The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7939-1 advisory.

    Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel     contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain     processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose     sensitive information from the host OS. (CVE-2025-40300)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Cryptographic API;

    - ACPI drivers;

    - HSI subsystem;

    - I3C subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - Network drivers;

    - Pin controllers subsystem;

    - AFS file system;

    - F2FS file system;

    - SMB network file system;

    - Padata parallel execution mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Memory management;

    - Appletalk network protocol;

    - Networking core;

    - Netfilter; (CVE-2022-49026, CVE-2022-49390, CVE-2023-52854, CVE-2024-35867, CVE-2024-47691,     CVE-2024-49935, CVE-2024-50061, CVE-2024-50067, CVE-2024-50095, CVE-2024-50196, CVE-2024-53090,     CVE-2024-53218, CVE-2024-56664, CVE-2025-21727, CVE-2025-21855, CVE-2025-37838, CVE-2025-37958,     CVE-2025-38352, CVE-2025-38666, CVE-2025-39964, CVE-2025-39993, CVE-2025-40018)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7939-1)

high Nessus Plugin ID 279031

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Sep 19, 2026, 11:21 PM CISA reference Plugin Feed: 202609192321
Version 1.3 Sep 19, 2026, 6:50 AM CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202609190650
Version 1.2 Feb 23, 2026, 1:38 PM CVSSv2 score source (changed from "CVE-2025-21855" to "CVE-2025-38666") Plugin Feed: 202602231338
Version 1.1 Dec 18, 2025, 9:40 AM New Plugin Feed: 202512180940