In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to usermode. When creating a VLAN device, we initialize GARP (garp_init_applicant) and MRP (mrp_init_applicant) for the underlying device. As part of the initialization process, we add the multicast address of each applicant to the underlying device, by calling dev_mc_add. __dev_mc_add uses dev->addr_len to determine the length of the new multicast address. This causes an out-of-bounds read if dev->addr_len is greater than 6, since the multicast addresses provided by GARP and MRP are only 6 bytes long. This behaviour can be reproduced using the following commands: ip tunnel add gretest mode ip6gre local ::1 remote ::2 dev lo ip l set up dev gretest ip link add link gretest name vlantest type vlan id 100 Then, the following command will display the address of garp_pdu_rcv: ip maddr show | grep 01:80:c2:00:00:21 Fix the bug by enforcing the type of the underlying device during VLAN device initialization.

The remote Ubuntu Pro FIPS-updates 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7518-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - Block layer subsystem;

    - Drivers core;

    - Network block device driver;

    - Character device driver;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - Network drivers;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - Trusted Execution Environment drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - NILFS2 file system;

    - UBI file system;

    - KVM subsystem;

    - L3 Master device support module;

    - Netfilter;

    - Process Accounting mechanism;

    - printk logging mechanism;

    - Scheduler infrastructure;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - Wireless networking;

    - Tomoyo security module; (CVE-2025-21760, CVE-2025-21928, CVE-2025-21877, CVE-2024-58069, CVE-2025-21909,     CVE-2025-21926, CVE-2025-21731, CVE-2025-21718, CVE-2025-21763, CVE-2025-21866, CVE-2024-58009,     CVE-2025-21971, CVE-2025-21787, CVE-2025-21721, CVE-2024-58072, CVE-2025-21791, CVE-2021-47191,     CVE-2025-21865, CVE-2025-21762, CVE-2024-58063, CVE-2025-21910, CVE-2025-21823, CVE-2025-21905,     CVE-2025-21708, CVE-2024-58090, CVE-2025-21917, CVE-2024-58051, CVE-2025-21781, CVE-2025-21898,     CVE-2025-21922, CVE-2024-58002, CVE-2024-58017, CVE-2024-57986, CVE-2024-58052, CVE-2024-26982,     CVE-2025-21848, CVE-2025-21835, CVE-2025-21749, CVE-2024-58014, CVE-2024-58007, CVE-2024-57980,     CVE-2025-21715, CVE-2025-21858, CVE-2025-21916, CVE-2025-21811, CVE-2025-21765, CVE-2025-21736,     CVE-2025-21647, CVE-2025-21934, CVE-2025-21776, CVE-2025-21761, CVE-2025-21904, CVE-2024-57979,     CVE-2024-58020, CVE-2025-21935, CVE-2025-21871, CVE-2025-21704, CVE-2024-57977, CVE-2024-58083,     CVE-2025-21764, CVE-2025-21814, CVE-2025-21772, CVE-2025-21719, CVE-2024-58055, CVE-2023-52664,     CVE-2024-56599, CVE-2024-58001, CVE-2025-21744, CVE-2024-58085, CVE-2025-21753, CVE-2025-21846,     CVE-2024-58010, CVE-2024-26996, CVE-2023-52927, CVE-2024-50055, CVE-2025-21925, CVE-2025-21782,     CVE-2024-57973, CVE-2024-58071, CVE-2025-21785, CVE-2025-21859, CVE-2025-21920, CVE-2024-26689,     CVE-2023-52741, CVE-2025-21806, CVE-2024-58058, CVE-2025-21722, CVE-2025-21728, CVE-2024-57981,     CVE-2025-21948, CVE-2025-21914, CVE-2025-21862, CVE-2025-21735)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7510-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Network block device driver;

    - Bus devices;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - NVIDIA Tegra memory controller driver;

    - Network drivers;

    - PCI subsystem;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Real Time Clock drivers;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - Trusted Execution Environment drivers;

    - TTY drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - ACRN Hypervisor Service Module driver;

    - File systems infrastructure;

    - BTRFS file system;

    - F2FS file system;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - SMB network file system;

    - UBI file system;

    - KVM subsystem;

    - L3 Master device support module;

    - Process Accounting mechanism;

    - Padata parallel execution mechanism;

    - printk logging mechanism;

