In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suspended If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash. Also we cannot access any registers after dwc3_core_exit() on some platforms so move the dwc3_enable_susphy() call to the top.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0471-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
    - CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
    - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key()     (bsc#1255377).
    - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
    - CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
    - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
    - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
    - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
    - CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
    - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf     (bsc#1256779).
    - CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
    - CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
    - CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).

    The following non security issues were fixed:

    - bpf/selftests: test_select_reuseport_kern: Remove unused header (bsc#1257603).
    - btrfs: do not strictly require dirty metadata threshold for metadata writepages (stable-fixes).
    - cifs: Fix copy offload to flush destination region (bsc#1252511).
    - cifs: Fix flushing, invalidation and file size with copy_file_range() (bsc#1252511).
    - cifs: add new field to track the last access time of cfid (git-fixes).
    - ext4: use optimized mballoc scanning regardless of inode format (bsc#1254378).
    - ice: use netif_get_num_default_rss_queues() (bsc#1247712).
    - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087).
    - net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
    - net: tcp: allow zero-window ACK update the window (bsc#1254767).
    - sched: Increase sched_tick_remote timeout (bsc#1254510).
    - scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
    - smb: change return type of cached_dir_lease_break() to bool (git-fixes).
    - smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (git-fixes).
    - smb: client: remove unused fid_lock (git-fixes).
    - smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (git-fixes).
    - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (bsc#1250748).
    - smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (git-fixes).
    - smb: improve directory cache reuse for readdir operations (bsc#1252712).
    - x86: make page fault handling disable interrupts properly (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-6966 advisory.

    - net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75649]     {CVE-2025-21663}
    - net: stmmac: Fix zero-division error when disabling tc cbs (Izabela Bakollari) [RHEL-63931]     {CVE-2024-49977}
    - scsi: qla2xxx: Fix use after free on unload (Ewan D. Milne) [RHEL-75828] {CVE-2024-56623}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend     if device was already runtime suspended If the device was already runtime suspended then during system     suspend we cannot access the device registers else it will crash. Also we cannot access any registers     after dwc3_core_exit() on some platforms so move the dwc3_enable_susphy() call to the top.
    (CVE-2024-53070)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20018 advisory.

    [5.15.0-304.171.4]
    - Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds)
    - Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno)
    - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima)
    - lib/buildid: Fix build ID parsing logic (Jiri Olsa)
    - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
    - mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin)
    - Revert 'ALSA: hda/conexant: Mute speakers at suspend / shutdown' (Jaroslaw Janik)
    - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros)
    - ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
    - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang)
    - mm: revert 'mm: shmem: fix data-race in shmem_getattr()' (Andrew Morton)
    - ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
    - scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
    - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli)
    - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
    - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393531]
    - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393531]

    [5.15.0-304.171.3]
    - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock)  [Orabug: 37381702]
    - mtd: fix use-after-free in mtd release (Alexander Usyskin)  [Orabug: 37371929]
    - mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal)  [Orabug: 37371929]
    - mtd: call external _get and _put in right order (Alexander Usyskin)  [Orabug: 37371929]
    - nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko)  [Orabug: 37371929]
    - Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang)  [Orabug: 37364544]
    - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna)  [Orabug: 37361290]
    - x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna)  [Orabug: 37361290]
    - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma)  [Orabug: 37347419]
    - mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna)  [Orabug: 37306542]

    [5.15.0-304.171.2]
    - uek-rpm: Add mstflint_access module to the core list (Thomas Tai)  [Orabug: 37345530]
    - uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai)  [Orabug: 37345530]
    - sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay)  [Orabug:
    37329531]
    - Partial revert 'rds: Add inc/frag cache statistics' (Hans Westgaard Ry)  [Orabug: 37232315]

