远程 Ubuntu 24.04 LTS 主机上安装的一个程序包受到 USN-6952-2 公告中提及的多个漏洞影响。

    Benedict Schlter、Supraja Sridhara、Andrin Bertschi 和 Shweta Shinde 发现不受信任的管理程序可能会注入恶意 #VC 中断，并危害 AMD SEV-SNP 的安全保证。
    此缺陷称作 WeSee。控制管理程序的本地攻击者可利用此问题来暴露敏感信息，或可能在受信任的执行环境中执行任意代码。
    (CVE-2024-25742)

    在 Linux 内核中发现多个安全问题。攻击者可能利用这些问题入侵系统。此更新修正了以下子系统中的缺陷：

    - ARM32 架构；

    - ARM64 架构；

    - M68K 架构；

    - OpenRISC 架构；

    - PowerPC 架构；

    - RISC-V 架构；

    - x86 架构；

    - 区块层子系统；

    - 可访问性子系统；

    - 蓝牙驱动程序；

    - 时钟框架和驱动程序；

    - CPU 频率缩放框架；

    - 硬件加密设备驱动程序；

    - DMA 引擎子系统；

    - DPLL 子系统；

    - FireWire 子系统；

    - EFI 核心；

    - Qualcomm 固件驱动程序；

    - GPIO 子系统；

    - GPU 驱动程序；

    - HID 子系统；

    - Microsoft Hyper-V 驱动程序；

    - I2C 子系统；

    - InfiniBand 驱动程序；

    - IOMMU 子系统；

    - IRQ 芯片驱动程序；

    - Macintosh 设备驱动程序；

    - 多设备驱动程序；

    - 媒体驱动程序；

    - EEPROM 驱动程序；

    - MMC 子系统；

    - 网络驱动程序；

    - STMicroelectronics 网络驱动程序；

    - 设备树和 Open Firmware 驱动程序；

    - HiSilicon SoC PMU 驱动程序；

    - PHY 驱动程序；

    - Pin 控制器子系统；

    - 远程处理器子系统；

    - S/390 驱动程序；

    - SCSI 驱动程序；

    - SPI 子系统；

    - 媒体分段驱动程序；

    - 热驱动程序；

    - TTY 驱动程序；

    - Userspace I/O 驱动程序；

    - USB 子系统；

    - DesignWare USB3 驱动程序；

    - ACRN Hypervisor Service Module 驱动程序；

    - Virtio 驱动程序；

    - 9P 分布式文件系统；

    - BTRFS 文件系统；

    - eCrypt 文件系统；

    - EROFS 文件系统；

    - 文件系统基础设施；

    - GFS2 文件系统；

    - JFFS2 文件系统；

    - 网络文件系统库；

    - 网络文件系统客户端；

    - 网络文件系统服务器后台程序；

    - NILFS2 文件系统；

    - Proc 文件系统；

    - SMB 网络文件系统；

    - 跟踪文件系统；

    - Mellanox 驱动程序；

    - 内存管理；

    - 套接字消息基础架构；

    - Slab 分配器；

    - 跟踪基础设施；

    - 用户空间 API (UAPI)；

    - Core 内核；

    - BPF 子系统；

    - DMA 映射基础设施；

    - RCU 子系统；

    - 动态调试库；

    - KUnit 库；

    - Maple Tree 数据结构库；

    - 异质内存管理；

    - Amateur Radio 驱动程序；

    - 蓝牙子系统；

    - 以太网桥接；

    - Networking 核心；

    - IPv4 联网；

    - IPv6 联网；

    - 多路径 TCP；

    - Netfilter；

    - NET/ROM 层；

    - NFC 子系统；

    - NSH 方案；

    - Open vSwitch；

    - Phonet 协议；

    - SMC 套接字；

    - TIPC 协议；

    - Unix 域套接字；

    - 无线网络；

    - 密钥管理；

    - ALSA 框架；

    - HD-audio 驱动程序；

    - Kirkwood ASoC 驱动程序；

    - MediaTek ASoC 驱动程序（CVE-2024-38601、CVE-2024-36935、CVE-2024-35991、CVE-2024-36032、CVE-2024-35988、CVE-2024-36886、CVE-2024-36913、CVE-2024-36928、CVE-2024-38553、CVE-2024-36927、CVE-2024-38615、CVE-2024-36958、CVE-2024-36977、CVE-2024-36889、CVE-2024-38554、CVE-2024-38590、CVE-2024-42134、CVE-2024-35857、CVE-2024-35850、CVE-2024-35986、CVE-2024-36921、CVE-2024-38569、CVE-2024-36966、CVE-2024-38542、CVE-2024-38585、CVE-2024-36884、CVE-2024-36006、CVE-2024-38577、CVE-2024-36016、CVE-2024-38584、CVE-2024-36887、CVE-2024-38598、CVE-2024-35994、CVE-2024-38603、CVE-2024-35998、CVE-2024-27401、CVE-2024-35852、CVE-2024-36944、CVE-2024-38572、CVE-2024-36917、CVE-2024-36943、CVE-2024-36009、CVE-2024-38587