In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9079 advisory.

    [6.12.0-55.19.1.0.1_0.OL10]
    - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650]
    - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
    - Disable UKI signing [Orabug: 36571828]
    - Update Oracle Linux certificates (Kevin Lyons)
    - Disable signing for aarch64 (Ilya Okomin)
    - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem)     [Orabug: 29539237]
    - Update x509.genkey [Orabug: 24817676]
    - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
    - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
    - Add Oracle Linux IMA certificates
    - Update module name for cryptographic module [Orabug: 37400433]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7606-1 advisory.

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bus devices;

    - AMD CDX bus driver;

    - Clock framework and drivers;

    - DMA engine subsystem;

    - DPLL subsystem;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - VideoCore services drivers;

    - Thermal drivers;

    - USB DSL drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - W1 Dallas's 1-wire bus driver;

    - 9P distributed file system;

    - File systems infrastructure;

    - Ext4 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Key Management;

    - Memory management;

    - Scheduler infrastructure;

    - UProbes tracing;

    - RDMA verbs API;

    - SoC audio core drivers;

    - BPF subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path;

    - Key management;

    - ALSA framework;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-22072, CVE-2025-22039, CVE-2025-22078, CVE-2025-21972,     CVE-2025-21989, CVE-2025-21919, CVE-2025-22030, CVE-2025-22084, CVE-2025-22086, CVE-2025-21956,     CVE-2025-21924, CVE-2025-22016, CVE-2025-23138, CVE-2025-22059, CVE-2025-21928, CVE-2025-21906,     CVE-2025-21947, CVE-2025-21936, CVE-2025-21982, CVE-2025-38152, CVE-2025-38049, CVE-2025-21974,     CVE-2025-21962, CVE-2025-22075, CVE-2025-21959, CVE-2025-22002, CVE-2025-22014, CVE-2025-21905,     CVE-2025-22044, CVE-2025-22000, CVE-2025-21925, CVE-2025-21944, CVE-2025-21926, CVE-2025-21904,     CVE-2024-58092, CVE-2025-21964, CVE-2025-22009, CVE-2025-22083, CVE-2025-21992, CVE-2025-39778,     CVE-2025-22021, CVE-2025-22090, CVE-2025-21934, CVE-2025-22043, CVE-2025-22027, CVE-2025-21951,     CVE-2025-22019, CVE-2025-21908, CVE-2025-22062, CVE-2025-22071, CVE-2025-21914, CVE-2025-21966,     CVE-2025-21984, CVE-2025-39735, CVE-2025-21912, CVE-2025-21979, CVE-2025-22063, CVE-2025-37785,     CVE-2025-22081, CVE-2025-22024, CVE-2025-38637, CVE-2025-22070, CVE-2025-21911, CVE-2025-21935,     CVE-2024-58093, CVE-2025-21960, CVE-2025-21913, CVE-2025-21927, CVE-2025-21977, CVE-2025-37843,     CVE-2025-22055, CVE-2025-22035, CVE-2025-21998, CVE-2025-22041, CVE-2025-21945, CVE-2025-22080,     CVE-2025-21963, CVE-2025-21994, CVE-2025-21957, CVE-2025-22079, CVE-2025-22034, CVE-2025-21946,     CVE-2025-22053, CVE-2025-22003, CVE-2025-22042, CVE-2025-22023, CVE-2025-22020, CVE-2025-21910,     CVE-2025-22037, CVE-2025-22095, CVE-2025-22089, CVE-2025-21986, CVE-2025-39688, CVE-2025-22040,     CVE-2025-39728, CVE-2025-21981, CVE-2025-21969, CVE-2025-21922, CVE-2025-22022, CVE-2025-23136,     CVE-2025-22058, CVE-2025-21970, CVE-2025-22050, CVE-2025-21978, CVE-2025-21990, CVE-2025-22046,     CVE-2025-21975, CVE-2025-21973, CVE-2025-21916, CVE-2025-21991, CVE-2025-22007, CVE-2025-21937,     CVE-2025-22004, CVE-2025-21948, CVE-2025-22033, CVE-2025-22017, CVE-2025-38575, CVE-2025-22097,     CVE-2025-22066, CVE-2025-21999, CVE-2025-21903, CVE-2025-21915, CVE-2025-21961, CVE-2025-21941,     CVE-2025-22064, CVE-2025-21968, CVE-2025-21980, CVE-2025-22010, CVE-2025-38240, CVE-2025-38479,     CVE-2025-22008, CVE-2025-21939, CVE-2025-22045, CVE-2025-22068, CVE-2025-21893, CVE-2025-37889,     CVE-2024-53222, CVE-2025-22047, CVE-2025-22018, CVE-2025-22013, CVE-2025-21920, CVE-2025-23134,     CVE-2025-22025, CVE-2025-39989, CVE-2025-22005, CVE-2025-22054, CVE-2025-22057, CVE-2025-22087,     CVE-2025-22088, CVE-2025-22056, CVE-2025-22060, CVE-2025-22015, CVE-2025-37937, CVE-2025-22001,     CVE-2025-21930, CVE-2025-21894, CVE-2025-21943, CVE-2025-22028, CVE-2025-22032, CVE-2025-22065,     CVE-2025-21929, CVE-2025-21996, CVE-2025-22038, CVE-2025-21923, CVE-2025-40114, CVE-2025-21967,     CVE-2025-21995, CVE-2023-53034, CVE-2025-21909, CVE-2025-21997, CVE-2025-21955, CVE-2025-21918,     CVE-2025-21917, CVE-2025-22073, CVE-2025-22011, CVE-2025-21950)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7605-1 advisory.

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bus devices;

    - AMD CDX bus driver;

    - Clock framework and drivers;

    - DMA engine subsystem;

    - DPLL subsystem;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - VideoCore services drivers;

    - Thermal drivers;

    - USB DSL drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - W1 Dallas's 1-wire bus driver;

    - 9P distributed file system;

    - File systems infrastructure;

    - Ext4 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Key Management;

    - Memory management;

    - Scheduler infrastructure;

    - UProbes tracing;

    - RDMA verbs API;

    - SoC audio core drivers;

    - BPF subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path;

    - Key management;

    - ALSA framework;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916,     CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989,     CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962,     CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240,     CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075,     CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081,     CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000,     CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047,     CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935,     CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003,     CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016,     CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939,     CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979,     CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981,     CVE-2025-22014, CVE-2025-21947, CVE-2025-22007, CVE-2025-21925, CVE-2025-22089, CVE-2025-21923,     CVE-2025-38575, CVE-2025-22018, CVE-2025-22073, CVE-2025-21948, CVE-2025-22080, CVE-2025-22053,     CVE-2025-21903, CVE-2025-21969, CVE-2025-21926, CVE-2025-21941, CVE-2025-40114, CVE-2025-22066,     CVE-2025-22017, CVE-2025-21945, CVE-2025-22065, CVE-2025-22086, CVE-2025-22032, CVE-2025-22097,     CVE-2025-22083, CVE-2025-22044, CVE-2025-23136, CVE-2025-22046, CVE-2025-22041, CVE-2025-38479,     CVE-2025-21998, CVE-2025-22002, CVE-2025-39688, CVE-2025-22033, CVE-2025-21970, CVE-2025-22022,     CVE-2025-21936, CVE-2025-22050, CVE-2025-21984, CVE-2025-21928, CVE-2025-38637, CVE-2025-22030,     CVE-2025-21915, CVE-2025-22013, CVE-2025-21997, CVE-2025-22059, CVE-2025-21961, CVE-2025-21909,     CVE-2025-21955, CVE-2025-39778, CVE-2025-22055, CVE-2023-53034, CVE-2025-39728, CVE-2025-22020,     CVE-2025-22005, CVE-2025-22060, CVE-2025-21902, CVE-2025-22008, CVE-2025-23138, CVE-2025-21991,     CVE-2025-21999, CVE-2025-21982, CVE-2024-58092, CVE-2025-21992, CVE-2025-22028, CVE-2025-22042,     CVE-2025-22087, CVE-2025-21894, CVE-2025-21934, CVE-2025-21893, CVE-2025-22079, CVE-2025-22023,     CVE-2025-21977, CVE-2024-58093, CVE-2025-21904, CVE-2025-21910, CVE-2025-22024, CVE-2025-21964,     CVE-2025-21946, CVE-2025-21905, CVE-2025-22084, CVE-2025-21950, CVE-2025-22011, CVE-2025-21968,     CVE-2025-22035, CVE-2025-22004, CVE-2025-21919, CVE-2025-22039, CVE-2025-22063, CVE-2024-53222,     CVE-2025-21944, CVE-2025-21959, CVE-2025-21994, CVE-2025-21906)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01972-1 advisory.

