Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e5d3928f2c advisory.

    - Update to upstream 2.1-49. 20250512
      - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision         0xa0000d1;
      - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision         0x10003a2;
      - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
      - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
      - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
      - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in         intel-ucode/06-c5-02) at revision 0x118;
      - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at         revision 0x118;
      - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at         revision 0x118;
      - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in         intel-ucode/06-c6-02) at revision 0x118;
      - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision         0x118;
      - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at         revision 0x118;
      - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at         revision 0x118;
      - Removal of 06-55-06/0xbf (CLX-SP B0) microcode at revision 0x4003605;
      - Removal of 06-cf-01/0x87 (EMR-SP A0) microcode at revision 0x21000291;
      - Removal of 06-cf-02/0x87 (EMR-SP A1) microcode (in         intel-ucode/06-cf-01) at revision 0x21000291;
      - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision         0x5003707 up to 0x5003901;
      - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904         up to 0x7002b01;
      - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5         up to 0xd000404;
      - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0         up to 0x10002d0;
      - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up         to 0x26;
      - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6         up to 0xca;
      - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision         0xb8 up to 0xbc;
      - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up         to 0x3c;
      - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up         to 0x56;
      - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)         microcode from revision 0xfc up to 0x100;
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in         intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in         intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision         0x2b000620 up to 0x2b000639;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in         intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
      - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from         revision 0x2c0003e0 up to 0x2c0003f7;
      - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in         intel-ucode/06-8f-08) from revision 0x2b000620 up to 0x2b000639;
      - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in         intel-ucode/06-8f-08) from revision 0x2c0003e0 up to 0x2c0003f7;
      - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in         intel-ucode/06-8f-08) from revision 0x2b000620 up to 0x2b000639;
      - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from         revision 0x2c0003e0 up to 0x2c0003f7;
      - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in         intel-ucode/06-8f-08) from revision 0x2b000620 up to 0x2b000639;
      - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in         intel-ucode/06-8f-08) from revision 0x2b000620 up to 0x2b000639;
      - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision         0x2c0003e0 up to 0x2c0003f7;
      - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision         0x2b000620 up to 0x2b000639;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision         0x38 up to 0x3a;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x38 up to 0x3a;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)         from revision 0x38 up to 0x3a;
      - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from         revision 0x38 up to 0x3a;
      - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from         revision 0x38 up to 0x3a;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38         up to 0x3a;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x38 up to 0x3a;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)         from revision 0x38 up to 0x3a;
      - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from         revision 0x38 up to 0x3a;
      - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from         revision 0x38 up to 0x3a;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision         0x436 up to 0x437;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in         intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
      - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in         intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
      - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up         to 0xa;
      - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436         up to 0x437;
      - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision         0x102 up to 0x104;
      - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up         to 0x100;
      - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc         up to 0x100;
      - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc         up to 0x100;
      - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe         up to 0x102;
      - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision         0xfc up to 0x100;
      - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up         to 0x64;
      - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20         up to 0x24;
      - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330         up to 0x3000341;
      - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up         to 0x12f;
      - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from         revision 0x12c up to 0x12f;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision         0x4124 up to 0x4128;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in         intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from         revision 0x4124 up to 0x4128;
      - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in         intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
      - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124         up to 0x4128;
      - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from         revision 0x4124 up to 0x4128;
      - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up         to 0x1d;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
      - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up         to 0x3a;
      - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)         from revision 0x38 up to 0x3a;
      - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from         revision 0x38 up to 0x3a;
      - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from         revision 0x38 up to 0x3a;
      - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in         intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
      - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in         intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
      - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)         from revision 0x38 up to 0x3a;
      - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up         to 0x3a;
      - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from         revision 0x38 up to 0x3a;
      - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from         revision 0x38 up to 0x3a;
      - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in         intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
      - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291         up to 0x210002a9.
      - Addresses CVE-2024-28956, CVE-2024-43420, CVE-2024-45332, CVE-2025-20012,         CVE-2025-20054, CVE-2025-20103, CVE-2025-20623, CVE-2025-24495


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-991 advisory.

