In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an oopsable race... The rest of the callers are safe since they are holding namespace_sem and are guaranteed a positive refcount on the mount in question. Rename the current has_locked_children() to __has_locked_children(), make it static and switch the fs/namespace.c users to it. Make has_locked_children() a wrapper for __has_locked_children(), calling the latter under read_seqlock_excl(&mount_lock).

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7789-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Bluetooth drivers;

    - Bus devices;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - FPGA Framework;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - HW tracing;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Amlogic Meson DDR PMU;

    - NI-700 PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - SPI subsystem;

    - TCM subsystem;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB core drivers;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - Virtio drivers;

    - BTRFS file system;

    - EROFS file system;

    - F2FS file system;

    - File systems infrastructure;

    - Network file systems library;

    - NTFS3 file system;

    - SMB network file system;

    - Codetag library;

    - BPF subsystem;

    - LZO compression library;

    - Mellanox drivers;

    - IPv4 networking;

    - Bluetooth subsystem;

    - Network sockets;

    - XFRM subsystem;

    - Digital Audio (PCM) driver;

    - Tracing infrastructure;

    - io_uring subsystem;

    - Padata parallel execution mechanism;

    - DVFS energy model driver;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Memory management;

    - KASAN memory debugging framework;

    - CAN network layer;

    - Networking core;

    - IPv6 networking;

    - Netfilter;

    - NetLabel subsystem;

    - Open vSwitch;

    - Network traffic control;

    - TIPC protocol;

    - TLS protocol;

    - ALSA framework;

    - sma1307 audio codecs;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - USB sound devices; (CVE-2025-38137, CVE-2025-38141, CVE-2025-38035, CVE-2025-38298, CVE-2025-38042,     CVE-2025-38140, CVE-2025-38138, CVE-2025-38316, CVE-2025-38304, CVE-2025-38165, CVE-2025-38306,     CVE-2025-38082, CVE-2025-38132, CVE-2025-38498, CVE-2025-38158, CVE-2025-38154, CVE-2025-38064,     CVE-2025-38129, CVE-2025-38096, CVE-2025-38352, CVE-2025-38303, CVE-2025-38122, CVE-2025-38048,     CVE-2025-38296, CVE-2025-38149, CVE-2025-38319, CVE-2025-38078, CVE-2025-38066, CVE-2025-38099,     