In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parse_server_interfaces() (see below): BUG: KASAN: slab-out-of-bounds in parse_server_interfaces+0x14ee/0x1880 [cifs] Read of size 4 at addr ffff8881433dba98 by task mount/9827 CPU: 5 UID: 0 PID: 9827 Comm: mount Tainted: G OE 6.16.0-rc2-kasan #2 PREEMPT(voluntary) Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: Dell Inc. Precision Tower 3620/0MWYPT, BIOS 2.13.1 06/14/2019 Call Trace: <TASK> dump_stack_lvl+0x9f/0xf0 print_report+0xd1/0x670 __virt_addr_valid+0x22c/0x430 ? parse_server_interfaces+0x14ee/0x1880 [cifs] ? kasan_complete_mode_report_info+0x2a/0x1f0 ? parse_server_interfaces+0x14ee/0x1880 [cifs] kasan_report+0xd6/0x110 parse_server_interfaces+0x14ee/0x1880 [cifs] __asan_report_load_n_noabort+0x13/0x20 parse_server_interfaces+0x14ee/0x1880 [cifs] ? __pfx_parse_server_interfaces+0x10/0x10 [cifs] ? trace_hardirqs_on+0x51/0x60 SMB3_request_interfaces+0x1ad/0x3f0 [cifs] ? __pfx_SMB3_request_interfaces+0x10/0x10 [cifs] ? SMB2_tcon+0x23c/0x15d0 [cifs] smb3_qfs_tcon+0x173/0x2b0 [cifs] ? __pfx_smb3_qfs_tcon+0x10/0x10 [cifs] ? cifs_get_tcon+0x105d/0x2120 [cifs] ? do_raw_spin_unlock+0x5d/0x200 ? cifs_get_tcon+0x105d/0x2120 [cifs] ? __pfx_smb3_qfs_tcon+0x10/0x10 [cifs] cifs_mount_get_tcon+0x369/0xb90 [cifs] ? dfs_cache_find+0xe7/0x150 [cifs] dfs_mount_share+0x985/0x2970 [cifs] ? check_path.constprop.0+0x28/0x50 ? save_trace+0x54/0x370 ? __pfx_dfs_mount_share+0x10/0x10 [cifs] ? __lock_acquire+0xb82/0x2ba0 ? __kasan_check_write+0x18/0x20 cifs_mount+0xbc/0x9e0 [cifs] ? __pfx_cifs_mount+0x10/0x10 [cifs] ? do_raw_spin_unlock+0x5d/0x200 ? cifs_setup_cifs_sb+0x29d/0x810 [cifs] cifs_smb3_do_mount+0x263/0x1990 [cifs]

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8031-1 advisory.

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with     hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

    Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Kpf, Stavros Volos, and Flavien Solt discovered     that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting     in the leakage of privileged information. A local attacker could possibly use this to expose sensitive     information. (CVE-2024-36350, CVE-2024-36357)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - MIPS architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - ATM drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - DRBD Distributed Replicated Block Device drivers;

    - Network block device driver;

    - Ublk userspace block driver;

    - Bluetooth drivers;

    - Bus devices;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - Device frequency scaling framework;

    - Buffer Sharing and Synchronization framework;

    - DMA engine subsystem;

    - EDAC drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - ARM SCMI message protocol;

    - FPGA Framework;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - HW tracing;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Miscellaneous) drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - MCB driver;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - Microchip PCI driver;

    - Intel Management Engine Interface driver;

    - PCI Endpoint Test driver;

    - TI TPS6594 PFSM driver;

    - VMware VMCI Driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - PCI subsystem;

    - Amlogic Meson DDR PMU;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Powercap sysfs driver;

    - PTP clock framework;

    - PWM drivers;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - QCOM SoC drivers;

    - Samsung SoC drivers;

    - SPI subsystem;

    - small TFT LCD display modules;

    - Media staging drivers;

    - TCM subsystem;

    - Trusted Execution Environment drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - Cadence USB3 driver;

    - ChipIdea USB driver;

    - USB Device Class drivers;

    - USB core drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C support driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - TSM Common Guest driver;

    - Virtio drivers;

    - Xen hypervisor drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - EFI Variable file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - SMB network file system;

    - DRM display driver;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - BPF subsystem;

    - Memory Management;

    - Internal shared memory driver;

    - LZO compression library;

    - Mellanox drivers;

    - padata parallel execution mechanism;

    - Networking subsytem;

    - Bluetooth subsystem;

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - Network sockets;

    - UDP network protocol;

    - eXpress Data Path;

    - XFRM subsystem;

    - Digital Audio (PCM) driver;

    - Universal MIDI packet (UMP) support module;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - io_uring subsystem;

    - IPC subsystem;

    - Perf events;

    - Kernel exit() syscall;

    - IRQ subsystem;

    - Padata parallel execution mechanism;

    - Kernel command line parsing driver;

    - Hibernation control;

    - RCU subsystem;

    - Restartable seuqences system call mechanism;

    - Maple Tree data structure library;

    - Memory management;

    - KASAN memory debugging framework;

    - 802.1Q VLAN protocol;

    - 9P file system network protocol;

    - Appletalk network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Management Component Transport Protocol (MCTP);

    - MultiProtocol Label Switching driver;

    - Multipath TCP;

    - NetLabel subsystem;

    - Netlink;

    - NFC subsystem;

    - Open vSwitch;

    - RDS protocol;

    - Rose network layer;

    - RxRPC session sockets;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - ALSA framework;

    - WCD audio codecs;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - USB sound devices;

    - Virtio sound driver;

    - CPU Power monitoring subsystem;