    - Scheduler infrastructure;

    - Timer subsystem;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - B.A.T.M.A.N. meshing protocol;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Multipath TCP;

    - Netfilter;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - Wireless networking;

    - Landlock security;

    - Linux Security Modules (LSM) Framework;

    - Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745,     CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799,     CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034,     CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020,     CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744,     CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721,     CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071,     CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846,     CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977,     CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726,     CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051,     CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865,     CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806,     CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834,     CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719,     CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765,     CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912,     CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772,     CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796,     CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875,     CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7512-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Network block device driver;

    - Bus devices;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - NVIDIA Tegra memory controller driver;

    - Network drivers;

    - PCI subsystem;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Real Time Clock drivers;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - Trusted Execution Environment drivers;

    - TTY drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - ACRN Hypervisor Service Module driver;

    - File systems infrastructure;

    - BTRFS file system;

    - F2FS file system;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - SMB network file system;

    - UBI file system;

    - KVM subsystem;

    - L3 Master device support module;

    - Netfilter;

    - Process Accounting mechanism;

    - Padata parallel execution mechanism;

    - printk logging mechanism;

    - Scheduler infrastructure;

    - Timer subsystem;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - B.A.T.M.A.N. meshing protocol;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Multipath TCP;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - Wireless networking;

    - Landlock security;

    - Linux Security Modules (LSM) Framework;

    - Tomoyo security module; (CVE-2025-21914, CVE-2024-58090, CVE-2024-58017, CVE-2024-58069, CVE-2025-21920,     CVE-2025-21935, CVE-2024-57977, CVE-2025-21763, CVE-2025-21684, CVE-2025-21721, CVE-2025-21736,     CVE-2024-58020, CVE-2025-21799, CVE-2025-21904, CVE-2025-21934, CVE-2025-21719, CVE-2025-21811,     CVE-2025-21727, CVE-2024-58071, CVE-2025-21905, CVE-2024-26982, CVE-2025-21820, CVE-2024-58052,     CVE-2025-21925, CVE-2025-21796, CVE-2025-21779, CVE-2025-21823, CVE-2024-58063, CVE-2025-21772,     CVE-2025-21924, CVE-2025-21765, CVE-2024-56721, CVE-2025-21859, CVE-2025-21760, CVE-2025-21753,     CVE-2025-21835, CVE-2025-21887, CVE-2024-58002, CVE-2024-58086, CVE-2025-21744, CVE-2025-21848,     CVE-2024-57986, CVE-2025-21865, CVE-2025-21766, CVE-2025-21715, CVE-2023-52664, CVE-2025-21764,     CVE-2024-58085, CVE-2025-21704, CVE-2024-58072, CVE-2024-58079, CVE-2025-21846, CVE-2025-21647,     CVE-2025-21726, CVE-2024-58034, CVE-2025-21943, CVE-2025-21875, CVE-2025-21871, CVE-2025-21898,     CVE-2024-58083, CVE-2025-21748, CVE-2024-57834, CVE-2024-58051, CVE-2025-21862, CVE-2025-21722,     CVE-2025-21912, CVE-2025-21950, CVE-2025-21917, CVE-2024-57973, CVE-2024-56599, CVE-2025-21922,     CVE-2025-21787, CVE-2025-21919, CVE-2025-21971, CVE-2024-57979, CVE-2024-35889, CVE-2025-21804,     CVE-2025-21782, CVE-2025-21910, CVE-2025-21909, CVE-2025-21708, CVE-2025-21830, CVE-2025-21791,     CVE-2024-58016, CVE-2025-21711, CVE-2025-21928, CVE-2024-58007, CVE-2024-58005, CVE-2023-52927,     CVE-2025-21802, CVE-2024-58010, CVE-2024-58001, CVE-2024-47726, CVE-2024-57978, CVE-2024-58055,     CVE-2025-21735, CVE-2025-21795, CVE-2025-21745, CVE-2025-21878, CVE-2025-21877, CVE-2025-21826,     CVE-2024-58076, CVE-2025-21806, CVE-2025-21858, CVE-2025-21866, CVE-2025-21776, CVE-2025-21785,     CVE-2025-21758, CVE-2024-57980, CVE-2025-21728, CVE-2024-58014, CVE-2025-21814, CVE-2025-21762,     CVE-2025-21951, CVE-2025-21767, CVE-2025-21844, CVE-2025-21781, CVE-2024-58058, CVE-2025-21761,     CVE-2025-21707, CVE-2025-21731, CVE-2024-44964, CVE-2025-21749, CVE-2024-57981, CVE-2025-21948,     CVE-2025-21926, CVE-2025-21916, CVE-2025-21718)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7516-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - Block layer subsystem;