    A potential security vulnerability in some Intel(r) Processors may allow information disclosure. Intel is     releasing microcode updates and prescriptive guidance to mitigate this potential vulnerability.

    Info: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html     (CVE-2024-28956)

    Potential security vulnerabilities in some Intel(r) Processor indirect branch predictors may allow     information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities.

    Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html     (CVE-2024-45332)

    Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is     releasing microcode updates to mitigate these potential vulnerabilities.

    Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html     (CVE-2025-20054)

    Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is     releasing microcode updates to mitigate these potential vulnerabilities.

    Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html     (CVE-2025-20103)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01651-2 advisory.

    Intel CPU Microcode was updated to the 20250512 release (bsc#1243123)

    - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during     Transient Execution for some Intel Processors may allow an authenticated user to potentially enable     information disclosure via local access.
    - CVE-2025-20103: Insufficient resource pool in the core management mechanism for some Intel Processors     may allow an authenticated user to potentially enable denial of service via local access.
    - CVE-2025-20054: Uncaught exception in the core management mechanism for some Intel Processors may allow     an authenticated user to potentially enable denial of service via local access.
    - CVE-2024-43420: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution for some Intel Atom processors may allow an authenticated user to     potentially enable information disclosure via local access.
    - CVE-2025-20623: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution for some Intel Core processors (10th Generation) may allow an     authenticated user to potentially enable information disclosure via local access.
    - CVE-2024-45332: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution in the indirect branch predictors for some Intel Processors may allow     an authenticated user to potentially enable information disclosure via local access.
    - CVE-2025-24495: Incorrect initialization of resource in the branch prediction unit for some Intel Core     Ultra Processors may allow an authenticated user to potentially enable information disclosure via local     access.
    - CVE-2025-20012: Incorrect behavior order for some Intel Core Ultra Processors may allow an     unauthenticated user to potentially enable information disclosure via physical access.
    - Updates for functional issues.

    - New Platforms

      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ARL-U          | A1       | 06-b5-00/80 |          | 0000000a | Core Ultra Processor (Series2)       | ARL-S/HX (8P)  | B0       | 06-c6-02/82 |          | 00000118 | Core Ultra Processor (Series2)       | ARL-H          | A1       | 06-c5-02/82 |          | 00000118 | Core Ultra Processor (Series2)       | GNR-AP/SP      | B0       | 06-ad-01/95 |          | 010003a2 | Xeon Scalable Gen6       | GNR-AP/SP      | H0       | 06-ad-01/20 |          | 0a0000d1 | Xeon Scalable Gen6       | LNL            | B0       | 06-bd-01/80 |          | 0000011f | Core Ultra 200 V Series Processor

