-2025-38515)

    pinctrl: qcom: msm: mark certain pins as invalid for interrupts(CVE-2025-38516)

    tracing: Add down_write(trace_event_sem) when adding trace event(CVE-2025-38539)

    HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras(CVE-2025-38540)

    net/sched: Restrict conditions for adding duplicating netems to qdisc tree(CVE-2025-38553)

    perf/core: Prevent VMA split of buffer mappings(CVE-2025-38563)

    perf/core: Exit early on perf_mmap() fail(CVE-2025-38565)

    pptp: ensure minimal skb length in pptp_xmit()(CVE-2025-38574)

    padata: Fix pd UAF once and for all(CVE-2025-38584)

    net: drop UFO packets in udp_rcv_segment()(CVE-2025-38622)

    pinmux: fix race causing mux_owner NULL with active mux_usecount(CVE-2025-38632)

    clk: davinci: Add NULL check in davinci_lpsc_clk_register()(CVE-2025-38635)

    regulator: core: fix NULL dereference on unbind due to stale coupling data(CVE-2025-38668)

    i2c: qup: jump out of the loop in case of timeout(CVE-2025-38671)

    media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()(CVE-2025-38680)

    fbdev: Fix vmalloc out-of-bounds write in fast_imageblit(CVE-2025-38685)

    media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and     w7090p_tuner_read_serpar(CVE-2025-38693)

    scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure(CVE-2025-38695)

    ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr(CVE-2025-38701)

    gfs2: Validate i_depth for exhash directories(CVE-2025-38710)

    x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper(CVE-2025-39681)

    tracing: Limit access to parser-buffer when trace_get_user failed(CVE-2025-39683)

    ftrace: Also allocate and copy hash for reading of filter files(CVE-2025-39689)

    fs/buffer: fix use-after-free when call bh_read() helper(CVE-2025-39691)

    RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()(CVE-2025-39742)

    rcu: Fix rcu_read_unlock() deadloop due to IRQ work(CVE-2025-39744)

    rcu: Protect -defer_qs_iw_pending from data race(CVE-2025-39749)

    usb: core: config: Prevent OOB read in SS endpoint companion parsing(CVE-2025-39760)

    jbd2: prevent softlockup in jbd2_log_do_checkpoint()(CVE-2025-39782)

    ftrace: Fix potential warning in trace_printk_seq during ftrace_dump(CVE-2025-39813)

    trace/fgraph: Fix the warning caused by missing unregister notifier(CVE-2025-39829)

    tee: fix NULL pointer dereference in tee_shm_put(CVE-2025-39865)

    fs: writeback: fix use-after-free in __mark_inode_dirty()(CVE-2025-39866)

    qed: Don't collect too many protection override GRC elements(CVE-2025-39949)

    cgroup: split cgroup_destroy_wq into 3 workqueues(CVE-2025-39953)

    i40e: fix idx validation in config queues msg(CVE-2025-39971)

    i40e: add validation for ring_len param(CVE-2025-39973)

    media: rc: fix races with imon_disconnect()(CVE-2025-39993)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-148 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace (CVE-2022-49932)

    A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve     local privilege escalation.

    The perf_group_detach function did not check the event's siblings' attach_state before calling     add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching     from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.

    We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2. (CVE-2023-2235)

    do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading     to a race condition (with a resultant use-after-free or NULL pointer dereference). (CVE-2023-28466)

    An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64     lacks consistency checks for CR0 and CR4. (CVE-2023-30456)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (CVE-2023-53070)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Fix invalid address access in lookup_rec() when index is 0 (CVE-2023-53075)

    In the Linux kernel, the following vulnerability has been resolved:

    ocfs2: fix data corruption after failed write (CVE-2023-53081)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/shmem-helper: Remove another errant put in error path (CVE-2023-53084)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/active: Fix misuse of non-idle barriers as fence trackers (CVE-2023-53087)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix task hung in ext4_xattr_delete_inode (CVE-2023-53089)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: update s_journal_inum if it changes after journal replay (CVE-2023-53091)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/ttm: Fix a NULL pointer dereference (CVE-2023-53095)