CVE-2025-38291, CVE-2025-38267, CVE-2025-38268, CVE-2025-38126, CVE-2025-38076, CVE-2025-38077,     CVE-2025-38101, CVE-2025-38071, CVE-2025-38163, CVE-2025-38285, CVE-2025-38265, CVE-2025-38125,     CVE-2025-38302, CVE-2025-38172, CVE-2025-38292, CVE-2025-38279, CVE-2025-38170, CVE-2025-38062,     CVE-2025-38074, CVE-2025-38050, CVE-2025-38116, CVE-2025-38414, CVE-2025-38173, CVE-2025-38033,     CVE-2025-38112, CVE-2025-38091, CVE-2025-38290, CVE-2025-39890, CVE-2025-38156, CVE-2025-38289,     CVE-2025-38275, CVE-2025-38295, CVE-2025-38123, CVE-2025-38300, CVE-2025-38067, CVE-2025-38131,     CVE-2025-38294, CVE-2025-38105, CVE-2025-38107, CVE-2025-38106, CVE-2025-38069, CVE-2025-38041,     CVE-2025-38111, CVE-2025-38312, CVE-2025-38092, CVE-2025-38054, CVE-2025-38166, CVE-2025-38044,     CVE-2025-38159, CVE-2025-38061, CVE-2025-38115, CVE-2025-38058, CVE-2025-38036, CVE-2025-38100,     CVE-2025-38075, CVE-2025-38160, CVE-2025-38102, CVE-2025-38269, CVE-2025-38108, CVE-2025-38119,     CVE-2025-38052, CVE-2025-38175, CVE-2025-38103, CVE-2025-38286, CVE-2025-38051, CVE-2025-38004,     CVE-2025-38283, CVE-2025-38118, CVE-2025-38139, CVE-2025-38079, CVE-2025-38315, CVE-2025-38145,     CVE-2025-38072, CVE-2025-38045, CVE-2025-38117, CVE-2025-38143, CVE-2025-38068, CVE-2025-38053,     CVE-2025-38081, CVE-2025-38032, CVE-2025-38134, CVE-2025-38063, CVE-2025-38128, CVE-2025-38278,     CVE-2025-38270, CVE-2025-38060, CVE-2025-38161, CVE-2025-38073, CVE-2025-38065, CVE-2025-38313,     CVE-2025-38148, CVE-2025-38124, CVE-2025-38305, CVE-2025-38146, CVE-2025-38047, CVE-2025-38055,     CVE-2025-38169, CVE-2025-38120, CVE-2025-38164, CVE-2025-38070, CVE-2025-38176, CVE-2025-38282,     CVE-2025-38288, CVE-2025-38274, CVE-2025-38113, CVE-2025-38174, CVE-2025-38301, CVE-2025-38293,     CVE-2025-38136, CVE-2025-38311, CVE-2025-38039, CVE-2025-38297, CVE-2025-38155, CVE-2025-38307,     CVE-2025-38147, CVE-2025-38043, CVE-2025-38109, CVE-2025-38281, CVE-2025-38280, CVE-2025-38127,     CVE-2025-38057, CVE-2025-38029, CVE-2025-38038, CVE-2025-38167, CVE-2025-38151, CVE-2025-38415,     CVE-2025-38317, CVE-2025-38031, CVE-2025-38162, CVE-2025-38098, CVE-2025-38130, CVE-2025-38114,     CVE-2025-38142, CVE-2025-38135, CVE-2025-38299, CVE-2025-38272, CVE-2025-38277, CVE-2025-38037,     CVE-2025-38088, CVE-2025-38287, CVE-2025-38168, CVE-2025-38003, CVE-2025-38284, CVE-2025-38499,     CVE-2025-38097, CVE-2025-38318, CVE-2025-38059, CVE-2025-38040, CVE-2025-38314, CVE-2025-38110,     CVE-2025-38157, CVE-2025-38153, CVE-2025-38080, CVE-2025-38034, CVE-2025-38310)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-620.el9 build changelog.