    [5.15.0-304.171.1]
    - kpcimgr: assign CPU to handle PCIE transactions during kexec (Joe Dobosenski)  [Orabug: 37295980]
    - kexec: update start address for LPI table data (Joe Dobosenski)  [Orabug: 37295980]
    - kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37295980]
    - embedded2: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Joe Dobosenski)  [Orabug: 37295980]
    - embedded2: Support booting an encrypted root filesystem (Joe Dobosenski)  [Orabug: 37295980]
    - Update embedded2 config for UEK7 (Joe Dobosenski)  [Orabug: 37295980]
    - Pensando: kernel config changes for kdump (Rob Gardner)  [Orabug: 34091165] [Orabug: 37295980]
    - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Joe Dobosenski)  [Orabug:
    37295980]
    - arm64: kexec: add support for kexec with spin-table (Henry Willard)  [Orabug: 32549965] [Orabug:
    37295980]
    - drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear)  [Orabug: 37295980]
    - drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear)  [Orabug: 37295980]
    - mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson)  [Orabug: 37295980]
    - Fix NULL pointer dereference in cn_filter() (Anjali Kulkarni)  [Orabug: 37280567]
    - selftests: connector: Fix input argument error paths to skip (Shuah Khan)  [Orabug: 37280567]
    - connector/cn_proc: Selftest for proc connector (Anjali Kulkarni)  [Orabug: 37280567]
    - connector/cn_proc: Allow non-root users access (Anjali Kulkarni)  [Orabug: 37280567]
    - connector/cn_proc: Performance improvements (Anjali Kulkarni)  [Orabug: 37280567]
    - connector/cn_proc: Add filtering to fix some bugs (Anjali Kulkarni)  [Orabug: 37280567]
    - netlink: Add new netlink_release function (Anjali Kulkarni)  [Orabug: 37280567]
    - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski)  [Orabug: 37214589]     {CVE-2024-46770}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5818 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5818-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     November 24, 2024                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2022-45888 CVE-2023-52812 CVE-2024-26952 CVE-2024-26954                      CVE-2024-35964 CVE-2024-36244 CVE-2024-36478 CVE-2024-36914                      CVE-2024-36915 CVE-2024-36923 CVE-2024-38540 CVE-2024-38553                      CVE-2024-41080 CVE-2024-42322 CVE-2024-43868 CVE-2024-43904                      CVE-2024-43911 CVE-2024-44949 CVE-2024-49950 CVE-2024-49960                      CVE-2024-49974 CVE-2024-49986 CVE-2024-49991 CVE-2024-50012                      CVE-2024-50036 CVE-2024-50067 CVE-2024-50072 CVE-2024-50126                      CVE-2024-50215 CVE-2024-50218 CVE-2024-50228 CVE-2024-50229                      CVE-2024-50230 CVE-2024-50232 CVE-2024-50233 CVE-2024-50234                      CVE-2024-50235 CVE-2024-50236 CVE-2024-50237 CVE-2024-50242                      CVE-2024-50243 CVE-2024-50244 CVE-2024-50245 CVE-2024-50247                      CVE-2024-50249 CVE-2024-50250 CVE-2024-50251 CVE-2024-50252                      CVE-2024-50255 CVE-2024-50256 CVE-2024-50257 CVE-2024-50259                      CVE-2024-50261 CVE-2024-50262 CVE-2024-50264 CVE-2024-50265                      CVE-2024-50267 CVE-2024-50268 CVE-2024-50269 CVE-2024-50271                      CVE-2024-50272 CVE-2024-50273 CVE-2024-50276 CVE-2024-50278                      CVE-2024-50279 CVE-2024-50280 CVE-2024-50282 CVE-2024-50283                      CVE-2024-50284 CVE-2024-50286 CVE-2024-50287 CVE-2024-50290                      CVE-2024-50292 CVE-2024-50295 CVE-2024-50296 CVE-2024-50299                      CVE-2024-50301 CVE-2024-50302 CVE-2024-53042 CVE-2024-53043                      CVE-2024-53052 CVE-2024-53054 CVE-2024-53055 CVE-2024-53057                      CVE-2024-53058 CVE-2024-53059 CVE-2024-53060 CVE-2024-53061                      CVE-2024-53063 CVE-2024-53066 CVE-2024-53070 CVE-2024-53072                      CVE-2024-53081 CVE-2024-53082 CVE-2024-53088 CVE-2024-53093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.119-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
299715	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:0587-1)	Nessus	SuSE Local Security Checks	high
298917	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:0472-1)	Nessus	SuSE Local Security Checks	high
298916	SUSE SLES15 / openSUSE 15 : Recommended update for initial livepatch (SUSE-SU-2026:0471-1)	Nessus	SuSE Local Security Checks	high
298739	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2026:0447-1)	Nessus	SuSE Local Security Checks	high
282947	MiracleLinux 9 : kernel-5.14.0-570.12.1.el9_6 (AXSA:2025-10392:38)	Nessus	Miracle Linux Local Security Checks	critical
237324	RHEL 9 : kernel (RHSA-2025:6966)	Nessus	Red Hat Local Security Checks	critical
237030	Oracle Linux 9 : kernel (ELSA-2025-6966)	Nessus	Oracle Linux Local Security Checks	critical
230416	Linux Distros Unpatched Vulnerability : CVE-2024-53070	Nessus	Misc.	medium
213998	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20018)	Nessus	Oracle Linux Local Security Checks	high
213470	Debian dla-4008 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	critical
211777	Debian dsa-5818 : affs-modules-6.1.0-21-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2024-53070

medium

Tenable Plugins

high

high

high

high

critical

critical

critical

medium

high

critical

high