    In the Linux kernel, the following vulnerability has been resolved:

    interconnect: fix mem leak when freeing nodes (CVE-2023-53096)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix WARNING in ext4_update_inline_data (CVE-2023-53100)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: zero i_disksize when initializing the bootloader inode (CVE-2023-53101)

    In the Linux kernel, the following vulnerability has been resolved:

    bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (CVE-2023-53103)

    In the Linux kernel, the following vulnerability has been resolved:

    veth: Fix use after free in XDP_REDIRECT (CVE-2023-53107)

    In the Linux kernel, the following vulnerability has been resolved:

    net: tunnels: annotate lockless accesses to dev->needed_headroom (CVE-2023-53109)

    In the Linux kernel, the following vulnerability has been resolved:

    loop: Fix use-after-free issues (CVE-2023-53111)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (CVE-2023-53112)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: prevent out-of-bounds array speculation when closing a file descriptor (CVE-2023-53117)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: tcp_make_synack() can be called from process context (CVE-2023-53121)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (CVE-2023-53123)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: Fix a server shutdown leak (CVE-2023-53131)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() (CVE-2023-53133)

    In the Linux kernel, the following vulnerability has been resolved:

    af_unix: fix struct pid leaks in OOB support (CVE-2023-53136)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: Fix possible corruption when moving a directory (CVE-2023-53137)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (CVE-2023-53140)

    In the Linux kernel, the following vulnerability has been resolved:

    ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (CVE-2023-53141)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix another off-by-one fsmap error on 1k block filesystems (CVE-2023-53143)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/resctrl: Clear staged_config[] before and after it is used (CVE-2023-53169)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace(CVE-2022-49932)

    drivers:md:fix a potential use-after-free bug(CVE-2022-50022)

    ceph: don't leak snap_rwsem in handle_cap_grant(CVE-2022-50059)

    posix-cpu-timers: Cleanup CPU timers before freeing them during exec(CVE-2022-50095)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    sched, cpuset: Fix dl_cpu_busy() panic due to empty cs-cpus_allowed(CVE-2022-50103)

    An issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. There is a sleeping function     called from an invalid context in gsmld_write, which will block the kernel. Note: This has been disputed     by 3rd parties as not a valid vulnerability.(CVE-2023-31082)

    scsi: qla2xxx: Perform lockless command completion in abort path(CVE-2023-53041)

    drm/nouveau: prime: fix ttm_bo_delayed_delete oops(CVE-2025-37765)

    dmaengine: idxd: fix memory leak in error handling path of idxd_alloc(CVE-2025-38015)

    padata: do not leak refcount in reorder_work(CVE-2025-38031)

    nvmet-tcp: don't restore null sk_state_change(CVE-2025-38035)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()(CVE-2025-38103)

    net: openvswitch: Fix the dead loop of MPLS parse(CVE-2025-38146)

    calipso: Don't call calipso functions for AF_INET sk.(CVE-2025-38147)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    ipc: fix to protect IPCS lookups using RCU(CVE-2025-38212)

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38215)

    sched/rt: Fix race in push_rt_task(CVE-2025-38234)

    nvme-tcp: sanitize request list handling(CVE-2025-38264)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

    NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN(CVE-2025-38393)

    perf: Fix sample vs do_exit()(CVE-2025-38424)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    netlink: Fix wraparounds of sk-sk_rmem_alloc.(CVE-2025-38465)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    tracing: Add down_write(trace_event_sem) when adding trace event(CVE-2025-38539)

    perf/core: Prevent VMA split of buffer mappings(CVE-2025-38563)

    perf/core: Exit early on perf_mmap() fail(CVE-2025-38565)

    pptp: ensure minimal skb length in pptp_xmit()(CVE-2025-38574)

    pinmux: fix race causing mux_owner NULL with active mux_usecount(CVE-2025-38632)

    i2c: qup: jump out of the loop in case of timeout(CVE-2025-38671)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace(CVE-2022-49932)

    drivers:md:fix a potential use-after-free bug(CVE-2022-50022)

    ceph: don't leak snap_rwsem in handle_cap_grant(CVE-2022-50059)

    posix-cpu-timers: Cleanup CPU timers before freeing them during exec(CVE-2022-50095)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    sched, cpuset: Fix dl_cpu_busy() panic due to empty cs-cpus_allowed(CVE-2022-50103)