  - In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry()     get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs     to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use     rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles     and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

  - In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of     has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an     oopsable race... The rest of the callers are safe since they are holding namespace_sem and are guaranteed     a positive refcount on the mount in question. Rename the current has_locked_children() to
    __has_locked_children(), make it static and switch the fs/namespace.c users to it. Make     has_locked_children() a wrapper for __has_locked_children(), calling the latter under     read_seqlock_excl(&mount_lock). (CVE-2025-38306)

  - In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on     unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the     caller's mount namespace. This change aligns permission checking with the rest of mount(2).
    (CVE-2025-38498)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7769-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Bluetooth drivers;

    - Bus devices;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - FPGA Framework;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - HW tracing;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Amlogic Meson DDR PMU;

    - NI-700 PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - SPI subsystem;

    - TCM subsystem;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB core drivers;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - Virtio drivers;

    - BTRFS file system;

    - EROFS file system;

    - F2FS file system;

    - File systems infrastructure;

    - Network file systems library;

    - NTFS3 file system;

    - SMB network file system;

    - Codetag library;

    - BPF subsystem;

    - LZO compression library;

    - Mellanox drivers;

    - IPv4 networking;

    - Bluetooth subsystem;

    - Network sockets;

    - XFRM subsystem;

    - Digital Audio (PCM) driver;

    - Tracing infrastructure;

    - io_uring subsystem;

    - Padata parallel execution mechanism;

    - DVFS energy model driver;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Memory management;

    - KASAN memory debugging framework;

    - CAN network layer;

    - Networking core;

    - IPv6 networking;

    - Netfilter;

    - NetLabel subsystem;

    - Open vSwitch;

    - Network traffic control;

    - TIPC protocol;

    - TLS protocol;

    - ALSA framework;

