The version of kernel installed on the remote host is prior to 5.4.293-211.419. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-102 advisory.

    2025-07-03: CVE-2025-23150 was added to this advisory.

    2025-06-27: CVE-2025-37940 was added to this advisory.

    2025-06-19: CVE-2025-37785 was added to this advisory.

    2025-06-19: CVE-2025-37773 was added to this advisory.

    2025-06-19: CVE-2025-23147 was added to this advisory.

    2025-06-19: CVE-2025-23163 was added to this advisory.

    2025-06-19: CVE-2021-47352 was added to this advisory.

    2025-06-19: CVE-2025-37757 was added to this advisory.

    2025-06-19: CVE-2025-37797 was added to this advisory.

    2025-06-19: CVE-2025-37789 was added to this advisory.

    2025-06-19: CVE-2025-37780 was added to this advisory.

    2025-06-19: CVE-2024-26744 was added to this advisory.

    2025-06-19: CVE-2025-37738 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    virtio-net: Add validation for used length (CVE-2021-47352)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927)

    In the Linux kernel, the following vulnerability has been resolved:

    i3c: Add NULL pointer check in i3c_master_queue_ibi() (CVE-2025-23147)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix off-by-one error in do_split (CVE-2025-23150)

    In the Linux kernel, the following vulnerability has been resolved:

    net: vlan: don't propagate flags on open (CVE-2025-23163)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: ignore xattrs past end (CVE-2025-37738)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix memory leak in tipc_link_xmit (CVE-2025-37757)

    In the Linux kernel, the following vulnerability has been resolved:

    virtiofs: add filesystem context source name check (CVE-2025-37773)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: Prevent the use of too small fid (CVE-2025-37780)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix OOB read when checking dotdot dir (CVE-2025-37785)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Add cond_resched() to ftrace_graph_set_hash() (CVE-2025-37940)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2025-102)

high Nessus Plugin ID 237516

Version 1.3

Version 1.1

Version 1.3 Jul 8, 2025, 1:52 AM CVE (set "CVE" coverage to "CVE-2021-47352,CVE-2024-26744,CVE-2025-21927,CVE-2025-23147,CVE-2025-23150,CVE-2025-23163,CVE-2025-37738,CVE-2025-37757,CVE-2025-37773,CVE-2025-37780,CVE-2025-37785,CVE-2025-37789,CVE-2025-37797,CVE-2025-37940") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202507080152
Version 1.1 May 30, 2025, 6:55 AM New Plugin Feed: 202505300655