    An issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. There is a sleeping function     called from an invalid context in gsmld_write, which will block the kernel. Note: This has been disputed     by 3rd parties as not a valid vulnerability.(CVE-2023-31082)

    scsi: qla2xxx: Perform lockless command completion in abort path(CVE-2023-53041)

    drm/nouveau: prime: fix ttm_bo_delayed_delete oops(CVE-2025-37765)

    dmaengine: idxd: fix memory leak in error handling path of idxd_alloc(CVE-2025-38015)

    padata: do not leak refcount in reorder_work(CVE-2025-38031)

    nvmet-tcp: don't restore null sk_state_change(CVE-2025-38035)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()(CVE-2025-38103)

    net: openvswitch: Fix the dead loop of MPLS parse(CVE-2025-38146)

    calipso: Don't call calipso functions for AF_INET sk.(CVE-2025-38147)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    ipc: fix to protect IPCS lookups using RCU(CVE-2025-38212)

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38215)

    sched/rt: Fix race in push_rt_task(CVE-2025-38234)

    nvme-tcp: sanitize request list handling(CVE-2025-38264)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

    NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN(CVE-2025-38393)

    perf: Fix sample vs do_exit()(CVE-2025-38424)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    netlink: Fix wraparounds of sk-sk_rmem_alloc.(CVE-2025-38465)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    tracing: Add down_write(trace_event_sem) when adding trace event(CVE-2025-38539)

    perf/core: Prevent VMA split of buffer mappings(CVE-2025-38563)

    perf/core: Exit early on perf_mmap() fail(CVE-2025-38565)

    pptp: ensure minimal skb length in pptp_xmit()(CVE-2025-38574)

    pinmux: fix race causing mux_owner NULL with active mux_usecount(CVE-2025-38632)

    i2c: qup: jump out of the loop in case of timeout(CVE-2025-38671)

    ipv6: fix panic when forwarding a pkt with no in6 dev(CVE-2022-49048)

    netfilter: conntrack: revisit gc autotuning(CVE-2022-49110)

    bpf, sockmap: Fix memleak in sk_psock_queue_msg(CVE-2022-49207)

    block: fix rq-qos breakage from skipping rq_qos_done_bio()(CVE-2022-49266)

    tcp: add accessors to read/set tp-snd_cwnd(CVE-2022-49325)

    ip_gre: test csum_start instead of transport header(CVE-2022-49340)

    netfilter: nf_tables: double hook unregistration in netns path(CVE-2022-49558)

    tcp: Fix data-races around sysctl_tcp_recovery.(CVE-2022-49574)

    igmp: Fix data-races around sysctl_igmp_llm_reports.(CVE-2022-49590)

    tcp: Fix a data-race around sysctl_tcp_probe_interval.(CVE-2022-49593)

    ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()(CVE-2022-49772)

    macvlan: enforce a consistent minimal mtu(CVE-2022-49776)

    x86/sgx: Add overflow check in sgx_validate_offset_length()(CVE-2022-49785)

    mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()(CVE-2022-49787)

    tracing: Fix memory leak in tracing_read_pipe()(CVE-2022-49801)

    netdevsim: Fix memory leak of nsim_dev-fa_cookie(CVE-2022-49803)

    bridge: switchdev: Fix memory leaks when changing VLAN protocol(CVE-2022-49812)

    net: ena: Fix error handling in ena_init()(CVE-2022-49813)

    sctp: clear out_curr if all frag chunks of current msg are pruned(CVE-2022-49838)

    ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network(CVE-2022-49865)

    net: gso: fix panic on frag_list with mixed head alloc types(CVE-2022-49872)

    bpf, sockmap: Fix the sk-sk_forward_alloc warning of sk_stream_kill_queues(CVE-2022-49877)

    ipv6: fix WARNING in ip6_route_net_exit_late()(CVE-2022-49903)

    net, neigh: Fix null-ptr-deref in neigh_table_clear()(CVE-2022-49904)

    net: mdio: fix undefined behavior in bit shift for __mdiobus_register(CVE-2022-49907)

    ipvs: fix WARNING in ip_vs_app_net_cleanup()(CVE-2022-49917)

    ipvs: fix WARNING in __ip_vs_cleanup_batch()(CVE-2022-49918)

    netfilter: nf_tables: release flow rule object from commit path(CVE-2022-49919)

    tty: n_gsm: add sanity check for gsm-receive in gsm_receive_buf()(CVE-2022-49940)

    vt: Clear selection before changing the font(CVE-2022-49948)

    bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO(CVE-2022-49961)

    arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level(CVE-2022-49964)

    bpf: Fix a data-race around bpf_jit_limit.(CVE-2022-49967)

    ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead(CVE-2022-49977)

    net: fix refcount bug in sk_psock_get (2)(CVE-2022-49979)

    media: pvrusb2: fix memory leak in pvr_probe(CVE-2022-49982)

    bpf: Don't use tnum_range on array range checking for poke descriptors(CVE-2022-49985)

    ice: xsk: prohibit usage of non-balanced queue id(CVE-2022-50003)

    kprobes: don't call disarm_kprobe() for disabled kprobes(CVE-2022-50008)

    ext4: avoid resizing to a partial cluster size(CVE-2022-50020)

    x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave).(CVE-2022-49557)

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including     the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.(CVE-2024-2201)

    perf/x86/amd/uncore: Fix memory leak for events array(CVE-2022-49784)

    perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling(CVE-2022-49781)

    perf/x86/amd/core: Always clear status for idx(CVE-2023-53073)

    drm/drv: Fix potential memory leak in drm_dev_init().(CVE-2022-49830)

    drm/shmem-helper: Remove another errant put in error path(CVE-2023-53084)

    perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output(CVE-2023-53065)

    arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users(CVE-2025-37963)

    arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs(CVE-2025-37948)

    crypto: null - Use spin lock instead of mutex(CVE-2025-37808)

    tracing: Fix oob write in trace_seq_to_buffer().(CVE-2025-37923)

    media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer().(CVE-2023-53146)

    usb: ucsi: Fix NULL pointer deref in ucsi_connector_change().(CVE-2023-53049)

    iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid(CVE-2025-37927)

    drm     ouveau: Fix WARN_ON in nouveau_fence_context_kill().(CVE-2025-37930)

    module: ensure that kobject_put() is safe for module type kobjects(CVE-2025-37995)

    bnxt_en: Fix out-of-bound memcpy() during ethtool -w(CVE-2025-37911)

    capabilities: fix undefined behavior in bit shift for CAP_TO_MASK(CVE-2022-49870)

    HID: intel-ish-hid: ipc: Fix potential use-after-free in work function(CVE-2023-53039)

    IB/hfi1: Correctly move list in sc_disable().(CVE-2022-49931)

    tpm: do not start chip while suspended(CVE-2025-23149)

    bpf: check changes_pkt_data property for extension programs(CVE-2024-58100)

    ext4: block range must be validated before use in ext4_mb_clear_bb()(CVE-2022-50021)

    iavf: Fix adminq error handling(CVE-2022-50055)

    virtio_net: fix memory leak inside XPD_TX with mergeable(CVE-2022-50065)

    net: atlantic: fix aq_vec index out of range error(CVE-2022-50066)

    BPF: Fix potential bad pointer dereference in bpf_sys_bpf()(CVE-2022-50069)

    net: tap: NULL pointer derefence in dev_parse_header_protocol when skb-dev is null(CVE-2022-50073)

    apparmor: Fix memleak in aa_simple_write_to_buffer()(CVE-2022-50074)

    resolved: apparmor: fix reference count leak in aa_pivotroot() (CVE-2022-50077)

    ext4: fix warning in ext4_iomap_begin as race between bmap and write(CVE-2022-50082)

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering     Authority.(CVE-2022-50083)

    block: don't allow the same type rq_qos add more than once(CVE-2022-50086)

    jbd2: fix assertion 'jh-b_frozen_data == NULL' failure when journal aborted(CVE-2022-50126)

    RDMA/srpt: Fix a use-after-free(CVE-2022-50129)

