In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Refactor DMCUB enter/exit idle interface [Why] We can hang in place trying to send commands when the DMCUB isn't powered on. [How] We need to exit out of the idle state prior to sending a command, but the process that performs the exit also invokes a command itself. Fixing this issue involves the following: 1. Using a software state to track whether or not we need to start the process to exit idle or notify idle. It's possible for the hardware to have exited an idle state without driver knowledge, but entering one is always restricted to a driver allow - which makes the SW state vs HW state mismatch issue purely one of optimization, which should seldomly be hit, if at all. 2. Refactor any instances of exit/notify idle to use a single wrapper that maintains this SW state. This works simialr to dc_allow_idle_optimizations, but works at the DMCUB level and makes sure the state is marked prior to any notify/exit idle so we don't enter an infinite loop. 3. Make sure we exit out of idle prior to sending any commands or waiting for DMCUB idle. This patch takes care of 1/2. A future patch will take care of wrapping DMCUB command submission with calls to this new interface.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Refactor DMCUB
    enter/exit idle interface [Why] We can hang in place trying to send commands when the DMCUB isn't powered
    on. [How] We need to exit out of the idle state prior to sending a command, but the process that performs
    the exit also invokes a command itself. Fixing this issue involves the following: 1. Using a software
    state to track whether or not we need to start the process to exit idle or notify idle. It's possible for
    the hardware to have exited an idle state without driver knowledge, but entering one is always restricted
    to a driver allow - which makes the SW state vs HW state mismatch issue purely one of optimization, which
    should seldomly be hit, if at all. 2. Refactor any instances of exit/notify idle to use a single wrapper
    that maintains this SW state. This works simialr to dc_allow_idle_optimizations, but works at the DMCUB
    level and makes sure the state is marked prior to any notify/exit idle so we don't enter an infinite loop.
    3. Make sure we exit out of idle prior to sending any commands or waiting for DMCUB idle. This patch takes
    care of 1/2. A future patch will take care of wrapping DMCUB command submission with calls to this new
    interface. (CVE-2023-52625)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9528:03 advisory.

    kernel: bluetooth: BR/EDR Bluetooth Impersonation Attacks (BIAS)     (CVE-2020-10135)         kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()     (CVE-2024-0340)         kernel: use-after-free in cec_queue_msg_fh (CVE-2024-23848)         kernel: stack overflow problem in Open vSwitch kernel module leading to DoS     (CVE-2024-1151)         kernel: crash due to a missing check for leb_size (CVE-2024-25739)         kernel: bpf: Fix re-attachment branch in bpf_tracing_prog_attach     (CVE-2024-26591)         kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)         kernel: pvrusb2: fix use after free on context disconnection     (CVE-2023-52445)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/amd/display: Refactor DMCUB enter/exit idle interface [Why] We can hang in place trying to send     commands when the DMCUB isn't powered on. [How] We need to exit out of the idle state prior to sending a     command, but the process that performs the exit also invokes a command itself. Fixing this issue involves     the following: 1. Using a software state to track whether or not we need to start the process to exit idle     or notify idle. It's possible for the hardware to have exited an idle state without driver knowledge, but     entering one is always restricted to a driver allow - which makes the SW state vs HW state mismatch issue     purely one of optimization, which should seldomly be hit, if at all. 2. Refactor any instances of     exit/notify idle to use a single wrapper that maintains this SW state. This works simialr to     dc_allow_idle_optimizations, but works at the DMCUB level and makes sure the state is marked prior to any     notify/exit idle so we don't enter an infinite loop. 3. Make sure we exit out of idle prior to sending any     commands or waiting for DMCUB idle. This patch takes care of 1/2. A future patch will take care of     wrapping DMCUB command submission with calls to this new interface. (CVE-2023-52625)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9315 advisory.

    - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
    - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}
    - dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
    - dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508]     {CVE-2024-38629}
    - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
    - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
    - net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628]     {CVE-2024-43864}
    - net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
    - net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}
    - ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
    - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037]     {CVE-2024-38586}
    - KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197]     {CVE-2024-45005}
    - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Jose Ignacio Tornos     Martinez) [RHEL-55579] {CVE-2024-43879}
    - wifi: mac80211: fix NULL dereference at band check in starting tx ba session (Jose Ignacio Tornos     Martinez) [RHEL-56191] {CVE-2024-43911}
    - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (Jose Ignacio Tornos Martinez)     [RHEL-54805] {CVE-2024-43842}
    - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51559] {CVE-2024-42079}
    - x86/mm: Fix pti_clone_pgtable() alignment assumption (Rafael Aquini) [RHEL-57170] {CVE-2024-44965}
    - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (CKI Backport     Bot) [RHEL-47822] {CVE-2024-40919}
    - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44369]     {CVE-2024-36270}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
458675	Echo: linux: security update to 6.7.7-1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
458675	Echo: linux: security update to 6.7.7-1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
291775	MiracleLinux 9 : kernel-5.14.0-503.11.1.el9_5 (AXSA:2025-9528:03)	Nessus	Miracle Linux Local Security Checks	Local	high
226685	Linux Distros Unpatched Vulnerability : CVE-2023-52625	Nessus	Misc.	Local	medium
211575	Oracle Linux 9 : kernel (ELSA-2024-9315)	Nessus	Oracle Linux Local Security Checks	Local	high
210815	RHEL 9 : kernel (RHSA-2024:9315)	Nessus	Red Hat Local Security Checks	Local	high

Detections

Analytics

CVE-2023-52625

medium

Tenable Plugins

medium

medium

high

medium

high

high