In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle errors that nilfs_prepare_chunk() may return Patch series "nilfs2: fix issues with rename operations". This series fixes BUG_ON check failures reported by syzbot around rename operations, and a minor behavioral issue where the mtime of a child directory changes when it is renamed instead of moved. This patch (of 2): The directory manipulation routines nilfs_set_link() and nilfs_delete_entry() rewrite the directory entry in the folio/page previously read by nilfs_find_entry(), so error handling is omitted on the assumption that nilfs_prepare_chunk(), which prepares the buffer for rewriting, will always succeed for these. And if an error is returned, it triggers the legacy BUG_ON() checks in each routine. This assumption is wrong, as proven by syzbot: the buffer layer called by nilfs_prepare_chunk() may call nilfs_get_block() if necessary, which may fail due to metadata corruption or other reasons. This has been there all along, but improved sanity checks and error handling may have made it more reproducible in fuzzing tests. Fix this issue by adding missing error paths in nilfs_set_link(), nilfs_delete_entry(), and their caller nilfs_rename().

The version of kernel installed on the remote host is prior to 5.10.235-227.919. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-088 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    macsec: fix UAF bug for real_dev (CVE-2022-49390)

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)

    In the Linux kernel, the following vulnerability has been resolved:

    rdma/cxgb4: Prevent potential integer overflow on 32bit (CVE-2024-57973)

    In the Linux kernel, the following vulnerability has been resolved:

    memcg: fix soft lockup in the OOM process (CVE-2024-57977)

    In the Linux kernel, the following vulnerability has been resolved:

    pps: Fix a use-after-free (CVE-2024-57979)

    In the Linux kernel, the following vulnerability has been resolved:

    rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: Disallow replacing of child qdisc from one parent to another (CVE-2025-21700)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmr: do not call mr_mfc_uses_dev() for unres entries (CVE-2025-21719)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: handle errors that nilfs_prepare_chunk() may return (CVE-2025-21721)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: do not force clear folio if buffer is referenced (CVE-2025-21722)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: avoid UAF for reorder_work (CVE-2025-21726)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: fix UAF in padata_reorder (CVE-2025-21727)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Send signals asynchronously if !preemptible (CVE-2025-21728)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: don't allow reconnect after disconnect (CVE-2025-21731)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix use-after-free when attempting to join an aborted transaction (CVE-2025-21753)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: Keep the binding until socket destruction (CVE-2025-21756)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: extend RCU protection in ndisc_send_skb() (CVE-2025-21760)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)

    In the Linux kernel, the following vulnerability has been resolved:

    arp: use RCU protection in arp_xmit() (CVE-2025-21762)

    In the Linux kernel, the following vulnerability has been resolved:

    neighbour: use RCU protection in __neigh_notify() (CVE-2025-21763)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)

    In the Linux kernel, the following vulnerability has been resolved:

    clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (CVE-2025-21767)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)

    In the Linux kernel, the following vulnerability has been resolved:

    team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787)

    In the Linux kernel, the following vulnerability has been resolved:

    vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: protect access to buffers with no active references (CVE-2025-21811)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)

    In the Linux kernel, the following vulnerability has been resolved:

    vlan: enforce underlying device type (CVE-2025-21920)

    In the Linux kernel, the following vulnerability has been resolved:

    net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5900 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5900-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     April 12, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2023-52857 CVE-2023-52927 CVE-2024-24855 CVE-2024-26656                      CVE-2024-26767 CVE-2024-26982 CVE-2024-27056 CVE-2024-35866                      CVE-2024-38611 CVE-2024-40973 CVE-2024-42129 CVE-2024-43831                      CVE-2024-46772 CVE-2024-47753 CVE-2024-47754 CVE-2024-50056                      CVE-2024-50246 CVE-2024-53166 CVE-2024-57977 CVE-2024-58002                      CVE-2024-58005 CVE-2024-58079 CVE-2024-58090 CVE-2025-21702                      CVE-2025-21712 CVE-2025-21721 CVE-2025-21756 CVE-2025-21838                      CVE-2025-21844 CVE-2025-21846 CVE-2025-21848 CVE-2025-21855                      CVE-2025-21858 CVE-2025-21859 CVE-2025-21862 CVE-2025-21864                      CVE-2025-21865 CVE-2025-21866 CVE-2025-21867 CVE-2025-21871                      CVE-2025-21875 CVE-2025-21877 CVE-2025-21878 CVE-2025-21881                      CVE-2025-21887 CVE-2025-21891 CVE-2025-21898 CVE-2025-21899                      CVE-2025-21904 CVE-2025-21905 CVE-2025-21909 CVE-2025-21910                      CVE-2025-21912 CVE-2025-21913 CVE-2025-21914 CVE-2025-21916                      CVE-2025-21917 CVE-2025-21918 CVE-2025-21919 CVE-2025-21920                      CVE-2025-21922 CVE-2025-21924 CVE-2025-21925 CVE-2025-21926                      CVE-2025-21928 CVE-2025-21934 CVE-2025-21935 CVE-2025-21936                      CVE-2025-21937 CVE-2025-21938 CVE-2025-21941 CVE-2025-21943                      CVE-2025-21944 CVE-2025-21945 CVE-2025-21947 CVE-2025-21948                      CVE-2025-21950 CVE-2025-21951 CVE-2025-21956 CVE-2025-21957                      CVE-2025-21959 CVE-2025-21960 CVE-2025-21962 CVE-2025-21963                      CVE-2025-21964 CVE-2025-21968 CVE-2025-21970 CVE-2025-21971                      CVE-2025-21975 CVE-2025-21978 CVE-2025-21979 CVE-2025-21980                      CVE-2025-21981 CVE-2025-21986 CVE-2025-21991 CVE-2025-21992                      CVE-2025-21993 CVE-2025-21994 CVE-2025-21996 CVE-2025-21997                      CVE-2025-21999 CVE-2025-22004 CVE-2025-22005 CVE-2025-22007                      CVE-2025-22008 CVE-2025-22010 CVE-2025-22014 CVE-2025-22015

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.133-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle errors that     nilfs_prepare_chunk() may return Patch series nilfs2: fix issues with rename operations. This series     fixes BUG_ON check failures reported by syzbot around rename operations, and a minor behavioral issue     where the mtime of a child directory changes when it is renamed instead of moved. This patch (of 2): The     directory manipulation routines nilfs_set_link() and nilfs_delete_entry() rewrite the directory entry in     the folio/page previously read by nilfs_find_entry(), so error handling is omitted on the assumption that     nilfs_prepare_chunk(), which prepares the buffer for rewriting, will always succeed for these. And if an     error is returned, it triggers the legacy BUG_ON() checks in each routine. This assumption is wrong, as     proven by syzbot: the buffer layer called by nilfs_prepare_chunk() may call nilfs_get_block() if     necessary, which may fail due to metadata corruption or other reasons. This has been there all along, but     improved sanity checks and error handling may have made it more reproducible in fuzzing tests. Fix this     issue by adding missing error paths in nilfs_set_link(), nilfs_delete_entry(), and their caller     nilfs_rename(). (CVE-2025-21721)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
234528	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2025-088)	Nessus	Amazon Linux Local Security Checks	high
234309	Debian dsa-5900 : affs-modules-6.1.0-28-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high
230658	Linux Distros Unpatched Vulnerability : CVE-2025-21721	Nessus	Misc.	high

Detections

Analytics

CVE-2025-21721

medium

Tenable Plugins

high

high

high