    RDMA/hfi1: fix potential memory leak in setup_base_ctxt()(CVE-2022-50134)

    RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr()(CVE-2022-50138)

    bpf: fix potential 32-bit overflow when accessing ARRAY map element(CVE-2022-50167)

    virtio-gpu: fix a missing check to avoid NULL dereference(CVE-2022-50181)

    selinux: Add boundary check in put_entry()(CVE-2022-50200)

    PM: hibernate: defer device probing when resuming from hibernation(CVE-2022-50202)

    arm64: fix oops in concurrently setting insn_emulation sysctls(CVE-2022-50206)

    netfilter: nf_tables: do not allow SET_ID to refer to another table(CVE-2022-50213)

    scsi: sg: Allow waiting for commands to complete on removed device(CVE-2022-50215)

    bpf: Fix KASAN use-after-free Read in compute_effective_progs(CVE-2022-50219)

    usbnet: Fix linkwatch use-after-free on disconnect(CVE-2022-50220)

    tty: vt: initialize unicode screen buffer(CVE-2022-50222)

    KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0(CVE-2022-50228)

    arm64: set UXN on swapper page tables(CVE-2022-50230)

    crypto: arm64/poly1305 - fix a read out-of-bound(CVE-2022-50231)

    arm64: set UXN on swapper page tables(CVE-2022-50232)

    netfilter: nf_tables: don't fail inserts if duplicate has expired(CVE-2023-52925)

    netfilter: allow exp not to be removed in nf_ct_find_expectation(CVE-2023-52927)

    dm crypt: add cond_resched() to dmcrypt_write()(CVE-2023-53051)

    erspan: do not use skb_mac_header() in ndo_start_xmit()(CVE-2023-53053)

    net/mlx5: E-Switch, Fix an Oops in error handling code(CVE-2023-53058)

    net: usb: smsc95xx: Limit packet length to skb-len(CVE-2023-53062)

    qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info(CVE-2023-53066)

    net: usb: lan78xx: Limit packet length to skb-len(CVE-2023-53068)

    net/mlx5: Fix steering rules cleanup(CVE-2023-53079)

    xsk: Add missing overflow check in xdp_umem_reg(CVE-2023-53080)

    ice: xsk: disable txq irq before flushing hw(CVE-2023-53102)

    bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails(CVE-2023-53103)

    net: tunnels: annotate lockless accesses to dev-needed_headroom(CVE-2023-53109)

    i40e: Fix kernel crash during reboot when adapter is in recovery mode(CVE-2023-53114)

    tcp: tcp_make_synack() can be called from process context(CVE-2023-53121)

    net: usb: smsc75xx: Limit packet length to skb-len(CVE-2023-53125)

    SUNRPC: Fix a server shutdown leak(CVE-2023-53131)

    bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()(CVE-2023-53133)

    bpf: consider that tail calls invalidate packet pointers(CVE-2024-58237)

    net: avoid race between device unregistration and ethnl ops(CVE-2025-21701)

    ata: libata-sff: Ensure that we cannot write outside the allocated buffer(CVE-2025-21738)

    block: mark GFP_NOIO around sysfs -store()(CVE-2025-21817)

    netfilter: nf_tables: reject mismatching sum of field_len with set key length(CVE-2025-21826)

    netfilter: socket: Lookup orig tuple for IPv6 SNAT(CVE-2025-22021)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    net: decrease cached dst counters in dst_release(CVE-2025-22057)

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported(CVE-2025-22075)

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow(CVE-2025-22086)

    net: fix NULL pointer dereference in l3mdev_l3_rcv(CVE-2025-22103)

    sctp: detect and prevent references to a freed transport in sendmsg(CVE-2025-23142)

    net: ppp: Add bound checking for skb data on ppp_sync_txmung Ensure we have enough data in linear buffer     from skb before accessing initial bytes.(CVE-2025-37749)

    net: tls: explicitly disallow disconnect(CVE-2025-37756)

    tipc: fix memory leak in tipc_link_xmit(CVE-2025-37757)

    cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path(CVE-2025-37788)

    net: openvswitch: fix nested key length validation in the set() action(CVE-2025-37789)

    net_sched: hfsc: Fix a UAF vulnerability in class handling(CVE-2025-37797)

    codel: remove sch-q.qlen check before qdisc_tree_reduce_backlog()(CVE-2025-37798)

    net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too(CVE-2025-37823)

    tipc: fix NULL pointer dereference in tipc_mon_reinit_self()(CVE-2025-37824)

    page_pool: avoid infinite loop to schedule delayed worker(CVE-2025-37859)