    - KVM subsystem; (CVE-2025-21884, CVE-2025-21931, CVE-2025-22026, CVE-2025-22101, CVE-2025-22102,     CVE-2025-22115, CVE-2025-22120, CVE-2025-22126, CVE-2025-22128, CVE-2025-23140, CVE-2025-23141,     CVE-2025-23142, CVE-2025-23144, CVE-2025-23145, CVE-2025-23146, CVE-2025-23147, CVE-2025-23148,     CVE-2025-23149, CVE-2025-23150, CVE-2025-23151, CVE-2025-23155, CVE-2025-23156, CVE-2025-23157,     CVE-2025-23158, CVE-2025-23159, CVE-2025-23160, CVE-2025-23161, CVE-2025-23163, CVE-2025-37738,     CVE-2025-37739, CVE-2025-37740, CVE-2025-37741, CVE-2025-37742, CVE-2025-37744, CVE-2025-37745,     CVE-2025-37748, CVE-2025-37749, CVE-2025-37754, CVE-2025-37755, CVE-2025-37757, CVE-2025-37758,     CVE-2025-37759, CVE-2025-37761, CVE-2025-37763, CVE-2025-37764, CVE-2025-37765, CVE-2025-37766,     CVE-2025-37767, CVE-2025-37768, CVE-2025-37769, CVE-2025-37770, CVE-2025-37771, CVE-2025-37772,     CVE-2025-37773, CVE-2025-37775, CVE-2025-37777, CVE-2025-37778, CVE-2025-37780, CVE-2025-37781,     CVE-2025-37784, CVE-2025-37786, CVE-2025-37787, CVE-2025-37788, CVE-2025-37789, CVE-2025-37790,     CVE-2025-37792, CVE-2025-37793, CVE-2025-37794, CVE-2025-37796, CVE-2025-37799, CVE-2025-37800,     CVE-2025-37801, CVE-2025-37803, CVE-2025-37805, CVE-2025-37808, CVE-2025-37809, CVE-2025-37810,     CVE-2025-37811, CVE-2025-37812, CVE-2025-37813, CVE-2025-37815, CVE-2025-37816, CVE-2025-37817,     CVE-2025-37819, CVE-2025-37820, CVE-2025-37822, CVE-2025-37823, CVE-2025-37824, CVE-2025-37826,     CVE-2025-37827, CVE-2025-37828, CVE-2025-37829, CVE-2025-37830, CVE-2025-37831, CVE-2025-37836,     CVE-2025-37839, CVE-2025-37840, CVE-2025-37841, CVE-2025-37842, CVE-2025-37844, CVE-2025-37846,     CVE-2025-37849, CVE-2025-37850, CVE-2025-37851, CVE-2025-37852, CVE-2025-37853, CVE-2025-37854,     CVE-2025-37856, CVE-2025-37857, CVE-2025-37858, CVE-2025-37859, CVE-2025-37861, CVE-2025-37862,     CVE-2025-37863, CVE-2025-37864, CVE-2025-37865, CVE-2025-37867, CVE-2025-37869, CVE-2025-37871,     CVE-2025-37872, CVE-2025-37873, CVE-2025-37874, CVE-2025-37875, CVE-2025-37878, CVE-2025-37879,     CVE-2025-37881, CVE-2025-37883, CVE-2025-37884, CVE-2025-37885, CVE-2025-37886, CVE-2025-37887,     CVE-2025-37891, CVE-2025-37892, CVE-2025-37897, CVE-2025-37900, CVE-2025-37901, CVE-2025-37903,     CVE-2025-37905, CVE-2025-37909, CVE-2025-37911, CVE-2025-37912, CVE-2025-37913, CVE-2025-37914,     CVE-2025-37915, CVE-2025-37916, CVE-2025-37917, CVE-2025-37918, CVE-2025-37920, CVE-2025-37921,     CVE-2025-37922, CVE-2025-37923, CVE-2025-37924, CVE-2025-37925, CVE-2025-37927, CVE-2025-37928,     CVE-2025-37930, CVE-2025-37931, CVE-2025-37933, CVE-2025-37935, CVE-2025-37936, CVE-2025-37938,     CVE-2025-37940, CVE-2025-37943, CVE-2025-37944, CVE-2025-37945, CVE-2025-37947, CVE-2025-37948,     CVE-2025-37949, CVE-2025-37951, CVE-2025-37952, CVE-2025-37954, CVE-2025-37956, CVE-2025-37957,     CVE-2025-37959, CVE-2025-37960, CVE-2025-37961, CVE-2025-37962, CVE-2025-37963, CVE-2025-37967,     CVE-2025-37968, CVE-2025-37969, CVE-2025-37970, CVE-2025-37972, CVE-2025-37973, CVE-2025-37975,     CVE-2025-37977, CVE-2025-37978, CVE-2025-37979, CVE-2025-37980, CVE-2025-37982, CVE-2025-37983,     CVE-2025-37984, CVE-2025-37985, CVE-2025-37986, CVE-2025-37987, CVE-2025-37988, CVE-2025-37989,     CVE-2025-37990, CVE-2025-37991, CVE-2025-37992, CVE-2025-37994, CVE-2025-37995, CVE-2025-37998,     CVE-2025-38003, CVE-2025-38004, CVE-2025-38005, CVE-2025-38006, CVE-2025-38007, CVE-2025-38008,     CVE-2025-38009, CVE-2025-38010, CVE-2025-38011, CVE-2025-38013, CVE-2025-38014, CVE-2025-38015,     CVE-2025-38018, CVE-2025-38019, CVE-2025-38020, CVE-2025-38023, CVE-2025-38024, CVE-2025-38027,     CVE-2025-38031, CVE-2025-38034, CVE-2025-38035, CVE-2025-38037, CVE-2025-38039, CVE-2025-38040,     CVE-2025-38043, CVE-2025-38044, CVE-2025-38045, CVE-2025-38048, CVE-2025-38051, CVE-2025-38052,     CVE-2025-38053, CVE-2025-38055, CVE-2025-38057, CVE-2025-38058, CVE-2025-38059, CVE-2025-38060,     CVE-2025-38061, CVE-2025-38062, CVE-2025-38063, CVE-2025-38065, CVE-2025-38066, CVE-2025-38067,     CVE-2025-38068, CVE-2025-38071, CVE-2025-38072, CVE-2025-38074, CVE-2025-38075, CVE-2025-38077,     CVE-2025-38078, CVE-2025-38079, CVE-2025-38080, CVE-2025-38081, CVE-2025-38084, CVE-2025-38085,     CVE-2025-38086, CVE-2025-38087, CVE-2025-38088, CVE-2025-38089, CVE-2025-38090, CVE-2025-38094,     CVE-2025-38095, CVE-2025-38097, CVE-2025-38098, CVE-2025-38099, CVE-2025-38100, CVE-2025-38101,     CVE-2025-38102, CVE-2025-38103, CVE-2025-38104, CVE-2025-38107, CVE-2025-38108, CVE-2025-38109,     CVE-2025-38110, CVE-2025-38111, CVE-2025-38112, CVE-2025-38113, CVE-2025-38115, CVE-2025-38117,     CVE-2025-38119, CVE-2025-38120, CVE-2025-38122, CVE-2025-38123, CVE-2025-38124, CVE-2025-38125,     CVE-2025-38126, CVE-2025-38127, CVE-2025-38129, CVE-2025-38131, CVE-2025-38135, CVE-2025-38136,     CVE-2025-38138, CVE-2025-38142, CVE-2025-38143, CVE-2025-38145, CVE-2025-38146, CVE-2025-38147,     CVE-2025-38148, CVE-2025-38149, CVE-2025-38153, CVE-2025-38154, CVE-2025-38155, CVE-2025-38156,     CVE-2025-38157, CVE-2025-38158, CVE-2025-38159, CVE-2025-38160, CVE-2025-38161, CVE-2025-38162,     CVE-2025-38163, CVE-2025-38164, CVE-2025-38165, CVE-2025-38166, CVE-2025-38167, CVE-2025-38169,     CVE-2025-38170, CVE-2025-38173, CVE-2025-38174, CVE-2025-38180, CVE-2025-38181, CVE-2025-38182,     CVE-2025-38183, CVE-2025-38184, CVE-2025-38185, CVE-2025-38190, CVE-2025-38191, CVE-2025-38192,     CVE-2025-38193, CVE-2025-38194, CVE-2025-38197, CVE-2025-38198, CVE-2025-38200, CVE-2025-38202,     CVE-2025-38208, CVE-2025-38210, CVE-2025-38211, CVE-2025-38212, CVE-2025-38214, CVE-2025-38215,     CVE-2025-38217, CVE-2025-38218, CVE-2025-38219, CVE-2025-38220, CVE-2025-38222, CVE-2025-38225,     CVE-2025-38226, CVE-2025-38229, CVE-2025-38230, CVE-2025-38231, CVE-2025-38232, CVE-2025-38236,     CVE-2025-38239, CVE-2025-38244, CVE-2025-38245, CVE-2025-38246, CVE-2025-38248, CVE-2025-38249,     CVE-2025-38250, CVE-2025-38251, CVE-2025-38253, CVE-2025-38255, CVE-2025-38257, CVE-2025-38258,     CVE-2025-38259, CVE-2025-38260, CVE-2025-38262, CVE-2025-38263, CVE-2025-38264, CVE-2025-38265,     CVE-2025-38269, CVE-2025-38274, CVE-2025-38275, CVE-2025-38277, CVE-2025-38278, CVE-2025-38279,     CVE-2025-38280, CVE-2025-38282, CVE-2025-38283, CVE-2025-38285, CVE-2025-38286, CVE-2025-38289,     CVE-2025-38290, CVE-2025-38292, CVE-2025-38293, CVE-2025-38295, CVE-2025-38298, CVE-2025-38299,     CVE-2025-38300, CVE-2025-38303, CVE-2025-38304, CVE-2025-38305, CVE-2025-38307, CVE-2025-38310,     CVE-2025-38312, CVE-2025-38313, CVE-2025-38319, CVE-2025-38320, CVE-2025-38321, CVE-2025-38322,     CVE-2025-38323, CVE-2025-38324, CVE-2025-38326, CVE-2025-38328, CVE-2025-38331, CVE-2025-38332,     CVE-2025-38333, CVE-2025-38334, CVE-2025-38335, CVE-2025-38336, CVE-2025-38337, CVE-2025-38338,     CVE-2025-38342, CVE-2025-38343, CVE-2025-38344, CVE-2025-38345, CVE-2025-38346, CVE-2025-38347,     CVE-2025-38348, CVE-2025-38349, CVE-2025-38351, CVE-2025-38354, CVE-2025-38361, CVE-2025-38362,     CVE-2025-38363, CVE-2025-38364, CVE-2025-38365, CVE-2025-38368, CVE-2025-38369, CVE-2025-38371,     CVE-2025-38373, CVE-2025-38374, CVE-2025-38375, CVE-2025-38376, CVE-2025-38377, CVE-2025-38382,     CVE-2025-38384, CVE-2025-38385, CVE-2025-38386, CVE-2025-38387, CVE-2025-38388, CVE-2025-38389,     CVE-2025-38390, CVE-2025-38391, CVE-2025-38392, CVE-2025-38393, CVE-2025-38395, CVE-2025-38396,     CVE-2025-38399, CVE-2025-38400, CVE-2025-38401, CVE-2025-38402, CVE-2025-38403, CVE-2025-38405,     CVE-2025-38406, CVE-2025-38407, CVE-2025-38408, CVE-2025-38409, CVE-2025-38410, CVE-2025-38412,     CVE-2025-38414, CVE-2025-38415, CVE-2025-38416, CVE-2025-38418, CVE-2025-38419, CVE-2025-38420,     CVE-2025-38422, CVE-2025-38424, CVE-2025-38427, CVE-2025-38428, CVE-2025-38429, CVE-2025-38430,     CVE-2025-38436, CVE-2025-38437, CVE-2025-38439, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444,     CVE-2025-38445, CVE-2025-38448, CVE-2025-38449, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457,     CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463,     CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469,     CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476,     CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38485,     CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38493,     CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38499, CVE-2025-38501,     CVE-2025-38503, CVE-2025-38506, CVE-2025-38507, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512,     CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38520, CVE-2025-38521,     CVE-2025-38524, CVE-2025-38526, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530,     CVE-2025-38531, CVE-2025-38532, CVE-2025-38533, CVE-2025-38535, CVE-2025-38537, CVE-2025-38538,     CVE-2025-38539, CVE-2025-38540, CVE-2025-38542, CVE-2025-38543, CVE-2025-38544, CVE-2025-38546,     CVE-2025-38548, CVE-2025-38549, CVE-2025-38550, CVE-2025-38551, CVE-2025-38552, CVE-2025-38553,     CVE-2025-38555, CVE-2025-38560, CVE-2025-38562, CVE-2025-38566, CVE-2025-38568, CVE-2025-38569,     CVE-2025-38571, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578,     CVE-2025-38579, CVE-2025-38581, CVE-2025-38582, CVE-2025-38583, CVE-2025-38584, CVE-2025-38585,     CVE-2025-38587, CVE-2025-38588, CVE-2025-38590, CVE-2025-38593, CVE-2025-38595, CVE-2025-38601,     CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38610, CVE-2025-38612,     CVE-2025-38614, CVE-2025-38615, CVE-2025-38619, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624,     CVE-2025-38625, CVE-2025-38626, CVE-2025-38630, CVE-2025-38632, CVE-2025-38634, CVE-2025-38635,     CVE-2025-38639, CVE-2025-38640, CVE-2025-38644, CVE-2025-38645, CVE-2025-38646, CVE-2025-38648,     CVE-2025-38650, CVE-2025-38652, CVE-2025-38653, CVE-2025-38659, CVE-2025-38660, CVE-2025-38663,     CVE-2025-38664, CVE-2025-38665, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671, CVE-2025-38675,     CVE-2025-38676, CVE-2025-38677, CVE-2025-38679, CVE-2025-38680, CVE-2025-38681, CVE-2025-38683,     CVE-2025-38684, CVE-2025-38685, CVE-2025-38686, CVE-2025-38687, CVE-2025-38688, CVE-2025-38691,     CVE-2025-38692, CVE-2025-38693, CVE-2025-38694, CVE-2025-38695, CVE-2025-38696, CVE-2025-38697,     CVE-2025-38698, CVE-2025-38699, CVE-2025-38700, CVE-2025-38701, CVE-2025-38702, CVE-2025-38703,     CVE-2025-38704, CVE-2025-38705, CVE-2025-38706, CVE-2025-38707, CVE-2025-38708, CVE-2025-38710,     CVE-2025-38711, CVE-2025-38712, CVE-2025-38713, CVE-2025-38714, CVE-2025-38715, CVE-2025-38716,     CVE-2025-38718, CVE-2025-38721, CVE-2025-38722, CVE-2025-38724, CVE-2025-38725, CVE-2025-38728,     CVE-2025-38729, CVE-2025-38730, CVE-2025-38732, CVE-2025-38734, CVE-2025-38735, CVE-2025-39673,     CVE-2025-39675, CVE-2025-39676, CVE-2025-39679, CVE-2025-39681, CVE-2025-39683, CVE-2025-39684,     CVE-2025-39685, CVE-2025-39686, CVE-2025-39687, CVE-2025-39689, CVE-2025-39691, CVE-2025-39692,     CVE-2025-39693, CVE-2025-39694, CVE-2025-39701, CVE-2025-39702, CVE-2025-39703, CVE-2025-39705,     CVE-2025-39706, CVE-2025-39707, CVE-2025-39709, CVE-2025-39710, CVE-2025-39711, CVE-2025-39712,     CVE-2025-39713, CVE-2025-39714, CVE-2025-39715, CVE-2025-39716, CVE-2025-39718, CVE-2025-39719,     CVE-2025-39720, CVE-2025-39721, CVE-2025-39724, CVE-2025-39726, CVE-2025-39730, CVE-2025-39731,     CVE-2025-39732, CVE-2025-39734, CVE-2025-39736, CVE-2025-39737, CVE-2025-39738, CVE-2025-39739,     CVE-2025-39742, CVE-2025-39743, CVE-2025-39744, CVE-2025-39746, CVE-2025-39747, CVE-2025-39748,     CVE-2025-39749, CVE-2025-39750, CVE-2025-39752, CVE-2025-39753, CVE-2025-39756, CVE-2025-39757,     CVE-2025-39758, CVE-2025-39759, CVE-2025-39760, CVE-2025-39761, CVE-2025-39763, CVE-2025-39766,     CVE-2025-39770, CVE-2025-39772, CVE-2025-39773, CVE-2025-39776, CVE-2025-39779, CVE-2025-39781,     CVE-2025-39782, CVE-2025-39783, CVE-2025-39787, CVE-2025-39788, CVE-2025-39790, CVE-2025-39794,     CVE-2025-39795, CVE-2025-39797, CVE-2025-39798, CVE-2025-39800, CVE-2025-39801, CVE-2025-39889,     CVE-2025-39890, CVE-2025-39946, CVE-2025-39989, CVE-2025-40215, CVE-2025-40297, CVE-2025-68750)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8028-1 advisory.

    It was discovered that improper initialization of CPU cache memory could allow a local attacker with     hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

    Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Kpf, Stavros Volos, and Flavien Solt discovered     that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting     in the leakage of privileged information. A local attacker could possibly use this to expose sensitive     information. (CVE-2024-36350, CVE-2024-36357)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - MIPS architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - ATM drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - DRBD Distributed Replicated Block Device drivers;

    - Network block device driver;

    - Ublk userspace block driver;

    - Bluetooth drivers;

    - Bus devices;

    - Character device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - Device frequency scaling framework;

    - Buffer Sharing and Synchronization framework;

    - DMA engine subsystem;

    - EDAC drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - ARM SCMI message protocol;

    - FPGA Framework;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - HW tracing;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Miscellaneous) drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - MCB driver;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - Microchip PCI driver;

    - Intel Management Engine Interface driver;

    - PCI Endpoint Test driver;

    - TI TPS6594 PFSM driver;

    - VMware VMCI Driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - PCI subsystem;

    - Amlogic Meson DDR PMU;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Powercap sysfs driver;

    - PTP clock framework;

    - PWM drivers;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - QCOM SoC drivers;

    - Samsung SoC drivers;

    - SPI subsystem;

    - small TFT LCD display modules;

    - Media staging drivers;

    - TCM subsystem;

    - Trusted Execution Environment drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - Cadence USB3 driver;

    - ChipIdea USB driver;

    - USB Device Class drivers;

    - USB core drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C support driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - TSM Common Guest driver;

    - Virtio drivers;

    - Xen hypervisor drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - EFI Variable file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - SMB network file system;

    - DRM display driver;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - BPF subsystem;

    - Memory Management;

    - Internal shared memory driver;

    - LZO compression library;

    - Mellanox drivers;

    - padata parallel execution mechanism;

    - Networking subsytem;

    - Bluetooth subsystem;

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - Network sockets;

    - UDP network protocol;

    - eXpress Data Path;

    - XFRM subsystem;

    - Digital Audio (PCM) driver;

    - Universal MIDI packet (UMP) support module;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - io_uring subsystem;

    - IPC subsystem;

    - Perf events;

    - Kernel exit() syscall;

    - IRQ subsystem;

    - Padata parallel execution mechanism;

    - Kernel command line parsing driver;

    - Hibernation control;

    - RCU subsystem;

    - Restartable seuqences system call mechanism;

    - Maple Tree data structure library;

    - Memory management;

    - KASAN memory debugging framework;

    - 802.1Q VLAN protocol;

    - 9P file system network protocol;

    - Appletalk network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Management Component Transport Protocol (MCTP);

    - MultiProtocol Label Switching driver;

    - Multipath TCP;

    - NetLabel subsystem;

    - Netlink;

    - NFC subsystem;

    - Open vSwitch;

    - RDS protocol;

    - Rose network layer;

    - RxRPC session sockets;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - ALSA framework;

    - WCD audio codecs;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - USB sound devices;

    - Virtio sound driver;

    - CPU Power monitoring subsystem;