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
    - CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
    - CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
    - CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
    - CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
    - CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
    - CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
    - CVE-2025-22094: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (bsc#1241512).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error     (bsc#1242763).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
    - CVE-2025-23154: io_uring/net: fix io_req_post_cqe abuse by send bundle (bsc#1242533).
    - CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW     initialization (bsc#1242507).
    - CVE-2025-37747: kABI workaround for perf-Fix-hang-while-freeing-sigtrap-event (References: bsc#1242520).
    - CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
    - CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
    - CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
    - CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
    - CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
    - CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
    - CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered     (bsc#1242585).
    - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
    - CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
    - CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
    - CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
    - CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
    - CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
    - CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
    - CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
    - CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
    - CVE-2025-37842: spi: fsl-qspi: Fix double cleanup in probe error path (bsc#1242951).
    - CVE-2025-37870: drm/amd/display: prevent hang on link training fail (bsc#1243056).
    - CVE-2025-37879: 9p/net: fix improper handling of bogus negative read/write replies (bsc#1243077).
    - CVE-2025-37886: pds_core: make wait_context part of q_info (bsc#1242944).
    - CVE-2025-37887: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (bsc#1242962).
    - CVE-2025-37949: xenbus: Use kref to track req lifetime (bsc#1243541).
    - CVE-2025-37957: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (bsc#1243513).
    - CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
    - CVE-2025-37960: memblock: Accept allocated memory before use in memblock_double_array() (bsc#1243519).
    - CVE-2025-37974: s390/pci: Fix missing check for zpci_create_device() error return (bsc#1243547).
    - CVE-2025-38152: remoteproc: core: Clear table_sz when rproc_shutdown (bsc#1241627).
    - CVE-2025-38637: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01951-1 advisory.

    The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
    - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
    - CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
    - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
    - CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
    - CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
    - CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround     (bsc#1235712).
    - CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
    - CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg     (bsc#1235733).
    - CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
    - CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
    - CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
    - CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
    - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
    - CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
    - CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
    - CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
    - CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
    - CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq'     (bsc#1235524).
    - CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
    - CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
    - CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
    - CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
    - CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
    - CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
    - CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
    - CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
    - CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
    - CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
    - CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
    - CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
    - CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
    - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
    - CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
    - CVE-2024-58091: drm/fbdev-dma: Add shadow buffering for deferred I/O (bsc#1240174).
    - CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
    - CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
    - CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
    - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21717: net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq     (bsc#1238866).
    - CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
    - CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
    - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
    - CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
    - CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
    - CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
    - CVE-2025-21763: neighbour: use RCU protection in __neigh_notify() (bsc#1237897).
    - CVE-2025-21765: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906).
    - CVE-2025-21766: ipv4: use RCU protection in __ip_rt_update_pmtu() (bsc#1238754).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21800: net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset (bsc#1238743).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
    - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
    - CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
    - CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
    - CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
    - CVE-2025-21837: io_uring/uring_cmd: unconditionally copy SQEs at prep time (bsc#1239064).
    - CVE-2025-21844: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512).
    - CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (bsc#1239479).
    - CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
    - CVE-2025-21856: s390/ism: add release function for struct device (bsc#1239486).
    - CVE-2025-21857: net/sched: cls_api: fix error handling causing NULL dereference (bsc#1239478).
    - CVE-2025-21861: mm/migrate_device: do not add folio to be freed to LRU in migrate_device_finalize()     (bsc#1239483).
    - CVE-2025-21862: drop_monitor: fix incorrect initialization order (bsc#1239474).
    - CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
    - CVE-2025-21864: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482).
    - CVE-2025-21865: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl() (bsc#1239481).
    - CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
    - CVE-2025-21870: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (bsc#1240191).
    - CVE-2025-21871: tee: optee: Fix supplicant wait loop (bsc#1240183).
    - CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
    - CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21882: net/mlx5: Fix vport QoS cleanup on error (bsc#1240187).
    - CVE-2025-21883: ice: Fix deinitializing VF in error path (bsc#1240189).
    - CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
    - CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
    - CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
    - CVE-2025-21890: idpf: fix checksums set in idpf_rx_rsc() (bsc#1240173).
    - CVE-2025-21891: ipvlan: ensure network headers are in skb linear part (bsc#1240186).
    - CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
    - CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
    - CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
    - CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
    - CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
    - CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
    - CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
    - CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
    - CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error (bsc#1240720).
    - CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
    - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
    - CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
    - CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
    - CVE-2025-21973: eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (bsc#1240803).
    - CVE-2025-21974: eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (bsc#1240800).
    - CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
    - CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
    - CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
    - CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
    - CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
    - CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
    - CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
    - CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
    - CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
    - CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
    - CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
    - CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
    - CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
    - CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
    - CVE-2025-22094: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (bsc#1241512).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22105, CVE-2025-37860: Add missing bugzilla references (bsc#1241452 bsc#1241548).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593).
    - CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).
    - CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error     (bsc#1242763).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
    - CVE-2025-23154: io_uring/net: fix io_req_post_cqe abuse by send bundle (bsc#1242533).
    - CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW     initialization (bsc#1242507).
    - CVE-2025-37747: kABI workaround for perf-Fix-hang-while-freeing-sigtrap-event (References: bsc#1242520).
    - CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
    - CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
    - CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
    - CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
    - CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
    - CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered     (bsc#1242585).
    - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
    - CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
    - CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
    - CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
    - CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
    - CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
    - CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
    - CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
    - CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
    - CVE-2025-37842: spi: fsl-qspi: Fix double cleanup in probe error path (bsc#1242951).
    - CVE-2025-37870: drm/amd/display: prevent hang on link training fail (bsc#1243056).
    - CVE-2025-37879: 9p/net: fix improper handling of bogus negative read/write replies (bsc#1243077).
    - CVE-2025-37886: pds_core: make wait_context part of q_info (bsc#1242944).
    - CVE-2025-37887: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (bsc#1242962).
    - CVE-2025-37949: xenbus: Use kref to track req lifetime (bsc#1243541).
    - CVE-2025-37957: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (bsc#1243513).
    - CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
    - CVE-2025-37960: memblock: Accept allocated memory before use in memblock_double_array() (bsc#1243519).
    - CVE-2025-37974: s390/pci: Fix missing check for zpci_create_device() error return (bsc#1243547).
    - CVE-2025-38152: remoteproc: core: Clear table_sz when rproc_shutdown (bsc#1241627).
    - CVE-2025-38637: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657).
    - CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01964-1 advisory.

