In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missing in gmap_helper_zap_one_page(), which can lead to memory corruption in the guest under specific circumstances. Add the missing checks.

The remote Ubuntu 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8310-1 advisory.

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic     operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or     possibly escape a container. (CVE-2026-31431)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - S390 architecture;

    - Cryptographic API;

    - GPU drivers;

    - Ethernet bonding driver;

    - Microsoft Azure Network Adapter (MANA) driver;

    - Network file system (NFS) server daemon;

    - Distributed Switch Architecture;

    - Netfilter;

    - Control group (cgroup);

    - Kernel kexec() syscall;

    - Memory management;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Packet sockets;

    - TLS protocol;

    - Unix domain sockets; (CVE-2025-71088, CVE-2025-71090, CVE-2025-71127, CVE-2025-71134, CVE-2025-71139,     CVE-2025-71141, CVE-2025-71142, CVE-2025-71144, CVE-2025-71152, CVE-2025-71155, CVE-2026-23274,     CVE-2026-23351, CVE-2026-23394, CVE-2026-23454, CVE-2026-31419, CVE-2026-31504, CVE-2026-31533,     CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-43276)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 25.10 / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8277-1 advisory.

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic     operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or     possibly escape a container. (CVE-2026-31431)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - S390 architecture;

    - Cryptographic API;

    - GPU drivers;

    - Ethernet bonding driver;

    - Network file system (NFS) server daemon;

    - Distributed Switch Architecture;

    - Netfilter;

    - Control group (cgroup);

    - Kernel kexec() syscall;

    - Memory management;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Packet sockets;

    - TLS protocol;

    - Unix domain sockets; (CVE-2025-71088, CVE-2025-71090, CVE-2025-71127, CVE-2025-71134, CVE-2025-71139,     CVE-2025-71141, CVE-2025-71142, CVE-2025-71144, CVE-2025-71152, CVE-2025-71155, CVE-2026-23274,     CVE-2026-23351, CVE-2026-23394, CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033,     CVE-2026-43077, CVE-2026-43078)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix     gmap_helper_zap_one_page() again A few checks were missing in gmap_helper_zap_one_page(), which can lead     to memory corruption in the guest under specific circumstances. Add the missing checks. (CVE-2025-71155)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
317095	Ubuntu 24.04 LTS / 25.10 : Linux kernel (Azure) vulnerabilities (USN-8310-1)	Nessus	Ubuntu Local Security Checks	high
315742	Ubuntu 25.10 / Pro Realtime 24.04 LTS : Linux kernel vulnerabilities (USN-8277-1)	Nessus	Ubuntu Local Security Checks	high
296407	Linux Distros Unpatched Vulnerability : CVE-2025-71155	Nessus	Misc.	high

Detections

Analytics

CVE-2025-71155

high

Tenable Plugins

high

high

high