    - KVM subsystem; (CVE-2025-21884, CVE-2025-21931, CVE-2025-22026, CVE-2025-22101, CVE-2025-22102,     CVE-2025-22115, CVE-2025-22120, CVE-2025-22126, CVE-2025-22128, CVE-2025-23140, CVE-2025-23141,     CVE-2025-23142, CVE-2025-23144, CVE-2025-23145, CVE-2025-23146, CVE-2025-23147, CVE-2025-23148,     CVE-2025-23149, CVE-2025-23150, CVE-2025-23151, CVE-2025-23155, CVE-2025-23156, CVE-2025-23157,     CVE-2025-23158, CVE-2025-23159, CVE-2025-23160, CVE-2025-23161, CVE-2025-23163, CVE-2025-37738,     CVE-2025-37739, CVE-2025-37740, CVE-2025-37741, CVE-2025-37742, CVE-2025-37744, CVE-2025-37745,     CVE-2025-37748, CVE-2025-37749, CVE-2025-37754, CVE-2025-37755, CVE-2025-37757, CVE-2025-37758,     CVE-2025-37759, CVE-2025-37761, CVE-2025-37763, CVE-2025-37764, CVE-2025-37765, CVE-2025-37766,     CVE-2025-37767, CVE-2025-37768, CVE-2025-37769, CVE-2025-37770, CVE-2025-37771, CVE-2025-37772,     CVE-2025-37773, CVE-2025-37775, CVE-2025-37777, CVE-2025-37778, CVE-2025-37780, CVE-2025-37781,     CVE-2025-37784, CVE-2025-37786, CVE-2025-37787, CVE-2025-37788, CVE-2025-37789, CVE-2025-37790,     CVE-2025-37792, CVE-2025-37793, CVE-2025-37794, CVE-2025-37796, CVE-2025-37799, CVE-2025-37800,     CVE-2025-37801, CVE-2025-37803, CVE-2025-37805, CVE-2025-37808, CVE-2025-37809, CVE-2025-37810,     CVE-2025-37811, CVE-2025-37812, CVE-2025-37813, CVE-2025-37815, CVE-2025-37816, CVE-2025-37817,     CVE-2025-37819, CVE-2025-37820, CVE-2025-37822, CVE-2025-37823, CVE-2025-37824, CVE-2025-37826,     CVE-2025-37827, CVE-2025-37828, CVE-2025-37829, CVE-2025-37830, CVE-2025-37831, CVE-2025-37836,     CVE-2025-37839, CVE-2025-37840, CVE-2025-37841, CVE-2025-37842, CVE-2025-37844, CVE-2025-37846,     CVE-2025-37849, CVE-2025-37850, CVE-2025-37851, CVE-2025-37852, CVE-2025-37853, CVE-2025-37854,     CVE-2025-37856, CVE-2025-37857, CVE-2025-37858, CVE-2025-37859, CVE-2025-37861, CVE-2025-37862,     CVE-2025-37863, CVE-2025-37864, CVE-2025-37865, CVE-2025-37867, CVE-2025-37869, CVE-2025-37871,     CVE-2025-37872, CVE-2025-37873, CVE-2025-37874, CVE-2025-37875, CVE-2025-37878, CVE-2025-37879,     CVE-2025-37881, CVE-2025-37883, CVE-2025-37884, CVE-2025-37885, CVE-2025-37886, CVE-2025-37887,     CVE-2025-37891, CVE-2025-37892, CVE-2025-37897, CVE-2025-37900, CVE-2025-37901, CVE-2025-37903,     CVE-2025-37905, CVE-2025-37909, CVE-2025-37911, CVE-2025-37912, CVE-2025-37913, CVE-2025-37914,     CVE-2025-37915, CVE-2025-37916, CVE-2025-37917, CVE-2025-37918, CVE-2025-37920, CVE-2025-37921,     CVE-2025-37922, CVE-2025-37923, CVE-2025-37924, CVE-2025-37925, CVE-2025-37927, CVE-2025-37928,     CVE-2025-37930, CVE-2025-37931, CVE-2025-37933, CVE-2025-37935, CVE-2025-37936, CVE-2025-37938,     CVE-2025-37940, CVE-2025-37943, CVE-2025-37944, CVE-2025-37945, CVE-2025-37947, CVE-2025-37948,     CVE-2025-37949, CVE-2025-37951, CVE-2025-37952, CVE-2025-37954, CVE-2025-37956, CVE-2025-37957,     CVE-2025-37959, CVE-2025-37960, CVE-2025-37961, CVE-2025-37962, CVE-2025-37963, CVE-2025-37967,     CVE-2025-37968, CVE-2025-37969, CVE-2025-37970, CVE-2025-37972, CVE-2025-37973, CVE-2025-37975,     CVE-2025-37977, CVE-2025-37978, CVE-2025-37979, CVE-2025-37980, CVE-2025-37982, CVE-2025-37983,     CVE-2025-37984, CVE-2025-37985, CVE-2025-37986, CVE-2025-37987, CVE-2025-37988, CVE-2025-37989,     CVE-2025-37990, CVE-2025-37991, CVE-2025-37992, CVE-2025-37994, CVE-2025-37995, CVE-2025-37998,     CVE-2025-38003, CVE-2025-38004, CVE-2025-38005, CVE-2025-38006, CVE-2025-38007, CVE-2025-38008,     CVE-2025-38009, CVE-2025-38010, CVE-2025-38011, CVE-2025-38013, CVE-2025-38014, CVE-2025-38015,     CVE-2025-38018, CVE-2025-38019, CVE-2025-38020, CVE-2025-38023, CVE-2025-38024, CVE-2025-38027,     CVE-2025-38031, CVE-2025-38034, CVE-2025-38035, CVE-2025-38037, CVE-2025-38039, CVE-2025-38040,     CVE-2025-38043, CVE-2025-38044, CVE-2025-38045, CVE-2025-38048, CVE-2025-38051, CVE-2025-38052,     CVE-2025-38053, CVE-2025-38055, CVE-2025-38057, CVE-2025-38058, CVE-2025-38059, CVE-2025-38060,     CVE-2025-38061, CVE-2025-38062, CVE-2025-38063, CVE-2025-38065, CVE-2025-38066, CVE-2025-38067,     CVE-2025-38068, CVE-2025-38071, CVE-2025-38072, CVE-2025-38074, CVE-2025-38075, CVE-2025-38077,     CVE-2025-38078, CVE-2025-38079, CVE-2025-38080, CVE-2025-38081, CVE-2025-38084, CVE-2025-38085,     CVE-2025-38086, CVE-2025-38087, CVE-2025-38088, CVE-2025-38089, CVE-2025-38090, CVE-2025-38094,     CVE-2025-38095, CVE-2025-38097, CVE-2025-38098, CVE-2025-38099, CVE-2025-38100, CVE-2025-38101,     CVE-2025-38102, CVE-2025-38103, CVE-2025-38104, CVE-2025-38107, CVE-2025-38108, CVE-2025-38109,     CVE-2025-38110, CVE-2025-38111, CVE-2025-38112, CVE-2025-38113, CVE-2025-38115, CVE-2025-38117,     CVE-2025-38119, CVE-2025-38120, CVE-2025-38122, CVE-2025-38123, CVE-2025-38124, CVE-2025-38125,     CVE-2025-38126, CVE-2025-38127, CVE-2025-38129, CVE-2025-38131, CVE-2025-38135, CVE-2025-38136,     CVE-2025-38138, CVE-2025-38142, CVE-2025-38143, CVE-2025-38145, CVE-2025-38146, CVE-2025-38147,     CVE-2025-38148, CVE-2025-38149, CVE-2025-38153, CVE-2025-38154, CVE-2025-38155, CVE-2025-38156,     CVE-2025-38157, CVE-2025-38158, CVE-2025-38159, CVE-2025-38160, CVE-2025-38161, CVE-2025-38162,     CVE-2025-38163, CVE-2025-38164, CVE-2025-38165, CVE-2025-38166, CVE-2025-38167, CVE-2025-38169,     CVE-2025-38170, CVE-2025-38173, CVE-2025-38174, CVE-2025-38180, CVE-2025-38181, CVE-2025-38182,     CVE-2025-38183, CVE-2025-38184, CVE-2025-38185, CVE-2025-38190, CVE-2025-38191, CVE-2025-38192,     CVE-2025-38193, CVE-2025-38194, CVE-2025-38197, CVE-2025-38198, CVE-2025-38200, CVE-2025-38202,     CVE-2025-38208, CVE-2025-38210, CVE-2025-38211, CVE-2025-38212, CVE-2025-38214, CVE-2025-38215,     CVE-2025-38217, CVE-2025-38218, CVE-2025-38219, CVE-2025-38220, CVE-2025-38222, CVE-2025-38225,     CVE-2025-38226, CVE-2025-38229, CVE-2025-38230, CVE-2025-38231, CVE-2025-38232, CVE-2025-38236,     CVE-2025-38239, CVE-2025-38244, CVE-2025-38245, CVE-2025-38246, CVE-2025-38248, CVE-2025-38249,     CVE-2025-38250, CVE-2025-38251, CVE-2025-38253, CVE-2025-38255, CVE-2025-38257, CVE-2025-38258,     CVE-2025-38259, CVE-2025-38260, CVE-2025-38262, CVE-2025-38263, CVE-2025-38264, CVE-2025-38265,     CVE-2025-38269, CVE-2025-38274, CVE-2025-38275, CVE-2025-38277, CVE-2025-38278, CVE-2025-38279,     CVE-2025-38280, CVE-2025-38282, CVE-2025-38283, CVE-2025-38285, CVE-2025-38286, CVE-2025-38289,     CVE-2025-38290, CVE-2025-38292, CVE-2025-38293, CVE-2025-38295, CVE-2025-38298, CVE-2025-38299,     CVE-2025-38300, CVE-2025-38303, CVE-2025-38304, CVE-2025-38305, CVE-2025-38307, CVE-2025-38310,     CVE-2025-38312, CVE-2025-38313, CVE-2025-38319, CVE-2025-38320, CVE-2025-38321, CVE-2025-38322,     CVE-2025-38323, CVE-2025-38324, CVE-2025-38326, CVE-2025-38328, CVE-2025-38331, CVE-2025-38332,     CVE-2025-38333, CVE-2025-38334, CVE-2025-38335, CVE-2025-38336, CVE-2025-38337, CVE-2025-38338,     CVE-2025-38342, CVE-2025-38343, CVE-2025-38344, CVE-2025-38345, CVE-2025-38346, CVE-2025-38347,     CVE-2025-38348, CVE-2025-38349, CVE-2025-38351, CVE-2025-38354, CVE-2025-38361, CVE-2025-38362,     CVE-2025-38363, CVE-2025-38364, CVE-2025-38365, CVE-2025-38368, CVE-2025-38369, CVE-2025-38371,     CVE-2025-38373, CVE-2025-38374, CVE-2025-38375, CVE-2025-38376, CVE-2025-38377, CVE-2025-38382,     CVE-2025-38384, CVE-2025-38385, CVE-2025-38386, CVE-2025-38387, CVE-2025-38388, CVE-2025-38389,     CVE-2025-38390, CVE-2025-38391, CVE-2025-38392, CVE-2025-38393, CVE-2025-38395, CVE-2025-38396,     CVE-2025-38399, CVE-2025-38400, CVE-2025-38401, CVE-2025-38402, CVE-2025-38403, CVE-2025-38405,     CVE-2025-38406, CVE-2025-38407, CVE-2025-38408, CVE-2025-38409, CVE-2025-38410, CVE-2025-38412,     CVE-2025-38414, CVE-2025-38415, CVE-2025-38416, CVE-2025-38418, CVE-2025-38419, CVE-2025-38420,     CVE-2025-38422, CVE-2025-38424, CVE-2025-38425, CVE-2025-38427, CVE-2025-38428, CVE-2025-38429,     CVE-2025-38430, CVE-2025-38436, CVE-2025-38437, CVE-2025-38439, CVE-2025-38441, CVE-2025-38443,     CVE-2025-38444, CVE-2025-38445, CVE-2025-38448, CVE-2025-38449, CVE-2025-38455, CVE-2025-38456,     CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462,     CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468,     CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474,     CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483,     CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491,     CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38499,     CVE-2025-38501, CVE-2025-38503, CVE-2025-38506, CVE-2025-38507, CVE-2025-38510, CVE-2025-38511,     CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38520,     CVE-2025-38521, CVE-2025-38524, CVE-2025-38526, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529,     CVE-2025-38530, CVE-2025-38531, CVE-2025-38532, CVE-2025-38533, CVE-2025-38535, CVE-2025-38537,     CVE-2025-38538, CVE-2025-38539, CVE-2025-38540, CVE-2025-38542, CVE-2025-38543, CVE-2025-38544,     CVE-2025-38546, CVE-2025-38548, CVE-2025-38549, CVE-2025-38550, CVE-2025-38551, CVE-2025-38552,     CVE-2025-38553, CVE-2025-38555, CVE-2025-38560, CVE-2025-38562, CVE-2025-38566, CVE-2025-38568,     CVE-2025-38569, CVE-2025-38571, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577,     CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38582, CVE-2025-38583, CVE-2025-38584,     CVE-2025-38585, CVE-2025-38587, CVE-2025-38588, CVE-2025-38590, CVE-2025-38593, CVE-2025-38595,     CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38610,     CVE-2025-38612, CVE-2025-38614, CVE-2025-38615, CVE-2025-38619, CVE-2025-38622, CVE-2025-38623,     CVE-2025-38624, CVE-2025-38625, CVE-2025-38626, CVE-2025-38630, CVE-2025-38632, CVE-2025-38634,     CVE-2025-38635, CVE-2025-38639, CVE-2025-38640, CVE-2025-38644, CVE-2025-38645, CVE-2025-38646,     CVE-2025-38648, CVE-2025-38650, CVE-2025-38652, CVE-2025-38653, CVE-2025-38659, CVE-2025-38660,     CVE-2025-38663, CVE-2025-38664, CVE-2025-38665, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671,     CVE-2025-38675, CVE-2025-38676, CVE-2025-38677, CVE-2025-38679, CVE-2025-38680, CVE-2025-38681,     CVE-2025-38683, CVE-2025-38684, CVE-2025-38685, CVE-2025-38686, CVE-2025-38687, CVE-2025-38688,     CVE-2025-38691, CVE-2025-38692, CVE-2025-38693, CVE-2025-38694, CVE-2025-38695, CVE-2025-38696,     CVE-2025-38697, CVE-2025-38698, CVE-2025-38699, CVE-2025-38700, CVE-2025-38701, CVE-2025-38702,     CVE-2025-38703, CVE-2025-38704, CVE-2025-38705, CVE-2025-38706, CVE-2025-38707, CVE-2025-38708,     CVE-2025-38710, CVE-2025-38711, CVE-2025-38712, CVE-2025-38713, CVE-2025-38714, CVE-2025-38715,     CVE-2025-38716, CVE-2025-38718, CVE-2025-38721, CVE-2025-38722, CVE-2025-38724, CVE-2025-38725,     CVE-2025-38728, CVE-2025-38729, CVE-2025-38730, CVE-2025-38732, CVE-2025-38734, CVE-2025-38735,     CVE-2025-39673, CVE-2025-39675, CVE-2025-39676, CVE-2025-39679, CVE-2025-39681, CVE-2025-39683,     CVE-2025-39684, CVE-2025-39685, CVE-2025-39686, CVE-2025-39687, CVE-2025-39689, CVE-2025-39691,     CVE-2025-39692, CVE-2025-39693, CVE-2025-39694, CVE-2025-39701, CVE-2025-39702, CVE-2025-39703,     CVE-2025-39705, CVE-2025-39706, CVE-2025-39707, CVE-2025-39709, CVE-2025-39710, CVE-2025-39711,     CVE-2025-39712, CVE-2025-39713, CVE-2025-39714, CVE-2025-39715, CVE-2025-39716, CVE-2025-39718,     CVE-2025-39719, CVE-2025-39720, CVE-2025-39721, CVE-2025-39724, CVE-2025-39726, CVE-2025-39730,     CVE-2025-39731, CVE-2025-39732, CVE-2025-39734, CVE-2025-39736, CVE-2025-39737, CVE-2025-39738,     CVE-2025-39739, CVE-2025-39742, CVE-2025-39743, CVE-2025-39744, CVE-2025-39746, CVE-2025-39747,     CVE-2025-39748, CVE-2025-39749, CVE-2025-39750, CVE-2025-39752, CVE-2025-39753, CVE-2025-39756,     CVE-2025-39757, CVE-2025-39758, CVE-2025-39759, CVE-2025-39760, CVE-2025-39761, CVE-2025-39763,     CVE-2025-39766, CVE-2025-39770, CVE-2025-39772, CVE-2025-39773, CVE-2025-39776, CVE-2025-39779,     CVE-2025-39781, CVE-2025-39782, CVE-2025-39783, CVE-2025-39787, CVE-2025-39788, CVE-2025-39790,     CVE-2025-39794, CVE-2025-39795, CVE-2025-39797, CVE-2025-39798, CVE-2025-39800, CVE-2025-39801,     CVE-2025-39889, CVE-2025-39890, CVE-2025-39946, CVE-2025-39989, CVE-2025-40215, CVE-2025-40297,     CVE-2025-68750)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0316-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2022-49604,CVE-2025-40074: ip: Fix data-races around sysctl_ip_fwd_use_pmtu (bsc#1238414     bsc#1252794).
    - CVE-2022-50527: drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1251738).
    - CVE-2022-50625: serial: amba-pl011: avoid SBSA UART accessing DMACR register (bsc#1254559).
    - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
    - CVE-2022-50656: nfc: pn533: Clear nfc_target before being used (bsc#1254745).
    - CVE-2022-50678: wifi: brcmfmac: fix invalid address access when enabling SCAN log level (bsc#1254902).
    - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
    - CVE-2023-53454: HID: multitouch: Correct devm device reference for hidinput input_dev name     (bsc#1250759).
    - CVE-2023-53718: ring-buffer: Do not swap cpu_buffer during resize process (bsc#1252564).
    - CVE-2023-53748: media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup     (bsc#1254907).
    - CVE-2023-53765: dm cache: free background tracker's queued work in btracker_destroy (bsc#1254912).
    - CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
    - CVE-2023-53788: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (bsc#1254917).
    - CVE-2023-53819: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (bsc#1254712).
    - CVE-2023-53850: iavf: use internal state to free traffic IRQs (bsc#1254677).
    - CVE-2023-54120: Bluetooth: Fix race condition in hidp_session_thread (bsc#1256133).
    - CVE-2023-54214: Bluetooth: L2CAP: Fix potential user-after-free (bsc#1255954).
    - CVE-2023-54236: net/net_failover: fix txq exceeding warning (bsc#1255922).
    - CVE-2023-54286: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (bsc#1255803).
    - CVE-2023-54300: wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (bsc#1255790).
    - CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
    - CVE-2025-38336: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (bsc#1246370).
    - CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
    - CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
    - CVE-2025-40035: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak     (bsc#1252866).
    - CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
    - CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
    - CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
    - CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
    - CVE-2025-40110: drm/vmwgfx: Fix a null-ptr access in the cursor snooper (bsc#1253275).
    - CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
    - CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
    - CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
    - CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
    - CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
    - CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
    - CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
    - CVE-2025-40164: usbnet: Fix using smp_processor_id() in preemptible code warnings (bsc#1253407).
    - CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
    - CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
    - CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
    - CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
    - CVE-2025-40198: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() (bsc#1253453).
    - CVE-2025-40200: Squashfs: reject negative file sizes in squashfs_read_inode() (bsc#1253448).
    - CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
    - CVE-2025-40219: PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (bsc#1254518).
    - CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
    - CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
    - CVE-2025-40244: hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() (bsc#1255033).
    - CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
    - CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()     (bsc#1254849).
    - CVE-2025-40269: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (bsc#1255035).
    - CVE-2025-40275: ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd     (bsc#1254829).
    - CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak     (bsc#1254825).
    - CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
    - CVE-2025-40283: Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (bsc#1254858).
    - CVE-2025-40304: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (bsc#1255034).
    - CVE-2025-40308: Bluetooth: bcsp: receive data only if registered (bsc#1255064).
    - CVE-2025-40321: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode     (bsc#1254795).
    - CVE-2025-40322: fbdev: bitblit: bound-check glyph index in bit_putcs* (bsc#1255092).
    - CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
    - CVE-2025-40337: net: stmmac: Correctly handle Rx checksum offload errors (bsc#1255081).
    - CVE-2025-40349: hfs: validate record offset in hfsplus_bmap_alloc (bsc#1255280).
    - CVE-2025-40351: hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (bsc#1255281).
    - CVE-2025-68206: netfilter: nft_ct: add seqadj extension for natted connections (bsc#1255142).
    - CVE-2025-68340: team: Move team device type change at the end of team_port_add (bsc#1255507).