    - Updated Platforms

      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ADL            | C0       | 06-97-02/07 | 00000038 | 0000003a | Core Gen12       | ADL            | H0       | 06-97-05/07 | 00000038 | 0000003a | Core Gen12       | ADL            | L0       | 06-9a-03/80 | 00000436 | 00000437 | Core Gen12       | ADL            | R0       | 06-9a-04/80 | 00000436 | 00000437 | Core Gen12       | ADL-N          | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200,     Atom x7211E/x7213E/x7425E       | AML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | AZB            | A0/R0    | 06-9a-04/40 | 00000009 | 0000000a | Intel(R) Atom(R) C1100       | CFL-H          | R0       | 06-9e-0d/22 | 00000102 | 00000104 | Core Gen9 Mobile       | CLX-SP         | B1       | 06-55-07/bf | 05003707 | 05003901 | Xeon Scalable Gen2       | CML-H          | R1       | 06-a5-02/20 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-S102       | Q0       | 06-a5-05/22 | 000000fc | 00000100 | Core Gen10       | CML-S62        | G1       | 06-a5-03/22 | 000000fc | 00000100 | Core Gen10       | CML-U42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fe | 00000102 | Core Gen10 Mobile       | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | CPX-SP         | A1       | 06-55-0b/bf | 07002904 | 07002b01 | Xeon Scalable Gen3       | EMR-SP         | A1       | 06-cf-02/87 | 21000291 | 210002a9 | Xeon Scalable Gen5       | GLK-R          | R0       | 06-7a-08/01 | 00000024 | 00000026 | Pentium J5040/N5030, Celeron     J4125/J4025/N4020/N4120       | ICL-D          | B0       | 06-6c-01/10 | 010002c0 | 010002d0 | Xeon D-17xx, D-27xx       | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c6 | 000000ca | Core Gen10 Mobile       | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003f5 | 0d000404 | Xeon Scalable Gen3       | MTL            | C0       | 06-aa-04/e6 | 00000020 | 00000024 | Core Ultra Processor       | RKL-S          | B0       | 06-a7-01/02 | 00000063 | 00000064 | Core Gen11       | RPL-E/HX/S     | B0       | 06-b7-01/32 | 0000012c | 0000012f | Core Gen13/Gen14       | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004124 | 00004128 | Core Gen13       | RPL-HX/S       | C0       | 06-bf-02/07 | 00000038 | 0000003a | Core Gen13/Gen14       | RPL-S          | H0       | 06-bf-05/07 | 00000038 | 0000003a | Core Gen13/Gen14       | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004124 | 00004128 | Core Gen13       | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0003e0 | 2c0003f7 | Xeon Max       | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4       | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4       | SRF-SP         | C0       | 06-af-03/01 | 03000330 | 03000341 | Xeon 6700-Series Processors with     E-Cores       | TGL            | B0/B1    | 06-8c-01/80 | 000000b8 | 000000bc | Core Gen11 Mobile       | TGL-H          | R0       | 06-8d-01/c2 | 00000052 | 00000056 | Core Gen11 Mobile       | TGL-R          | C0       | 06-8c-02/c2 | 00000038 | 0000003c | Core Gen11 Mobile       | TWL            | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200,     Atom x7211E/x7213E/x7425E       | WHL-U          | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen8 Mobile

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of microcode_ctl installed on the remote host is prior to 2.1-47. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2872 advisory.

    A potential security vulnerability in some Intel(r) Processors may allow information disclosure. Intel is     releasing microcode updates and prescriptive guidance to mitigate this potential vulnerability.

    Info: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html     (CVE-2024-28956)

    Potential security vulnerabilities in some Intel(r) Processor indirect branch predictors may allow     information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities.

    Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html     (CVE-2024-45332)

    Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is     releasing microcode updates to mitigate these potential vulnerabilities.

    Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html     (CVE-2025-20054)

    Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is     releasing microcode updates to mitigate these potential vulnerabilities.

    Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html     (CVE-2025-20103)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-86f39c57ce advisory.

    x86: Indirect Target Selection [XSA-469, CVE-2024-28956]

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7535-1 advisory.

    Sander Wiebing and Cristiano Giuffrida discovered that some Intel Processors did not properly handle     data in Shared Microarchitectural Structures during Transient Execution. An authenticated attacker could     possibly use this issue to obtain sensitive information. (CVE-2024-28956)

    It was discovered that some Intel Processors did not properly handle prediction calculations. An     authenticated attacker could possibly use this issue to obtain sensitive information. (CVE-2024-43420,     CVE-2024-45332, CVE-2025-20623)

    It was discovered that some Intel Processors did not properly initialize resources in the branch     prediction unit. An authenticated attacker could possibly use this issue to obtain sensitive information.
    (CVE-2025-20012, CVE-2025-24495)

    Michal Raviv and Jeff Gilbert discovered that some Intel Processors did not properly handle resources     and exceptions in the core management mechanism. An authenticated attacker could possibly use this issue     to cause a denial of service. (CVE-2025-20054, CVE-2025-20103)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01703-1 advisory.

