Detections
Analytics
EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-2418)
high Nessus Plugin ID 274882
Synopsis
The remote EulerOS host is missing multiple security updates.Description
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()(CVE-2022-49840)
ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network(CVE-2022-49865)
ftrace: Fix use-after-free for dynamic ftrace_ops(CVE-2022-49892)
ipv6: fix WARNING in ip6_route_net_exit_late()(CVE-2022-49903)
net: mdio: fix undefined behavior in bit shift for __mdiobus_register(CVE-2022-49907)
ipvs: fix WARNING in ip_vs_app_net_cleanup()(CVE-2022-49917)
ipvs: fix WARNING in __ip_vs_cleanup_batch()(CVE-2022-49918)
net: sched: Fix use after free in red_enqueue()(CVE-2022-49921)
drivers:md:fix a potential use-after-free bug(CVE-2022-50022)
scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs-cpus_allowed(CVE-2022-50103)
dm crypt: add cond_resched() to dmcrypt_write()(CVE-2023-53051)
erspan: do not use skb_mac_header() in ndo_start_xmit()(CVE-2023-53053)
net: usb: smsc95xx: Limit packet length to skb-len(CVE-2023-53062)
qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info(CVE-2023-53066)
net: tunnels: annotate lockless accesses to dev-needed_headroom(CVE-2023-53109)
net: usb: smsc75xx: Limit packet length to skb-len(CVE-2023-53125)
xfrm: state: fix out-of-bounds read during lookup(CVE-2024-57982)
net: fix geneve_opt length integer overflow(CVE-2025-22055)
sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()(CVE-2025-38000)
dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)
crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)
net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)
ipc: fix to protect IPCS lookups using RCU(CVE-2025-38212)
ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)
bpf: Fix WARN() in get_bpf_raw_tp_regs(CVE-2025-38285)
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()(CVE-2025-38337)
ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)
perf: Fix sample vs do_exit()(CVE-2025-38424)
clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns(CVE-2025-38499)
Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected kernel packages.See Also
Plugin Details
Severity: High
ID: 274882
File Name: EulerOS_SA-2025-2418.nasl
Version: 1.1
Type: local
Family: Huawei Local Security Checks
Published: 11/12/2025
Updated: 11/12/2025
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2022-49921
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:kernel, p-cpe:/a:huawei:euleros:kernel-tools, p-cpe:/a:huawei:euleros:kernel-tools-libs, p-cpe:/a:huawei:euleros:python3-perf, p-cpe:/a:huawei:euleros:kernel-abi-stablelists
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp
Excluded KB Items: Host/EulerOS/uvp_version
Exploit Ease: No known exploits are available
Patch Publication Date: 11/11/2025
Vulnerability Publication Date: 10/11/2022
Reference Information
CVE: CVE-2022-49840, CVE-2022-49865, CVE-2022-49892, CVE-2022-49903, CVE-2022-49907, CVE-2022-49917, CVE-2022-49918, CVE-2022-49921, CVE-2022-50022, CVE-2022-50098, CVE-2022-50103, CVE-2023-53051, CVE-2023-53053, CVE-2023-53062, CVE-2023-53066, CVE-2023-53109, CVE-2023-53125, CVE-2024-57982, CVE-2025-22055, CVE-2025-37932, CVE-2025-38000, CVE-2025-38063, CVE-2025-38079, CVE-2025-38086, CVE-2025-38212, CVE-2025-38222, CVE-2025-38285, CVE-2025-38312, CVE-2025-38337, CVE-2025-38386, CVE-2025-38424, CVE-2025-38499