    - sma1307 audio codecs;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - USB sound devices; (CVE-2025-38122, CVE-2025-38119, CVE-2025-38071, CVE-2025-38310, CVE-2025-38166,     CVE-2025-38055, CVE-2025-38292, CVE-2025-38078, CVE-2025-38134, CVE-2025-38063, CVE-2025-38282,     CVE-2025-38059, CVE-2025-38112, CVE-2025-38082, CVE-2025-38296, CVE-2025-38126, CVE-2025-38136,     CVE-2025-38075, CVE-2025-38042, CVE-2025-38113, CVE-2025-38003, CVE-2025-38318, CVE-2025-38156,     CVE-2025-38290, CVE-2025-38102, CVE-2025-38076, CVE-2025-38097, CVE-2025-38313, CVE-2025-38298,     CVE-2025-38300, CVE-2025-38169, CVE-2025-38131, CVE-2025-38301, CVE-2025-38050, CVE-2025-38139,     CVE-2025-38305, CVE-2025-38317, CVE-2025-38045, CVE-2025-38040, CVE-2025-38279, CVE-2025-38123,     CVE-2025-38074, CVE-2025-38111, CVE-2025-38117, CVE-2025-38069, CVE-2025-38035, CVE-2025-38128,     CVE-2025-38277, CVE-2025-38061, CVE-2025-38306, CVE-2025-38051, CVE-2025-38124, CVE-2025-38291,     CVE-2025-38130, CVE-2025-38319, CVE-2025-38272, CVE-2025-38175, CVE-2025-38176, CVE-2025-38070,     CVE-2025-38032, CVE-2025-38151, CVE-2025-38107, CVE-2025-38103, CVE-2025-38274, CVE-2025-38163,     CVE-2025-38293, CVE-2025-38064, CVE-2025-38498, CVE-2025-38039, CVE-2025-38173, CVE-2025-38038,     CVE-2025-38135, CVE-2025-38149, CVE-2025-38142, CVE-2025-38414, CVE-2025-38120, CVE-2025-38106,     CVE-2025-38092, CVE-2025-38091, CVE-2025-38415, CVE-2025-38294, CVE-2025-38043, CVE-2025-38147,     CVE-2025-38037, CVE-2025-38108, CVE-2025-38088, CVE-2025-38316, CVE-2025-38312, CVE-2025-38352,     CVE-2025-38115, CVE-2025-38161, CVE-2025-38036, CVE-2025-38275, CVE-2025-38098, CVE-2025-38132,     CVE-2025-38146, CVE-2025-38288, CVE-2025-38143, CVE-2025-38278, CVE-2025-38155, CVE-2025-38047,     CVE-2025-38160, CVE-2025-38053, CVE-2025-38072, CVE-2025-38140, CVE-2025-38141, CVE-2025-38068,     CVE-2025-38058, CVE-2025-38062, CVE-2025-38303, CVE-2025-38164, CVE-2025-38101, CVE-2025-38145,     CVE-2025-38105, CVE-2025-38295, CVE-2025-38284, CVE-2025-38137, CVE-2025-38073, CVE-2025-38269,     CVE-2025-38118, CVE-2025-38165, CVE-2025-38162, CVE-2025-38170, CVE-2025-38114, CVE-2025-38066,     CVE-2025-38116, CVE-2025-38315, CVE-2025-38153, CVE-2025-38031, CVE-2025-38041, CVE-2025-38168,     CVE-2025-38499, CVE-2025-38048, CVE-2025-38158, CVE-2025-38060, CVE-2025-38299, CVE-2025-38286,     CVE-2025-38125, CVE-2025-38297, CVE-2025-38270, CVE-2025-38044, CVE-2025-38080, CVE-2025-38096,     CVE-2025-38314, CVE-2025-38307, CVE-2025-38174, CVE-2025-38267, CVE-2025-38304, CVE-2025-38057,     CVE-2025-38065, CVE-2025-38311, CVE-2025-38302, CVE-2025-38138, CVE-2025-38033, CVE-2025-38079,     CVE-2025-38280, CVE-2025-38109, CVE-2025-38287, CVE-2025-38159, CVE-2025-38289, CVE-2025-38283,     CVE-2025-38081, CVE-2025-38172, CVE-2025-38148, CVE-2025-38285, CVE-2025-38034, CVE-2025-38154,     CVE-2025-38077, CVE-2025-38054, CVE-2025-38029, CVE-2025-38127, CVE-2025-38281, CVE-2025-38100,     CVE-2025-38129, CVE-2025-38004, CVE-2025-38099, CVE-2025-38157, CVE-2025-38067, CVE-2025-38265,     CVE-2025-38052, CVE-2025-38110, CVE-2025-38268, CVE-2025-38167)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7770-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Bluetooth drivers;