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
    - CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
    - CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
    - CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
    - CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN     (bsc#1234154).
    - CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
    - CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
    - CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
    - CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
    - CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
    - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
    - CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
    - CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
    - CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
    - CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
    - CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
    - CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
    - CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
    - CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
    - CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
    - CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
    - CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
    - CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
    - CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
    - CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
    - CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
    - CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
    - CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
    - CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
    - CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error (bsc#1240720).
    - CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
    - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
    - CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
    - CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
    - CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
    - CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
    - CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
    - CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
    - CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
    - CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
    - CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
    - CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
    - CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
    - CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
    - CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
    - CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
    - CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
    - CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
    - CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
    - CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
    - CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22105, CVE-2025-37860: Add missing bugzilla references (bsc#1241452 bsc#1241548).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups()     (bsc#1241578).
    - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593).
    - CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).
    - CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error     (bsc#1242763).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
    - CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW     initialization (bsc#1242507).
    - CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
    - CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
    - CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
    - CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
    - CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
    - CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered     (bsc#1242585).
    - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
    - CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
    - CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
    - CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
    - CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
    - CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
    - CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
    - CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
    - CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
    - CVE-2025-37842: spi: fsl-qspi: Fix double cleanup in probe error path (bsc#1242951).
    - CVE-2025-37870: drm/amd/display: prevent hang on link training fail (bsc#1243056).
    - CVE-2025-37879: 9p/net: fix improper handling of bogus negative read/write replies (bsc#1243077).
    - CVE-2025-37886: pds_core: make wait_context part of q_info (bsc#1242944).
    - CVE-2025-37887: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (bsc#1242962).
    - CVE-2025-37949: xenbus: Use kref to track req lifetime (bsc#1243541).
    - CVE-2025-37954: smb: client: Avoid race in open_cached_dir with lease breaks (bsc#1243664).
    - CVE-2025-37957: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (bsc#1243513).
    - CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
    - CVE-2025-37960: memblock: Accept allocated memory before use in memblock_double_array() (bsc#1243519).
    - CVE-2025-37974: s390/pci: Fix missing check for zpci_create_device() error return (bsc#1243547).
    - CVE-2025-38152: remoteproc: core: Clear table_sz when rproc_shutdown (bsc#1241627).
    - CVE-2025-38637: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657).
    - CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7602-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - ACPI drivers;

    - Network block device driver;

    - Bus devices;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - NVIDIA Tegra memory controller driver;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - PCI subsystem;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - Trusted Execution Environment drivers;

    - Thermal drivers;

    - TTY drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - ACRN Hypervisor Service Module driver;

    - File systems infrastructure;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - SMB network file system;

    - UBI file system;

    - KVM subsystem;

    - IPv6 networking;

    - L3 Master device support module;

    - Netfilter;

    - RDMA verbs API;

    - SoC audio core drivers;

    - Process Accounting mechanism;

    - Padata parallel execution mechanism;

    - printk logging mechanism;

    - Scheduler infrastructure;

    - Timer subsystem;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - Logical Link layer;

    - Multipath TCP;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - SMC sockets;

    - Sun RPC protocol;

    - Wireless networking;

    - Landlock security;

    - Linux Security Modules (LSM) Framework;

    - Tomoyo security module;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-21647, CVE-2025-21925, CVE-2024-58034, CVE-2024-46812,     CVE-2024-56721, CVE-2025-21811, CVE-2025-21719, CVE-2025-21859, CVE-2025-21745, CVE-2023-53034,     CVE-2025-21924, CVE-2024-58052, CVE-2024-58090, CVE-2025-21950, CVE-2025-21753, CVE-2024-57977,     CVE-2025-21910, CVE-2025-21806, CVE-2024-58063, CVE-2025-21835, CVE-2024-58001, CVE-2025-21804,     CVE-2025-21887, CVE-2024-53144, CVE-2025-38152, CVE-2024-56599, CVE-2025-22035, CVE-2025-22045,     CVE-2025-21926, CVE-2024-58069, CVE-2025-21749, CVE-2023-52664, CVE-2025-21779, CVE-2025-21957,     CVE-2025-21877, CVE-2025-22008, CVE-2025-21760, CVE-2025-22071, CVE-2025-22079, CVE-2024-56664,     CVE-2024-42230, CVE-2025-21748, CVE-2025-21744, CVE-2025-21758, CVE-2025-21767, CVE-2025-21999,     CVE-2025-21970, CVE-2025-21826, CVE-2025-38637, CVE-2025-21846, CVE-2025-22073, CVE-2025-23138,     CVE-2025-22097, CVE-2025-22056, CVE-2024-58093, CVE-2025-21935, CVE-2025-21785, CVE-2025-22010,     CVE-2025-22075, CVE-2025-21948, CVE-2025-21862, CVE-2025-38575, CVE-2025-22004, CVE-2025-22063,     CVE-2025-21905, CVE-2025-21962, CVE-2025-21912, CVE-2025-21814, CVE-2024-58085, CVE-2025-22060,     CVE-2025-21795, CVE-2024-46821, CVE-2025-21916, CVE-2024-46753, CVE-2022-49636, CVE-2025-22055,     CVE-2025-21898, CVE-2025-21715, CVE-2024-58017, CVE-2025-21772, CVE-2025-21718, CVE-2024-36945,     CVE-2025-21762, CVE-2025-22005, CVE-2025-21991, CVE-2024-58051, CVE-2025-21951, CVE-2025-21726,     CVE-2024-58083, CVE-2025-21909, CVE-2025-21928, CVE-2025-21992, CVE-2024-58010, CVE-2025-39735,     CVE-2025-21711, CVE-2025-21761, CVE-2025-21844, CVE-2024-58076, CVE-2024-58079, CVE-2025-21956,     CVE-2025-21684, CVE-2025-21920, CVE-2025-21823, CVE-2025-21781, CVE-2025-21943, CVE-2025-37937,     CVE-2025-21820, CVE-2023-52927, CVE-2024-57978, CVE-2025-21787, CVE-2025-21776, CVE-2025-21722,     CVE-2025-21866, CVE-2025-22021, CVE-2025-21782, CVE-2025-22054, CVE-2024-58055, CVE-2025-21964,     CVE-2025-21941, CVE-2024-57973, CVE-2025-22066, CVE-2025-21708, CVE-2025-21878, CVE-2025-21799,     CVE-2025-22086, CVE-2025-21766, CVE-2025-37889, CVE-2024-58002, CVE-2025-21791, CVE-2025-21830,     CVE-2025-21858, CVE-2025-22081, CVE-2024-57834, CVE-2024-58072, CVE-2024-57981, CVE-2025-21848,     CVE-2025-21727, CVE-2025-21765, CVE-2024-58007, CVE-2025-21963, CVE-2024-56551, CVE-2022-49728,     CVE-2025-21728, CVE-2024-58014, CVE-2025-21994, CVE-2025-21707, CVE-2025-21735, CVE-2025-23136,     CVE-2025-21731, CVE-2024-58020, CVE-2025-21704, CVE-2024-57979, CVE-2025-21796, CVE-2025-21975,     CVE-2025-22025, CVE-2024-56608, CVE-2025-21971, CVE-2025-21919, CVE-2025-22018, CVE-2024-26982,     CVE-2024-47726, CVE-2025-21721, CVE-2025-22044, CVE-2025-21968, CVE-2025-21865, CVE-2025-21917,     CVE-2025-21764, CVE-2024-58016, CVE-2025-21736, CVE-2024-57986, CVE-2025-21763, CVE-2024-58005,     CVE-2025-21802, CVE-2025-21871, CVE-2025-37785, CVE-2025-21922, CVE-2025-21959, CVE-2025-22020,     CVE-2024-58086, CVE-2025-22089, CVE-2025-22007, CVE-2025-39728, CVE-2025-22050, CVE-2025-21934,     CVE-2025-21875, CVE-2025-21996, CVE-2025-21914, CVE-2024-58071, CVE-2024-58058, CVE-2024-57980,     CVE-2025-21904, CVE-2025-21981, CVE-2024-53168, CVE-2025-22014)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7597-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Clock framework and drivers;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - PCI subsystem;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - QCOM SoC drivers;

    - Thermal drivers;

    - BTRFS file system;

    - Ext4 file system;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - File systems infrastructure;

    - Proc file system;

    - SMB network file system;

    - IPv6 networking;

    - RDMA verbs API;

    - SoC audio core drivers;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - Netfilter;

    - Network traffic control;