    Update to Xen 4.18.5:

    Security fixes:

    - CVE-2024-28956: Fixed Intel CPU Indirect Target Selection (ITS) (bsc#1243117)

    Other fixes:

    - Fixed boot failing with XEN kernel on DL580 Gen12 (bsc#1242490)
    - Added missing upstream bug fixes (bsc#1027519)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01707-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack     (bsc#1224757).
    - CVE-2024-28956: Intel CPU: Indirect Target Selection (ITS) (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-46763: fou: Fix null-ptr-deref in GRO (bsc#1230764).
    - CVE-2024-50038: netfilter: xtables: avoid NFPROTO_UNSPEC where needed (bsc#1231910).
    - CVE-2024-50162: bpf: devmap: provide rxq after redirect (bsc#1233075).
    - CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
    - CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
    - CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
    - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
    - CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
    - CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
    - CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (bsc#1239470).
    - CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
    - CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
    - CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
    - CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
    - CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
    - CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
    - CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
    - CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
    - CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
    - CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
    - CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
    - CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
    - CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
    - CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error (bsc#1240720).
    - CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
    - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21969: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (bsc#1240784).
    - CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
    - CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
    - CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
    - CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
    - CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
    - CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
    - CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
    - CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
    - CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
    - CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
    - CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
    - CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
    - CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
    - CVE-2025-22090: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (bsc#1241537).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22105: bonding: check xdp prog when set bond mode (bsc#1241548).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups()     (bsc#1241578).
    - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593).
    - CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).
    - CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-37860: sfc: fix NULL dereferences in ef100_process_design_param() (bsc#1241452).
    - CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5925 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5925-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 24, 2025                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-26618 CVE-2024-26783 CVE-2024-26807 CVE-2024-28956                      CVE-2024-35790 CVE-2024-36903 CVE-2024-36927 CVE-2024-43840                      CVE-2024-46751 CVE-2024-53203 CVE-2024-53209 CVE-2024-57945                      CVE-2025-21645 CVE-2025-21839 CVE-2025-21931 CVE-2025-22062                      CVE-2025-37819 CVE-2025-37890 CVE-2025-37897 CVE-2025-37901                      CVE-2025-37902 CVE-2025-37903 CVE-2025-37905 CVE-2025-37909                      CVE-2025-37911 CVE-2025-37912 CVE-2025-37913 CVE-2025-37914                      CVE-2025-37915 CVE-2025-37917 CVE-2025-37921 CVE-2025-37923                      CVE-2025-37924 CVE-2025-37927 CVE-2025-37928 CVE-2025-37929                      CVE-2025-37930 CVE-2025-37932 CVE-2025-37936 CVE-2025-37947                      CVE-2025-37948 CVE-2025-37949 CVE-2025-37951 CVE-2025-37953                      CVE-2025-37959 CVE-2025-37961 CVE-2025-37962 CVE-2025-37963                      CVE-2025-37964 CVE-2025-37967 CVE-2025-37969 CVE-2025-37970                      CVE-2025-37972 CVE-2025-37990 CVE-2025-37991

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For CPUs affected to ITS (Indirect Target Selection), to fully mitigate     the vulnerability it is also necessary to update the intel-microcode     packages released in DSA 5924-1.

    For details on the Indirect Target Selection (ITS) vulnerability please     refer to https://www.vusec.net/projects/training-solo/ and     https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-     guidance/indirect-target-selection.html .

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.140-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5924 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5924-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 23, 2025                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : intel-microcode     CVE ID         : CVE-2024-28956 CVE-2024-43420 CVE-2024-45332 CVE-2025-20012                      CVE-2025-20054 CVE-2025-20103 CVE-2025-20623 CVE-2025-24495     Debian Bug     : 1105172

    This update ships updated CPU microcode for some types of Intel CPUs. In     particular it provides mitigations for the Indirect Target Selection     (ITS) vulnerability (CVE-2024-28956) and the Branch Privilege Injection     vulnerability (CVE-2024-45332).

    For CPUs affected to ITS (Indirect Target Selection), to fully mitigate     the vulnerability it is also necessary to update the Linux kernel     packages released in a separate, forthcoming DSA.

    For details on the Indirect Target Selection (ITS) vulnerability please     refer to https://www.vusec.net/projects/training-solo/ and     https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-     guidance/indirect-target-selection.html .

    For details on the Branch Privilege Injection vulnerability please refer     to https://comsec.ethz.ch/research/microarch/branch-privilege-injection/

    For the stable distribution (bookworm), these problems have been fixed in     version 3.20250512.1~deb12u1.

