In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_err()/dccp_v6_err() again dh->dccph_x is the 9th byte (offset 8) in "struct dccp_hdr", not in the "byte 7" as Jann claimed. We need to make sure the ICMP messages are big enough, using more standard ways (no more assumptions). syzbot reported: BUG: KMSAN: uninit-value in pskb_may_pull_reason include/linux/skbuff.h:2667 [inline] BUG: KMSAN: uninit-value in pskb_may_pull include/linux/skbuff.h:2681 [inline] BUG: KMSAN: uninit-value in dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94 pskb_may_pull_reason include/linux/skbuff.h:2667 [inline] pskb_may_pull include/linux/skbuff.h:2681 [inline] dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94 icmpv6_notify+0x4c7/0x880 net/ipv6/icmp.c:867 icmpv6_rcv+0x19d5/0x30d0 ip6_protocol_deliver_rcu+0xda6/0x2a60 net/ipv6/ip6_input.c:438 ip6_input_finish net/ipv6/ip6_input.c:483 [inline] NF_HOOK include/linux/netfilter.h:304 [inline] ip6_input+0x15d/0x430 net/ipv6/ip6_input.c:492 ip6_mc_input+0xa7e/0xc80 net/ipv6/ip6_input.c:586 dst_input include/net/dst.h:468 [inline] ip6_rcv_finish+0x5db/0x870 net/ipv6/ip6_input.c:79 NF_HOOK include/linux/netfilter.h:304 [inline] ipv6_rcv+0xda/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5523 [inline] __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5637 netif_receive_skb_internal net/core/dev.c:5723 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5782 tun_rx_batched+0x83b/0x920 tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at: slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767 slab_alloc_node mm/slub.c:3478 [inline] kmem_cache_alloc_node+0x577/0xa80 mm/slub.c:3523 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:559 __alloc_skb+0x318/0x740 net/core/skbuff.c:650 alloc_skb include/linux/skbuff.h:1286 [inline] alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6313 sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2795 tun_alloc_skb drivers/net/tun.c:1531 [inline] tun_get_user+0x23cf/0x6940 drivers/net/tun.c:1846 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd CPU: 0 PID: 4995 Comm: syz-executor153 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990458 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    dccp: fix dccp_v4_err()/dccp_v6_err() again

    dh->dccph_x is the 9th byte (offset 8) in struct dccp_hdr,     not in the byte 7 as Jann claimed.

    We need to make sure the ICMP messages are big enough,     using more standard ways (no more assumptions).

    syzbot reported:
    BUG: KMSAN: uninit-value in pskb_may_pull_reason include/linux/skbuff.h:2667 [inline]     BUG: KMSAN: uninit-value in pskb_may_pull include/linux/skbuff.h:2681 [inline]     BUG: KMSAN: uninit-value in dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94     pskb_may_pull_reason include/linux/skbuff.h:2667 [inline]     pskb_may_pull include/linux/skbuff.h:2681 [inline]     dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94     icmpv6_notify+0x4c7/0x880 net/ipv6/icmp.c:867     icmpv6_rcv+0x19d5/0x30d0     ip6_protocol_deliver_rcu+0xda6/0x2a60 net/ipv6/ip6_input.c:438     ip6_input_finish net/ipv6/ip6_input.c:483 [inline]     NF_HOOK include/linux/netfilter.h:304 [inline]     ip6_input+0x15d/0x430 net/ipv6/ip6_input.c:492     ip6_mc_input+0xa7e/0xc80 net/ipv6/ip6_input.c:586     dst_input include/net/dst.h:468 [inline]     ip6_rcv_finish+0x5db/0x870 net/ipv6/ip6_input.c:79     NF_HOOK include/linux/netfilter.h:304 [inline]     ipv6_rcv+0xda/0x390 net/ipv6/ip6_input.c:310
    __netif_receive_skb_one_core net/core/dev.c:5523 [inline]
    __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5637     netif_receive_skb_internal net/core/dev.c:5723 [inline]     netif_receive_skb+0x58/0x660 net/core/dev.c:5782     tun_rx_batched+0x83b/0x920     tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002     tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048     call_write_iter include/linux/fs.h:1985 [inline]     new_sync_write fs/read_write.c:491 [inline]     vfs_write+0x8ef/0x15c0 fs/read_write.c:584     ksys_write+0x20f/0x4c0 fs/read_write.c:637
    __do_sys_write fs/read_write.c:649 [inline]
    __se_sys_write fs/read_write.c:646 [inline]
    __x64_sys_write+0x93/0xd0 fs/read_write.c:646     do_syscall_x64 arch/x86/entry/common.c:50 [inline]     do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80     entry_SYSCALL_64_after_hwframe+0x63/0xcd