    - SMC sockets;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-21994, CVE-2025-37937, CVE-2025-21964, CVE-2025-22086,     CVE-2025-22073, CVE-2025-39735, CVE-2025-22025, CVE-2025-22004, CVE-2025-22055, CVE-2025-22007,     CVE-2024-53144, CVE-2025-22044, CVE-2025-22014, CVE-2025-37785, CVE-2025-21959, CVE-2022-49636,     CVE-2025-21968, CVE-2025-22018, CVE-2025-22035, CVE-2024-56664, CVE-2025-21975, CVE-2025-39728,     CVE-2025-22045, CVE-2022-49728, CVE-2025-21962, CVE-2025-22089, CVE-2025-21963, CVE-2025-21956,     CVE-2024-36945, CVE-2025-21992, CVE-2025-22010, CVE-2025-21991, CVE-2024-46812, CVE-2024-42230,     CVE-2025-21941, CVE-2025-22071, CVE-2025-22020, CVE-2025-22097, CVE-2025-21999, CVE-2025-21957,     CVE-2025-22063, CVE-2024-58093, CVE-2025-21970, CVE-2025-22005, CVE-2025-22021, CVE-2025-22075,     CVE-2025-22050, CVE-2025-21981, CVE-2025-22054, CVE-2025-38152, CVE-2025-38575, CVE-2025-38637,     CVE-2023-53034, CVE-2025-22056, CVE-2025-22008, CVE-2024-46821, CVE-2025-23138, CVE-2024-46753,     CVE-2025-37889, CVE-2025-22081, CVE-2025-21996, CVE-2025-22066, CVE-2025-22060, CVE-2025-23136,     CVE-2025-22079)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7598-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Clock framework and drivers;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - PCI subsystem;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - QCOM SoC drivers;

    - Thermal drivers;

    - BTRFS file system;

    - Ext4 file system;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - File systems infrastructure;

    - Proc file system;

    - SMB network file system;

    - IPv6 networking;

    - RDMA verbs API;

    - SoC audio core drivers;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - Netfilter;

    - Network traffic control;

    - SMC sockets;

    - Sun RPC protocol;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-21959, CVE-2025-21996, CVE-2024-46821, CVE-2025-38575,     CVE-2025-22045, CVE-2025-21970, CVE-2025-21956, CVE-2025-21994, CVE-2025-23136, CVE-2025-39735,     CVE-2025-23138, CVE-2025-22020, CVE-2025-21957, CVE-2025-22063, CVE-2025-21975, CVE-2025-22050,     CVE-2024-53144, CVE-2025-21991, CVE-2025-22035, CVE-2024-42230, CVE-2025-22007, CVE-2025-22071,     CVE-2025-22060, CVE-2025-22079, CVE-2025-21999, CVE-2025-22081, CVE-2025-22021, CVE-2025-21964,     CVE-2024-56664, CVE-2024-56608, CVE-2025-38152, CVE-2025-21992, CVE-2024-56551, CVE-2025-22089,     CVE-2025-22075, CVE-2024-53168, CVE-2022-49728, CVE-2022-49636, CVE-2025-22010, CVE-2025-38637,     CVE-2025-22004, CVE-2025-21963, CVE-2025-22086, CVE-2025-22097, CVE-2025-21962, CVE-2025-22014,     CVE-2024-46753, CVE-2025-22073, CVE-2025-22018, CVE-2025-22044, CVE-2025-21941, CVE-2025-39728,     CVE-2025-22055, CVE-2025-37785, CVE-2025-22025, CVE-2025-22066, CVE-2023-53034, CVE-2025-22008,     CVE-2025-22054, CVE-2025-37937, CVE-2025-37889, CVE-2025-22005, CVE-2025-21968, CVE-2024-58093,     CVE-2024-36945, CVE-2025-21981, CVE-2025-22056, CVE-2024-46812)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7592-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Clock framework and drivers;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - PCI subsystem;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - QCOM SoC drivers;

    - Thermal drivers;

    - BTRFS file system;

    - Ext4 file system;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - File systems infrastructure;

    - Proc file system;

    - SMB network file system;

    - IPv6 networking;

    - RDMA verbs API;

    - SoC audio core drivers;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - Netfilter;

    - Network traffic control;

    - SMC sockets;

    - Sun RPC protocol;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-22089, CVE-2025-22073, CVE-2025-23138, CVE-2025-21970,     CVE-2025-21981, CVE-2025-22025, CVE-2025-39735, CVE-2025-22018, CVE-2025-21956, CVE-2025-39728,     CVE-2024-46753, CVE-2024-58093, CVE-2025-37889, CVE-2025-22005, CVE-2025-22004, CVE-2025-21963,     CVE-2025-21991, CVE-2024-56664, CVE-2025-22054, CVE-2024-46821, CVE-2023-53034, CVE-2022-49728,     CVE-2025-22075, CVE-2025-21968, CVE-2025-22071, CVE-2025-22066, CVE-2025-22060, CVE-2024-46812,     CVE-2025-22056, CVE-2025-22086, CVE-2022-49636, CVE-2025-21962, CVE-2025-38637, CVE-2025-22081,     CVE-2025-21992, CVE-2024-42230, CVE-2025-21959, CVE-2024-53168, CVE-2025-38152, CVE-2025-22035,     CVE-2025-21941, CVE-2025-22050, CVE-2025-21964, CVE-2025-22097, CVE-2025-22044, CVE-2025-22007,     CVE-2025-21994, CVE-2025-22079, CVE-2024-56608, CVE-2025-37785, CVE-2025-22045, CVE-2025-22010,     CVE-2024-36945, CVE-2025-21996, CVE-2025-22014, CVE-2025-21999, CVE-2025-21975, CVE-2025-22055,     CVE-2025-21957, CVE-2025-37937, CVE-2025-38575, CVE-2025-22020, CVE-2025-22021, CVE-2024-53144,     CVE-2025-22008, CVE-2025-22063, CVE-2024-56551, CVE-2025-23136)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7593-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - ACPI drivers;

    - Network block device driver;

    - Bus devices;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - NVIDIA Tegra memory controller driver;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - PCI subsystem;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - Trusted Execution Environment drivers;

    - Thermal drivers;

    - TTY drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - ACRN Hypervisor Service Module driver;

    - File systems infrastructure;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - SMB network file system;

    - UBI file system;

    - KVM subsystem;

    - IPv6 networking;

    - L3 Master device support module;

    - RDMA verbs API;

    - SoC audio core drivers;

    - Process Accounting mechanism;

    - Padata parallel execution mechanism;

    - printk logging mechanism;

    - Scheduler infrastructure;

    - Timer subsystem;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - Logical Link layer;

    - Multipath TCP;

    - Netfilter;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - Network traffic control;

    - SMC sockets;

    - Sun RPC protocol;

    - Wireless networking;

    - Landlock security;

    - Linux Security Modules (LSM) Framework;

    - Tomoyo security module;