    - Drivers core;

    - Network block device driver;

    - Character device driver;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - Network drivers;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - Trusted Execution Environment drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - NILFS2 file system;

    - UBI file system;

    - KVM subsystem;

    - L3 Master device support module;

    - Process Accounting mechanism;

    - printk logging mechanism;

    - Scheduler infrastructure;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - Wireless networking;

    - Tomoyo security module; (CVE-2025-21866, CVE-2025-21846, CVE-2025-21971, CVE-2025-21909, CVE-2024-58083,     CVE-2025-21811, CVE-2025-21776, CVE-2024-58051, CVE-2025-21917, CVE-2025-21935, CVE-2025-21785,     CVE-2021-47191, CVE-2025-21765, CVE-2025-21704, CVE-2025-21647, CVE-2024-58069, CVE-2025-21877,     CVE-2025-21948, CVE-2024-58007, CVE-2024-58001, CVE-2025-21871, CVE-2024-58055, CVE-2025-21848,     CVE-2025-21925, CVE-2024-58058, CVE-2025-21814, CVE-2025-21905, CVE-2025-21898, CVE-2025-21926,     CVE-2025-21760, CVE-2024-57973, CVE-2025-21806, CVE-2024-58071, CVE-2025-21761, CVE-2025-21762,     CVE-2024-57986, CVE-2025-21708, CVE-2025-21744, CVE-2024-26996, CVE-2024-50055, CVE-2024-58020,     CVE-2025-21858, CVE-2025-21715, CVE-2025-21904, CVE-2025-21920, CVE-2024-56599, CVE-2025-21781,     CVE-2025-21764, CVE-2025-21865, CVE-2025-21772, CVE-2024-58072, CVE-2025-21928, CVE-2025-21859,     CVE-2025-21721, CVE-2025-21719, CVE-2025-21914, CVE-2025-21753, CVE-2024-58009, CVE-2024-57981,     CVE-2024-58063, CVE-2024-58052, CVE-2025-21722, CVE-2024-57977, CVE-2025-21736, CVE-2025-21922,     CVE-2024-26982, CVE-2025-21718, CVE-2025-21916, CVE-2025-21749, CVE-2025-21787, CVE-2024-58085,     CVE-2024-58010, CVE-2024-57979, CVE-2024-57980, CVE-2025-21782, CVE-2025-21791, CVE-2025-21728,     CVE-2023-52741, CVE-2025-21934, CVE-2024-58002, CVE-2025-21735, CVE-2025-21910, CVE-2025-21823,     CVE-2024-58090, CVE-2025-21862, CVE-2025-21731, CVE-2025-21835, CVE-2024-58017, CVE-2024-58014,     CVE-2025-21763)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7517-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - Block layer subsystem;

    - Drivers core;

    - Network block device driver;

    - Character device driver;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - Network drivers;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - Trusted Execution Environment drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - NILFS2 file system;

    - UBI file system;

    - KVM subsystem;

    - L3 Master device support module;

    - Netfilter;

    - Process Accounting mechanism;

    - printk logging mechanism;

    - Scheduler infrastructure;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - Wireless networking;

