The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0760-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.


    Transient execution side-channel attacks attacking the Branch History Buffer (BHB),     named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

    The following security bugs were fixed:

    - CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
    - CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
    - CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-     only) files (bsc#1196584).
    - CVE-2022-25375: The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command.
    Attackers can obtain sensitive information from kernel memory (bnc#1196235 ).
    - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed     bypassing namespace isolation unexpectedly (bsc#1195543).
    - CVE-2022-0516: Fixed missing check in ioctl related to KVM in s390 allows kernel memory read/write     (bsc#1195516).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2022:0760-1)

high Nessus Plugin ID 159164

Version 1.15

Version 1.14

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.15 Jun 26, 2026, 4:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606261608
Version 1.14 Jun 4, 2026, 12:07 AM CISA reference Plugin Feed: 202606040007
Version 1.13 Jun 3, 2026, 10:45 AM CISA reference Plugin Feed: 202606031045
Version 1.12 Jul 14, 2023, 8:58 AM Detection Exploit attributes ("Exploit framework metasploit" set to "True". "Exploited by malware" set to "True") Plugin metadata Plugin Feed: 202307140858
Version 1.11 Jul 12, 2023, 5:37 PM Detection Plugin Feed: 202307121737
Version 1.10 Mar 10, 2023, 5:10 PM Logic Changes (Added support for additional SUSE Platforms) Plugin Feed: 202303101710
Version 1.9 Jan 13, 2023, 4:18 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301131618
Version 1.8 Jan 10, 2023, 4:22 PM Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202301101622
Version 1.7 Jan 9, 2023, 5:55 PM Regenerated based on advisory update Plugin Feed: 202301091755