    The following non security issues were fixed:

    - HID: multitouch: Add NULL check in mt_input_configured (bsc#1250759).
    - Squashfs: add additional inode sanity checking (bsc#1253448).
    - drm/amdgpu: Fix potential NULL dereference (bsc#1251238).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20172-1 advisory.

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

    The following security issues were fixed:

    - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
    - CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
    - CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245431 bsc#1245498).
    - CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
    - CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
    - CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
    - CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
    - CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
    - CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
    - CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).
    - CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
    - CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval     (bsc#1250746).
    - CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).
    - CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
    - CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (bsc#1251817).
    - CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
    - CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (bsc#1252054).
    - CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
    - CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (bsc#1252301).
    - CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
    - CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
    - CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
    - CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
    - CVE-2025-40031: tee: fix register_shm_helper() (bsc#1252779).
    - CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()     (bsc#1252824).
    - CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
    - CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
    - CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
    - CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
    - CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
    - CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
    - CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
    - CVE-2025-40074: tcp: convert to dev_net_rcu() (bsc#1252794).
    - CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
    - CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
    - CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
    - CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
    - CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state()     (bsc#1252917).
    - CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST     (bsc#1252901).
    - CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
    - CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
    - CVE-2025-40133: mptcp: Call dst_release() in mptcp_active_enable() (bsc#1253328).
    - CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
    - CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
    - CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
    - CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
    - CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
    - CVE-2025-40157: EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller (bsc#1253423).
    - CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
    - CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
    - CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
    - CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
    - CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
    - CVE-2025-40175: idpf: cleanup remaining SKBs in PTP flows (bsc#1253426).
    - CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
    - CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
    - CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).
    - CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64()     paths (bsc#1253455).
    - CVE-2025-40203: listmount: don't call path_put() under namespace semaphore (bsc#1253457).

    The following non security issues were fixed:

    - ACPI: scan: Update honor list for RPMI System MSI (stable-fixes).
    - ACPICA: Update dsmethod.c to get rid of unused variable warning (stable-fixes).
    - Disable CONFIG_CPU5_WDT The cpu5wdt driver doesn't implement a       proper watchdog interface and has many code issues. It only handles       obscure and obsolete hardware. Stop building and supporting this driver       (jsc#PED-14062).
    - Fix drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923)
    - KVM: SVM: Delete IRTE link from previous vCPU before setting new IRTE (git-fixes).
    - KVM: SVM: Delete IRTE link from previous vCPU irrespective of new routing (git-fixes).
    - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated (git-fixes).
    - KVM: s390: improve interrupt cpu for wakeup (bsc#1235463).
    - KVM: s390: kABI backport for 'last_sleep_cpu' (bsc#1252352).
    - KVM: x86/mmu: Return -EAGAIN if userspace deletes/moves memslot during prefault (git-fixes).
    - PCI/ERR: Update device error_state already after reset (stable-fixes).
    - PM: EM: Slightly reduce em_check_capacity_update() overhead (stable-fixes).
    - Revert net/mlx5e: Update and set Xon/Xoff upon MTU set (git-fixes).
    - Revert net/mlx5e: Update and set Xon/Xoff upon port speed set (git-fixes).
    - Update config files: enable zstd module decompression (jsc#PED-14115).
    - bpf/selftests: Fix test_tcpnotify_user (bsc#1253635).
    - btrfs: do not clear read-only when adding sprout device (bsc#1253238).
    - btrfs: do not update last_log_commit when logging inode due to a new name (git-fixes).
    - dm: fix queue start/stop imbalance under suspend/load/resume races (bsc#1253386)
    - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream (stable-fixes).
    - drm/amd/display: update color on atomic commit time (stable-fixes).
    - drm/amd/display: update dpp/disp clock from smu clock table (stable-fixes).
    - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock (stable-fixes).
    - hwmon: (lenovo-ec-sensors) Update P8 supprt (stable-fixes).
    - media: amphion: Delete v4l2_fh synchronously in .release() (stable-fixes).
    - mount: handle NULL values in mnt_ns_release() (bsc#1254308)
    - net/smc: Remove validation of reserved bits in CLC Decline (bsc#1252357).
    - net: phy: move realtek PHY driver to its own subdirectory (jsc#PED-14353).
    - net: phy: realtek: add defines for shadowed c45 standard registers (jsc#PED-14353).
    - net: phy: realtek: add helper RTL822X_VND2_C22_REG (jsc#PED-14353).
    - net: phy: realtek: change order of calls in C22 read_status() (jsc#PED-14353).
    - net: phy: realtek: clear 1000Base-T link partner advertisement (jsc#PED-14353).
    - net: phy: realtek: improve mmd register access for internal PHY's (jsc#PED-14353).
    - net: phy: realtek: read duplex and gbit master from PHYSR register (jsc#PED-14353).
    - net: phy: realtek: switch from paged to MMD ops in rtl822x functions (jsc#PED-14353).
    - net: phy: realtek: use string choices helpers (jsc#PED-14353).
    - net: xilinx: axienet: Fix IRQ coalescing packet count overflow (bsc#1250746)
    - net: xilinx: axienet: Fix RX skb ring management in DMAengine mode (bsc#1250746)
    - net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in dmaengine xmit (bsc#1250746)
    - nvmet-auth: update sc_c in host response (git-fixes bsc#1249397).
    - nvmet-auth: update sc_c in target host hash calculation (git-fixes).
    - perf list: Add IBM z17 event descriptions (jsc#PED-13611).
    - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (git-fixes).
    - powercap: intel_rapl: Add support for Panther Lake platform (jsc#PED-13949).
    - pwm: pca9685: Use bulk write to atomicially update registers (stable-fixes).
    - r8169: add PHY c45 ops for MDIO_MMD_VENDOR2 registers (jsc#PED-14353).
    - r8169: add support for Intel Killer E5000 (jsc#PED-14353).
    - r8169: add support for RTL8125BP rev.b (jsc#PED-14353).
    - r8169: add support for RTL8125D rev.b (jsc#PED-14353).
    - r8169: adjust version numbering for RTL8126 (jsc#PED-14353).
    - r8169: align RTL8125 EEE config with vendor driver (jsc#PED-14353).
    - r8169: align RTL8125/RTL8126 PHY config with vendor driver (jsc#PED-14353).
    - r8169: align RTL8126 EEE config with vendor driver (jsc#PED-14353).
    - r8169: align WAKE_PHY handling with r8125/r8126 vendor drivers (jsc#PED-14353).
    - r8169: avoid duplicated messages if loading firmware fails and switch to warn level (jsc#PED-14353).
    - r8169: don't take RTNL lock in rtl_task() (jsc#PED-14353).
    - r8169: enable EEE at 2.5G per default on RTL8125B (jsc#PED-14353).
    - r8169: enable RTL8168H/RTL8168EP/RTL8168FP ASPM support (jsc#PED-14353).
    - r8169: fix inconsistent indenting in rtl8169_get_eth_mac_stats (jsc#PED-14353).
    - r8169: implement additional ethtool stats ops (jsc#PED-14353).
    - r8169: improve __rtl8169_set_wol (jsc#PED-14353).
    - r8169: improve initialization of RSS registers on RTL8125/RTL8126 (jsc#PED-14353).
    - r8169: improve rtl_set_d3_pll_down (jsc#PED-14353).
    - r8169: increase max jumbo packet size on RTL8125/RTL8126 (jsc#PED-14353).
    - r8169: remove leftover locks after reverted change (jsc#PED-14353).
    - r8169: remove original workaround for RTL8125 broken rx issue (jsc#PED-14353).
    - r8169: remove rtl_dash_loop_wait_high/low (jsc#PED-14353).
    - r8169: remove support for chip version 11 (jsc#PED-14353).
    - r8169: remove unused flag RTL_FLAG_TASK_RESET_NO_QUEUE_WAKE (jsc#PED-14353).
    - r8169: replace custom flag with disable_work() et al (jsc#PED-14353).
    - r8169: switch away from deprecated pcim_iomap_table (jsc#PED-14353).
    - r8169: use helper r8169_mod_reg8_cond to simplify rtl_jumbo_config (jsc#PED-14353).
    - ring-buffer: Update pages_touched to reflect persistent buffer content (git-fixes).
    - s390/mm: Fix __ptep_rdp() inline assembly (bsc#1253643).
    - sched/fair: Get rid of sched_domains_curr_level hack for tl->cpumask() (bsc#1246843).
    - sched/fair: Have SD_SERIALIZE affect newidle balancing (bsc#1248792).
    - sched/fair: Proportional newidle balance (bsc#1248792).
    - sched/fair: Proportional newidle balance -KABI (bsc#1248792).
    - sched/fair: Revert max_newidle_lb_cost bump (bsc#1248792).
    - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (bsc#1248792).
    - sched/fair: Small cleanup to sched_balance_newidle() (bsc#1248792).
    - sched/fair: Small cleanup to update_newidle_cost() (bsc#1248792).
    - scsi: lpfc: Add capability to register Platform Name ID to fabric (bsc#1254119).
    - scsi: lpfc: Allow support for BB credit recovery in point-to-point topology (bsc#1254119).
    - scsi: lpfc: Ensure unregistration of rpis for received PLOGIs (bsc#1254119).
    - scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology (bsc#1254119).
    - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (bsc#1254119).
    - scsi: lpfc: Modify kref handling for Fabric Controller ndlps (bsc#1254119).
    - scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb() (bsc#1254119).
    - scsi: lpfc: Revise discovery related function headers and comments (bsc#1254119).
    - scsi: lpfc: Update lpfc version to 14.4.0.12 (bsc#1254119).
    - scsi: lpfc: Update various NPIV diagnostic log messaging (bsc#1254119).
    - selftests/run_kselftest.sh: Add `--skip` argument option (bsc#1254221).
    - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup (bsc#1246843).
    - soc/tegra: fuse: speedo-tegra210: Update speedo IDs (git-fixes).
    - spi: tegra210-quad: Check hardware status on timeout (bsc#1253155)
    - spi: tegra210-quad: Fix timeout handling (bsc#1253155)
    - spi: tegra210-quad: Refactor error handling into helper functions (bsc#1253155)
    - spi: tegra210-quad: Update dummy sequence configuration (git-fixes)
    - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork (bsc#1250705).
    - wifi: ath11k: Add quirk entries for Thinkpad T14s Gen3 AMD (bsc#1254181).
    - wifi: mt76: do not add wcid entries to sta poll list during MCU reset (bsc#1254315).
    - wifi: mt76: introduce mt792x_config_mac_addr_list routine (bsc#1254315).
    - wifi: mt76: mt7925: Fix logical vs bitwise typo (bsc#1254315).
    - wifi: mt76: mt7925: Remove unnecessary if-check (bsc#1254315).
    - wifi: mt76: mt7925: Simplify HIF suspend handling to avoid suspend fail (bsc#1254315).
    - wifi: mt76: mt7925: add EHT control support based on the CLC data (bsc#1254315).
    - wifi: mt76: mt7925: add handler to hif suspend/resume event (bsc#1254315).
    - wifi: mt76: mt7925: add pci restore for hibernate (bsc#1254315).
    - wifi: mt76: mt7925: config the dwell time by firmware (bsc#1254315).
    - wifi: mt76: mt7925: extend MCU support for testmode (bsc#1254315).
    - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (bsc#1254315).
    - wifi: mt76: mt7925: fix missing hdr_trans_tlv command for broadcast wtbl (bsc#1254315).
    - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (bsc#1254315).
    - wifi: mt76: mt7925: refine the txpower initialization flow (bsc#1254315).
    - wifi: mt76: mt7925: replace zero-length array with flexible-array member (bsc#1254315).
    - wifi: mt76: mt7925: update the channel usage when the regd domain changed (bsc#1254315).
    - wifi: mt76: mt7925e: fix too long of wifi resume time (bsc#1254315).
    - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled (bsc#1246843).
    - x86/smpboot: moves x86_topology to static initialize and truncate (bsc#1246843).
    - x86/smpboot: remove redundant CONFIG_SCHED_SMT (bsc#1246843).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20662 advisory.