    - Tomoyo security module; (CVE-2024-58051, CVE-2025-21731, CVE-2025-21782, CVE-2025-21785, CVE-2025-21917,     CVE-2025-21914, CVE-2025-21744, CVE-2025-21948, CVE-2025-21708, CVE-2024-58072, CVE-2024-57977,     CVE-2024-26996, CVE-2025-21787, CVE-2025-21859, CVE-2024-58007, CVE-2023-52664, CVE-2025-21722,     CVE-2025-21971, CVE-2025-21928, CVE-2025-21791, CVE-2024-58090, CVE-2024-57981, CVE-2025-21865,     CVE-2024-58001, CVE-2025-21926, CVE-2024-58071, CVE-2025-21721, CVE-2025-21772, CVE-2025-21764,     CVE-2024-58017, CVE-2024-57973, CVE-2025-21761, CVE-2025-21866, CVE-2025-21920, CVE-2025-21704,     CVE-2024-58055, CVE-2024-56599, CVE-2025-21935, CVE-2023-52927, CVE-2025-21811, CVE-2024-50055,     CVE-2025-21781, CVE-2025-21760, CVE-2025-21922, CVE-2024-58009, CVE-2024-58069, CVE-2025-21877,     CVE-2024-58058, CVE-2024-57980, CVE-2025-21905, CVE-2024-26982, CVE-2025-21916, CVE-2024-58020,     CVE-2025-21835, CVE-2025-21719, CVE-2025-21858, CVE-2024-58085, CVE-2025-21814, CVE-2025-21762,     CVE-2025-21862, CVE-2024-58014, CVE-2025-21898, CVE-2025-21904, CVE-2025-21736, CVE-2025-21765,     CVE-2025-21647, CVE-2024-58010, CVE-2025-21763, CVE-2025-21718, CVE-2021-47191, CVE-2024-58052,     CVE-2025-21846, CVE-2024-58063, CVE-2024-26689, CVE-2025-21806, CVE-2025-21753, CVE-2025-21910,     CVE-2025-21848, CVE-2025-21749, CVE-2025-21871, CVE-2024-57979, CVE-2025-21728, CVE-2025-21925,     CVE-2024-58002, CVE-2025-21909, CVE-2025-21715, CVE-2024-58083, CVE-2025-21735, CVE-2025-21776,     CVE-2025-21823, CVE-2025-21934, CVE-2023-52741, CVE-2024-57986)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7511-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Network block device driver;

    - Bus devices;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - NVIDIA Tegra memory controller driver;

    - Network drivers;

    - PCI subsystem;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Real Time Clock drivers;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - Trusted Execution Environment drivers;

    - TTY drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - ACRN Hypervisor Service Module driver;

    - File systems infrastructure;

    - BTRFS file system;

    - F2FS file system;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - SMB network file system;

    - UBI file system;

    - KVM subsystem;

    - L3 Master device support module;

    - Process Accounting mechanism;

    - Padata parallel execution mechanism;

    - printk logging mechanism;

    - Scheduler infrastructure;

    - Timer subsystem;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - B.A.T.M.A.N. meshing protocol;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Multipath TCP;

    - Netfilter;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - Wireless networking;

    - Landlock security;

    - Linux Security Modules (LSM) Framework;

    - Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707,     CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924,     CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978,     CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935,     CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079,     CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875,     CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948,     CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909,     CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767,     CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736,     CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753,     CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986,     CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971,     CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796,     CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719,     CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058,     CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760,     CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763,     CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007,     CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782,     CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731,     CVE-2024-58071)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 4.14.355-277.643. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2854 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not clean up repair bio if submit fails (CVE-2022-49168)

    In the Linux kernel, the following vulnerability has been resolved:

    bfq: Update cgroup information before merging bio (CVE-2022-49413)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-throttle: Set BIO_THROTTLED when bio has been throttled (CVE-2022-49465)

    In the Linux kernel, the following vulnerability has been resolved:

    vlan: enforce underlying device type (CVE-2025-21920)

    In the Linux kernel, the following vulnerability has been resolved:

    net: atm: fix use after free in lec_send() (CVE-2025-22004)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 4.14.355-196.643. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1977 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not clean up repair bio if submit fails (CVE-2022-49168)

    In the Linux kernel, the following vulnerability has been resolved:

    bfq: Update cgroup information before merging bio (CVE-2022-49413)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-throttle: Set BIO_THROTTLED when bio has been throttled (CVE-2022-49465)