、CVE-2024-35949、CVE-2024-36945、CVE-2024-36004、CVE-2024-36919、CVE-2024-27398、CVE-2024-38582、CVE-2024-35847、CVE-2024-38580、CVE-2024-38602、CVE-2024-36916、CVE-2024-36903、CVE-2024-38555、CVE-2024-36952、CVE-2024-38589、CVE-2024-27394、CVE-2024-36933、CVE-2024-36975、CVE-2024-38591、CVE-2024-38612、CVE-2024-36939、CVE-2024-35983、CVE-2024-38607、CVE-2024-36929、CVE-2024-35849、CVE-2024-36941、CVE-2024-35858、CVE-2024-38599、CVE-2024-35996、CVE-2024-36031、CVE-2024-36931、CVE-2024-35990、CVE-2024-35851、CVE-2024-38556、CVE-2024-36000、CVE-2024-36910、CVE-2024-38573、CVE-2024-36906、CVE-2024-36951、CVE-2024-38604、CVE-2024-38613、CVE-2024-38547、CVE-2024-36014、CVE-2024-36949、CVE-2024-36033、CVE-2024-38597、CVE-2024-36880、CVE-2024-38594、CVE-2024-36894、CVE-2024-38546、CVE-2024-36947、CVE-2024-38541、CVE-2024-35989、CVE-2024-27399、CVE-2024-38550、CVE-2024-36922、CVE-2024-36008、CVE-2024-38540、CVE-2024-36924、CVE-2024-36892、CVE-2024-38549、CVE-2024-36882、CVE-2024-36908、CVE-2024-38566、CVE-2024-36005、CVE-2024-38583、CVE-2024-36968、CVE-2024-36017、CVE-2024-38565、CVE-2024-36881、CVE-2024-38611、CVE-2024-36897、CVE-2024-38560、CVE-2024-36923、CVE-2024-38575、CVE-2024-36899、CVE-2024-38570、CVE-2024-36898、CVE-2024-36896、CVE-2024-38559、CVE-2024-38588、CVE-2024-38606、CVE-2024-38551、CVE-2024-36891、CVE-2024-38567、CVE-2024-36895、CVE-2024-35993、CVE-2024-38552、CVE-2024-36925、CVE-2024-36964、CVE-2024-36888、CVE-2024-36956、CVE-2024-36946、CVE-2024-38600、CVE-2024-35997、CVE-2024-36912、CVE-2024-35984、CVE-2024-35848、CVE-2024-38545、CVE-2024-38563、CVE-2024-36918、CVE-2024-36001、CVE-2024-36957、CVE-2024-38576、CVE-2024-36030、CVE-2024-38574、CVE-2024-36963、CVE-2024-36890、CVE-2024-36960、CVE-2024-36901、CVE-2024-38614、CVE-2024-35859、CVE-2024-38593、CVE-2024-36904、CVE-2024-36012、CVE-2024-38578、CVE-2024-36011、CVE-2024-36930、CVE-2024-36938、CVE-2024-36893、CVE-2024-35987、CVE-2024-36905、CVE-2024-35853、CVE-2024-36003、CVE-2024-38562、CVE-2024-38617、CVE-2024-35855、CVE-2024-36965、CVE-2024-38596、CVE-2024-38558、CVE-2024-38568、CVE-2024-36955、CVE-2024-36029、CVE-2024-36967、CVE-2024-36940、CVE-2024-38595、CVE-2024-36028、CVE-2024-38610、CVE-2024-36911、CVE-2024-35999、CVE-2024-35854、CVE-2024-38571、CVE-2024-38548、CVE-2024-36948、CVE-2024-36002、CVE-2024-36961、CVE-2024-36900、CVE-2024-36932、CVE-2024-36902、CVE-2024-35992、CVE-2024-36914、CVE-2024-38592、CVE-2024-38616、CVE-2024-27400、CVE-2024-36937、CVE-2024-36920、CVE-2024-38586、CVE-2024-36909、CVE-2024-35846、CVE-2024-39482、CVE-2024-38579、CVE-2024-38539、CVE-2024-27395、CVE-2024-36962、CVE-2024-36013、CVE-2024-27396、CVE-2024-38557、CVE-2024-36953、CVE-2024-41011、CVE-2023-52882、CVE-2024-36969、CVE-2024-36007、CVE-2024-35856、CVE-2024-38605、CVE-2024-36915、CVE-2024-36979、CVE-2024-36954、CVE-2024-38538、CVE-2024-36950、CVE-2024-36926、CVE-2024-38544、CVE-2024-36959、CVE-2024-38561、CVE-2024-36883、CVE-2024-36936、CVE-2024-38564、CVE-2024-38543、CVE-2024-36934、CVE-2024-35947、CVE-2024-38620）