    - Bus devices;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - FPGA Framework;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - HW tracing;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Amlogic Meson DDR PMU;

    - NI-700 PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - SPI subsystem;

    - TCM subsystem;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB core drivers;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - Virtio drivers;

    - BTRFS file system;

    - EROFS file system;

    - F2FS file system;

    - File systems infrastructure;

    - Network file systems library;

    - NTFS3 file system;

    - SMB network file system;

    - Codetag library;

    - BPF subsystem;

    - LZO compression library;

    - Mellanox drivers;

    - IPv4 networking;

    - Bluetooth subsystem;

    - Network sockets;

    - XFRM subsystem;

    - Digital Audio (PCM) driver;

    - Tracing infrastructure;

    - io_uring subsystem;

    - Padata parallel execution mechanism;

    - DVFS energy model driver;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Memory management;

    - KASAN memory debugging framework;

    - CAN network layer;

    - Networking core;

    - IPv6 networking;

    - Netfilter;

    - NetLabel subsystem;

    - Open vSwitch;

    - Network traffic control;

    - TIPC protocol;

    - TLS protocol;

    - ALSA framework;

    - sma1307 audio codecs;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - USB sound devices; (CVE-2025-38155, CVE-2025-38145, CVE-2025-38072, CVE-2025-38306, CVE-2025-38004,     CVE-2025-38053, CVE-2025-38293, CVE-2025-38045, CVE-2025-38105, CVE-2025-38079, CVE-2025-38161,     CVE-2025-38031, CVE-2025-38114, CVE-2025-38033, CVE-2025-38274, CVE-2025-38265, CVE-2025-38135,     CVE-2025-38075, CVE-2025-38313, CVE-2025-38064, CVE-2025-38118, CVE-2025-38299, CVE-2025-38123,     CVE-2025-38112, CVE-2025-38073, CVE-2025-38070, CVE-2025-38138, CVE-2025-38303, CVE-2025-38148,     CVE-2025-38035, CVE-2025-38157, CVE-2025-38131, CVE-2025-38107, CVE-2025-38108, CVE-2025-38071,     CVE-2025-38081, CVE-2025-38301, CVE-2025-38415, CVE-2025-38034, CVE-2025-38294, CVE-2025-38314,     CVE-2025-38285, CVE-2025-38147, CVE-2025-38113, CVE-2025-38352, CVE-2025-38170, CVE-2025-38103,     CVE-2025-38282, CVE-2025-38290, CVE-2025-38117, CVE-2025-38078, CVE-2025-38122, CVE-2025-38176,     CVE-2025-38082, CVE-2025-38289, CVE-2025-38124, CVE-2025-38039, CVE-2025-38281, CVE-2025-38126,     CVE-2025-38111, CVE-2025-38080, CVE-2025-38088, CVE-2025-38048, CVE-2025-38269, CVE-2025-38003,     CVE-2025-38102, CVE-2025-38140, CVE-2025-38316, CVE-2025-38268, CVE-2025-38132, CVE-2025-38286,     CVE-2025-38159, CVE-2025-38120, CVE-2025-38295, CVE-2025-38077, CVE-2025-38297, CVE-2025-38174,     CVE-2025-38160, CVE-2025-38119, CVE-2025-38099, CVE-2025-38134, CVE-2025-38051, CVE-2025-38061,     CVE-2025-38317, CVE-2025-38142, CVE-2025-38175, CVE-2025-38091, CVE-2025-38311, CVE-2025-38066,     CVE-2025-38062, CVE-2025-38169, CVE-2025-38065, CVE-2025-38098, CVE-2025-38146, CVE-2025-38292,     CVE-2025-38040, CVE-2025-38096, CVE-2025-38115, CVE-2025-38047, CVE-2025-38067, CVE-2025-38270,     CVE-2025-38074, CVE-2025-38129, CVE-2025-38143, CVE-2025-38498, CVE-2025-38125, CVE-2025-38092,     CVE-2025-38149, CVE-2025-38287, CVE-2025-38057, CVE-2025-38307, CVE-2025-38037, CVE-2025-38162,     CVE-2025-38141, CVE-2025-38068, CVE-2025-38029, CVE-2025-38101, CVE-2025-38059, CVE-2025-38300,     CVE-2025-38283, CVE-2025-38272, CVE-2025-38042, CVE-2025-38100, CVE-2025-38044, CVE-2025-38284,     CVE-2025-38063, CVE-2025-38043, CVE-2025-38151, CVE-2025-38158, CVE-2025-38168, CVE-2025-38278,     CVE-2025-38166, CVE-2025-38499, CVE-2025-38116, CVE-2025-38128, CVE-2025-38060, CVE-2025-38291,     CVE-2025-38304, CVE-2025-38172, CVE-2025-38052, CVE-2025-38312, CVE-2025-38319, CVE-2025-38136,     CVE-2025-38267, CVE-2025-38154, CVE-2025-38296, CVE-2025-38130, CVE-2025-38097, CVE-2025-38275,     CVE-2025-38106, CVE-2025-38156, CVE-2025-38137, CVE-2025-38153, CVE-2025-38167, CVE-2025-38315,     CVE-2025-38032, CVE-2025-38350, CVE-2025-38173, CVE-2025-38139, CVE-2025-38110, CVE-2025-38318,     CVE-2025-38163, CVE-2025-38058, CVE-2025-38280, CVE-2025-38036, CVE-2025-38041, CVE-2025-38302,     CVE-2025-38038, CVE-2025-38310, CVE-2025-38076, CVE-2025-38164, CVE-2025-38414, CVE-2025-38277,     CVE-2025-38069, CVE-2025-38288, CVE-2025-38165, CVE-2025-38279, CVE-2025-38305, CVE-2025-38054,     CVE-2025-38127, CVE-2025-38055, CVE-2025-38050, CVE-2025-38298, CVE-2025-38109)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7771-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Bluetooth drivers;