    In the Linux kernel, the following vulnerability has been resolved:

    vlan: enforce underlying device type (CVE-2025-21920)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21920 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type     Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't     make much sense, this also causes a bug which leaks the address of a kernel function to usermode. When     creating a VLAN device, we initialize GARP (garp_init_applicant) and MRP (mrp_init_applicant) for the     underlying device. As part of the initialization process, we add the multicast address of each applicant     to the underlying device, by calling dev_mc_add. __dev_mc_add uses dev->addr_len to determine the length     of the new multicast address. This causes an out-of-bounds read if dev->addr_len is greater than 6, since     the multicast addresses provided by GARP and MRP are only 6 bytes long. This behaviour can be reproduced     using the following commands: ip tunnel add gretest mode ip6gre local ::1 remote ::2 dev lo ip l set up     dev gretest ip link add link gretest name vlantest type vlan id 100 Then, the following command will     display the address of garp_pdu_rcv: ip maddr show | grep 01:80:c2:00:00:21 Fix the bug by enforcing the     type of the underlying device during VLAN device initialization. (CVE-2025-21920)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21920 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type     Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't     make much sense, this also causes a bug which leaks the address of a kernel function to usermode. When     creating a VLAN device, we initialize GARP (garp_init_applicant) and MRP (mrp_init_applicant) for the     underlying device. As part of the initialization process, we add the multicast address of each applicant     to the underlying device, by calling dev_mc_add. __dev_mc_add uses dev->addr_len to determine the length     of the new multicast address. This causes an out-of-bounds read if dev->addr_len is greater than 6, since     the multicast addresses provided by GARP and MRP are only 6 bytes long. This behaviour can be reproduced     using the following commands: ip tunnel add gretest mode ip6gre local ::1 remote ::2 dev lo ip l set up     dev gretest ip link add link gretest name vlantest type vlan id 100 Then, the following command will     display the address of garp_pdu_rcv: ip maddr show | grep 01:80:c2:00:00:21 Fix the bug by enforcing the     type of the underlying device during VLAN device initialization. (CVE-2025-21920)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.235-227.919. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-088 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    macsec: fix UAF bug for real_dev (CVE-2022-49390)

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)

    In the Linux kernel, the following vulnerability has been resolved:

    rdma/cxgb4: Prevent potential integer overflow on 32bit (CVE-2024-57973)

    In the Linux kernel, the following vulnerability has been resolved:

    memcg: fix soft lockup in the OOM process (CVE-2024-57977)

    In the Linux kernel, the following vulnerability has been resolved:

    pps: Fix a use-after-free (CVE-2024-57979)

    In the Linux kernel, the following vulnerability has been resolved:

    rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: Disallow replacing of child qdisc from one parent to another (CVE-2025-21700)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmr: do not call mr_mfc_uses_dev() for unres entries (CVE-2025-21719)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: handle errors that nilfs_prepare_chunk() may return (CVE-2025-21721)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: do not force clear folio if buffer is referenced (CVE-2025-21722)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: avoid UAF for reorder_work (CVE-2025-21726)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: fix UAF in padata_reorder (CVE-2025-21727)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Send signals asynchronously if !preemptible (CVE-2025-21728)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: don't allow reconnect after disconnect (CVE-2025-21731)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix use-after-free when attempting to join an aborted transaction (CVE-2025-21753)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: Keep the binding until socket destruction (CVE-2025-21756)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: extend RCU protection in ndisc_send_skb() (CVE-2025-21760)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)

    In the Linux kernel, the following vulnerability has been resolved:

    arp: use RCU protection in arp_xmit() (CVE-2025-21762)

    In the Linux kernel, the following vulnerability has been resolved:

    neighbour: use RCU protection in __neigh_notify() (CVE-2025-21763)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)

    In the Linux kernel, the following vulnerability has been resolved:

    clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (CVE-2025-21767)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)

    In the Linux kernel, the following vulnerability has been resolved:

    team: better TEAM_OPTION_TYPE_STRING validation (CVE-2025-21787)

    In the Linux kernel, the following vulnerability has been resolved:

    vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: protect access to buffers with no active references (CVE-2025-21811)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)

    In the Linux kernel, the following vulnerability has been resolved:

    vlan: enforce underlying device type (CVE-2025-21920)