Tenable 已直接从 Ubuntu 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Ubuntu 24.04 LTS 主机上安装的一个程序包受到 USN-6955-1 公告中提及的多个漏洞影响。

    在 Linux 内核中发现多个安全问题。攻击者可能利用这些问题入侵系统。此更新修正了以下子系统中的缺陷：

    - ARM32 架构；

    - ARM64 架构；

    - M68K 架构；

    - OpenRISC 架构；

    - PowerPC 架构；

    - RISC-V 架构；

    - x86 架构；

    - 区块层子系统；

    - 可访问性子系统；

    - 蓝牙驱动程序；

    - 时钟框架和驱动程序；

    - CPU 频率缩放框架；

    - 硬件加密设备驱动程序；

    - DMA 引擎子系统；

    - DPLL 子系统；

    - FireWire 子系统；

    - EFI 核心；

    - Qualcomm 固件驱动程序；

    - GPIO 子系统；

    - GPU 驱动程序；

    - Microsoft Hyper-V 驱动程序；

    - InfiniBand 驱动程序；

    - IOMMU 子系统；

    - IRQ 芯片驱动程序；

    - Macintosh 设备驱动程序；

    - 多设备驱动程序；

    - 媒体驱动程序；

    - EEPROM 驱动程序；

    - MMC 子系统；

    - 网络驱动程序；

    - STMicroelectronics 网络驱动程序；

    - 设备树和 Open Firmware 驱动程序；

    - HiSilicon SoC PMU 驱动程序；

    - PHY 驱动程序；

    - Pin 控制器子系统；

    - 远程处理器子系统；

    - S/390 驱动程序；

    - SCSI 驱动程序；

    - SPI 子系统；

    - 媒体分段驱动程序；

    - 热驱动程序；

    - Userspace I/O 驱动程序；

    - USB 子系统；

    - DesignWare USB3 驱动程序；

    - ACRN Hypervisor Service Module 驱动程序；

    - Virtio 驱动程序；

    - 9P 分布式文件系统；

    - BTRFS 文件系统；

    - eCrypt 文件系统；

    - EROFS 文件系统；

    - 文件系统基础设施；

    - GFS2 文件系统；

    - JFFS2 文件系统；

    - 网络文件系统库；

    - 网络文件系统客户端；

    - 网络文件系统服务器后台程序；

    - NILFS2 文件系统；

    - Proc 文件系统；

    - SMB 网络文件系统；

    - 跟踪文件系统；

    - Mellanox 驱动程序；

    - 内存管理；

    - 套接字消息基础架构；

    - Slab 分配器；

    - 跟踪基础设施；

    - 用户空间 API (UAPI)；

    - Core 内核；

    - BPF 子系统；

    - DMA 映射基础设施；

    - RCU 子系统；

    - 动态调试库；

    - KUnit 库；

    - Maple Tree 数据结构库；

    - 异质内存管理；

    - Amateur Radio 驱动程序；

    - 蓝牙子系统；

    - 以太网桥接；

    - Networking 核心；

    - IPv4 联网；

    - IPv6 联网；

    - 多路径 TCP；

    - Netfilter；

    - NET/ROM 层；

    - NFC 子系统；

    - NSH 方案；

    - Open vSwitch；

    - Phonet 协议；

    - SMC 套接字；

    - TIPC 协议；

    - Unix 域套接字；

    - 无线网络；

    - 密钥管理；

    - ALSA 框架；

    - HD-audio 驱动程序；

    - Kirkwood ASoC 驱动程序；

    - MediaTek ASoC 驱动程序；（CVE-2024-35987、CVE-2024-36931、CVE-2024-38614、CVE-2024-35857、CVE-2024-36949、CVE-2024-38599、CVE-2024-35994、CVE-2024-35849、CVE-2024-36916、CVE-2024-38590、CVE-2024-36944、CVE-2024-38561、CVE-2024-38538、CVE-2024-36017、CVE-2024-38593、CVE-2024-36028、CVE-2024-36960、CVE-2024-36002、CVE-2024-36967、CVE-2024-36898、CVE-2024-35989、CVE-2024-36975、CVE-2024-38578、CVE-2024-38582、CVE-2024-38588、CVE-2024-38579、CVE-2024-38617、CVE-2024-36901、CVE-2024-38550、CVE-2023-52882、CVE-2024-38603、CVE-2024-38620、CVE-2024-36956、CVE-2024-36880、CVE-2024-36895、CVE-2024-36979、CVE-2024-36887、CVE-2024-27396、CVE-2024-27400、CVE-2024-36952、CVE-2024-36886、CVE-2024-36905、CVE-2024-36883、CVE-2024-38540、CVE-2024-38605、CVE-2024