    We recommend that you upgrade your intel-microcode packages.

    For the detailed security status of intel-microcode please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/intel-microcode

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01651-1 advisory.

    Intel CPU Microcode was updated to the 20250512 release (bsc#1243123)

    - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during     Transient Execution for some Intel Processors may allow an authenticated user to potentially enable     information disclosure via local access.
    - CVE-2025-20103: Insufficient resource pool in the core management mechanism for some Intel Processors     may allow an authenticated user to potentially enable denial of service via local access.
    - CVE-2025-20054: Uncaught exception in the core management mechanism for some Intel Processors may allow     an authenticated user to potentially enable denial of service via local access.
    - CVE-2024-43420: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution for some Intel Atom processors may allow an authenticated user to     potentially enable information disclosure via local access.
    - CVE-2025-20623: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution for some Intel Core processors (10th Generation) may allow an     authenticated user to potentially enable information disclosure via local access.
    - CVE-2024-45332: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution in the indirect branch predictors for some Intel Processors may allow     an authenticated user to potentially enable information disclosure via local access.
    - CVE-2025-24495: Incorrect initialization of resource in the branch prediction unit for some Intel Core     Ultra Processors may allow an authenticated user to potentially enable information disclosure via local     access.
    - CVE-2025-20012: Incorrect behavior order for some Intel Core Ultra Processors may allow an     unauthenticated user to potentially enable information disclosure via physical access.
    - Updates for functional issues.

    - New Platforms

      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ARL-U          | A1       | 06-b5-00/80 |          | 0000000a | Core Ultra Processor (Series2)       | ARL-S/HX (8P)  | B0       | 06-c6-02/82 |          | 00000118 | Core Ultra Processor (Series2)       | ARL-H          | A1       | 06-c5-02/82 |          | 00000118 | Core Ultra Processor (Series2)       | GNR-AP/SP      | B0       | 06-ad-01/95 |          | 010003a2 | Xeon Scalable Gen6       | GNR-AP/SP      | H0       | 06-ad-01/20 |          | 0a0000d1 | Xeon Scalable Gen6       | LNL            | B0       | 06-bd-01/80 |          | 0000011f | Core Ultra 200 V Series Processor

    - Updated Platforms

      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ADL            | C0       | 06-97-02/07 | 00000038 | 0000003a | Core Gen12       | ADL            | H0       | 06-97-05/07 | 00000038 | 0000003a | Core Gen12       | ADL            | L0       | 06-9a-03/80 | 00000436 | 00000437 | Core Gen12       | ADL            | R0       | 06-9a-04/80 | 00000436 | 00000437 | Core Gen12       | ADL-N          | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200,     Atom x7211E/x7213E/x7425E       | AML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | AZB            | A0/R0    | 06-9a-04/40 | 00000009 | 0000000a | Intel(R) Atom(R) C1100       | CFL-H          | R0       | 06-9e-0d/22 | 00000102 | 00000104 | Core Gen9 Mobile       | CLX-SP         | B1       | 06-55-07/bf | 05003707 | 05003901 | Xeon Scalable Gen2       | CML-H          | R1       | 06-a5-02/20 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-S102       | Q0       | 06-a5-05/22 | 000000fc | 00000100 | Core Gen10       | CML-S62        | G1       | 06-a5-03/22 | 000000fc | 00000100 | Core Gen10       | CML-U42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fe | 00000102 | Core Gen10 Mobile       | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | CPX-SP         | A1       | 06-55-0b/bf | 07002904 | 07002b01 | Xeon Scalable Gen3       | EMR-SP         | A1       | 06-cf-02/87 | 21000291 | 210002a9 | Xeon Scalable Gen5       | GLK-R          | R0       | 06-7a-08/01 | 00000024 | 00000026 | Pentium J5040/N5030, Celeron     J4125/J4025/N4020/N4120       | ICL-D          | B0       | 06-6c-01/10 | 010002c0 | 010002d0 | Xeon D-17xx, D-27xx       | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c6 | 000000ca | Core Gen10 Mobile       | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003f5 | 0d000404 | Xeon Scalable Gen3       | MTL            | C0       | 06-aa-04/e6 | 00000020 | 00000024 | Core Ultra Processor       | RKL-S          | B0       | 06-a7-01/02 | 00000063 | 00000064 | Core Gen11       | RPL-E/HX/S     | B0       | 06-b7-01/32 | 0000012c | 0000012f | Core Gen13/Gen14       | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004124 | 00004128 | Core Gen13       | RPL-HX/S       | C0       | 06-bf-02/07 | 00000038 | 0000003a | Core Gen13/Gen14       | RPL-S          | H0       | 06-bf-05/07 | 00000038 | 0000003a | Core Gen13/Gen14       | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004124 | 00004128 | Core Gen13       | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0003e0 | 2c0003f7 | Xeon Max       | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4       | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4       | SRF-SP         | C0       | 06-af-03/01 | 03000330 | 03000341 | Xeon 6700-Series Processors with     E-Cores       | TGL            | B0/B1    | 06-8c-01/80 | 000000b8 | 000000bc | Core Gen11 Mobile       | TGL-H          | R0       | 06-8d-01/c2 | 00000052 | 00000056 | Core Gen11 Mobile       | TGL-R          | C0       | 06-8c-02/c2 | 00000038 | 0000003c | Core Gen11 Mobile       | TWL            | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200,     Atom x7211E/x7213E/x7425E       | WHL-U          | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen8 Mobile