    In the Linux kernel, the following vulnerability has been resolved:

    net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5900 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5900-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     April 12, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2023-52857 CVE-2023-52927 CVE-2024-24855 CVE-2024-26656                      CVE-2024-26767 CVE-2024-26982 CVE-2024-27056 CVE-2024-35866                      CVE-2024-38611 CVE-2024-40973 CVE-2024-42129 CVE-2024-43831                      CVE-2024-46772 CVE-2024-47753 CVE-2024-47754 CVE-2024-50056                      CVE-2024-50246 CVE-2024-53166 CVE-2024-57977 CVE-2024-58002                      CVE-2024-58005 CVE-2024-58079 CVE-2024-58090 CVE-2025-21702                      CVE-2025-21712 CVE-2025-21721 CVE-2025-21756 CVE-2025-21838                      CVE-2025-21844 CVE-2025-21846 CVE-2025-21848 CVE-2025-21855                      CVE-2025-21858 CVE-2025-21859 CVE-2025-21862 CVE-2025-21864                      CVE-2025-21865 CVE-2025-21866 CVE-2025-21867 CVE-2025-21871                      CVE-2025-21875 CVE-2025-21877 CVE-2025-21878 CVE-2025-21881                      CVE-2025-21887 CVE-2025-21891 CVE-2025-21898 CVE-2025-21899                      CVE-2025-21904 CVE-2025-21905 CVE-2025-21909 CVE-2025-21910                      CVE-2025-21912 CVE-2025-21913 CVE-2025-21914 CVE-2025-21916                      CVE-2025-21917 CVE-2025-21918 CVE-2025-21919 CVE-2025-21920                      CVE-2025-21922 CVE-2025-21924 CVE-2025-21925 CVE-2025-21926                      CVE-2025-21928 CVE-2025-21934 CVE-2025-21935 CVE-2025-21936                      CVE-2025-21937 CVE-2025-21938 CVE-2025-21941 CVE-2025-21943                      CVE-2025-21944 CVE-2025-21945 CVE-2025-21947 CVE-2025-21948                      CVE-2025-21950 CVE-2025-21951 CVE-2025-21956 CVE-2025-21957                      CVE-2025-21959 CVE-2025-21960 CVE-2025-21962 CVE-2025-21963                      CVE-2025-21964 CVE-2025-21968 CVE-2025-21970 CVE-2025-21971                      CVE-2025-21975 CVE-2025-21978 CVE-2025-21979 CVE-2025-21980                      CVE-2025-21981 CVE-2025-21986 CVE-2025-21991 CVE-2025-21992                      CVE-2025-21993 CVE-2025-21994 CVE-2025-21996 CVE-2025-21997                      CVE-2025-21999 CVE-2025-22004 CVE-2025-22005 CVE-2025-22007                      CVE-2025-22008 CVE-2025-22010 CVE-2025-22014 CVE-2025-22015

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.133-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.4.291-206.400. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-097 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix UAF in smb2_reconnect_server() (CVE-2024-35870)

    In the Linux kernel, the following vulnerability has been resolved:

    pps: Fix a use-after-free (CVE-2024-57979)

    In the Linux kernel, the following vulnerability has been resolved:

    rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083)

    In the Linux kernel, the following vulnerability has been resolved:

    sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: Disallow replacing of child qdisc from one parent to another (CVE-2025-21700)

    In the Linux kernel, the following vulnerability has been resolved:

    pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: do not force clear folio if buffer is referenced (CVE-2025-21722)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: don't allow reconnect after disconnect (CVE-2025-21731)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix use-after-free when attempting to join an aborted transaction (CVE-2025-21753)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: extend RCU protection in ndisc_send_skb() (CVE-2025-21760)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)

    In the Linux kernel, the following vulnerability has been resolved:

    arp: use RCU protection in arp_xmit() (CVE-2025-21762)

    In the Linux kernel, the following vulnerability has been resolved:

    neighbour: use RCU protection in __neigh_notify() (CVE-2025-21763)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)

    In the Linux kernel, the following vulnerability has been resolved:

    vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: protect access to buffers with no active references (CVE-2025-21811)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)

    In the Linux kernel, the following vulnerability has been resolved:

    vlan: enforce underlying device type (CVE-2025-21920)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-915 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

    In the Linux kernel, the following vulnerability has been resolved:

    block, bfq: fix bfqq uaf in bfq_limit_depth() (CVE-2024-53166)

    In the Linux kernel, the following vulnerability has been resolved:

    cachefiles: Fix NULL pointer dereference in object->file (CVE-2024-56549)

    In the Linux kernel, the following vulnerability has been resolved:

    pps: Fix a use-after-free (CVE-2024-57979)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: Disallow replacing of child qdisc from one parent to another (CVE-2025-21700)