    Uninit was created at:
    slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767     slab_alloc_node mm/slub.c:3478 [inline]     kmem_cache_alloc_node+0x577/0xa80 mm/slub.c:3523     kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:559
    __alloc_skb+0x318/0x740 net/core/skbuff.c:650     alloc_skb include/linux/skbuff.h:1286 [inline]     alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6313     sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2795     tun_alloc_skb drivers/net/tun.c:1531 [inline]     tun_get_user+0x23cf/0x6940 drivers/net/tun.c:1846     tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048     call_write_iter include/linux/fs.h:1985 [inline]     new_sync_write fs/read_write.c:491 [inline]     vfs_write+0x8ef/0x15c0 fs/read_write.c:584     ksys_write+0x20f/0x4c0 fs/read_write.c:637
    __do_sys_write fs/read_write.c:649 [inline]
    __se_sys_write fs/read_write.c:646 [inline]
    __x64_sys_write+0x93/0xd0 fs/read_write.c:646     do_syscall_x64 arch/x86/entry/common.c:50 [inline]     do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80     entry_SYSCALL_64_after_hwframe+0x63/0xcd

    CPU: 0 PID: 4995 Comm: syz-executor153 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0     Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.4.258-171.360. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-112 advisory.

    An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error     in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.
    (CVE-2023-31085)

    A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen     guests. (CVE-2023-34324)

    A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was     assumed to be associated with a device before calling __ip_options_compile, which is not always the case     if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash     the system. (CVE-2023-42754)

    A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD     and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`.
    This issue may allow a local user to crash the system. (CVE-2023-42756)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (CVE-2023-52527)

    In the Linux kernel, the following vulnerability has been resolved:

    net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (CVE-2023-52566)

    In the Linux kernel, the following vulnerability has been resolved:

    serial: 8250_port: Check IRQ data before use (CVE-2023-52567)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rds: Fix possible NULL-pointer dereference (CVE-2023-52573)

    In the Linux kernel, the following vulnerability has been resolved:

    team: fix null-ptr-deref when team device type is changed (CVE-2023-52574)

    In the Linux kernel, the following vulnerability has been resolved:

    dccp: fix dccp_v4_err()/dccp_v6_err() again (CVE-2023-52577)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: use DEV_STATS_INC() (CVE-2023-52578)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Fix deletion race condition (CVE-2023-53615)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986378 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    dccp: fix dccp_v4_err()/dccp_v6_err() again

    dh->dccph_x is the 9th byte (offset 8) in struct dccp_hdr,     not in the byte 7 as Jann claimed.

    We need to make sure the ICMP messages are big enough,     using more standard ways (no more assumptions).