    - Bus devices;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - FPGA Framework;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - HW tracing;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Amlogic Meson DDR PMU;

    - NI-700 PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - SPI subsystem;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - USB core drivers;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - Virtio drivers;

    - BTRFS file system;

    - EROFS file system;

    - F2FS file system;

    - File systems infrastructure;

    - Network file systems library;

    - NTFS3 file system;

    - SMB network file system;

    - Codetag library;

    - BPF subsystem;

    - LZO compression library;

    - Mellanox drivers;

    - IPv4 networking;

    - Bluetooth subsystem;

    - Network sockets;

    - XFRM subsystem;

    - Digital Audio (PCM) driver;

    - Tracing infrastructure;

    - io_uring subsystem;

    - Padata parallel execution mechanism;

    - DVFS energy model driver;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Memory management;

    - KASAN memory debugging framework;

    - CAN network layer;

    - Networking core;

    - IPv6 networking;

    - Netfilter;

    - NetLabel subsystem;

    - Open vSwitch;

    - Network traffic control;

    - TIPC protocol;

    - TLS protocol;

    - ALSA framework;

    - sma1307 audio codecs;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - USB sound devices; (CVE-2025-38141, CVE-2025-38039, CVE-2025-38283, CVE-2025-38272, CVE-2025-38290,     CVE-2025-38168, CVE-2025-38134, CVE-2025-38158, CVE-2025-38097, CVE-2025-38078, CVE-2025-38161,     CVE-2025-38116, CVE-2025-38312, CVE-2025-38067, CVE-2025-38129, CVE-2025-38119, CVE-2025-38061,     CVE-2025-38352, CVE-2025-38269, CVE-2025-38163, CVE-2025-38315, CVE-2025-38301, CVE-2025-38115,     CVE-2025-38032, CVE-2025-38127, CVE-2025-38029, CVE-2025-38277, CVE-2025-38075, CVE-2025-38300,     CVE-2025-38059, CVE-2025-38047, CVE-2025-38118, CVE-2025-38038, CVE-2025-38278, CVE-2025-38169,     CVE-2025-38074, CVE-2025-38292, CVE-2025-38295, CVE-2025-38294, CVE-2025-38154, CVE-2025-38165,     CVE-2025-38069, CVE-2025-38120, CVE-2025-38098, CVE-2025-38050, CVE-2025-38068, CVE-2025-38063,     CVE-2025-38034, CVE-2025-38123, CVE-2025-38092, CVE-2025-38103, CVE-2025-38170, CVE-2025-38313,     CVE-2025-38062, CVE-2025-38159, CVE-2025-38147, CVE-2025-38415, CVE-2025-38045, CVE-2025-38279,     CVE-2025-38302, CVE-2025-38162, CVE-2025-38414, CVE-2025-38146, CVE-2025-38035, CVE-2025-38040,     CVE-2025-38073, CVE-2025-38054, CVE-2025-38099, CVE-2025-38291, CVE-2025-38126, CVE-2025-38088,     CVE-2025-38310, CVE-2025-38176, CVE-2025-38102, CVE-2025-38149, CVE-2025-38124, CVE-2025-38003,     CVE-2025-38140, CVE-2025-38100, CVE-2025-38081, CVE-2025-38319, CVE-2025-38142, CVE-2025-38303,     CVE-2025-38155, CVE-2025-38044, CVE-2025-38316, CVE-2025-38052, CVE-2025-38317, CVE-2025-38151,     CVE-2025-38164, CVE-2025-38148, CVE-2025-38082, CVE-2025-38267, CVE-2025-38031, CVE-2025-38132,     CVE-2025-38138, CVE-2025-38125, CVE-2025-38111, CVE-2025-38106, CVE-2025-38287, CVE-2025-38137,     CVE-2025-38117, CVE-2025-38130, CVE-2025-38122, CVE-2025-38058, CVE-2025-38110, CVE-2025-38101,     CVE-2025-38048, CVE-2025-38080, CVE-2025-38304, CVE-2025-38128, CVE-2025-38072, CVE-2025-38265,     CVE-2025-38166, CVE-2025-38131, CVE-2025-38105, CVE-2025-38096, CVE-2025-38275, CVE-2025-38305,     CVE-2025-38156, CVE-2025-38139, CVE-2025-38318, CVE-2025-38136, CVE-2025-38107, CVE-2025-38041,     CVE-2025-38288, CVE-2025-38055, CVE-2025-38033, CVE-2025-38064, CVE-2025-38036, CVE-2025-38077,     