It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1053 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: Flush gso_skb list too during ->change() (CVE-2025-37992)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/page_alloc: fix race condition in unaccepted memory handling (CVE-2025-38008)

    In the Linux kernel, the following vulnerability has been resolved:

    sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (CVE-2025-38012)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: bpf: abort dispatch if device destroyed (CVE-2025-38016)

    In the Linux kernel, the following vulnerability has been resolved:

    net/tls: fix kernel panic when alloc_page failed (CVE-2025-38018)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Disable MACsec offload for uplink representor profile (CVE-2025-38020)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/core: Fix KASAN: slab-use-after-free Read in ib_register_device problem (CVE-2025-38022)

    In the Linux kernel, the following vulnerability has been resolved:

    nfs: handle failure of nfs_get_lock_context in unlock path (CVE-2025-38023)

    In the Linux kernel, the following vulnerability has been resolved:

    dma-buf: insert memory barrier before updating num_fences (CVE-2025-38095)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : bpftool, kernel6.12, kernel6.12-modules-extra (ALAS2023-2025-1053)

medium Nessus Plugin ID 241742

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Aug 13, 2025, 7:42 PM Detection (updated to only impact affected kernel) Plugin Feed: 202508131942
Version 1.2 Jul 15, 2025, 2:39 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202507150239
Version 1.1 Jul 11, 2025, 4:37 AM New Plugin Feed: 202507110437