    HID: pidff: Fix null pointer dereference in pidff_find_fields(CVE-2025-37862)

    net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc(CVE-2025-37890)

    net_sched: qfq: Fix double list add in class with netem as child qdisc(CVE-2025-37913)

    net_sched: drr: Fix double list add in class with netem as child qdisc(CVE-2025-37915)

    xsk: Fix race condition in AF_XDP generic RX path(CVE-2025-37920)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    bpf: Scrub packet on bpf_redirect_peer(CVE-2025-37959)

    ipvs: fix uninit-value for saddr in do_output_route4(CVE-2025-37961)

    net: phy: leds: fix memory leak(CVE-2025-37989)

    net_sched: Flush gso_skb list too during -change()(CVE-2025-37992)

    netfilter: ipset: fix region locking in hash types(CVE-2025-37997)

    openvswitch: Fix unsafe attribute parsing in output_userspace()(CVE-2025-37998)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()(CVE-2025-38000)

    net_sched: hfsc: Address reentrant enqueue adding class to eltree twice(CVE-2025-38001)

    dmaengine: idxd: Refactor remove call with idxd_cleanup() helper(CVE-2025-38014)

    serial: mctrl_gpio: split disable_ms into sync and no_sync APIs(CVE-2025-38040)

    media: cx231xx: set device_caps for 417(CVE-2025-38044)

    net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done(CVE-2025-38052)

    net: pktgen: fix access outside of user given buffer in pktgen_thread_write()(CVE-2025-38061)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    dm cache: prevent BUG_ON by blocking retries on failed device resumes(CVE-2025-38066)

    crypto: lzo - Fix compression buffer overrun(CVE-2025-38068)

    vhost-scsi: protect vq-log_used with vq-mutex(CVE-2025-38074)

    scsi: target: iscsi: Fix timeout on deleted connection(CVE-2025-38075)

    net_sched: prio: fix a race in prio_tune()(CVE-2025-38083)

    mm/hugetlb: unshare page tables during VMA split, not before(CVE-2025-38084)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    x86/iopl: Cure TIF_IO_BITMAP inconsistencies(CVE-2025-38100)

    VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify(CVE-2025-38102)

    net_sched: red: fix a race in __red_change()(CVE-2025-38108)

    net/mdiobus: Fix potential out-of-bounds read/write access(CVE-2025-38111)

    net: Fix TOCTOU issue in sk_is_readable()(CVE-2025-38112)

    net_sched: sch_sfq: fix a potential crash on gso_skb handling(CVE-2025-38115)

    netfilter: nf_set_pipapo_avx2: fix initial map fill(CVE-2025-38120)

    net: fix udp gso skb_segment after pull from frag_list(CVE-2025-38124)

    ice: fix Tx scheduler error handling in XDP callback(CVE-2025-38127)

    page_pool: Fix use-after-free in page_pool_recycle_in_ring(CVE-2025-38129)

    bpf, sockmap: Avoid using sk_socket after free when sending(CVE-2025-38154)

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation(CVE-2025-38162)

    bpf, sockmap: Fix panic when calling skb_linearize(CVE-2025-38165)

    bpf: fix ktls panic with sockmap(CVE-2025-38166)

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction(CVE-2025-38211)

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38214)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    media: cxusb: no longer judge rbuf when the write fails(CVE-2025-38229)

    bpf: Avoid __bpf_prog_ret0_warn when jit fails(CVE-2025-38280)

    bpf: Fix WARN() in get_bpf_raw_tp_regs(CVE-2025-38285)

    EDAC/skx_common: Fix general protection fault(CVE-2025-38298)

    mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().(CVE-2025-38324)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()(CVE-2025-38337)