    syzbot reported:
    BUG: KMSAN: uninit-value in pskb_may_pull_reason include/linux/skbuff.h:2667 [inline]     BUG: KMSAN: uninit-value in pskb_may_pull include/linux/skbuff.h:2681 [inline]     BUG: KMSAN: uninit-value in dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94     pskb_may_pull_reason include/linux/skbuff.h:2667 [inline]     pskb_may_pull include/linux/skbuff.h:2681 [inline]     dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94     icmpv6_notify+0x4c7/0x880 net/ipv6/icmp.c:867     icmpv6_rcv+0x19d5/0x30d0     ip6_protocol_deliver_rcu+0xda6/0x2a60 net/ipv6/ip6_input.c:438     ip6_input_finish net/ipv6/ip6_input.c:483 [inline]     NF_HOOK include/linux/netfilter.h:304 [inline]     ip6_input+0x15d/0x430 net/ipv6/ip6_input.c:492     ip6_mc_input+0xa7e/0xc80 net/ipv6/ip6_input.c:586     dst_input include/net/dst.h:468 [inline]     ip6_rcv_finish+0x5db/0x870 net/ipv6/ip6_input.c:79     NF_HOOK include/linux/netfilter.h:304 [inline]     ipv6_rcv+0xda/0x390 net/ipv6/ip6_input.c:310
    __netif_receive_skb_one_core net/core/dev.c:5523 [inline]
    __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5637     netif_receive_skb_internal net/core/dev.c:5723 [inline]     netif_receive_skb+0x58/0x660 net/core/dev.c:5782     tun_rx_batched+0x83b/0x920     tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002     tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048     call_write_iter include/linux/fs.h:1985 [inline]     new_sync_write fs/read_write.c:491 [inline]     vfs_write+0x8ef/0x15c0 fs/read_write.c:584     ksys_write+0x20f/0x4c0 fs/read_write.c:637
    __do_sys_write fs/read_write.c:649 [inline]
    __se_sys_write fs/read_write.c:646 [inline]
    __x64_sys_write+0x93/0xd0 fs/read_write.c:646     do_syscall_x64 arch/x86/entry/common.c:50 [inline]     do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80     entry_SYSCALL_64_after_hwframe+0x63/0xcd

    Uninit was created at:
    slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767     slab_alloc_node mm/slub.c:3478 [inline]     kmem_cache_alloc_node+0x577/0xa80 mm/slub.c:3523     kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:559
    __alloc_skb+0x318/0x740 net/core/skbuff.c:650     alloc_skb include/linux/skbuff.h:1286 [inline]     alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6313     sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2795     tun_alloc_skb drivers/net/tun.c:1531 [inline]     tun_get_user+0x23cf/0x6940 drivers/net/tun.c:1846     tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048     call_write_iter include/linux/fs.h:1985 [inline]     new_sync_write fs/read_write.c:491 [inline]     vfs_write+0x8ef/0x15c0 fs/read_write.c:584     ksys_write+0x20f/0x4c0 fs/read_write.c:637
    __do_sys_write fs/read_write.c:649 [inline]
    __se_sys_write fs/read_write.c:646 [inline]
    __x64_sys_write+0x93/0xd0 fs/read_write.c:646     do_syscall_x64 arch/x86/entry/common.c:50 [inline]     do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80     entry_SYSCALL_64_after_hwframe+0x63/0xcd

    CPU: 0 PID: 4995 Comm: syz-executor153 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0     Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-413652 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    dccp: fix dccp_v4_err()/dccp_v6_err() again

    dh->dccph_x is the 9th byte (offset 8) in struct dccp_hdr,     not in the byte 7 as Jann claimed.

    We need to make sure the ICMP messages are big enough,     using more standard ways (no more assumptions).

    syzbot reported:
    BUG: KMSAN: uninit-value in pskb_may_pull_reason include/linux/skbuff.h:2667 [inline]     BUG: KMSAN: uninit-value in pskb_may_pull include/linux/skbuff.h:2681 [inline]     BUG: KMSAN: uninit-value in dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94     pskb_may_pull_reason include/linux/skbuff.h:2667 [inline]     pskb_may_pull include/linux/skbuff.h:2681 [inline]     dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94     icmpv6_notify+0x4c7/0x880 net/ipv6/icmp.c:867     icmpv6_rcv+0x19d5/0x30d0     ip6_protocol_deliver_rcu+0xda6/0x2a60 net/ipv6/ip6_input.c:438     ip6_input_finish net/ipv6/ip6_input.c:483 [inline]     NF_HOOK include/linux/netfilter.h:304 [inline]     ip6_input+0x15d/0x430 net/ipv6/ip6_input.c:492     ip6_mc_input+0xa7e/0xc80 net/ipv6/ip6_input.c:586     dst_input include/net/dst.h:468 [inline]     ip6_rcv_finish+0x5db/0x870 net/ipv6/ip6_input.c:79     NF_HOOK include/linux/netfilter.h:304 [inline]     ipv6_rcv+0xda/0x390 net/ipv6/ip6_input.c:310
    __netif_receive_skb_one_core net/core/dev.c:5523 [inline]
    __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5637     netif_receive_skb_internal net/core/dev.c:5723 [inline]     netif_receive_skb+0x58/0x660 net/core/dev.c:5782     tun_rx_batched+0x83b/0x920     tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002     tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048     call_write_iter include/linux/fs.h:1985 [inline]     new_sync_write fs/read_write.c:491 [inline]     vfs_write+0x8ef/0x15c0 fs/read_write.c:584     ksys_write+0x20f/0x4c0 fs/read_write.c:637
    __do_sys_write fs/read_write.c:649 [inline]
    __se_sys_write fs/read_write.c:646 [inline]
    __x64_sys_write+0x93/0xd0 fs/read_write.c:646     do_syscall_x64 arch/x86/entry/common.c:50 [inline]     do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80     entry_SYSCALL_64_after_hwframe+0x63/0xcd