    - SoC Audio for Freescale CPUs drivers; (CVE-2024-46821, CVE-2025-21992, CVE-2025-21811, CVE-2025-21806,     CVE-2022-49728, CVE-2025-21959, CVE-2025-21745, CVE-2025-21708, CVE-2024-58071, CVE-2025-21941,     CVE-2025-22008, CVE-2025-21865, CVE-2024-58052, CVE-2025-22097, CVE-2024-42230, CVE-2025-21765,     CVE-2025-21859, CVE-2024-57981, CVE-2025-21761, CVE-2025-22007, CVE-2025-21726, CVE-2025-21956,     CVE-2025-21704, CVE-2025-21910, CVE-2024-58072, CVE-2025-21934, CVE-2025-39728, CVE-2025-21948,     CVE-2025-22021, CVE-2024-58007, CVE-2025-21866, CVE-2025-22089, CVE-2025-21779, CVE-2025-22086,     CVE-2025-21887, CVE-2025-22056, CVE-2025-21735, CVE-2024-58093, CVE-2025-21728, CVE-2024-56721,     CVE-2024-58076, CVE-2024-53144, CVE-2025-22055, CVE-2025-21772, CVE-2025-21721, CVE-2025-37785,     CVE-2025-21943, CVE-2025-21920, CVE-2025-21762, CVE-2024-56608, CVE-2025-21758, CVE-2025-21718,     CVE-2025-21971, CVE-2024-58083, CVE-2025-21711, CVE-2025-22079, CVE-2025-21802, CVE-2024-58051,     CVE-2025-22073, CVE-2024-57973, CVE-2025-21926, CVE-2025-21823, CVE-2025-21647, CVE-2025-21731,     CVE-2024-53168, CVE-2025-21791, CVE-2025-22014, CVE-2025-21781, CVE-2025-21875, CVE-2024-57978,     CVE-2025-21924, CVE-2024-58086, CVE-2025-21905, CVE-2025-37937, CVE-2025-21962, CVE-2025-21968,     CVE-2025-22075, CVE-2025-21749, CVE-2025-21766, CVE-2025-21736, CVE-2024-58005, CVE-2025-21763,     CVE-2024-46812, CVE-2025-21917, CVE-2024-58034, CVE-2024-58016, CVE-2025-21919, CVE-2025-39735,     CVE-2025-21914, CVE-2025-22054, CVE-2025-21753, CVE-2025-21785, CVE-2025-21964, CVE-2024-56664,     CVE-2025-21764, CVE-2024-58017, CVE-2025-21835, CVE-2025-21871, CVE-2025-21760, CVE-2024-58014,     CVE-2024-58055, CVE-2024-58063, CVE-2025-38152, CVE-2023-53034, CVE-2025-21820, CVE-2025-22044,     CVE-2025-21782, CVE-2025-21912, CVE-2024-58069, CVE-2025-21727, CVE-2025-21748, CVE-2025-22063,     CVE-2024-57986, CVE-2024-57980, CVE-2025-22010, CVE-2025-22005, CVE-2025-21846, CVE-2025-21830,     CVE-2025-21963, CVE-2025-22050, CVE-2025-22045, CVE-2025-22066, CVE-2025-21999, CVE-2024-36945,     CVE-2025-21844, CVE-2025-21922, CVE-2024-58010, CVE-2025-21925, CVE-2025-22035, CVE-2024-46753,     CVE-2025-21898, CVE-2024-58001, CVE-2025-21715, CVE-2024-56599, CVE-2025-21719, CVE-2025-21707,     CVE-2025-23136, CVE-2025-21684, CVE-2025-21981, CVE-2025-21877, CVE-2025-21799, CVE-2025-21722,     CVE-2024-56551, CVE-2025-21848, CVE-2025-22025, CVE-2025-38575, CVE-2025-21814, CVE-2025-22081,     CVE-2025-21950, CVE-2025-22004, CVE-2024-58002, CVE-2025-21787, CVE-2025-21776, CVE-2025-37889,     CVE-2022-49636, CVE-2024-58090, CVE-2025-38637, CVE-2024-57979, CVE-2025-21970, CVE-2025-21916,     CVE-2025-22020, CVE-2025-21858, CVE-2025-22018, CVE-2024-58020, CVE-2025-21744, CVE-2025-21804,     CVE-2025-21767, CVE-2024-26982, CVE-2024-47726, CVE-2025-21862, CVE-2025-21951, CVE-2025-21796,     CVE-2025-21878, CVE-2025-21975, CVE-2025-21996, CVE-2025-22060, CVE-2025-23138, CVE-2025-22071,     CVE-2025-21795, CVE-2025-21928, CVE-2025-21994, CVE-2024-58085, CVE-2024-58058, CVE-2024-58079,     CVE-2024-57977, CVE-2024-57834, CVE-2025-21909, CVE-2025-21826, CVE-2025-21991, CVE-2025-21935,     CVE-2025-21904, CVE-2025-21957)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7591-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Clock framework and drivers;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - PCI subsystem;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - QCOM SoC drivers;

    - Thermal drivers;

    - BTRFS file system;

    - Ext4 file system;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - File systems infrastructure;

    - Proc file system;

    - SMB network file system;

    - IPv6 networking;

    - RDMA verbs API;

    - SoC audio core drivers;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - Netfilter;

    - Network traffic control;

    - SMC sockets;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-23138, CVE-2025-21956, CVE-2025-21970, CVE-2025-22025,     CVE-2024-46753, CVE-2025-21962, CVE-2025-37889, CVE-2025-21992, CVE-2025-39728, CVE-2025-22054,     CVE-2025-21959, CVE-2024-53144, CVE-2022-49728, CVE-2024-58093, CVE-2025-38637, CVE-2025-21981,     CVE-2025-21963, CVE-2025-21968, CVE-2025-22014, CVE-2024-46812, CVE-2025-22005, CVE-2025-21994,     CVE-2025-22071, CVE-2025-22008, CVE-2022-49636, CVE-2025-22007, CVE-2023-53034, CVE-2025-22035,     CVE-2025-22010, CVE-2025-22081, CVE-2025-22021, CVE-2024-46821, CVE-2025-21999, CVE-2025-38575,     CVE-2025-22073, CVE-2025-22004, CVE-2024-42230, CVE-2025-21941, CVE-2024-56664, CVE-2025-22044,     CVE-2025-39735, CVE-2025-22060, CVE-2025-22055, CVE-2025-21957, CVE-2025-21975, CVE-2025-22075,     CVE-2025-22089, CVE-2025-37937, CVE-2025-38152, CVE-2025-22020, CVE-2025-22066, CVE-2025-22056,     CVE-2025-22050, CVE-2025-21964, CVE-2025-21996, CVE-2025-22079, CVE-2025-23136, CVE-2025-22063,     CVE-2024-36945, CVE-2025-22097, CVE-2025-37785, CVE-2025-21991, CVE-2025-22086, CVE-2025-22045,     CVE-2025-22018)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9079 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)

    * kernel: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CVE-2025-21887)

    * kernel: keys: Fix UAF in key_put() (CVE-2025-21893)

    * kernel: cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)

    * kernel: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CVE-2025-21969)

    * kernel: cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)

    * kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy (CVE-2025-21979)

