The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1776-1 advisory.

    This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.170 fixes various security issues

    The following security issues were fixed:

    - CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1258073).
    - CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252048).
    - CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change     (bsc#1258005).
    - CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655).
    - CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).
    - CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:1776-1)

high Nessus Plugin ID 313645

Version 1.2