    - tls: fix handling of zero-length records on the rx_list (Jakub Kicinski) [Orabug: 38401543,38453832]     {CVE-2025-39682}
    - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (Yuichiro Tsuji) [Orabug:
    38401777] {CVE-2025-38736}
    - net: better track kernel sockets lifetime (Eric Dumazet) [Orabug: 37766278] {CVE-2025-21884}
    - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [Orabug: 38394814]     {CVE-2025-38680}
    - hv_netvsc: Fix panic during namespace deletion with VF (Haiyang Zhang) [Orabug: 38394829]     {CVE-2025-38683}
    - net/sched: ets: use old 'nbands' while purging unused classes (Davide Caratti) [Orabug: 38394835]     {CVE-2025-38684}
    - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Sravan Kumar Gundu) [Orabug: 38394842]     {CVE-2025-38685}
    - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (Suren Baghdasaryan) [Orabug:
    38394850] {CVE-2025-38686}
    - btrfs: do not allow relocation of partially dropped subvolumes (Qu Wenruo) [Orabug: 38423270]     {CVE-2025-39738}
    - usb: core: config: Prevent OOB read in SS endpoint companion parsing (Xinyu Liu) [Orabug: 38423419]     {CVE-2025-39760}
    - iommufd: Prevent ALIGN() overflow (Jason Gunthorpe) [Orabug: 38394859] {CVE-2025-38688}
    - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (Alexey Klimov) [Orabug: 38423279] {CVE-2025-39739}
    - dm: Always split write BIOs to zoned device limits (Damien Le Moal) [Orabug: 38429172] {CVE-2025-39792}
    - pNFS: Fix uninited ptr deref in block/scsi layout (Sergey Bashirov) [Orabug: 38394864] {CVE-2025-38691}
    - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (John Garry) [Orabug:
    38429189] {CVE-2025-39795}
    - exfat: add cluster chain loop check for dir (Yuezhang Mo) [Orabug: 38394871] {CVE-2025-38692}
    - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and     w7090p_tuner_read_serpar (Alex Guo) [Orabug: 38394878] {CVE-2025-38693}
    - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (Alex Guo) [Orabug: 38394885]     {CVE-2025-38694}
    - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (Justin Tee) [Orabug:
    38394892] {CVE-2025-38695}
    - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Yury Norov) [Orabug: 38423284]     {CVE-2025-39742}
    - scsi: bfa: Double-free fix (Jackysliu) [Orabug: 38394922] {CVE-2025-38699}
    - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (Showrya M N) [Orabug:
    38394929] {CVE-2025-38700}
    - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Theodore Ts'O) [Orabug: 38394935]     {CVE-2025-38701}
    - fbdev: fix potential buffer overflow in do_register_framebuffer() (Yongzhen Zhang) [Orabug: 38394942]     {CVE-2025-38702}
    - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (Joel Fernandes) [Orabug: 38423299] {CVE-2025-39744}
    - wifi: ath10k: shutdown driver when hardware is unreliable (Kang Yang) [Orabug: 38423316]     {CVE-2025-39746}
    - xfrm: Duplicate SPI Handling (Aakash Kumar S) [Orabug: 38429199] {CVE-2025-39797}
    - drm/msm: Add error handling for krealloc in metadata setup (Yuan Chen) [Orabug: 38423323]     {CVE-2025-39747}
    - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Zqiang) [Orabug: 38394958]     {CVE-2025-38704}
    - bpf: Forget ranges when refining tnum after JSET (Paul Chaignon) [Orabug: 38423330] {CVE-2025-39748}
    - rcu: Protect ->defer_qs_iw_pending from data race (Paul E. McKenney) [Orabug: 38423339] {CVE-2025-39749}
    - drm/amd/pm: fix null pointer access (Umio Yasuno) [Orabug: 38394967] {CVE-2025-38705}
    - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Lucy Thrun) [Orabug: 38423356]     {CVE-2025-39751}
    - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (Peter Ujfalusi) [Orabug: 38394976]     {CVE-2025-38706}
    - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (Shuai Xue) [Orabug:
    38423437] {CVE-2025-39763}
    - drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [Orabug: 38394993] {CVE-2025-38708}
    - loop: Avoid updating block size under exclusive owner (Jan Kara) [Orabug: 38394999] {CVE-2025-38709}
    - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (Andrew Price) [Orabug: 38423379] {CVE-2025-39753}
    - gfs2: Validate i_depth for exhash directories (Andrew Price) [Orabug: 38395006] {CVE-2025-38710}
    - tls: handle data disappearing from under the TLS ULP (Jakub Kicinski) [Orabug: 38351758]     {CVE-2025-38616}
    - sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [Orabug: 38395056] {CVE-2025-38718}
    - netfilter: ctnetlink: fix refcount leak on table dump (Florian Westphal) [Orabug: 38395065]     {CVE-2025-38721}
    - mm/smaps: fix race between smaps_hugetlb_range and migration (Tu Jinjiang) [Orabug: 38423389]     {CVE-2025-39754}
    - eventpoll: Fix semi-unbounded recursion (Jann Horn) [Orabug: 38335160] {CVE-2025-38614}
    - fs: Prevent file descriptor table allocations exceeding INT_MAX (Sasha Levin) [Orabug: 38423395]     {CVE-2025-39756}
    - NFS: Fix the setting of capabilities when automounting a new filesystem (Trond Myklebust) [Orabug:
    38429209] {CVE-2025-39798}
    - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38395079]     {CVE-2025-38724}
    - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (Xu Yang) [Orabug: 38395087] {CVE-2025-38725}
    - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 38395123]     {CVE-2025-38727}
    - smb3: fix for slab out of bounds on mount to ksmbd (Steve French) [Orabug: 38395093] {CVE-2025-38728}
    - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [Orabug: 38423405]     {CVE-2025-39757}
    - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [Orabug: 38395099]     {CVE-2025-38729}
    - usb: gadget : fix use-after-free in composite_dev_cleanup() (Taoxue) [Orabug: 38334898] {CVE-2025-38555}
    - HID: apple: validate feature-report field count to prevent NULL pointer dereference (Qasim Ijaz)     [Orabug: 38334911] {CVE-2025-38557}
    - mm: swap: fix potential buffer overflow in setup_clusters() (Kemeng Shi) [Orabug: 38401739]     {CVE-2025-39727}
    - platform/x86/intel/pmt: fix a crashlog NULL pointer access (Michael J. Ruhl) [Orabug: 38334915]     {CVE-2025-38559}
    - x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky) [Orabug: 38334918,38453836]     {CVE-2025-38560}
    - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38351769,38453833]     {CVE-2025-38618}
    - net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [Orabug: 38351762]     {CVE-2025-38617}
    - perf/core: Prevent VMA split of buffer mappings (Thomas Gleixner) [Orabug: 38334946] {CVE-2025-38563}
    - perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [Orabug: 38334955] {CVE-2025-38565}
    - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [Orabug: 38334966,38453835]     {CVE-2025-38566}
    - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (Maher Azz) [Orabug: 38334972]     {CVE-2025-38568}
    - benet: fix BUG when creating VFs (Michal Schmidt) [Orabug: 38334974] {CVE-2025-38569}
    - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [Orabug: 38334980,38453834]     {CVE-2025-38571}
    - net: drop UFO packets in udp_rcv_segment() (Wang Liang) [Orabug: 38351784] {CVE-2025-38622}
    - ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [Orabug: 38334986] {CVE-2025-38572}
    - pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [Orabug: 38335002] {CVE-2025-38574}
    - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [Orabug: 38401743]     {CVE-2025-39730}
    - vfio/pds: Fix missing detach_ioas op (Brett Creeley) [Orabug: 38351809] {CVE-2025-38625}
    - vdpa/mlx5: Fix release of uninitialized resources on error path (Dragos Tatulea) [Orabug: 38351825]     {CVE-2025-38628}
    - pinmux: fix race causing mux_owner NULL with active mux_usecount (Mukesh Ojha) [Orabug: 38351837]     {CVE-2025-38632}
    - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (Zijie Wang) [Orabug:
    38351898] {CVE-2025-38653}
    - bpf, arm64: Fix fp initialization for exception boundary (Puranjay Mohan) [Orabug: 38335064]     {CVE-2025-38586}
    - ipv6: fix possible infinite loop in fib6_info_uses_dev() (Eric Dumazet) [Orabug: 38335068]     {CVE-2025-38587}
    - ipv6: prevent infinite loop in rt6_nlmsg_size() (Eric Dumazet) [Orabug: 38335071] {CVE-2025-38588}
    - net/mlx5e: Remove skb secpath if xfrm state is not found (Jianbo Liu) [Orabug: 38335076]     {CVE-2025-38590}
    - netfilter: xt_nfacct: don't assume acct name is null-terminated (Florian Westphal) [Orabug: 38351852]     {CVE-2025-38639}
    - bpf: Disable migration in nf_hook_run_bpf(). (Kuniyuki Iwashima) [Orabug: 38351858] {CVE-2025-38640}
    - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (Arseniy Krasnov) [Orabug:
    38335086] {CVE-2025-38593}
    - wifi: mac80211: reject TDLS operations when station is not associated (Moon Hee Lee) [Orabug: 38351870]     {CVE-2025-38644}
    - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (Baochen Qiang) [Orabug:
    38401750] {CVE-2025-39732}
    - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [Orabug:
    38331464] {CVE-2025-38553}
    - net/mlx5: Check device memory pointer before usage (Stav Aviram) [Orabug: 38351876] {CVE-2025-38645}
    - wifi: ath11k: clear initialized flag for deinit-ed srng lists (Sergey Senozhatsky) [Orabug: 38335104]     {CVE-2025-38601}
    - iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [Orabug: 38335108]     {CVE-2025-38602}
    - wifi: rtl818x: Kill URBs before clearing tx status queue (Daniil Dulov) [Orabug: 38335117]     {CVE-2025-38604}
    - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Jiayuan Chen) [Orabug: 38335129]     {CVE-2025-38608}
    - PM / devfreq: Check governor before using governor->name (Lifeng Zheng) [Orabug: 38335133]     {CVE-2025-38609}
    - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (Abdun Nihaal) [Orabug: 38335153]     {CVE-2025-38612}
    - gfs2: No more self recovery (Andreas Gruenbacher) [Orabug: 38351907] {CVE-2025-38659}
    - parse_longname(): strrchr() expects NUL-terminated string (Al Viro) [Orabug: 38351912] {CVE-2025-38660}
    - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (Manuel Andreas) [Orabug: 38217316]     {CVE-2025-38351}
    - ext4: fix out of bounds punch offset (Zhang Yi) [Orabug: 38369646] {CVE-2025-38221}
    - mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list (Tu Jinjiang) [Orabug: 38401778]     {CVE-2025-39725}
    - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Haoxiang Li) [Orabug: 38351928]     {CVE-2025-38664}
    - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (Ada Couprie Diaz) [Orabug: 38351989]     {CVE-2025-38670}
    - i2c: qup: jump out of the loop in case of timeout (Yang Xiwen) [Orabug: 38351992] {CVE-2025-38671}
    - can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode (Marc Kleine-     Budde) [Orabug: 38351934] {CVE-2025-38665}
    - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger) [Orabug:
    38310014,38453837] {CVE-2025-38500}
    - xfrm: state: initialize state_ptrs earlier in xfrm_state_find (Sabrina Dubroca) [Orabug: 38352014]     {CVE-2025-38675}
    - regulator: core: fix NULL dereference on unbind due to stale coupling data (Alessandro Carminati)     [Orabug: 38351976] {CVE-2025-38668}
    - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (Fabrice Gasnier) [Orabug: 38180691]     {CVE-2025-38335}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4328 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4328-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     October 13, 2025                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.153-1     CVE ID         : CVE-2024-36331 CVE-2024-36350 CVE-2024-36357 CVE-2024-36913                      CVE-2024-41013 CVE-2024-47704 CVE-2024-56758 CVE-2024-57883                      CVE-2024-57924 CVE-2024-58240 CVE-2025-21816 CVE-2025-22119                      CVE-2025-23143 CVE-2025-23160 CVE-2025-27558 CVE-2025-37925                      CVE-2025-37931 CVE-2025-37958 CVE-2025-37968 CVE-2025-38000                      CVE-2025-38001 CVE-2025-38003 CVE-2025-38004 CVE-2025-38031                      CVE-2025-38034 CVE-2025-38035 CVE-2025-38037 CVE-2025-38040                      CVE-2025-38043 CVE-2025-38044 CVE-2025-38048 CVE-2025-38051                      CVE-2025-38052 CVE-2025-38058 CVE-2025-38061 CVE-2025-38062                      CVE-2025-38063 CVE-2025-38065 CVE-2025-38066 CVE-2025-38067                      CVE-2025-38068 CVE-2025-38071 CVE-2025-38072 CVE-2025-38074                      CVE-2025-38075 CVE-2025-38077 CVE-2025-38078 CVE-2025-38079                      CVE-2025-38083 CVE-2025-38084 CVE-2025-38085 CVE-2025-38086                      CVE-2025-38088 CVE-2025-38090 CVE-2025-38097 CVE-2025-38100                      CVE-2025-38102 CVE-2025-38103 CVE-2025-38107 CVE-2025-38108                      CVE-2025-38111 CVE-2025-38112 CVE-2025-38113 CVE-2025-38115                      CVE-2025-38118 CVE-2025-38119 CVE-2025-38120 CVE-2025-38122                      CVE-2025-38124 CVE-2025-38126 CVE-2025-38131 CVE-2025-38135                      CVE-2025-38136 CVE-2025-38138 CVE-2025-38142 CVE-2025-38143                      CVE-2025-38145 CVE-2025-38146 CVE-2025-38147 CVE-2025-38148                      CVE-2025-38151 CVE-2025-38153 CVE-2025-38154 CVE-2025-38157                      CVE-2025-38158 CVE-2025-38159 CVE-2025-38160 CVE-2025-38161                      CVE-2025-38163 CVE-2025-38165 CVE-2025-38166 CVE-2025-38167                      CVE-2025-38170 CVE-2025-38173 CVE-2025-38174 CVE-2025-38180                      CVE-2025-38181 CVE-2025-38183 CVE-2025-38184 CVE-2025-38185                      CVE-2025-38190 CVE-2025-38191 CVE-2025-38193 CVE-2025-38194                      CVE-2025-38197 CVE-2025-38198 CVE-2025-38200 CVE-2025-38202                      CVE-2025-38211 CVE-2025-38212 CVE-2025-38214 CVE-2025-38215                      CVE-2025-38218 CVE-2025-38219 CVE-2025-38222 CVE-2025-38225                      CVE-2025-38226 CVE-2025-38227 CVE-2025-38229 CVE-2025-38230                      CVE-2025-38231 CVE-2025-38236 CVE-2025-38239 CVE-2025-38245                      CVE-2025-38249 CVE-2025-38251 CVE-2025-38257 CVE-2025-38259                      CVE-2025-38260 CVE-2025-38262 CVE-2025-38263 CVE-2025-38273                      CVE-2025-38275 CVE-2025-38277 CVE-2025-38280 CVE-2025-38282                      CVE-2025-38285 CVE-2025-38286 CVE-2025-38293 CVE-2025-38298                      CVE-2025-38300 CVE-2025-38304 CVE-2025-38305 CVE-2025-38310                      CVE-2025-38312 CVE-2025-38313 CVE-2025-38319 CVE-2025-38320                      CVE-2025-38322 CVE-2025-38323 CVE-2025-38324 CVE-2025-38326                      CVE-2025-38328 CVE-2025-38331 CVE-2025-38332 CVE-2025-38334                      CVE-2025-38335 CVE-2025-38336 CVE-2025-38337 CVE-2025-38342                      CVE-2025-38344 CVE-2025-38345 CVE-2025-38346 CVE-2025-38347                      CVE-2025-38348 CVE-2025-38350 CVE-2025-38352 CVE-2025-38354                      CVE-2025-38362 CVE-2025-38363 CVE-2025-38364 CVE-2025-38365                      CVE-2025-38371 CVE-2025-38375 CVE-2025-38377 CVE-2025-38382                      CVE-2025-38384 CVE-2025-38385 CVE-2025-38386 CVE-2025-38387                      CVE-2025-38389 CVE-2025-38391 CVE-2025-38393 CVE-2025-38395                      CVE-2025-38396 CVE-2025-38399 CVE-2025-38400 CVE-2025-38401                      CVE-2025-38403 CVE-2025-38404 CVE-2025-38406 CVE-2025-38409                      CVE-2025-38410 CVE-2025-38412 CVE-2025-38415 CVE-2025-38416                      CVE-2025-38418 CVE-2025-38419 CVE-2025-38420 CVE-2025-38422                      CVE-2025-38424 CVE-2025-38425 CVE-2025-38428 CVE-2025-38430                      CVE-2025-38437 CVE-2025-38439 CVE-2025-38441 CVE-2025-38443                      CVE-2025-38444 CVE-2025-38445 CVE-2025-38448 CVE-2025-38451                      CVE-2025-38455 CVE-2025-38456 CVE-2025-38457 CVE-2025-38458                      CVE-2025-38459 CVE-2025-38460 CVE-2025-38461 CVE-2025-38462                      CVE-2025-38464 CVE-2025-38465 CVE-2025-38466 CVE-2025-38467                      CVE-2025-38468 CVE-2025-38470 CVE-2025-38471 CVE-2025-38472                      CVE-2025-38473 CVE-2025-38474 CVE-2025-38476 CVE-2025-38477                      CVE-2025-38478 CVE-2025-38480 CVE-2025-38481 CVE-2025-38482                      CVE-2025-38483 CVE-2025-38485 CVE-2025-38487 CVE-2025-38488                      CVE-2025-38491 CVE-2025-38494 CVE-2025-38495 CVE-2025-38497                      CVE-2025-38498 CVE-2025-38499 CVE-2025-38500 CVE-2025-38501                      CVE-2025-38502 CVE-2025-38503 CVE-2025-38510 CVE-2025-38512                      CVE-2025-38513 CVE-2025-38514 CVE-2025-38515 CVE-2025-38516                      CVE-2025-38520 CVE-2025-38527 CVE-2025-38528 CVE-2025-38529                      CVE-2025-38530 CVE-2025-38535 CVE-2025-38538 CVE-2025-38539                      CVE-2025-38540 CVE-2025-38542 CVE-2025-38543 CVE-2025-38546                      CVE-2025-38548 CVE-2025-38550 CVE-2025-38552 CVE-2025-38553                      CVE-2025-38555 CVE-2025-38560 CVE-2025-38561 CVE-2025-38562                      CVE-2025-38563 CVE-2025-38565 CVE-2025-38569 CVE-2025-38572                      CVE-2025-38574 CVE-2025-38576 CVE-2025-38577 CVE-2025-38578                      CVE-2025-38579 CVE-2025-38581 CVE-2025-38583 CVE-2025-38587                      CVE-2025-38588 CVE-2025-38601 CVE-2025-38602 CVE-2025-38604                      CVE-2025-38608 CVE-2025-38609 CVE-2025-38610 CVE-2025-38612                      CVE-2025-38614 CVE-2025-38617 CVE-2025-38618 CVE-2025-38622                      CVE-2025-38623 CVE-2025-38624 CVE-2025-38630 CVE-2025-38634                      CVE-2025-38635 CVE-2025-38639 CVE-2025-38644 CVE-2025-38645                      CVE-2025-38650 CVE-2025-38652 CVE-2025-38653 CVE-2025-38663                      CVE-2025-38664 CVE-2025-38665 CVE-2025-38666 CVE-2025-38668                      CVE-2025-38670 CVE-2025-38671 CVE-2025-38676 CVE-2025-38677                      CVE-2025-38679 CVE-2025-38680 CVE-2025-38681 CVE-2025-38683                      CVE-2025-38684 CVE-2025-38685 CVE-2025-38687 CVE-2025-38691                      CVE-2025-38693 CVE-2025-38694 CVE-2025-38695 CVE-2025-38696                      CVE-2025-38697 CVE-2025-38698 CVE-2025-38699 CVE-2025-38700                      CVE-2025-38701 CVE-2025-38702 CVE-2025-38706 CVE-2025-38707                      CVE-2025-38708 CVE-2025-38711 CVE-2025-38712 CVE-2025-38713                      CVE-2025-38714 CVE-2025-38715 CVE-2025-38721 CVE-2025-38723                      CVE-2025-38724 CVE-2025-38725 CVE-2025-38727 CVE-2025-38728                      CVE-2025-38729 CVE-2025-38732 CVE-2025-38735 CVE-2025-38736                      CVE-2025-39673 CVE-2025-39675 CVE-2025-39676 CVE-2025-39681                      CVE-2025-39682 CVE-2025-39683 CVE-2025-39684 CVE-2025-39685                      CVE-2025-39686 CVE-2025-39687 CVE-2025-39689 CVE-2025-39691                      CVE-2025-39692 CVE-2025-39693 CVE-2025-39694 CVE-2025-39697                      CVE-2025-39701 CVE-2025-39702 CVE-2025-39703 CVE-2025-39706                      CVE-2025-39709 CVE-2025-39710 CVE-2025-39713 CVE-2025-39714                      CVE-2025-39715 CVE-2025-39716 CVE-2025-39718 CVE-2025-39719                      CVE-2025-39724 CVE-2025-39730 CVE-2025-39731 CVE-2025-39734                      CVE-2025-39736 CVE-2025-39737 CVE-2025-39738 CVE-2025-39742                      CVE-2025-39743 CVE-2025-39749 CVE-2025-39752 CVE-2025-39756                      CVE-2025-39757 CVE-2025-39759 CVE-2025-39760 CVE-2025-39766                      CVE-2025-39770 CVE-2025-39772 CVE-2025-39773 CVE-2025-39776                      CVE-2025-39782 CVE-2025-39783 CVE-2025-39787 CVE-2025-39788                      CVE-2025-39790 CVE-2025-39794 CVE-2025-39795 CVE-2025-39798                      CVE-2025-39800 CVE-2025-39801 CVE-2025-39806 CVE-2025-39808                      CVE-2025-39812 CVE-2025-39813 CVE-2025-39817 CVE-2025-39819                      CVE-2025-39823 CVE-2025-39824 CVE-2025-39825 CVE-2025-39826                      CVE-2025-39827 CVE-2025-39828 CVE-2025-39835 CVE-2025-39838                      CVE-2025-39839 CVE-2025-39841 CVE-2025-39842 CVE-2025-39843                      CVE-2025-39844 CVE-2025-39845 CVE-2025-39846 CVE-2025-39847                      CVE-2025-39848 CVE-2025-39849 CVE-2025-39853 CVE-2025-39857                      CVE-2025-39860 CVE-2025-39864 CVE-2025-39865 CVE-2025-39866                      CVE-2025-39869 CVE-2025-39870 CVE-2025-39873 CVE-2025-39876                      CVE-2025-39877 CVE-2025-39880 CVE-2025-39881 CVE-2025-39883                      CVE-2025-39885 CVE-2025-39891 CVE-2025-39894 CVE-2025-39898                      CVE-2025-39902 CVE-2025-39907 CVE-2025-39909 CVE-2025-39911                      CVE-2025-39913 CVE-2025-39914 CVE-2025-39916 CVE-2025-39920                      CVE-2025-39923 CVE-2025-40300     Debian Bug     : 1040901 1107479 1107511 1108065 1108069 1108271 1108430                      1109734 1111017 1114773