CVE-2025-38053, CVE-2025-38112, CVE-2025-38070, CVE-2025-38109, CVE-2025-38143, CVE-2025-38299,     CVE-2025-38051, CVE-2025-38167, CVE-2025-38172, CVE-2025-38057, CVE-2025-38311, CVE-2025-38285,     CVE-2025-38076, CVE-2025-38280, CVE-2025-38157, CVE-2025-38043, CVE-2025-38065, CVE-2025-38289,     CVE-2025-38060, CVE-2025-38274, CVE-2025-38004, CVE-2025-38037, CVE-2025-38282, CVE-2025-38298,     CVE-2025-38293, CVE-2025-38499, CVE-2025-38135, CVE-2025-38173, CVE-2025-38079, CVE-2025-38296,     CVE-2025-38108, CVE-2025-38175, CVE-2025-38066, CVE-2025-38286, CVE-2025-38160, CVE-2025-38498,     CVE-2025-38281, CVE-2025-38268, CVE-2025-38270, CVE-2025-38153, CVE-2025-38042, CVE-2025-38114,     CVE-2025-38284, CVE-2025-38297, CVE-2025-38306, CVE-2025-38071, CVE-2025-38307, CVE-2025-38091,     CVE-2025-38314, CVE-2025-38145, CVE-2025-38113)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6008 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6008-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     September 22, 2025                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2025-21751 CVE-2025-22103 CVE-2025-22113 CVE-2025-22124                      CVE-2025-22125 CVE-2025-23133 CVE-2025-38272 CVE-2025-38306                      CVE-2025-38453 CVE-2025-38502 CVE-2025-38556 CVE-2025-38676                      CVE-2025-38677 CVE-2025-38730 CVE-2025-38732 CVE-2025-38733                      CVE-2025-38734 CVE-2025-38735 CVE-2025-38736 CVE-2025-38737                      CVE-2025-39673 CVE-2025-39675 CVE-2025-39676 CVE-2025-39679                      CVE-2025-39681 CVE-2025-39682 CVE-2025-39683 CVE-2025-39684                      CVE-2025-39685 CVE-2025-39686 CVE-2025-39687 CVE-2025-39689                      CVE-2025-39691 CVE-2025-39692 CVE-2025-39693 CVE-2025-39694                      CVE-2025-39695 CVE-2025-39697 CVE-2025-39698 CVE-2025-39700                      CVE-2025-39701 CVE-2025-39702 CVE-2025-39703 CVE-2025-39705                      CVE-2025-39706 CVE-2025-39707 CVE-2025-39709 CVE-2025-39710                      CVE-2025-39711 CVE-2025-39712 CVE-2025-39713 CVE-2025-39714                      CVE-2025-39715 CVE-2025-39716 CVE-2025-39718 CVE-2025-39719                      CVE-2025-39720 CVE-2025-39721 CVE-2025-39722 CVE-2025-39723                      CVE-2025-39724 CVE-2025-39759 CVE-2025-39765 CVE-2025-39766                      CVE-2025-39767 CVE-2025-39770 CVE-2025-39772 CVE-2025-39773                      CVE-2025-39776 CVE-2025-39779 CVE-2025-39780 CVE-2025-39781                      CVE-2025-39782 CVE-2025-39783 CVE-2025-39787 CVE-2025-39788                      CVE-2025-39790 CVE-2025-39791 CVE-2025-39800 CVE-2025-39801                      CVE-2025-39805 CVE-2025-39806 CVE-2025-39807 CVE-2025-39808                      CVE-2025-39810 CVE-2025-39811 CVE-2025-39812 CVE-2025-39813                      CVE-2025-39815 CVE-2025-39817 CVE-2025-39819 CVE-2025-39823                      CVE-2025-39824 CVE-2025-39825 CVE-2025-39826 CVE-2025-39827                      CVE-2025-39828 CVE-2025-39829 CVE-2025-39831 CVE-2025-39832                      CVE-2025-39835 CVE-2025-39836 CVE-2025-39838 CVE-2025-39839                      CVE-2025-39841 CVE-2025-39842 CVE-2025-39843 CVE-2025-39844                      CVE-2025-39845 CVE-2025-39846 CVE-2025-39847 CVE-2025-39848                      CVE-2025-39849 CVE-2025-39850 CVE-2025-39851 CVE-2025-39852                      CVE-2025-39853 CVE-2025-39854 CVE-2025-39857 CVE-2025-39860                      CVE-2025-39861 CVE-2025-39863 CVE-2025-39864 CVE-2025-39865                      CVE-2025-39866 CVE-2025-40300