-36029、CVE-2024-36934、CVE-2024-27395、CVE-2024-36000、CVE-2024-38549、CVE-2024-35999、CVE-2024-38585、CVE-2024-38589、CVE-2024-38565、CVE-2024-36917、CVE-2024-36930、CVE-2024-36940、CVE-2024-36900、CVE-2024-35850、CVE-2024-38592、CVE-2024-38553、CVE-2024-36929、CVE-2024-36915、CVE-2024-36004、CVE-2024-38573、CVE-2024-36941、CVE-2024-38607、CVE-2024-36009、CVE-2024-27398、CVE-2024-36909、CVE-2024-35848、CVE-2024-36950、CVE-2024-38564、CVE-2024-36947、CVE-2024-38613、CVE-2024-38570、CVE-2024-38612、CVE-2024-38580、CVE-2024-38557、CVE-2024-36959、CVE-2024-27399、CVE-2024-41011、CVE-2024-36928、CVE-2024-38543、CVE-2024-38541、CVE-2024-38583、CVE-2024-35855、CVE-2024-38611、CVE-2024-36891、CVE-2024-38587、CVE-2024-35851、CVE-2024-38546、CVE-2024-38596、CVE-2024-35998、CVE-2024-35991、CVE-2024-36965、CVE-2024-36925、CVE-2024-36894、CVE-2024-38567、CVE-2024-38572、CVE-2024-36882、CVE-2024-38594、CVE-2024-38563、CVE-2024-38616、CVE-2024-36951、CVE-2024-36005、CVE-2024-42134、CVE-2024-38602、CVE-2024-36014、CVE-2024-38601、CVE-2024-36001、CVE-2024-38575、CVE-2024-27401、CVE-2024-36961、CVE-2024-38576、CVE-2024-36935、CVE-2024-36893、CVE-2024-38562、CVE-2024-36904、CVE-2024-36939、CVE-2024-38591、CVE-2024-38539、CVE-2024-36030、CVE-2024-36920、CVE-2024-39482、CVE-2024-36977、CVE-2024-36013、CVE-2024-35856、CVE-2024-36922、CVE-2024-36033、CVE-2024-35859、CVE-2024-36919、CVE-2024-35846、CVE-2024-36913、CVE-2024-35854、CVE-2024-36924、CVE-2024-38547、CVE-2024-38551、CVE-2024-36899、CVE-2024-36932、CVE-2024-38545、CVE-2024-36966、CVE-2024-36911、CVE-2024-36946、CVE-2024-36906、CVE-2024-38595、CVE-2024-36012、CVE-2024-38552、CVE-2024-36933、CVE-2024-36936、CVE-2024-38548、CVE-2024-38558、CVE-2024-36006、CVE-2024-36908、CVE-2024-36892、CVE-2024-35988、CVE-2024-35993、CVE-2024-36914、CVE-2024-36896、CVE-2024-38615、CVE-2024-36890、CVE-2024-36969、CVE-2024-38559、CVE-2024-36964、CVE-2024-38560、CVE-2024-38574、CVE-2024-36962、CVE-2024-38542、CVE-2024-36926、CVE-2024-36968、CVE-2024-36032、CVE-2024-38544、CVE-2024-36938、CVE-2024-38597、CVE-2024-38577、CVE-2024-36958、CVE-2024-36945、CVE-2024-36943、CVE-2024-38610、CVE-2024-36927、CVE-2024-38554、CVE-2024-38555、CVE-2024-36031、CVE-2024-36011、CVE-2024-38569、CVE-2024-35847、CVE-2024-36921、CVE-2024-38606、CVE-2024-35949、CVE-2024-35947、CVE-2024-36889、CVE-2024-36884、CVE-2024-36954、CVE-2024-36902、CVE-2024-36007、CVE-2024-38586、CVE-2024-36918、CVE-2024-38571、CVE-2024-36955、CVE-2024-36888、CVE-2024-38556、CVE-2024-38604、CVE-2024-27394、CVE-2024-38600、CVE-2024-35983、CVE-2024-38568、CVE-2024-38566、CVE-2024-35853、CVE-2024-35858、CVE-2024-36910、CVE-2024-36903、CVE-2024-36881、CVE-2024-36937、CVE-2024-36957、CVE-2024-36912、CVE-2024-36948、CVE-2024-36953、CVE-2024-35996、CVE-2024-36963、CVE-2024-36923、CVE-2024-35852、CVE-2024-38598、CVE-2024-36003、CVE-2024-35986、CVE-2024-38584）

