The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7907-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Cryptographic API;

    - ACPI drivers;

    - Hardware monitoring drivers;

    - InfiniBand drivers;

    - Mailbox framework;

    - Network drivers;

    - AFS file system;

    - Ceph distributed file system;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File systems infrastructure;

    - KVM subsystem;

    - L3 Master device support module;

    - Tracing infrastructure;

    - Memory management;

    - Appletalk network protocol;

    - Netfilter;

    - Open vSwitch; (CVE-2021-47385, CVE-2022-49026, CVE-2022-49390, CVE-2024-49935, CVE-2024-49963,     CVE-2024-50067, CVE-2024-50095, CVE-2024-50179, CVE-2024-53090, CVE-2024-53112, CVE-2024-53217,     CVE-2024-58083, CVE-2025-21715, CVE-2025-21722, CVE-2025-21761, CVE-2025-21791, CVE-2025-21811,     CVE-2025-21855, CVE-2025-37958, CVE-2025-38666, CVE-2025-39964, CVE-2025-40018)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7907-1)

high Nessus Plugin ID 277451

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Sep 19, 2026, 6:50 AM CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202609190650
Version 1.2 Feb 26, 2026, 8:51 AM CVSSv2 score source (changed from "CVE-2025-21855" to "CVE-2025-38666") Plugin Feed: 202602260851
Version 1.1 Dec 4, 2025, 7:43 PM New Plugin Feed: 202512041943