    In the Linux kernel, the following vulnerability has been resolved:

    net: avoid race between device unregistration and ethnl ops (CVE-2025-21701)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: avoid UAF for reorder_work (CVE-2025-21726)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: fix UAF in padata_reorder (CVE-2025-21727)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: don't allow reconnect after disconnect (CVE-2025-21731)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix use-after-free when attempting to join an aborted transaction (CVE-2025-21753)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: Keep the binding until socket destruction (CVE-2025-21756)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: mcast: add RCU protection to mld_newpack() (CVE-2025-21758)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: extend RCU protection in ndisc_send_skb() (CVE-2025-21760)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)

    In the Linux kernel, the following vulnerability has been resolved:

    arp: use RCU protection in arp_xmit() (CVE-2025-21762)

    In the Linux kernel, the following vulnerability has been resolved:

    neighbour: use RCU protection in __neigh_notify() (CVE-2025-21763)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)

    In the Linux kernel, the following vulnerability has been resolved:

    vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)

    In the Linux kernel, the following vulnerability has been resolved:

    vlan: enforce underlying device type (CVE-2025-21920)

    In the Linux kernel, the following vulnerability has been resolved:

    net: gso: fix ownership in __udp_gso_segment (CVE-2025-21926)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.15.179-121.185. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-069 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS (CVE-2024-46830)

    In the Linux kernel, the following vulnerability has been resolved:

    pps: Fix a use-after-free (CVE-2024-57979)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CVE-2024-58083)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: Disallow replacing of child qdisc from one parent to another (CVE-2025-21700)

    In the Linux kernel, the following vulnerability has been resolved:

    net: avoid race between device unregistration and ethnl ops (CVE-2025-21701)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: avoid UAF for reorder_work (CVE-2025-21726)

    In the Linux kernel, the following vulnerability has been resolved:

    padata: fix UAF in padata_reorder (CVE-2025-21727)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: don't allow reconnect after disconnect (CVE-2025-21731)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix use-after-free when attempting to join an aborted transaction (CVE-2025-21753)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: Keep the binding until socket destruction (CVE-2025-21756)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: mcast: add RCU protection to mld_newpack() (CVE-2025-21758)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: extend RCU protection in ndisc_send_skb() (CVE-2025-21760)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)

    In the Linux kernel, the following vulnerability has been resolved:

    arp: use RCU protection in arp_xmit() (CVE-2025-21762)

    In the Linux kernel, the following vulnerability has been resolved:

    neighbour: use RCU protection in __neigh_notify() (CVE-2025-21763)

    In the Linux kernel, the following vulnerability has been resolved:

    ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel (CVE-2025-21779)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)

    In the Linux kernel, the following vulnerability has been resolved:

    vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)

    In the Linux kernel, the following vulnerability has been resolved:

    ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)

    In the Linux kernel, the following vulnerability has been resolved:

    vlan: enforce underlying device type (CVE-2025-21920)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
236963	Ubuntu Pro FIPS-updates 20.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7518-1)	Nessus	Ubuntu Local Security Checks	high
236880	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7510-1)	Nessus	Ubuntu Local Security Checks	high
236879	Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-7512-1)	Nessus	Ubuntu Local Security Checks	high
236878	Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7516-1)	Nessus	Ubuntu Local Security Checks	high
236877	Ubuntu 20.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7517-1)	Nessus	Ubuntu Local Security Checks	high
236875	Ubuntu 22.04 LTS : Linux kernel (GCP) vulnerabilities (USN-7511-1)	Nessus	Ubuntu Local Security Checks	high
235895	Amazon Linux 2 : kernel (ALAS-2025-2854)	Nessus	Amazon Linux Local Security Checks	high
235787	Amazon Linux AMI : kernel (ALAS-2025-1977)	Nessus	Amazon Linux Local Security Checks	high
235336	Azure Linux 3.0 Security Update: kernel (CVE-2025-21920)	Nessus	Azure Linux Local Security Checks	high
235274	CBL Mariner 2.0 Security Update: kernel (CVE-2025-21920)	Nessus	MarinerOS Local Security Checks	high
234528	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2025-088)	Nessus	Amazon Linux Local Security Checks	high
234309	Debian dsa-5900 : affs-modules-6.1.0-28-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high
233712	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2025-097)	Nessus	Amazon Linux Local Security Checks	high
233707	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-915)	Nessus	Amazon Linux Local Security Checks	high
233694	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-069)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2025-21920

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high