Tenable 已直接从 Ubuntu 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6956-1 advisory.

    Benedict Schlter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted     hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP.
    This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose     sensitive information or possibly execute arbitrary code in the trusted execution environment.
    (CVE-2024-25742)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - Block layer subsystem;

    - Bluetooth drivers;

    - Clock framework and drivers;

    - FireWire subsystem;

    - GPU drivers;

    - InfiniBand drivers;

    - Multiple devices driver;

    - EEPROM drivers;

    - Network drivers;

    - Pin controllers subsystem;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI drivers;

    - TTY drivers;

    - 9P distributed file system;

    - Network file system client;

    - SMB network file system;

    - Socket messages infrastructure;

    - Dynamic debug library;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Multipath TCP;

    - Netfilter;

    - NSH protocol;

    - Phonet protocol;

    - TIPC protocol;

    - Wireless networking;

    - Key management;

    - ALSA framework;

    - HD-audio driver; (CVE-2024-36933, CVE-2024-36960, CVE-2024-26936, CVE-2024-36975, CVE-2023-52882,     CVE-2024-27401, CVE-2024-36929, CVE-2024-36939, CVE-2024-35947, CVE-2024-36883, CVE-2024-26886,     CVE-2024-36952, CVE-2024-36950, CVE-2024-36940, CVE-2024-36897, CVE-2023-52585, CVE-2024-26900,     CVE-2024-36959, CVE-2024-36928, CVE-2024-36938, CVE-2024-36016, CVE-2024-36965, CVE-2024-36967,     CVE-2024-36889, CVE-2024-36905, CVE-2024-36969, CVE-2024-36916, CVE-2024-36954, CVE-2024-27017,     CVE-2024-36941, CVE-2024-36957, CVE-2024-27399, CVE-2024-36937, CVE-2024-36955, CVE-2024-38600,     CVE-2023-52752, CVE-2024-36953, CVE-2024-26980, CVE-2024-36902, CVE-2024-26952, CVE-2024-36904,     CVE-2024-36964, CVE-2024-36946, CVE-2024-36880, CVE-2024-36906, CVE-2024-36947, CVE-2024-36886,     CVE-2024-36934, CVE-2024-35848, CVE-2024-36919, CVE-2024-36017, CVE-2024-36944, CVE-2024-36931,     CVE-2024-27398)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2571-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
    - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
    - CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
    - CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
    - CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
    - CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
    - CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
    - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
    - CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
    - CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
    - CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
    - CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
    - CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086).
    - CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022).
    - CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009).
    - CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
    - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
    - CVE-2023-52759: Ignore negated quota changes (bsc#1225560).
    - CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
    - CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs     (bsc#1225097).
    - CVE-2023-52864: Fixed opening of char device (bsc#1225132).
    - CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
    - CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
    - CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
    - CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
    - CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
    - CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
    - CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
    - CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
    - CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
    - CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
    - CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
    - CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules     (bsc#1226799).
    - CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
    - CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'     (bsc#1226841).
    - CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
    - CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
    - CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE     (bsc#1226789).
    - CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
    - CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
    - CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
    - CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
    - CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
    - CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
    - CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
    - CVE-2024-38556: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774).
    - CVE-2024-38557: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781).
    - CVE-2024-38608: net/mlx5e: Fix netif state handling (bsc#1226746).
    - CVE-2024-38597: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749).
    - CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734).
    - CVE-2024-38569: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (bsc#1226772).
    - CVE-2024-38568: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771).
    - CVE-2024-26814: vfio/fsl-mc: Block calling interrupt handler without trigger (bsc#1222810).
    - CVE-2024-26813: vfio/platform: Create persistent IRQ handlers (bsc#1222809).
    - CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823).
    - CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (bsc#1225815).
    - CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145).
    - CVE-2024-27414: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (bsc#1224439).
    - CVE-2024-35886: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670).
    - CVE-2024-36024: drm/amd/display: Disable idle reallow as part of command/gpint execution (bsc#1225702).
    - CVE-2024-36903: ipv6: Fix potential uninit-value access in __ip6_make_skb() (bsc#1225741).
    - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737).
    - CVE-2024-35979: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572).
    - CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
    - CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
    - CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
    - CVE-2024-35898: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()     (bsc#1224498).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-36882: mm: use memalloc_nofs_save() in page_cache_ra_order() (bsc#1225723).
    - CVE-2024-36916: blk-iocost: avoid out of bounds shift (bsc#1225759).
    - CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726).
    - CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
    - CVE-2024-35925: block: prevent division by zero in blk_rq_stat_sum() (bsc#1224661).
    - CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
    - CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
    - CVE-2024-36934: bna: ensure the copied buf is NUL terminated (bsc#1225760).
    - CVE-2024-36935: ice: ensure the copied buf is NUL terminated (bsc#1225763).
    - CVE-2024-36937: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834).
    - CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
    - CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
    - CVE-2024-36005: netfilter: nf_tables: honor table dormant flag from netdev release event path     (bsc#1224539).
    - CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
    - CVE-2024-35892: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (bsc#1224515).
    - CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
    - CVE-2024-35884: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520).
    - CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
    - CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
    - CVE-2024-35926: crypto: iaa - Fix async_disable descriptor leak (bsc#1224655).
    - CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
    - CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
    - CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540).
    - CVE-2024-35998: Fixed lock ordering potential deadlock in  cifs_sync_mid_result (bsc#1224549).
    - CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
    - CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
    - CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
    - CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
    - CVE-2024-35880: io_uring/kbuf: hold io_buffer_list reference over mmap (bsc#1224523).
    - CVE-2024-35831: io_uring: Fix release of pinned pages when __io_uaddr_map fails (bsc#1224698).
    - CVE-2024-35827: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (bsc#1224606).
    - CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
    - CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2372-1 advisory.