    * kernel: smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4193 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4193-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     May 30, 2025                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.137-1~deb11u1     CVE ID         : CVE-2023-52857 CVE-2023-52927 CVE-2023-53034 CVE-2024-24855                      CVE-2024-26656 CVE-2024-26739 CVE-2024-26767 CVE-2024-26982                      CVE-2024-27056 CVE-2024-35866 CVE-2024-36908 CVE-2024-38541                      CVE-2024-38611 CVE-2024-40973 CVE-2024-42129 CVE-2024-43831                      CVE-2024-46733 CVE-2024-46742 CVE-2024-46753 CVE-2024-46772                      CVE-2024-46774 CVE-2024-46816 CVE-2024-46823 CVE-2024-47753                      CVE-2024-47754 CVE-2024-50056 CVE-2024-50063 CVE-2024-50246                      CVE-2024-53166 CVE-2024-56609 CVE-2024-57977 CVE-2024-58002                      CVE-2024-58005 CVE-2024-58079 CVE-2024-58090 CVE-2025-21702                      CVE-2025-21712 CVE-2025-21721 CVE-2025-21756 CVE-2025-21838                      CVE-2025-21844 CVE-2025-21846 CVE-2025-21848 CVE-2025-21853                      CVE-2025-21855 CVE-2025-21858 CVE-2025-21859 CVE-2025-21862                      CVE-2025-21864 CVE-2025-21865 CVE-2025-21866 CVE-2025-21867                      CVE-2025-21871 CVE-2025-21875 CVE-2025-21877 CVE-2025-21878                      CVE-2025-21881 CVE-2025-21887 CVE-2025-21891 CVE-2025-21898                      CVE-2025-21899 CVE-2025-21904 CVE-2025-21905 CVE-2025-21909                      CVE-2025-21910 CVE-2025-21912 CVE-2025-21913 CVE-2025-21914                      CVE-2025-21916 CVE-2025-21917 CVE-2025-21918 CVE-2025-21919                      CVE-2025-21920 CVE-2025-21922 CVE-2025-21924 CVE-2025-21925                      CVE-2025-21926 CVE-2025-21928 CVE-2025-21934 CVE-2025-21935                      CVE-2025-21936 CVE-2025-21937 CVE-2025-21938 CVE-2025-21941                      CVE-2025-21943 CVE-2025-21944 CVE-2025-21945 CVE-2025-21947                      CVE-2025-21948 CVE-2025-21950 CVE-2025-21951 CVE-2025-21956                      CVE-2025-21957 CVE-2025-21959 CVE-2025-21960 CVE-2025-21962                      CVE-2025-21963 CVE-2025-21964 CVE-2025-21968 CVE-2025-21970                      CVE-2025-21971 CVE-2025-21975 CVE-2025-21978 CVE-2025-21979                      CVE-2025-21980 CVE-2025-21981 CVE-2025-21986 CVE-2025-21991                      CVE-2025-21992 CVE-2025-21993 CVE-2025-21994 CVE-2025-21996                      CVE-2025-21997 CVE-2025-21999 CVE-2025-22004 CVE-2025-22005                      CVE-2025-22007 CVE-2025-22008 CVE-2025-22010 CVE-2025-22014                      CVE-2025-22015 CVE-2025-22018 CVE-2025-22020 CVE-2025-22021                      CVE-2025-22025 CVE-2025-22027 CVE-2025-22033 CVE-2025-22035                      CVE-2025-22038 CVE-2025-22040 CVE-2025-22041 CVE-2025-22042                      CVE-2025-22044 CVE-2025-22045 CVE-2025-22049 CVE-2025-22050                      CVE-2025-22054 CVE-2025-22055 CVE-2025-22056 CVE-2025-22058                      CVE-2025-22060 CVE-2025-22063 CVE-2025-22066 CVE-2025-22071                      CVE-2025-22072 CVE-2025-22073 CVE-2025-22075 CVE-2025-22079                      CVE-2025-22081 CVE-2025-22086 CVE-2025-22088 CVE-2025-22089                      CVE-2025-22093 CVE-2025-22095 CVE-2025-22097 CVE-2025-22126                      CVE-2025-23136 CVE-2025-23138 CVE-2025-23140 CVE-2025-23141                      CVE-2025-23142 CVE-2025-23144 CVE-2025-23145 CVE-2025-23146                      CVE-2025-23147 CVE-2025-23148 CVE-2025-23150 CVE-2025-23151                      CVE-2025-23156 CVE-2025-23157 CVE-2025-23158 CVE-2025-23159                      CVE-2025-23161 CVE-2025-23163 CVE-2025-37738 CVE-2025-37739                      CVE-2025-37740 CVE-2025-37741 CVE-2025-37742 CVE-2025-37748                      CVE-2025-37749 CVE-2025-37752 CVE-2025-37756 CVE-2025-37757                      CVE-2025-37758 CVE-2025-37765 CVE-2025-37766 CVE-2025-37767                      CVE-2025-37768 CVE-2025-37769 CVE-2025-37770 CVE-2025-37771                      CVE-2025-37772 CVE-2025-37773 CVE-2025-37775 CVE-2025-37778                      CVE-2025-37780 CVE-2025-37781 CVE-2025-37782 CVE-2025-37785                      CVE-2025-37787 CVE-2025-37788 CVE-2025-37789 CVE-2025-37790                      CVE-2025-37792 CVE-2025-37794 CVE-2025-37796 CVE-2025-37797                      CVE-2025-37798 CVE-2025-37801 CVE-2025-37803 CVE-2025-37805                      CVE-2025-37808 CVE-2025-37810 CVE-2025-37811 CVE-2025-37812                      CVE-2025-37815 CVE-2025-37817 CVE-2025-37818 CVE-2025-37820                      CVE-2025-37823 CVE-2025-37824 CVE-2025-37829 CVE-2025-37830                      CVE-2025-37836 CVE-2025-37838 CVE-2025-37839 CVE-2025-37840                      CVE-2025-37841 CVE-2025-37844 CVE-2025-37849 CVE-2025-37850                      CVE-2025-37851 CVE-2025-37852 CVE-2025-37854 CVE-2025-37857                      CVE-2025-37858 CVE-2025-37859 CVE-2025-37862 CVE-2025-37865                      CVE-2025-37867 CVE-2025-37871 CVE-2025-37875 CVE-2025-37879                      CVE-2025-37881 CVE-2025-37883 CVE-2025-37884 CVE-2025-37885                      CVE-2025-37889 CVE-2025-37892 CVE-2025-37937 CVE-2025-37938                      CVE-2025-37940 CVE-2025-37979 CVE-2025-37982 CVE-2025-37983                      CVE-2025-37985 CVE-2025-37989 CVE-2025-38152 CVE-2025-38575                      CVE-2025-38637 CVE-2025-39728 CVE-2025-39735     Debian Bug     : 1050352 1086175 1088682 1100746 1100928 1103277

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.137-1~deb11u1.  This additionally includes many more bug fixes     from stable updates 6.1.130-6.1.137 and an update of the Microsoft     Azure Network Adapter (mana) driver.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01707-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack     (bsc#1224757).
    - CVE-2024-28956: Intel CPU: Indirect Target Selection (ITS) (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-46763: fou: Fix null-ptr-deref in GRO (bsc#1230764).
    - CVE-2024-50038: netfilter: xtables: avoid NFPROTO_UNSPEC where needed (bsc#1231910).
    - CVE-2024-50162: bpf: devmap: provide rxq after redirect (bsc#1233075).
    - CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
    - CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
    - CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
    - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
    - CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
    - CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
    - CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (bsc#1239470).
    - CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
    - CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
    - CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
    - CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
    - CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
    - CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
    - CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
    - CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
    - CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
    - CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
    - CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
    - CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
    - CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
    - CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error (bsc#1240720).
    - CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
    - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21969: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (bsc#1240784).
    - CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
    - CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
    - CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
    - CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
    - CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
    - CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
    - CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
    - CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
    - CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
    - CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
    - CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
    - CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
    - CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
    - CVE-2025-22090: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (bsc#1241537).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22105: bonding: check xdp prog when set bond mode (bsc#1241548).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups()     (bsc#1241578).
    - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593).
    - CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).
    - CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-37860: sfc: fix NULL dereferences in ef100_process_design_param() (bsc#1241452).
    - CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-587.el9 build changelog.

  - In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation     sqe->opcode is used for different tables, make sure we santitise it against speculations. (CVE-2025-21863)

  - A use-after-free flaw was found in the Linux kernel's SGI GRU driver in the way the first     gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the     gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate     their privileges on the system. (CVE-2022-3424)

  - In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Fix memory leak     problem This reverts commit 46bbe5c671e06f070428b9be142cc4ee5cedebac. As commit 46bbe5c671e0 (tracing:
    fix double free) said, the double free problem reported by clang static analyzer is: > In     parse_var_defs() if there is a problem allocating > var_defs.expr, the earlier var_defs.name is freed. >     This free is duplicated by free_var_defs() which frees > the rest of the list. However, if there is a     problem allocating N-th var_defs.expr: + in parse_var_defs(), the freed 'earlier var_defs.name' is     actually the N-th var_defs.name; + then in free_var_defs(), the names from 0th to (N-1)-th are freed; IF     ALLOCATING PROBLEM HAPPENED HERE!!! -+ \ | 0th 1th (N-1)-th N-th V     +-------------+-------------+-----+-------------+----------- var_defs: | name | expr | name | expr | ... |     name | expr | name | /// +-------------+-------------+-----+-------------+----------- These two frees     don't act on same name, so there was no double free problem before. Conversely, after that commit, we     get a memory leak problem because the above N-th var_defs.name is not freed. If enable     CONFIG_DEBUG_KMEMLEAK and inject a fault at where the N-th var_defs.expr allocated, then execute on shell     like: $ echo 'hist:key=call_site:val=$v1,$v2:v1=bytes_req,v2=bytes_alloc' > \     /sys/kernel/debug/tracing/events/kmem/kmalloc/trigger Then kmemleak reports: unreferenced object     0xffff8fb100ef3518 (size 8): comm bash, pid 196, jiffies 4295681690 (age 28.538s) hex dump (first 8     bytes): 76 31 00 00 b1 8f ff ff v1...... backtrace: [<0000000038fe4895>] kstrdup+0x2d/0x60     [<00000000c99c049a>] event_hist_trigger_parse+0x206f/0x20e0 [<00000000ae70d2cc>]     trigger_process_regex+0xc0/0x110 [<0000000066737a4c>] event_trigger_write+0x75/0xd0 [<000000007341e40c>]     vfs_write+0xbb/0x2a0 [<0000000087fde4c2>] ksys_write+0x59/0xd0 [<00000000581e9cdf>]     do_syscall_64+0x3a/0x80 [<00000000cf3b065c>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 (CVE-2022-49648)