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.153-1~deb11u1.  Starting with this version, modules are signed     with an ephemeral key on all architectures, and the broken pktcdvd     driver is disabled.  This version additionally includes many more bug     fixes from stable updates 6.1.141-6.1.153.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1208 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix NULL pointer dereference in l3mdev_l3_rcv (CVE-2025-22103)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)

    In the Linux kernel, the following vulnerability has been resolved:

    md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (CVE-2025-22124)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid1,raid10: don't ignore IO flags (CVE-2025-22125)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (CVE-2025-38453)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix oob access in cgroup local storage (CVE-2025-38502)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Restrict conditions for adding duplicating netems to qdisc tree (CVE-2025-38553)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/core: Prevent VMA split of buffer mappings (CVE-2025-38563)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/core: Exit early on perf_mmap() fail (CVE-2025-38565)

    In the Linux kernel, the following vulnerability has been resolved:

    sunrpc: fix handling of server side tls alerts (CVE-2025-38566)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568)

    In the Linux kernel, the following vulnerability has been resolved:

    sunrpc: fix client side handling of tls alerts (CVE-2025-38571)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: reject malicious packets in ipv6_gso_segment() (CVE-2025-38572)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, arm64: Fix fp initialization for exception boundary (CVE-2025-38586)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fix possible infinite loop in fib6_info_uses_dev() (CVE-2025-38587)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: prevent infinite loop in rt6_nlmsg_size() (CVE-2025-38588)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Remove skb secpath if xfrm state is not found (CVE-2025-38590)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (CVE-2025-38608)

    In the Linux kernel, the following vulnerability has been resolved:

    eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: cancle set bad inode after removing name fails (CVE-2025-38615)

    In the Linux kernel, the following vulnerability has been resolved:

    tls: handle data disappearing from under the TLS ULP (CVE-2025-38616)

    In the Linux kernel, the following vulnerability has been resolved:

    net/packet: fix a race in packet_set_ring() and packet_notifier() (CVE-2025-38617)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: Do not allow binding to VMADDR_PORT_ANY (CVE-2025-38618)

    In the Linux kernel, the following vulnerability has been resolved:

    net: drop UFO packets in udp_rcv_segment() (CVE-2025-38622)

    In the Linux kernel, the following vulnerability has been resolved:

    pinmux: fix race causing mux_owner NULL with active mux_usecount (CVE-2025-38632)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: xt_nfacct: don't assume acct name is null-terminated (CVE-2025-38639)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Disable migration in nf_hook_run_bpf(). (CVE-2025-38640)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Check device memory pointer before usage (CVE-2025-38645)

    In the Linux kernel, the following vulnerability has been resolved:

    proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CVE-2025-38653)

    In the Linux kernel, the following vulnerability has been resolved:

    [ceph] parse_longname(): strrchr() expects NUL-terminated string (CVE-2025-38660)

    In the Linux kernel, the following vulnerability has been resolved:

    can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode (CVE-2025-38665)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (CVE-2025-38670)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: state: initialize state_ptrs earlier in xfrm_state_find (CVE-2025-38675)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/amd: Avoid stack buffer overflow from kernel cmdline (CVE-2025-38676)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (CVE-2025-38681)

    In the Linux kernel, the following vulnerability has been resolved:

    hv_netvsc: Fix panic during namespace deletion with VF (CVE-2025-38683)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (CVE-2025-38685)

    In the Linux kernel, the following vulnerability has been resolved:

    userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (CVE-2025-38686)

    In the Linux kernel, the following vulnerability has been resolved:

    pNFS: Fix uninited ptr deref in block/scsi layout (CVE-2025-38691)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: add cluster chain loop check for dir (CVE-2025-38692)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (CVE-2025-38700)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (CVE-2025-38701)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: fix potential buffer overflow in do_register_framebuffer() (CVE-2025-38702)

    In the Linux kernel, the following vulnerability has been resolved:

    rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (CVE-2025-38704)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Add sanity check for file name (CVE-2025-38707)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: add missing kref_get in handle_write_conflicts (CVE-2025-38708)

    In the Linux kernel, the following vulnerability has been resolved:

    loop: Avoid updating block size under exclusive owner (CVE-2025-38709)

    In the Linux kernel, the following vulnerability has been resolved:

    net: kcm: Fix race condition in kcm_unattach() (CVE-2025-38717)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: fix refcount leak on table dump (CVE-2025-38721)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)

    In the Linux kernel, the following vulnerability has been resolved:

    smb3: fix for slab out of bounds on mount to ksmbd (CVE-2025-38728)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/net: commit partial buffers on retry (CVE-2025-38730)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_reject: don't leak dst refcount for loopback packets (CVE-2025-38732)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix oops due to uninitialised variable (CVE-2025-38737)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Fix backlog accounting in qdisc_dequeue_internal (CVE-2025-39677)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper (CVE-2025-39681)

    In the Linux kernel, the following vulnerability has been resolved:

    tls: fix handling of zero-length records on the rx_list (CVE-2025-39682)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Limit access to parser->buffer when trace_get_user failed (CVE-2025-39683)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Also allocate and copy hash for reading of filter files (CVE-2025-39689)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/buffer: fix use-after-free when call bh_read() helper (CVE-2025-39691)

    In the Linux kernel, the following vulnerability has been resolved:

    NFS: Fix a race when updating an existing write (CVE-2025-39697)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CVE-2025-39698)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/damon/ops-common: ignore migration request to invalid nodes (CVE-2025-39700)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: Validate length in packet header before skb_put() (CVE-2025-39718)

    In the Linux kernel, the following vulnerability has been resolved:

    netfs: Fix unbuffered write error handling (CVE-2025-39723)

    In the Linux kernel, the following vulnerability has been resolved:

    serial: 8250: fix panic due to PSLVERR (CVE-2025-39724)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list (CVE-2025-39725)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: swap: fix potential buffer overflow in setup_clusters() (CVE-2025-39727)

    In the Linux kernel, the following vulnerability has been resolved:

    NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert fs/ntfs3: Replace inode_trylock with inode_lock (CVE-2025-39734)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not allow relocation of partially dropped subvolumes (CVE-2025-39738)

    In the Linux kernel, the following vulnerability has been resolved:

    rcu: Fix rcu_read_unlock() deadloop due to IRQ work (CVE-2025-39744)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Forget ranges when refining tnum after JSET (CVE-2025-39748)

    In the Linux kernel, the following vulnerability has been resolved:

    rcu: Protect ->defer_qs_iw_pending from data race (CVE-2025-39749)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/smaps: fix race between smaps_hugetlb_range and migration (CVE-2025-39754)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: Prevent file descriptor table allocations exceeding INT_MAX (CVE-2025-39756)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: qgroup: fix race between quota disable and quota rescan ioctl (CVE-2025-39759)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: core: config: Prevent OOB read in SS endpoint companion parsing (CVE-2025-39760)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (CVE-2025-39763)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)

    In the Linux kernel, the following vulnerability has been resolved:

    net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM (CVE-2025-39770)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: fix soft lockup in br_multicast_query_expired() (CVE-2025-39773)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: subpage: keep TOWRITE tag until folio is cleaned (CVE-2025-39779)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/ext: Fix invalid task state transitions on class switch (CVE-2025-39780)

    In the Linux kernel, the following vulnerability has been resolved:

    jbd2: prevent softlockup in jbd2_log_do_checkpoint() (CVE-2025-39782)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: endpoint: Fix configfs group list head handling (CVE-2025-39783)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: dm-crypt: Do not partially accept write BIOs with zoned targets (CVE-2025-39791)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: Always split write BIOs to zoned device limits (CVE-2025-39792)

    In the Linux kernel, the following vulnerability has been resolved:

    block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (CVE-2025-39795)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: Duplicate SPI Handling (CVE-2025-39797)

    In the Linux kernel, the following vulnerability has been resolved:

    NFS: Fix the setting of capabilities when automounting a new filesystem (CVE-2025-39798)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (CVE-2025-39800)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: initialize more fields in sctp_v6_from_sk() (CVE-2025-39812)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (CVE-2025-39813)

    In the Linux kernel, the following vulnerability has been resolved:

    efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/smb: Fix inconsistent refcnt update (CVE-2025-39819)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: use array_index_nospec with indices that come from guest (CVE-2025-39823)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: asus: fix UAF via HID_CLAIMED_INPUT validation (CVE-2025-39824)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)

    In the Linux kernel, the following vulnerability has been resolved:

    trace/fgraph: Fix the warning caused by missing unregister notifier (CVE-2025-39829)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Fix lockdep assertion on sync reset unload event (CVE-2025-39832)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: do not propagate ENODATA disk errors into xattr code (CVE-2025-39835)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: prevent NULL pointer dereference in UTF16 conversion (CVE-2025-39838)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: move page table sync declarations to linux/pgtable.h (CVE-2025-39844)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (CVE-2025-39845)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (CVE-2025-39850)