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01650-1 advisory.

    Intel CPU Microcode was updated to the 20250512 release (bsc#1243123)

    - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during     Transient Execution for some Intel Processors may allow an authenticated user to potentially enable     information disclosure via local access.
    - CVE-2025-20103: Insufficient resource pool in the core management mechanism for some Intel Processors     may allow an authenticated user to potentially enable denial of service via local access.
    - CVE-2025-20054: Uncaught exception in the core management mechanism for some Intel Processors may allow     an authenticated user to potentially enable denial of service via local access.
    - CVE-2024-43420: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution for some Intel Atom processors may allow an authenticated user to     potentially enable information disclosure via local access.
    - CVE-2025-20623: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution for some Intel Core processors (10th Generation) may allow an     authenticated user to potentially enable information disclosure via local access.
    - CVE-2024-45332: Exposure of sensitive information caused by shared microarchitectural predictor state     that influences transient execution in the indirect branch predictors for some Intel Processors may allow     an authenticated user to potentially enable information disclosure via local access.
    - CVE-2025-24495: Incorrect initialization of resource in the branch prediction unit for some Intel Core     Ultra Processors may allow an authenticated user to potentially enable information disclosure via local     access.
    - CVE-2025-20012: Incorrect behavior order for some Intel Core Ultra Processors may allow an     unauthenticated user to potentially enable information disclosure via physical access.
    - Updates for functional issues.

    - New Platforms

      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ARL-U          | A1       | 06-b5-00/80 |          | 0000000a | Core Ultra Processor (Series2)       | ARL-S/HX (8P)  | B0       | 06-c6-02/82 |          | 00000118 | Core Ultra Processor (Series2)       | ARL-H          | A1       | 06-c5-02/82 |          | 00000118 | Core Ultra Processor (Series2)       | GNR-AP/SP      | B0       | 06-ad-01/95 |          | 010003a2 | Xeon Scalable Gen6       | GNR-AP/SP      | H0       | 06-ad-01/20 |          | 0a0000d1 | Xeon Scalable Gen6       | LNL            | B0       | 06-bd-01/80 |          | 0000011f | Core Ultra 200 V Series Processor

