The remote SUSE Linux SLES16 / SLES_SAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20149-1 advisory.

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues

    The following security issues were fixed:

    - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019).
    - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface     (bsc#1248672).
    - CVE-2025-38554: mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped (bsc#1248301).
    - CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
    - CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241).
    - CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
    - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).
    - CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208).
    - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207).
    - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631).
    - CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192).
    - CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251982).
    - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
    - CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196).

    The following non security issues were fixed:

    - Explicitly add module-common.c with vermagic and retpoline modinfo (bsc#1252270).
    - powerpc64/modules: correctly iterate over stubs in setup_ftrace_ool_stubs (bsc#1251956).
    - fix addr_bit_set() issue on big-endian machines (bsc#1256928).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES16 Security Update : kernel (Live Patch 0 for SUSE Linux Enterprise 16) (SUSE-SU-2026:20149-1)

high Nessus Plugin ID 297082

Version 1.2

Version 1.1

Version 1.2 Feb 5, 2026, 4:41 PM CVSSv2 score source (changed from "CVE-2025-38618" to "CVE-2025-39963") Plugin Feed: 202602051641
Version 1.1 Jan 29, 2026, 12:27 PM New Plugin Feed: 202601291227