    In the Linux kernel, the following vulnerability has been resolved:

    vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (CVE-2025-39851)

    In the Linux kernel, the following vulnerability has been resolved:

    net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 (CVE-2025-39852)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (CVE-2025-39894)

    In the Linux kernel, the following vulnerability has been resolved:

    sched: Fix sched_numa_find_nth_cpu() if mask offline (CVE-2025-39895)

    In the Linux kernel, the following vulnerability has been resolved:

    e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE (CVE-2025-39899)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (CVE-2025-39900)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/slub: avoid accessing metadata when pointer is invalid in object_err() (CVE-2025-39902)

    In the Linux kernel, the following vulnerability has been resolved:

    of_numa: fix uninitialized memory nodes causing kernel panic (CVE-2025-39903)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6009 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6009-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     September 22, 2025                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-47704 CVE-2024-57924 CVE-2024-58240 CVE-2025-23143                      CVE-2025-23160 CVE-2025-37931 CVE-2025-37968 CVE-2025-38322                      CVE-2025-38347 CVE-2025-38491 CVE-2025-38502 CVE-2025-38552                      CVE-2025-38614 CVE-2025-38670 CVE-2025-38676 CVE-2025-38677                      CVE-2025-38679 CVE-2025-38680 CVE-2025-38681 CVE-2025-38683                      CVE-2025-38684 CVE-2025-38685 CVE-2025-38687 CVE-2025-38691                      CVE-2025-38693 CVE-2025-38694 CVE-2025-38695 CVE-2025-38696                      CVE-2025-38697 CVE-2025-38698 CVE-2025-38699 CVE-2025-38700                      CVE-2025-38701 CVE-2025-38702 CVE-2025-38706 CVE-2025-38707                      CVE-2025-38708 CVE-2025-38711 CVE-2025-38712 CVE-2025-38713                      CVE-2025-38714 CVE-2025-38715 CVE-2025-38721 CVE-2025-38723                      CVE-2025-38724 CVE-2025-38725 CVE-2025-38727 CVE-2025-38728                      CVE-2025-38729 CVE-2025-38732 CVE-2025-38735 CVE-2025-38736                      CVE-2025-39673 CVE-2025-39675 CVE-2025-39676 CVE-2025-39681                      CVE-2025-39682 CVE-2025-39683 CVE-2025-39684 CVE-2025-39685                      CVE-2025-39686 CVE-2025-39687 CVE-2025-39689 CVE-2025-39691                      CVE-2025-39692 CVE-2025-39693 CVE-2025-39694 CVE-2025-39697                      CVE-2025-39701 CVE-2025-39702 CVE-2025-39703 CVE-2025-39706                      CVE-2025-39709 CVE-2025-39710 CVE-2025-39713 CVE-2025-39714                      CVE-2025-39715 CVE-2025-39716 CVE-2025-39718 CVE-2025-39719                      CVE-2025-39724 CVE-2025-39736 CVE-2025-39737 CVE-2025-39738                      CVE-2025-39742 CVE-2025-39743 CVE-2025-39749 CVE-2025-39751                      CVE-2025-39752 CVE-2025-39756 CVE-2025-39757 CVE-2025-39759                      CVE-2025-39760 CVE-2025-39766 CVE-2025-39770 CVE-2025-39772                      CVE-2025-39773 CVE-2025-39776 CVE-2025-39782 CVE-2025-39783                      CVE-2025-39787 CVE-2025-39788 CVE-2025-39790 CVE-2025-39794                      CVE-2025-39795 CVE-2025-39798 CVE-2025-39800 CVE-2025-39801                      CVE-2025-39806 CVE-2025-39808 CVE-2025-39812 CVE-2025-39813                      CVE-2025-39817 CVE-2025-39819 CVE-2025-39823 CVE-2025-39824                      CVE-2025-39825 CVE-2025-39826 CVE-2025-39827 CVE-2025-39828                      CVE-2025-39835 CVE-2025-39838 CVE-2025-39839 CVE-2025-39841                      CVE-2025-39842 CVE-2025-39843 CVE-2025-39844 CVE-2025-39845                      CVE-2025-39846 CVE-2025-39847 CVE-2025-39848 CVE-2025-39849                      CVE-2025-39853 CVE-2025-39857 CVE-2025-39860 CVE-2025-39864                      CVE-2025-39865 CVE-2025-39866 CVE-2025-40300

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 6.1.153-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1186 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    tls: separate no-async decryption request handling from async (CVE-2024-58240)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix UAF in decryption with multichannel (CVE-2025-37750)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: make fallback action and fallback decision atomic (CVE-2025-38491)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: plug races between subflow fail and subflow creation (CVE-2025-38552)

    In the Linux kernel, the following vulnerability has been resolved:

    eventpoll: Fix semi-unbounded recursion (CVE-2025-38614)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (CVE-2025-38670)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/amd: Avoid stack buffer overflow from kernel cmdline (CVE-2025-38676)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (CVE-2025-38681)

    In the Linux kernel, the following vulnerability has been resolved:

    hv_netvsc: Fix panic during namespace deletion with VF (CVE-2025-38683)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: ets: use old 'nbands' while purging unused classes (CVE-2025-38684)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (CVE-2025-38685)

    In the Linux kernel, the following vulnerability has been resolved:

    pNFS: Fix uninited ptr deref in block/scsi layout (CVE-2025-38691)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (CVE-2025-38700)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (CVE-2025-38701)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: fix potential buffer overflow in do_register_framebuffer() (CVE-2025-38702)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Add sanity check for file name (CVE-2025-38707)

    In the Linux kernel, the following vulnerability has been resolved:

    drbd: add missing kref_get in handle_write_conflicts (CVE-2025-38708)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: fix refcount leak on table dump (CVE-2025-38721)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)

    In the Linux kernel, the following vulnerability has been resolved:

    smb3: fix for slab out of bounds on mount to ksmbd (CVE-2025-38728)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_reject: don't leak dst refcount for loopback packets (CVE-2025-38732)

    In the Linux kernel, the following vulnerability has been resolved:

    ppp: fix race conditions in ppp_fill_forward_path (CVE-2025-39673)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper (CVE-2025-39681)

    In the Linux kernel, the following vulnerability has been resolved:

    tls: fix handling of zero-length records on the rx_list (CVE-2025-39682)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Limit access to parser->buffer when trace_get_user failed (CVE-2025-39683)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Also allocate and copy hash for reading of filter files (CVE-2025-39689)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/buffer: fix use-after-free when call bh_read() helper (CVE-2025-39691)

    In the Linux kernel, the following vulnerability has been resolved:

    NFS: Fix a race when updating an existing write (CVE-2025-39697)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: sr: Fix MAC comparison to be constant-time (CVE-2025-39702)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: Validate length in packet header before skb_put() (CVE-2025-39718)

    In the Linux kernel, the following vulnerability has been resolved:

    serial: 8250: fix panic due to PSLVERR (CVE-2025-39724)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (CVE-2025-39736)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not allow relocation of partially dropped subvolumes (CVE-2025-39738)

    In the Linux kernel, the following vulnerability has been resolved:

    rcu: Protect ->defer_qs_iw_pending from data race (CVE-2025-39749)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: Prevent file descriptor table allocations exceeding INT_MAX (CVE-2025-39756)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: qgroup: fix race between quota disable and quota rescan ioctl (CVE-2025-39759)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: core: config: Prevent OOB read in SS endpoint companion parsing (CVE-2025-39760)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)

    In the Linux kernel, the following vulnerability has been resolved:

    net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM (CVE-2025-39770)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: fix soft lockup in br_multicast_query_expired() (CVE-2025-39773)

    In the Linux kernel, the following vulnerability has been resolved:

    jbd2: prevent softlockup in jbd2_log_do_checkpoint() (CVE-2025-39782)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: endpoint: Fix configfs group list head handling (CVE-2025-39783)

    In the Linux kernel, the following vulnerability has been resolved:

    block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (CVE-2025-39795)

    In the Linux kernel, the following vulnerability has been resolved:

    NFS: Fix the setting of capabilities when automounting a new filesystem (CVE-2025-39798)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (CVE-2025-39800)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: initialize more fields in sctp_v6_from_sk() (CVE-2025-39812)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (CVE-2025-39813)

    In the Linux kernel, the following vulnerability has been resolved:

    efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/smb: Fix inconsistent refcnt update (CVE-2025-39819)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: use array_index_nospec with indices that come from guest (CVE-2025-39823)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: asus: fix UAF via HID_CLAIMED_INPUT validation (CVE-2025-39824)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: do not propagate ENODATA disk errors into xattr code (CVE-2025-39835)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of     bounds during mount to ksmbd due to missing check in parse_server_interfaces() (see below): BUG: KASAN:
    slab-out-of-bounds in parse_server_interfaces+0x14ee/0x1880 [cifs] Read of size 4 at addr ffff8881433dba98     by task mount/9827 CPU: 5 UID: 0 PID: 9827 Comm: mount Tainted: G OE 6.16.0-rc2-kasan #2     PREEMPT(voluntary) Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: Dell Inc. Precision Tower     3620/0MWYPT, BIOS 2.13.1 06/14/2019 Call Trace: <TASK> dump_stack_lvl+0x9f/0xf0 print_report+0xd1/0x670
    __virt_addr_valid+0x22c/0x430 ? parse_server_interfaces+0x14ee/0x1880 [cifs] ?     kasan_complete_mode_report_info+0x2a/0x1f0 ? parse_server_interfaces+0x14ee/0x1880 [cifs]     kasan_report+0xd6/0x110 parse_server_interfaces+0x14ee/0x1880 [cifs]
    __asan_report_load_n_noabort+0x13/0x20 parse_server_interfaces+0x14ee/0x1880 [cifs] ?
    __pfx_parse_server_interfaces+0x10/0x10 [cifs] ? trace_hardirqs_on+0x51/0x60     SMB3_request_interfaces+0x1ad/0x3f0 [cifs] ? __pfx_SMB3_request_interfaces+0x10/0x10 [cifs] ?     SMB2_tcon+0x23c/0x15d0 [cifs] smb3_qfs_tcon+0x173/0x2b0 [cifs] ? __pfx_smb3_qfs_tcon+0x10/0x10 [cifs] ?     cifs_get_tcon+0x105d/0x2120 [cifs] ? do_raw_spin_unlock+0x5d/0x200 ? cifs_get_tcon+0x105d/0x2120 [cifs] ?
    __pfx_smb3_qfs_tcon+0x10/0x10 [cifs] cifs_mount_get_tcon+0x369/0xb90 [cifs] ? dfs_cache_find+0xe7/0x150     [cifs] dfs_mount_share+0x985/0x2970 [cifs] ? check_path.constprop.0+0x28/0x50 ? save_trace+0x54/0x370 ?
    __pfx_dfs_mount_share+0x10/0x10 [cifs] ? __lock_acquire+0xb82/0x2ba0 ? __kasan_check_write+0x18/0x20     cifs_mount+0xbc/0x9e0 [cifs] ? __pfx_cifs_mount+0x10/0x10 [cifs] ? do_raw_spin_unlock+0x5d/0x200 ?     cifs_setup_cifs_sb+0x29d/0x810 [cifs] cifs_smb3_do_mount+0x263/0x1990 [cifs] (CVE-2025-38728)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
298892	Ubuntu 22.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8031-1)	Nessus	Ubuntu Local Security Checks	high
298806	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8028-1)	Nessus	Ubuntu Local Security Checks	high
297598	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1212)	Nessus	Huawei Local Security Checks	high
297592	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1224)	Nessus	Huawei Local Security Checks	high
297194	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2026:0315-1)	Nessus	SuSE Local Security Checks	high
297090	SUSE SLES12 Security Update : kernel (SUSE-SU-2026:0316-1)	Nessus	SuSE Local Security Checks	high
296680	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2026:0293-1)	Nessus	SuSE Local Security Checks	high
296676	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:0281-1)	Nessus	SuSE Local Security Checks	high
296481	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:0278-1)	Nessus	SuSE Local Security Checks	high
279677	openSUSE 16 Security Update : kernel (openSUSE-SU-2025:20172-1)	Nessus	SuSE Local Security Checks	high
270575	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20662)	Nessus	Oracle Linux Local Security Checks	high
270134	Debian dla-4328 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	high
269971	Photon OS 4.0: Linux PHSA-2025-4.0-0885	Nessus	PhotonOS Local Security Checks	medium
266289	Photon OS 5.0: Linux PHSA-2025-5.0-0630	Nessus	PhotonOS Local Security Checks	high
266176	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2025-1208)	Nessus	Amazon Linux Local Security Checks	high
265709	Debian dsa-6009 : affs-modules-6.1.0-37-4kc-malta-di - security update	Nessus	Debian Local Security Checks	medium
264826	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1186)	Nessus	Amazon Linux Local Security Checks	high
261546	Linux Distros Unpatched Vulnerability : CVE-2025-38728	Nessus	Misc.	high

Detections

Analytics

CVE-2025-38728

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

medium

high

high

medium

high

high