    - Updated Platforms

      | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products       |:---------------|:---------|:------------|:---------|:---------|:---------       | ADL            | C0       | 06-97-02/07 | 00000038 | 0000003a | Core Gen12       | ADL            | H0       | 06-97-05/07 | 00000038 | 0000003a | Core Gen12       | ADL            | L0       | 06-9a-03/80 | 00000436 | 00000437 | Core Gen12       | ADL            | R0       | 06-9a-04/80 | 00000436 | 00000437 | Core Gen12       | ADL-N          | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200,     Atom x7211E/x7213E/x7425E       | AML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | AZB            | A0/R0    | 06-9a-04/40 | 00000009 | 0000000a | Intel(R) Atom(R) C1100       | CFL-H          | R0       | 06-9e-0d/22 | 00000102 | 00000104 | Core Gen9 Mobile       | CLX-SP         | B1       | 06-55-07/bf | 05003707 | 05003901 | Xeon Scalable Gen2       | CML-H          | R1       | 06-a5-02/20 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-S102       | Q0       | 06-a5-05/22 | 000000fc | 00000100 | Core Gen10       | CML-S62        | G1       | 06-a5-03/22 | 000000fc | 00000100 | Core Gen10       | CML-U42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fe | 00000102 | Core Gen10 Mobile       | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fc | 00000100 | Core Gen10 Mobile       | CML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile       | CPX-SP         | A1       | 06-55-0b/bf | 07002904 | 07002b01 | Xeon Scalable Gen3       | EMR-SP         | A1       | 06-cf-02/87 | 21000291 | 210002a9 | Xeon Scalable Gen5       | GLK-R          | R0       | 06-7a-08/01 | 00000024 | 00000026 | Pentium J5040/N5030, Celeron     J4125/J4025/N4020/N4120       | ICL-D          | B0       | 06-6c-01/10 | 010002c0 | 010002d0 | Xeon D-17xx, D-27xx       | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c6 | 000000ca | Core Gen10 Mobile       | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003f5 | 0d000404 | Xeon Scalable Gen3       | MTL            | C0       | 06-aa-04/e6 | 00000020 | 00000024 | Core Ultra Processor       | RKL-S          | B0       | 06-a7-01/02 | 00000063 | 00000064 | Core Gen11       | RPL-E/HX/S     | B0       | 06-b7-01/32 | 0000012c | 0000012f | Core Gen13/Gen14       | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004124 | 00004128 | Core Gen13       | RPL-HX/S       | C0       | 06-bf-02/07 | 00000038 | 0000003a | Core Gen13/Gen14       | RPL-S          | H0       | 06-bf-05/07 | 00000038 | 0000003a | Core Gen13/Gen14       | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004124 | 00004128 | Core Gen13       | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0003e0 | 2c0003f7 | Xeon Max       | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4       | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4       | SRF-SP         | C0       | 06-af-03/01 | 03000330 | 03000341 | Xeon 6700-Series Processors with     E-Cores       | TGL            | B0/B1    | 06-8c-01/80 | 000000b8 | 000000bc | Core Gen11 Mobile       | TGL-H          | R0       | 06-8d-01/c2 | 00000052 | 00000056 | Core Gen11 Mobile       | TGL-R          | C0       | 06-8c-02/c2 | 00000038 | 0000003c | Core Gen11 Mobile       | TWL            | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200,     Atom x7211E/x7213E/x7425E       | WHL-U          | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen8 Mobile

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01614-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
    - CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
    - CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
    - CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
    - CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
    - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
    - CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
    - CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
    - CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
    - CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
    - CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
    - CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
    - CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
    - CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
    - CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
    - CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
    - CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
    - CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
    - CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
    - CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
    - CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
    - CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
    - CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error (bsc#1240720).
    - CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
    - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
    - CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
    - CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
    - CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
    - CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
    - CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
    - CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
    - CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
    - CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
    - CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
    - CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
    - CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
    - CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
    - CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
    - CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22105, CVE-2025-37860: Add missing bugzilla references (bsc#1241452 bsc#1241548).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups()     (bsc#1241578).
    - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593).
    - CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).
    - CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4170 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4170-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Tobias Frost     May 18, 2025                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : intel-microcode     Version        : 3.20250512.1~deb11u1     CVE ID         : CVE-2024-28956 CVE-2024-43420 CVE-2024-45332 CVE-2025-20012                      CVE-2025-20054 CVE-2025-20103 CVE-2025-20623 CVE-2025-24495     Debian Bug     : 1105172

    Microcode updates has been released for Intel(R) processors, addressing     multiple potential vulnerabilties that may allow denial of service or     information disclosure.