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.48-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of     has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an     oopsable race... The rest of the callers are safe since they are holding namespace_sem and are guaranteed     a positive refcount on the mount in question. Rename the current has_locked_children() to
    __has_locked_children(), make it static and switch the fs/namespace.c users to it. Make     has_locked_children() a wrapper for __has_locked_children(), calling the latter under     read_seqlock_excl(&mount_lock). (CVE-2025-38306)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1145 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (CVE-2025-22115)

    In the Linux kernel, the following vulnerability has been resolved:

    ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd (CVE-2025-37906)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (CVE-2025-37984)

    In the Linux kernel, the following vulnerability has been resolved:

    rseq: Fix segfault on registration when rseq_cs is non-zero (CVE-2025-38067)

    In the Linux kernel, the following vulnerability has been resolved:

    bridge: mcast: Fix use-after-free during router port configuration (CVE-2025-38248)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/fhandle.c: fix a race in call of has_locked_children() (CVE-2025-38306)

    In the Linux kernel, the following vulnerability has been resolved:

    eventpoll: don't decrement ep refcount while still holding the ep mutex (CVE-2025-38349)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Fix race between DIM disable and net_dim() (CVE-2025-38440)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: fix uaf in nbd_genl_connect() error path (CVE-2025-38443)

    In the Linux kernel, the following vulnerability has been resolved:

    raid10: cleanup memleak at raid10_make_request (CVE-2025-38444)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid1: Fix stack memory use after return in raid1_reshape (CVE-2025-38445)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)

    In the Linux kernel, the following vulnerability has been resolved:

    md/md-bitmap: fix GPF in bitmap_get_stats() (CVE-2025-38451)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (CVE-2025-38455)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (CVE-2025-38456)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Abort __tc_modify_qdisc if parent class does not exist (CVE-2025-38457)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: Fix transport_* TOCTOU (CVE-2025-38461)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: Fix transport_{g2h,h2g} TOCTOU (CVE-2025-38462)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: Correct signedness in skb remaining space calculation (CVE-2025-38463)

    In the Linux kernel, the following vulnerability has been resolved:

    netlink: Fix wraparounds of sk->sk_rmem_alloc. (CVE-2025-38465)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes (CVE-2025-38466)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CVE-2025-38468)

    In the Linux kernel, the following vulnerability has been resolved:

    net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470)

    In the Linux kernel, the following vulnerability has been resolved:

    tls: always refresh the queue when reading sock (CVE-2025-38471)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CVE-2025-38472)

    In the Linux kernel, the following vulnerability has been resolved:

    smc: Fix various oops due to inet_sock type confusion. (CVE-2025-38475)

    In the Linux kernel, the following vulnerability has been resolved:

    rpl: Fix use-after-free in rpl_do_srh_inline(). (CVE-2025-38476)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sch_qfq: Fix race condition on qfq_aggregate (CVE-2025-38477)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix use-after-free in crypt_message when using async crypto (CVE-2025-38488)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: make fallback action and fallback decision atomic (CVE-2025-38491)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing/osnoise: Fix crash in timerlat_dump_stack() (CVE-2025-38493)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: core: do not bypass hid_hw_raw_request (CVE-2025-38494)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: core: ensure the allocated report buffer can contain the reserved report ID (CVE-2025-38495)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-bufio: fix sched in atomic context (CVE-2025-38496)

    In the Linux kernel, the following vulnerability has been resolved:

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix assertion when building free space tree (CVE-2025-38503)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: Allow CPU to reschedule while setting per-page memory attributes (CVE-2025-38506)

    In the Linux kernel, the following vulnerability has been resolved:

    lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users() (CVE-2025-38517)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Reject %p% format string in bprintf-like helpers (CVE-2025-38528)

    In the Linux kernel, the following vulnerability has been resolved:

    net: phy: Don't register LEDs for genphy (CVE-2025-38537)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Add down_write(trace_event_sem) when adding trace event (CVE-2025-38539)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (CVE-2025-38540)

    In the Linux kernel, the following vulnerability has been resolved:

    efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (CVE-2025-38549)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (CVE-2025-38550)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio-net: fix recursived rtnl_lock() during probe() (CVE-2025-38551)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: plug races between subflow fail and subflow creation (CVE-2025-38552)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
266397	Ubuntu 24.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7789-1)	Nessus	Ubuntu Local Security Checks	high
266320	CentOS 9 : kernel-5.14.0-620.el9	Nessus	CentOS Local Security Checks	medium
265934	Ubuntu 24.04 LTS / 25.04 : Linux kernel vulnerabilities (USN-7769-1)	Nessus	Ubuntu Local Security Checks	high
265928	Ubuntu 25.04 : Linux kernel (Azure) vulnerabilities (USN-7770-1)	Nessus	Ubuntu Local Security Checks	high
265926	Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7771-1)	Nessus	Ubuntu Local Security Checks	high
265710	Debian dsa-6008 : ata-modules-6.12.31-armmp-di - security update	Nessus	Debian Local Security Checks	high
249545	Linux Distros Unpatched Vulnerability : CVE-2025-38306	Nessus	Misc.	medium
246922	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2025-1145)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2025-38306

high

Tenable Plugins

high

medium

high

high

high

high

medium

high