The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0755-1 advisory.

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.


    Transient execution side-channel attacks attacking the Branch History Buffer (BHB),     named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

    The following security bugs were fixed:

    - CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-     only) files (bsc#1196584).
    - CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
    - CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
    - CVE-2022-25375: The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command.
    Attackers can obtain sensitive information from kernel memory (bsc#1196235).
    - CVE-2022-0516: Fixed missing check in ioctl related to KVM in s390 allows kernel memory read/write     (bsc#1195516).
    - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed     bypassing namespace isolation unexpectedly (bsc#1195543).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2022:0755-1)

high Nessus Plugin ID 159178

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.13 Jun 26, 2026, 4:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606261608
Version 1.12 Jun 4, 2026, 12:07 AM CISA reference Plugin Feed: 202606040007
Version 1.11 Jun 3, 2026, 10:45 AM CISA reference Plugin Feed: 202606031045
Version 1.10 Jul 14, 2023, 8:58 AM Detection Exploit attributes ("Exploit framework metasploit" set to "True". "Exploited by malware" set to "True") Plugin metadata Plugin Feed: 202307140858
Version 1.9 Jul 12, 2023, 5:37 PM Detection Plugin Feed: 202307121737
Version 1.8 Mar 10, 2023, 5:10 PM Logic Changes (Added support for additional SUSE Platforms) Plugin Feed: 202303101710
Version 1.7 Jan 13, 2023, 4:18 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301131618