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
    - CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
    - CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
    - CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
    - CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
    - CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
    - CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
    - CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
    - CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
    - CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
    - CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
    - CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
    - CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
    - CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
    - CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
    - CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
    - CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
    - CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
    - CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
    - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
    - CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
    - CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
    - CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
    - CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
    - CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
    - CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
    - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
    - CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
    - CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
    - CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
    - CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
    - CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume     (bsc#1221282bsc#1222072).
    - CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
    - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
    - CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (git-fixesbsc#1223641).
    - CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
    - CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
    - CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
    - CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device     attribute group (bsc#1224712).
    - CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
    - CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
    - CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
    - CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
    - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
    - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
    - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
    - CVE-2024-35869: smb: client: guarantee refcounted children from parent session (bsc#1224679).
    - CVE-2024-35884: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520).
    - CVE-2024-35886: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670).
    - CVE-2024-35898: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()     (bsc#1224498).
    - CVE-2024-35900: netfilter: nf_tables: reject new basechain after table flag update (bsc#1224497).
    - CVE-2024-35925: block: prevent division by zero in blk_rq_stat_sum() (bsc#1224661).
    - CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1224703).
    - CVE-2024-35958: net: ena: Fix incorrect descriptor free behavior (bsc#1224677).
    - CVE-2024-35960: net/mlx5: Properly link new fs rules into the tree (bsc#1224588).
    - CVE-2024-35997: Remove I2C_HID_READ_PENDING flag to prevent lock-up (bsc#1224552).
    - CVE-2024-36005: netfilter: nf_tables: honor table dormant flag from netdev release event path     (bsc#1224539).
    - CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540).
    - CVE-2024-36017: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (bsc#1225681).
    - CVE-2024-36020: i40e: fix vf may be used uninitialized in this function warning (bsc#1225698).
    - CVE-2024-36021: net: hns3: fix kernel crash when devlink reload during pf initialization (bsc#1225699).
    - CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'     (bsc#1226841).
    - CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
    - CVE-2024-36890: mm/slab: make __free(kfree) accept error pointers (bsc#1225714).
    - CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
    - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737).
    - CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726).
    - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-36916: blk-iocost: avoid out of bounds shift (bsc#1225759).
    - CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
    - CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
    - CVE-2024-36934: bna: ensure the copied buf is NUL terminated (bsc#1225760).
    - CVE-2024-36937: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834).
    - CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
    - CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823).
    - CVE-2024-36949: amd/amdkfd: sync all devices to wait all processes being evicted (bsc#1225872)
    - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
    - CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145).
    - CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
    - CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
    - CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
    - CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
    - CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
    - CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
    - CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
    - CVE-2024-38556: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774).
    - CVE-2024-38557: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781).
    - CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
    - CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
    - CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE     (bsc#1226789).
    - CVE-2024-38568: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771).
    - CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
    - CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
    - CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734).
    - CVE-2024-38597: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749).
    - CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
    - CVE-2024-38608: net/mlx5e: Fix netif state handling (bsc#1226746).
    - CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
    - CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883).
    - CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
    - CVE-2024-38780: dma-buf/sw-sync: do not enable IRQ from sync_print_obj() (bsc#1226886).
    - CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
    - CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103.
    - CVE-2024-39469: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (bsc#1226992).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
205475	Ubuntu 24.04 LTS：Linux kernel (Azure) 漏洞 (USN-6952-2)	Nessus	Ubuntu Local Security Checks	8/13/2024	4/14/2025	high
205393	Ubuntu 24.04 LTS：Linux 内核 (OEM) 漏洞 (USN-6955-1)	Nessus	Ubuntu Local Security Checks	8/12/2024	4/14/2025	high
205412	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6956-1)	Nessus	Ubuntu Local Security Checks	8/13/2024	4/14/2025	high
205734	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2939-1)	Nessus	SuSE Local Security Checks	8/17/2024	5/22/2025	high
206008	SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2973-1)	Nessus	SuSE Local Security Checks	8/21/2024	9/9/2024	high
202999	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2571-1)	Nessus	SuSE Local Security Checks	7/23/2024	8/28/2024	high
202100	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2372-1)	Nessus	SuSE Local Security Checks	7/10/2024	9/10/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high