    CVE-2024-28956

        Exposure of Sensitive Information in Shared Microarchitectural         Structures during Transient Execution for some Intel(R) Processors         may allow an authenticated user to potentially enable information         disclosure via local access.

    CVE-2024-43420

        Exposure of sensitive information caused by shared         microarchitectural predictor state that influences transient         execution for some Intel Atom(R) processors may allow an         authenticated user to potentially enable information disclosure via         local access.

    CVE-2024-45332

        Exposure of sensitive information caused by shared         microarchitectural predictor state that influences transient         execution in the indirect branch predictors for some Intel(R)         Processors may allow an authenticated user to potentially enable         information disclosure via local access.

    CVE-2025-20012

        Incorrect behavior order for some Intel(R) Core Ultra Processors         may allow an unauthenticated user to potentially enable information         disclosure via physical access.

    CVE-2025-20054

        Uncaught exception in the core management mechanism for some         Intel(R) Processors may allow an authenticated user to potentially         enable denial of service via local access.

    CVE-2025-20103

        Insufficient resource pool in the core management mechanism for some         Intel(R) Processors may allow an authenticated user to potentially         enable denial of service via local access.

    CVE-2025-20623

        Exposure of sensitive information caused by shared         microarchitectural predictor state that influences transient         execution for some Intel(R) Core processors (10th Generation) may         allow an authenticated user to potentially enable information         disclosure via local access.

    CVE-2025-24495

        Incorrect initialization of resource in the branch prediction unit         for some Intel(R) Core Ultra Processors may allow an authenticated         user to potentially enable information disclosure via local access.

    For Debian 11 bullseye, these problems have been fixed in version     3.20250512.1~deb11u1.

    We recommend that you upgrade your intel-microcode packages.

    For the detailed security status of intel-microcode please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/intel-microcode

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20323 advisory.

    - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
    - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863726]     {CVE-2024-28956}
    - x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863726]     {CVE-2024-28956}
    - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
    - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
    - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
    - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863726]     {CVE-2024-28956}
    - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37863726]  {CVE-2024-28956}
    - x86/alternatives: Remove faulty optimization (Josh Poimboeuf)  [Orabug: 37863726]  {CVE-2024-28956}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20318 advisory.

    - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956}
    - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863725]     {CVE-2024-28956}
    - x86/its: Add support for RSB stuffing mitigation (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956}
    - x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863725]     {CVE-2024-28956}
    - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956}
    - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956}
    - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956}
    - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863725]     {CVE-2024-28956}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
237737	Fedora 41 : microcode_ctl (2025-e5d3928f2c)	Nessus	Fedora Local Security Checks	medium
237675	Amazon Linux 2023 : microcode_ctl (ALAS2023-2025-991)	Nessus	Amazon Linux Local Security Checks	medium
237530	SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2025:01651-2)	Nessus	SuSE Local Security Checks	medium
237473	Amazon Linux 2 : microcode_ctl (ALAS-2025-2872)	Nessus	Amazon Linux Local Security Checks	medium
237442	Fedora 41 : xen (2025-86f39c57ce)	Nessus	Fedora Local Security Checks	medium
237338	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Intel Microcode vulnerabilities (USN-7535-1)	Nessus	Ubuntu Local Security Checks	medium
237285	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xen (SUSE-SU-2025:01703-1)	Nessus	SuSE Local Security Checks	medium
237279	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:01707-1)	Nessus	SuSE Local Security Checks	medium
237223	Debian dsa-5925 : affs-modules-6.1.0-33-4kc-malta-di - security update	Nessus	Debian Local Security Checks	medium
237206	Debian dsa-5924 : intel-microcode - security update	Nessus	Debian Local Security Checks	medium
237170	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2025:01651-1)	Nessus	SuSE Local Security Checks	medium
237165	SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2025:01650-1)	Nessus	SuSE Local Security Checks	medium
237088	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:01614-1)	Nessus	SuSE Local Security Checks	medium
236930	Debian dla-4170 : intel-microcode - security update	Nessus	Debian Local Security Checks	medium
235822	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20323)	Nessus	Oracle Linux Local Security Checks	high
235783	Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2025-20318)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2024-28956

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high