    Uninit was created at:
    slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767     slab_alloc_node mm/slub.c:3478 [inline]     kmem_cache_alloc_node+0x577/0xa80 mm/slub.c:3523     kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:559
    __alloc_skb+0x318/0x740 net/core/skbuff.c:650     alloc_skb include/linux/skbuff.h:1286 [inline]     alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6313     sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2795     tun_alloc_skb drivers/net/tun.c:1531 [inline]     tun_get_user+0x23cf/0x6940 drivers/net/tun.c:1846     tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048     call_write_iter include/linux/fs.h:1985 [inline]     new_sync_write fs/read_write.c:491 [inline]     vfs_write+0x8ef/0x15c0 fs/read_write.c:584     ksys_write+0x20f/0x4c0 fs/read_write.c:637
    __do_sys_write fs/read_write.c:649 [inline]
    __se_sys_write fs/read_write.c:646 [inline]
    __x64_sys_write+0x93/0xd0 fs/read_write.c:646     do_syscall_x64 arch/x86/entry/common.c:50 [inline]     do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80     entry_SYSCALL_64_after_hwframe+0x63/0xcd

    CPU: 0 PID: 4995 Comm: syz-executor153 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0     Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_err()/dccp_v6_err()     again dh->dccph_x is the 9th byte (offset 8) in struct dccp_hdr, not in the byte 7 as Jann claimed. We     need to make sure the ICMP messages are big enough, using more standard ways (no more assumptions). syzbot     reported: BUG: KMSAN: uninit-value in pskb_may_pull_reason include/linux/skbuff.h:2667 [inline] BUG:
    KMSAN: uninit-value in pskb_may_pull include/linux/skbuff.h:2681 [inline] BUG: KMSAN: uninit-value in     dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94 pskb_may_pull_reason include/linux/skbuff.h:2667 [inline]     pskb_may_pull include/linux/skbuff.h:2681 [inline] dccp_v6_err+0x426/0x1aa0 net/dccp/ipv6.c:94     icmpv6_notify+0x4c7/0x880 net/ipv6/icmp.c:867 icmpv6_rcv+0x19d5/0x30d0     ip6_protocol_deliver_rcu+0xda6/0x2a60 net/ipv6/ip6_input.c:438 ip6_input_finish net/ipv6/ip6_input.c:483     [inline] NF_HOOK include/linux/netfilter.h:304 [inline] ip6_input+0x15d/0x430 net/ipv6/ip6_input.c:492     ip6_mc_input+0xa7e/0xc80 net/ipv6/ip6_input.c:586 dst_input include/net/dst.h:468 [inline]     ip6_rcv_finish+0x5db/0x870 net/ipv6/ip6_input.c:79 NF_HOOK include/linux/netfilter.h:304 [inline]     ipv6_rcv+0xda/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5523 [inline]
    __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5637 netif_receive_skb_internal net/core/dev.c:5723     [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5782 tun_rx_batched+0x83b/0x920     tun_get_user+0x564c/0x6940 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048     call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline]     vfs_write+0x8ef/0x15c0 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write     fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0     fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0     arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was created at:
    slab_post_alloc_hook+0x12f/0xb70 mm/slab.h:767 slab_alloc_node mm/slub.c:3478 [inline]     kmem_cache_alloc_node+0x577/0xa80 mm/slub.c:3523 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:559
    __alloc_skb+0x318/0x740 net/core/skbuff.c:650 alloc_skb include/linux/skbuff.h:1286 [inline]     alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6313 sock_alloc_send_pskb+0xa80/0xbf0     net/core/sock.c:2795 tun_alloc_skb drivers/net/tun.c:1531 [inline] tun_get_user+0x23cf/0x6940     drivers/net/tun.c:1846 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter     include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x15c0     fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline]
    __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64     arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80     entry_SYSCALL_64_after_hwframe+0x63/0xcd CPU: 0 PID: 4995 Comm: syz-executor153 Not tainted     6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 Hardware name: Google Google Compute Engine/Google Compute     Engine, BIOS Google 08/04/2023 (CVE-2023-52577)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of kernel installed on the remote host is prior to 5.10.198-187.748. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2023-042 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: unregister flowtable hooks on netns exit (CVE-2022-48935)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: double hook unregistration in netns path (CVE-2022-49558)

