In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References: Upstream kernel

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414658 advisory.

    In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could     lead to local escalation of privilege with no additional execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References:
    Upstream kernel

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could     lead to local escalation of privilege with no additional execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References:
    Upstream kernel (CVE-2021-0707)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1687-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-29156: Fixed a double free related to rtrs_clt_dev_release (bnc#1198515).
    - CVE-2022-28893: Ensuring that sockets are in the intended state inside the SUNRPC subsystem     (bnc#1198330).
    - CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
    - CVE-2022-28356: Fixed a refcount leak bug found in net/llc/af_llc.c (bnc#1197391).
    - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
    - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
    - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c     (bnc#1198516).
    - CVE-2022-1280: Fixed a use-after-free vulnerability in drm_lease_held in drivers/gpu/drm/drm_lease.c     (bnc#1197914).
    - CVE-2022-1158: Fixed KVM x86/mmu compare-and-exchange of gPTE via the user address (bsc#1197660).
    - CVE-2022-0812: Fixed random memory leakage inside NFS/RDMA (bsc#1196639).
    - CVE-2021-4154: Fixed a use-after-free flaw inside cgroup1_parse_param in kernel/cgroup/cgroup-v1.c. A     local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall     parameter leading to a container breakout and a denial of service on the system (bnc#1193842).
    - CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname     call after a certain type of failure of a bind call (bnc#1187055).
    - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users     do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system     (bnc#1191647).
    - CVE-2021-20292: Fixed object validation prior to performing operations on the object in     nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
    - CVE-2021-0707: Fixed possible memory corruption due to a use after free inside dma_buf_releas e of dma-     buf.c (bnc#1198437).
    - CVE-2020-27835: Fixed use after free in infiniband hfi1 driver in the way user calls Ioctl after open     dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1669-1 advisory.

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-29156: Fixed a double free related to rtrs_clt_dev_release (bnc#1198515).
    - CVE-2022-28893: Ensuring that sockets are in the intended state inside the SUNRPC subsystem     (bnc#1198330).
    - CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
    - CVE-2022-28356: Fixed a refcount leak bug found in net/llc/af_llc.c (bnc#1197391).
    - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
    - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
    - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c     (bnc#1198516).
    - CVE-2022-1280: Fixed a use-after-free vulnerability in drm_lease_held in drivers/gpu/drm/drm_lease.c     (bnc#1197914).
    - CVE-2022-1158: Fixed KVM x86/mmu compare-and-exchange of gPTE via the user address (bsc#1197660).
    - CVE-2022-0812: Fixed random memory leakage inside NFS/RDMA (bsc#1196639).
    - CVE-2021-4154: Fixed a use-after-free flaw inside cgroup1_parse_param in kernel/cgroup/cgroup-v1.c. A     local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall     parameter leading to a container breakout and a denial of service on the system (bnc#1193842).
    - CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname     call after a certain type of failure of a bind call (bnc#1187055).
    - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users     do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system     (bnc#1191647).
    - CVE-2021-20292: Fixed object validation prior to performing operations on the object in     nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
    - CVE-2021-0707: Fixed possible memory corruption due to a use after free inside dma_buf_releas e of dma-     buf.c (bnc#1198437).
    - CVE-2020-27835: Fixed use after free in infiniband hfi1 driver in the way user calls Ioctl after open     dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1676-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2020-27835: Fixed a use after free vulnerability in infiniband hfi1 driver in the way user calls     Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
    - CVE-2021-0707: Fixed a use after free vulnerability in dma_buf_release of dma-buf.c, which may lead to     local escalation of privilege with no additional execution privileges needed (bnc#1198437).
    - CVE-2021-20292: Fixed object validation prior to performing operations on the object in     nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
    - CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users     do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system     (bnc#1191647).
    - CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname     call after a certain type of failure of a bind call (bnc#1187055).
    - CVE-2021-4154: Fixed a use-after-free vulnerability in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c,     allowing a local privilege escalation by an attacker with user privileges by exploiting the fsconfig     syscall parameter, leading to a container breakout and a denial of service on the system (bnc#1193842).
    - CVE-2022-0812: Fixed information leak when a file is read from RDMA (bsc#1196639)
    - CVE-2022-1158: Fixed a vulnerability in the kvm module that may lead to a use-after-free write or denial     of service (bsc#1197660).
    - CVE-2022-1280: Fixed a use-after-free vulnerability in drm_lease_held in drivers/gpu/drm/drm_lease.c     (bnc#1197914).
    - CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c     (bnc#1198516).
    - CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
    - CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
    - CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391).
    - CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
    - CVE-2022-28893: Fixed a use after free vulnerability in inet_put_port where some sockets are not closed     before xs_xprt_free() (bsc#1198330).
    - CVE-2022-29156: Fixed a double free vulnerability related to rtrs_clt_dev_release.ate (jsc#SLE-15176     bsc#1198515).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.4.58-27.104. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-014 advisory.

    A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to     send invalid SHA type commands, could cause the system to crash. The highest threat from this     vulnerability is to system availability. (CVE-2019-18808)

    A flaw was found in the Linux kernel. The CX23888 Integrated Consumer Infrared Controller probe code     handles resource cleanup low memory conditions. A local attacker able to induce low memory conditions     could use this flaw to crash the system. The highest threat from this vulnerability is to system     availability. (CVE-2019-19054)

    A flaw was found in the ZRAM kernel module, where a user with a local account and the ability to read the     /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read     allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device.
    With this vulnerability, continually reading the device may consume a large amount of system memory and     cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making     the system inoperable. (CVE-2020-10781)

    A flaw was found in the implementation of the Linux kernel's GSS mechanism registration functionality.
    During this period, memory allocation was not freed when the module was unloaded, leading to a memory     leak. This flaw allows an attacker with the ability to repeat loads and unloads, to cause the system to     run out of free memory and crash eventually. (CVE-2020-12656)

    In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak,     aka CID-28ebeb8db770. (CVE-2020-15393)

    A flaw was found in the Linux kernel. The generation of the device ID from the network RNG internal state     is predictable. The highest threat from this vulnerability is to data confidentiality. (CVE-2020-16166)

    In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free. This could     lead to local escalation of privilege with no additional execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-155756045References:
    Upstream kernel (CVE-2021-0707)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
267057	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414658)	Nessus	Unity Linux Local Security Checks	high
250185	Linux Distros Unpatched Vulnerability : CVE-2021-0707	Nessus	Misc.	high
161235	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2022:1687-1)	Nessus	SuSE Local Security Checks	high
161225	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:1669-1)	Nessus	SuSE Local Security Checks	high
161220	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:1676-1)	Nessus	SuSE Local Security Checks	high
160431	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-014)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2021-0707

high

Tenable Plugins

high

high

high

high

high

high