  - In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds     in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in __kuid_val     include/linux/uidgid.h:36 BUG: KASAN: slab-out-of-bounds in uid_eq include/linux/uidgid.h:63 [inline] BUG:
    KASAN: slab-out-of-bounds in key_task_permission+0x394/0x410 security/keys/permission.c:54 Read of size 4     at addr ffff88813c3ab618 by task stress-ng/4362 CPU: 2 PID: 4362 Comm: stress-ng Not tainted     5.10.0-14930-gafbffd6c3ede #15 Call Trace: __dump_stack lib/dump_stack.c:82 [inline]     dump_stack+0x107/0x167 lib/dump_stack.c:123 print_address_description.constprop.0+0x19/0x170     mm/kasan/report.c:400 __kasan_report.cold+0x6c/0x84 mm/kasan/report.c:560 kasan_report+0x3a/0x50     mm/kasan/report.c:585 __kuid_val include/linux/uidgid.h:36 [inline] uid_eq include/linux/uidgid.h:63     [inline] key_task_permission+0x394/0x410 security/keys/permission.c:54 search_nested_keyrings+0x90e/0xe90     security/keys/keyring.c:793 This issue was also reported by syzbot. It can be reproduced by following     these steps(more details [1]): 1. Obtain more than 32 inputs that have similar hashes, which ends with the     pattern '0xxxxxxxe6'. 2. Reboot and add the keys obtained in step 1. The reproducer demonstrates how this     issue happened: 1. In the search_nested_keyrings function, when it iterates through the slots in a     node(below tag ascend_to_node), if the slot pointer is meta and node->back_pointer != NULL(it means a     root), it will proceed to descend_to_node. However, there is an exception. If node is the root, and one of     the slots points to a shortcut, it will be treated as a keyring. 2. Whether the ptr is keyring decided by     keyring_ptr_is_keyring function. However, KEYRING_PTR_SUBTYPE is 0x2UL, the same as     ASSOC_ARRAY_PTR_SUBTYPE_MASK. 3. When 32 keys with the similar hashes are added to the tree, the ROOT has     keys with hashes that are not similar (e.g. slot 0) and it splits NODE A without using a shortcut. When     NODE A is filled with keys that all hashes are xxe6, the keys are similar, NODE A will split with a     shortcut. Finally, it forms the tree as shown below, where slot 6 points to a shortcut. NODE A     +------>+---+ ROOT | | 0 | xxe6 +---+ | +---+ xxxx | 0 | shortcut : : xxe6 +---+ | +---+ xxe6 : : | | |     xxe6 +---+ | +---+ | 6 |---+ : : xxe6 +---+ +---+ xxe6 : : | f | xxe6 +---+ +---+ xxe6 | f | +---+ 4. As     mentioned above, If a slot(slot 6) of the root points to a shortcut, it may be mistakenly transferred to a     key*, leading to a read out-of-bounds read. To fix this issue, one should jump to descend_to_node if the     ptr is a shortcut, regardless of whether the node is root or not. [1] https://lore.kernel.org/linux-     kernel/1cfa878e-8c7b-4570-8606-21daf5e13ce7@huaweicloud.com/ [jarkko: tweaked the commit message a bit to     have an appropriate closes tag.] (CVE-2024-50301)

  - In the Linux kernel, the following vulnerability has been resolved: af_packet: fix     vlan_get_protocol_dgram() vs MSG_PEEK Blamed commit forgot MSG_PEEK case, allowing a crash [1] as found by     syzbot. Rework vlan_get_protocol_dgram() to not touch skb at all, so that it can be used from many cpus on     the same skb. Add a const qualifier to skb argument. [1] skbuff: skb_under_panic: text:ffffffff8a8ccd05     len:29 put:14 head:ffff88807fc8e400 data:ffff88807fc8e3f4 tail:0x11 end:0x140 dev:<NULL> ------------[ cut     here ]------------ kernel BUG at net/core/skbuff.c:206 ! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN     PTI CPU: 1 UID: 0 PID: 5892 Comm: syz-executor883 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0     Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP:
    0010:skb_panic net/core/skbuff.c:206 [inline] RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216     Code: 0b 8d 48 c7 c6 86 d5 25 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8     5a 69 79 f7 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 RSP:
    0018:ffffc900038d7638 EFLAGS: 00010282 RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 609ffd18ea660600     RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffff88802483c8d0 R08:
    ffffffff817f0a8c R09: 1ffff9200071ae60 R10: dffffc0000000000 R11: fffff5200071ae61 R12: 0000000000000140     R13: ffff88807fc8e400 R14: ffff88807fc8e3f4 R15: 0000000000000011 FS: 00007fbac5e006c0(0000)     GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2:
    00007fbac5e00d58 CR3: 000000001238e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000     DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK>     skb_push+0xe5/0x100 net/core/skbuff.c:2636 vlan_get_protocol_dgram+0x165/0x290 net/packet/af_packet.c:585     packet_recvmsg+0x948/0x1ef0 net/packet/af_packet.c:3552 sock_recvmsg_nosec net/socket.c:1033 [inline]     sock_recvmsg+0x22f/0x280 net/socket.c:1055 ____sys_recvmsg+0x1c6/0x480 net/socket.c:2803 ___sys_recvmsg     net/socket.c:2845 [inline] do_recvmmsg+0x426/0xab0 net/socket.c:2940 __sys_recvmmsg net/socket.c:3014     [inline] __do_sys_recvmmsg net/socket.c:3037 [inline] __se_sys_recvmmsg net/socket.c:3030 [inline]
    __x64_sys_recvmmsg+0x199/0x250 net/socket.c:3030 do_syscall_x64 arch/x86/entry/common.c:52 [inline]     do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f     (CVE-2024-57901)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01614-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
    - CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
    - CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
    - CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
    - CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
    - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
    - CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
    - CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
    - CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
    - CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
    - CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
    - CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
    - CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
    - CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
    - CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
    - CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
    - CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
    - CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
    - CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
    - CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
    - CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
    - CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
    - CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error (bsc#1240720).
    - CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
    - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
    - CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
    - CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
    - CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
    - CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
    - CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
    - CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
    - CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
    - CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
    - CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
    - CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
    - CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
    - CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
    - CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
    - CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22105, CVE-2025-37860: Add missing bugzilla references (bsc#1241452 bsc#1241548).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups()     (bsc#1241578).
    - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593).
    - CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).
    - CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-959 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix potential UAF in cifs_dump_full_key() (CVE-2024-35866)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Bridge, fix the crash caused by LAG state check (CVE-2025-21970)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: Prevent creation of classes with TC_H_ROOT (CVE-2025-21971)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: handle errors in mlx5_chains_create_table() (CVE-2025-21975)

    In the Linux kernel, the following vulnerability has been resolved:

    sched: address a potential NULL pointer dereference in the GRED scheduler. (CVE-2025-21980)

    In the Linux kernel, the following vulnerability has been resolved:

    net: switchdev: Convert blocking notification chain to a raw one (CVE-2025-21986)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: ignore non-functional sensor in HP 5MP Camera (CVE-2025-21992)