    An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error     in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.
    (CVE-2023-31085)

    A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen     guests. (CVE-2023-34324)

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to     achieve local privilege escalation.

    Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage     collection, it is possible to underflow the reference counter causing a use-after-free vulnerability.

    We recommend upgrading past commit 3e91b0ebd994635df2346353322ac51ce84ce6d8. (CVE-2023-4244)

    A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was     assumed to be associated with a device before calling __ip_options_compile, which is not always the case     if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash     the system. (CVE-2023-42754)

    A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD     and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`.
    This issue may allow a local user to crash the system. (CVE-2023-42756)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

    New elements in this transaction might expired before such transactionends. Skip sync GC for such elements     otherwise commit path might walkover an already released object. Once transaction is finished, async     GCwill collect such expired element. (CVE-2023-52433)

    In the Linux kernel, the following vulnerability has been resolved:

    ring-buffer: Do not attempt to read past commit (CVE-2023-52501)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (CVE-2023-52527)

    In the Linux kernel, the following vulnerability has been resolved:

    net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert tty: n_gsm: fix UAF in gsm_cleanup_mux (CVE-2023-52564)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (CVE-2023-52566)

    In the Linux kernel, the following vulnerability has been resolved:

    serial: 8250_port: Check IRQ data before use (CVE-2023-52567)

    In the Linux kernel, the following vulnerability has been resolved:

    net: rds: Fix possible NULL-pointer dereference (CVE-2023-52573)

    In the Linux kernel, the following vulnerability has been resolved:

    team: fix null-ptr-deref when team device type is changed (CVE-2023-52574)

    In the Linux kernel, the following vulnerability has been resolved:

    dccp: fix dccp_v4_err()/dccp_v6_err() again (CVE-2023-52577)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: use DEV_STATS_INC() (CVE-2023-52578)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nftables: exthdr: fix 4-byte stack OOB write

    If priv->len is a multiple of 4, then dst[len / 4] can write pastthe destination array which leads to     stack corruption.

    This construct is necessary to clean the remainder of the registerin case ->len is NOT a multiple of the     register size, so make itconditional just like nft_payload.c does.

    The bug was added in 4.1 cycle and then copied/inherited whentcp/sctp and ip option support was added.

    Bug reported by Zero Day Initiative project (ZDI-CAN-21950,ZDI-CAN-21951, ZDI-CAN-21961). (CVE-2023-52628)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: adapt set backend to use GC transaction API (CVE-2023-52923)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: don't skip expired elements during walk (CVE-2023-52924)

    A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux     kernel's TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and     potentially crash the system. (CVE-2024-0641)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276196	TencentOS Server 3: kernel (TSSA-2024:1027)	Nessus	Tencent Local Security Checks	high
274302	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990458)	Nessus	Unity Linux Local Security Checks	medium
271767	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2025-112 (ALASKERNEL-5.4-2025-112)	Nessus	Amazon Linux Local Security Checks	high
269055	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986378)	Nessus	Unity Linux Local Security Checks	medium
267614	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-413652)	Nessus	Unity Linux Local Security Checks	medium
247263	Linux Distros Unpatched Vulnerability : CVE-2023-52577	Nessus	Misc.	medium
239742	TencentOS Server 2: kernel (TSSA-2024:1030)	Nessus	Tencent Local Security Checks	high
184183	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2023-042 (ALASKERNEL-5.10-2023-042)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2023-52577

medium

Tenable Plugins

high

medium

high

medium

medium

medium

high

high