    ACPICA: fix acpi operand cache leak in dswstate.c(CVE-2025-38345)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    usb: typec: altmodes/displayport: do not index invalid pin_assignments(CVE-2025-38391)

    fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass(CVE-2025-38396)

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()(CVE-2025-38399)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    HID: core: ensure the allocated report buffer can contain the reserved report ID(CVE-2025-38495)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace Call kvm_init() only after _all_     setup is complete, as kvm_init() exposes /dev/kvm to userspace and thus allows userspace to create VMs     (and call other ioctls). E.g. KVM will encounter a NULL pointer when attempting to add a vCPU to the per-     CPU loaded_vmcss_on_cpu list if userspace is able to create a VM before vmx_init() configures said list.
    BUG: kernel NULL pointer dereference, address: 0000000000000008 #PF: supervisor write access in kernel     mode #PF: error_code(0x0002) - not-present page PGD 0 P4D 0 Oops: 0002 [#1] SMP CPU: 6 PID: 1143 Comm:
    stable Not tainted 6.0.0-rc7+ #988 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0     02/06/2015 RIP: 0010:vmx_vcpu_load_vmcs+0x68/0x230 [kvm_intel] <TASK> vmx_vcpu_load+0x16/0x60 [kvm_intel]     kvm_arch_vcpu_load+0x32/0x1f0 [kvm] vcpu_load+0x2f/0x40 [kvm] kvm_arch_vcpu_create+0x231/0x310 [kvm]     kvm_vm_ioctl+0x79f/0xe10 [kvm] ? handle_mm_fault+0xb1/0x220 __x64_sys_ioctl+0x80/0xb0     do_syscall_64+0x2b/0x50 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f5a6b05743b </TASK> Modules     linked in: vhost_net vhost vhost_iotlb tap kvm_intel(+) kvm irqbypass (CVE-2022-49932)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
246249	Linux Distros 未修补的漏洞：CVE-2022-49932	Nessus	Misc.	2025/8/8	2026/2/6	medium
173854	Amazon Linux 2023：bpftool、kernel、kernel-devel (ALAS2023-2023-148)	Nessus	Amazon Linux Local Security Checks	2023/4/4	2026/2/24	high
173854	Amazon Linux 2023：bpftool、kernel、kernel-devel (ALAS2023-2023-148)	Nessus	Amazon Linux Local Security Checks	2023/4/4	2026/2/24	high
246249	Linux Distros 未修補的弱點：CVE-2022-49932	Nessus	Misc.	2025/8/8	2026/2/6	medium
173854	Amazon Linux 2023 : bpftool、kernel、kernel-devel (ALAS2023-2023-148)	Nessus	Amazon Linux Local Security Checks	2023/4/4	2026/2/24	high
246249	Linux Distros のパッチ未適用の脆弱性: CVE-2022-49932	Nessus	Misc.	2025/8/8	2026/2/6	medium
274972	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2361)	Nessus	Huawei Local Security Checks	2025/11/12	2025/11/12	high
278438	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-2464)	Nessus	Huawei Local Security Checks	2025/12/11	2026/2/25	high
302684	EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2026-1433)	Nessus	Huawei Local Security Checks	2026/3/17	2026/3/17	high
302688	EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-1490)	Nessus	Huawei Local Security Checks	2026/3/17	2026/3/17	high
173854	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-148)	Nessus	Amazon Linux Local Security Checks	2023/4/4	2026/2/24	high
276493	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2447)	Nessus	Huawei Local Security Checks	2025/11/22	2026/3/10	high
278477	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-2483)	Nessus	Huawei Local Security Checks	2025/12/11	2026/2/24	high
279287	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2025-2546)	Nessus	Huawei Local Security Checks	2025/12/18	2026/2/23	high
279319	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2025-2581)	Nessus	Huawei Local Security Checks	2025/12/18	2026/2/23	high
246249	Linux Distros Unpatched Vulnerability : CVE-2022-49932	Nessus	Misc.	2025/8/8	2026/2/6	medium
274905	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2330)	Nessus	Huawei Local Security Checks	2025/11/12	2025/11/12	high

检测

插件搜索

medium

high

high

medium

high

medium

high

high

high

high

high

high

high

high

high

medium

high