    In the Linux kernel, the following vulnerability has been resolved:

    xsk: fix an integer overflow in xp_create_and_assign_umem() (CVE-2025-21997)

    In the Linux kernel, the following vulnerability has been resolved:

    proc: fix UAF in proc_get_inode() (CVE-2025-21999)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (CVE-2025-22005)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/migrate: fix shmem xarray update during migration (CVE-2025-22015)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21962 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while     processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to     have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can     lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.
    (CVE-2025-21962)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21962 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while     processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to     have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can     lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.
    (CVE-2025-21962)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.15.180-122.191. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-070 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    blk-throttle: Set BIO_THROTTLED when bio has been throttled (CVE-2022-49465)

    In the Linux kernel, the following vulnerability has been resolved:

    vlan: fix memory leak in vlan_newlink() (CVE-2022-49636)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: Fix signed integer overflow in __ip6_append_data (CVE-2022-49728)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix potential UAF in cifs_debug_files_proc_show() (CVE-2024-26928)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: handle errors from btrfs_dec_ref() properly (CVE-2024-46753)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: call the security_mmap_file() LSM hook in remap_file_pages() (CVE-2024-47745)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Fix race between element replace and close() (CVE-2024-56664)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix integer overflow while processing closetimeo mount option (CVE-2025-21962)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix integer overflow while processing acdirmax mount option (CVE-2025-21963)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix integer overflow while processing acregmax mount option (CVE-2025-21964)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: Prevent creation of classes with TC_H_ROOT (CVE-2025-21971)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: ignore non-functional sensor in HP 5MP Camera (CVE-2025-21992)

    In the Linux kernel, the following vulnerability has been resolved:

    proc: fix UAF in proc_get_inode() (CVE-2025-21999)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (CVE-2025-22005)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: socket: Lookup orig tuple for IPv6 SNAT (CVE-2025-22021)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: put dl_stid if fail to queue dl_recall (CVE-2025-22025)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Fix use-after-free in print_graph_function_flags during tracer switching (CVE-2025-22035)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (CVE-2025-22045)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix geneve_opt length integer overflow (CVE-2025-22055)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)

    In the Linux kernel, the following vulnerability has been resolved:

    netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CVE-2025-22063)

    In the Linux kernel, the following vulnerability has been resolved:

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported (CVE-2025-22075)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Fix a couple integer overflows on 32bit systems (CVE-2025-22081)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (CVE-2025-22086)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/core: Don't expose hw_counters outside of init net namespace (CVE-2025-22089)

    In the Linux kernel, the following vulnerability has been resolved:

    thermal: int340x: Add NULL check for adev (CVE-2025-23136)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix OOB read when checking dotdot dir (CVE-2025-37785)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: skbprio: Remove overly strict queue assertions (CVE-2025-38637)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5900 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5900-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     April 12, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2023-52857 CVE-2023-52927 CVE-2024-24855 CVE-2024-26656                      CVE-2024-26767 CVE-2024-26982 CVE-2024-27056 CVE-2024-35866                      CVE-2024-38611 CVE-2024-40973 CVE-2024-42129 CVE-2024-43831                      CVE-2024-46772 CVE-2024-47753 CVE-2024-47754 CVE-2024-50056                      CVE-2024-50246 CVE-2024-53166 CVE-2024-57977 CVE-2024-58002                      CVE-2024-58005 CVE-2024-58079 CVE-2024-58090 CVE-2025-21702                      CVE-2025-21712 CVE-2025-21721 CVE-2025-21756 CVE-2025-21838                      CVE-2025-21844 CVE-2025-21846 CVE-2025-21848 CVE-2025-21855                      CVE-2025-21858 CVE-2025-21859 CVE-2025-21862 CVE-2025-21864                      CVE-2025-21865 CVE-2025-21866 CVE-2025-21867 CVE-2025-21871                      CVE-2025-21875 CVE-2025-21877 CVE-2025-21878 CVE-2025-21881                      CVE-2025-21887 CVE-2025-21891 CVE-2025-21898 CVE-2025-21899                      CVE-2025-21904 CVE-2025-21905 CVE-2025-21909 CVE-2025-21910                      CVE-2025-21912 CVE-2025-21913 CVE-2025-21914 CVE-2025-21916                      CVE-2025-21917 CVE-2025-21918 CVE-2025-21919 CVE-2025-21920                      CVE-2025-21922 CVE-2025-21924 CVE-2025-21925 CVE-2025-21926                      CVE-2025-21928 CVE-2025-21934 CVE-2025-21935 CVE-2025-21936                      CVE-2025-21937 CVE-2025-21938 CVE-2025-21941 CVE-2025-21943                      CVE-2025-21944 CVE-2025-21945 CVE-2025-21947 CVE-2025-21948                      CVE-2025-21950 CVE-2025-21951 CVE-2025-21956 CVE-2025-21957                      CVE-2025-21959 CVE-2025-21960 CVE-2025-21962 CVE-2025-21963                      CVE-2025-21964 CVE-2025-21968 CVE-2025-21970 CVE-2025-21971                      CVE-2025-21975 CVE-2025-21978 CVE-2025-21979 CVE-2025-21980                      CVE-2025-21981 CVE-2025-21986 CVE-2025-21991 CVE-2025-21992                      CVE-2025-21993 CVE-2025-21994 CVE-2025-21996 CVE-2025-21997                      CVE-2025-21999 CVE-2025-22004 CVE-2025-22005 CVE-2025-22007                      CVE-2025-22008 CVE-2025-22010 CVE-2025-22014 CVE-2025-22015

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.133-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
241357	Oracle Linux 10 : kernel (ELSA-2025-9079)	Nessus	Oracle Linux Local Security Checks	high
241070	Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7606-1)	Nessus	Ubuntu Local Security Checks	high
241069	Ubuntu 24.04 LTS / 24.10 : Linux kernel vulnerabilities (USN-7605-1)	Nessus	Ubuntu Local Security Checks	high
240815	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:01972-1)	Nessus	SuSE Local Security Checks	medium
240805	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2025:01951-1)	Nessus	SuSE Local Security Checks	medium
240801	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:01967-1)	Nessus	SuSE Local Security Checks	medium
240781	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:01964-1)	Nessus	SuSE Local Security Checks	medium
240769	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:01919-1)	Nessus	SuSE Local Security Checks	medium
240701	Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7602-1)	Nessus	Ubuntu Local Security Checks	high
240565	Ubuntu 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7597-1)	Nessus	Ubuntu Local Security Checks	high
240562	Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7598-1)	Nessus	Ubuntu Local Security Checks	high
240498	Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7592-1)	Nessus	Ubuntu Local Security Checks	high
240497	Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7593-1)	Nessus	Ubuntu Local Security Checks	high
240495	Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7591-1)	Nessus	Ubuntu Local Security Checks	high
238500	RHEL 10 : kernel (RHSA-2025:9079)	Nessus	Red Hat Local Security Checks	high
237504	Debian dla-4193 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	high
237279	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:01707-1)	Nessus	SuSE Local Security Checks	medium
237260	CentOS 9 : kernel-5.14.0-587.el9	Nessus	CentOS Local Security Checks	high
237088	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:01614-1)	Nessus	SuSE Local Security Checks	medium
235906	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-959)	Nessus	Amazon Linux Local Security Checks	high
235314	Azure Linux 3.0 Security Update: kernel (CVE-2025-21962)	Nessus	Azure Linux Local Security Checks	medium
235291	CBL Mariner 2.0 Security Update: kernel (CVE-2025-21962)	Nessus	MarinerOS Local Security Checks	medium
234975	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-070)	Nessus	Amazon Linux Local Security Checks	high
234309	Debian dsa-5900 : affs-modules-6.1.0-28-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2025-21962

medium

Tenable Plugins

high

high

high

medium

medium

medium

medium

medium

high

high

high

high

high

high

high

high

medium

high

medium

high

medium

medium

high

high