The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-4 advisory.

    Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the     device to be enabled before writing. A local attacker could possibly use this to cause a denial of     service. (CVE-2024-25741)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - MIPS architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Cryptographic API;

    - Serial ATA and Parallel ATA drivers;

    - Null block device driver;

    - Bluetooth drivers;

    - Cdrom driver;

    - Clock framework and drivers;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - Cirrus firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - I2C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - ISDN/mISDN subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Fastrpc Driver;

    - Network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - Near Field Communication (NFC) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - S/390 drivers;

    - SCSI drivers;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - USB core drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - VFIO drivers;

    - VHOST drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system client;

    - NILFS2 file system;

    - NTFS3 file system;

    - SMB network file system;

    - Memory management;

    - Netfilter;

    - Tracing infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Core kernel;

    - Bluetooth subsystem;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Network traffic control;

    - Sun RPC protocol;

    - Wireless networking;

    - AMD SoC Alsa drivers;

    - SoC Audio for Freescale CPUs drivers;

    - MediaTek ASoC drivers;

    - SoC audio core drivers;

    - SOF drivers;

    - Sound sequencer drivers; (CVE-2024-41064, CVE-2024-41087, CVE-2023-52888, CVE-2024-42098,     CVE-2024-42111, CVE-2024-42076, CVE-2024-42088, CVE-2024-42135, CVE-2024-42145, CVE-2024-42142,     CVE-2024-41036, CVE-2024-41071, CVE-2024-41012, CVE-2024-42091, CVE-2024-42253, CVE-2024-42119,     CVE-2024-42097, CVE-2024-42243, CVE-2024-39487, CVE-2024-42235, CVE-2024-42120, CVE-2024-42149,     CVE-2024-41015, CVE-2024-41074, CVE-2024-42067, CVE-2024-42090, CVE-2024-42128, CVE-2024-41038,     CVE-2024-42113, CVE-2024-42102, CVE-2024-42231, CVE-2024-42080, CVE-2024-42241, CVE-2024-42106,     CVE-2024-42130, CVE-2024-42073, CVE-2024-42153, CVE-2024-42156, CVE-2024-42118, CVE-2024-41007,     CVE-2024-41049, CVE-2024-39486, CVE-2024-42240, CVE-2024-41018, CVE-2024-42251, CVE-2024-42280,     CVE-2024-42096, CVE-2024-42121, CVE-2024-42246, CVE-2024-42092, CVE-2024-41090, CVE-2024-42157,     CVE-2024-43858, CVE-2024-42150, CVE-2024-42110, CVE-2024-41010, CVE-2024-41081, CVE-2024-41061,     CVE-2024-41078, CVE-2024-41094, CVE-2024-41039, CVE-2024-42114, CVE-2024-42109, CVE-2024-41030,     CVE-2024-42066, CVE-2024-41035, CVE-2024-42146, CVE-2024-42131, CVE-2024-41059, CVE-2024-41067,     CVE-2024-42138, CVE-2024-41050, CVE-2024-41034, CVE-2024-41077, CVE-2024-41076, CVE-2024-41088,     CVE-2024-41096, CVE-2024-41073, CVE-2024-41037, CVE-2024-42232, CVE-2024-41063, CVE-2024-42117,     CVE-2024-42155, CVE-2024-41080, CVE-2024-42132, CVE-2024-42084, CVE-2024-42136, CVE-2024-42223,     CVE-2024-41068, CVE-2024-42225, CVE-2024-42065, CVE-2024-41051, CVE-2024-43855, CVE-2024-42238,     CVE-2024-42250, CVE-2024-42112, CVE-2024-41070, CVE-2023-52887, CVE-2024-42094, CVE-2024-42095,     CVE-2024-41086, CVE-2024-41020, CVE-2024-41082, CVE-2024-42115, CVE-2024-42152, CVE-2024-42239,     CVE-2024-42093, CVE-2024-42126, CVE-2024-41022, CVE-2024-41017, CVE-2024-41092, CVE-2024-41044,     CVE-2024-42140, CVE-2024-41029, CVE-2024-41054, CVE-2024-42158, CVE-2024-41066, CVE-2024-42244,     CVE-2024-42070, CVE-2024-41025, CVE-2024-42229, CVE-2024-42085, CVE-2024-41084, CVE-2024-41060,     CVE-2024-41062, CVE-2024-42105, CVE-2024-42124, CVE-2024-41045, CVE-2024-42227, CVE-2024-41047,     CVE-2024-41042, CVE-2024-42100, CVE-2024-42247, CVE-2024-41041, CVE-2024-42087, CVE-2024-42252,     CVE-2024-41058, CVE-2024-42063, CVE-2024-42271, CVE-2024-41027, CVE-2024-42079, CVE-2024-42104,     CVE-2024-41098, CVE-2024-41033, CVE-2024-41072, CVE-2024-41031, CVE-2024-42089, CVE-2024-41032,     CVE-2024-42127, CVE-2024-41093, CVE-2024-42082, CVE-2024-41023, CVE-2024-41075, CVE-2024-42151,     CVE-2024-42141, CVE-2024-42108, CVE-2024-42068, CVE-2024-41085, CVE-2024-42103, CVE-2024-41057,     CVE-2024-42064, CVE-2024-42161, CVE-2024-41052, CVE-2024-41053, CVE-2024-42069, CVE-2024-41021,     CVE-2024-42147, CVE-2024-41065, CVE-2024-41091, CVE-2024-41079, CVE-2024-42086, CVE-2024-42234,     CVE-2024-41055, CVE-2024-41083, CVE-2024-42101, CVE-2024-42230, CVE-2024-41095, CVE-2024-41019,     CVE-2024-42245, CVE-2024-42129, CVE-2024-42144, CVE-2024-42236, CVE-2024-41028, CVE-2024-42077,     CVE-2024-42248, CVE-2024-41046, CVE-2024-42133, CVE-2024-42074, CVE-2024-41089, CVE-2024-42237,     CVE-2024-41056, CVE-2024-41048, CVE-2024-42137, CVE-2024-41069, CVE-2024-41097)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-5 advisory.

    Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the     device to be enabled before writing. A local attacker could possibly use this to cause a denial of     service. (CVE-2024-25741)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - MIPS architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Cryptographic API;

    - Serial ATA and Parallel ATA drivers;

    - Null block device driver;

    - Bluetooth drivers;

    - Cdrom driver;

    - Clock framework and drivers;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - Cirrus firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - I2C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - ISDN/mISDN subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Fastrpc Driver;

    - Network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - Near Field Communication (NFC) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - S/390 drivers;

    - SCSI drivers;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - USB core drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - VFIO drivers;

    - VHOST drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system client;

    - NILFS2 file system;

    - NTFS3 file system;

    - SMB network file system;

    - Memory management;

    - Netfilter;

    - Tracing infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Core kernel;

    - Bluetooth subsystem;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Network traffic control;

    - Sun RPC protocol;

    - Wireless networking;

    - AMD SoC Alsa drivers;

    - SoC Audio for Freescale CPUs drivers;

    - MediaTek ASoC drivers;

    - SoC audio core drivers;

    - SOF drivers;

    - Sound sequencer drivers; (CVE-2024-42223, CVE-2024-42244, CVE-2024-42105, CVE-2024-42100,     CVE-2024-42235, CVE-2024-41007, CVE-2024-41047, CVE-2024-42088, CVE-2024-42079, CVE-2024-41053,     CVE-2024-41094, CVE-2024-42227, CVE-2024-42253, CVE-2024-42150, CVE-2024-41049, CVE-2024-42096,     CVE-2024-42093, CVE-2024-41079, CVE-2024-41037, CVE-2024-42129, CVE-2024-41031, CVE-2024-39486,     CVE-2024-41065, CVE-2024-42101, CVE-2024-41082, CVE-2024-42135, CVE-2024-42236, CVE-2024-41078,     CVE-2024-42098, CVE-2024-41056, CVE-2024-41096, CVE-2024-41074, CVE-2024-42246, CVE-2024-42137,     CVE-2024-42232, CVE-2024-42121, CVE-2024-41093, CVE-2024-41076, CVE-2024-42157, CVE-2024-41062,     CVE-2024-42104, CVE-2024-42085, CVE-2024-41092, CVE-2024-41034, CVE-2024-41036, CVE-2024-41072,     CVE-2024-41012, CVE-2024-39487, CVE-2024-42124, CVE-2024-42065, CVE-2024-41061, CVE-2024-41064,     CVE-2024-41091, CVE-2024-42119, CVE-2024-41088, CVE-2024-42089, CVE-2024-41048, CVE-2024-41032,     CVE-2024-41020, CVE-2024-42066, CVE-2024-42068, CVE-2024-42238, CVE-2024-41069, CVE-2024-41044,     CVE-2024-41025, CVE-2024-42161, CVE-2023-52887, CVE-2024-42127, CVE-2024-42239, CVE-2024-42149,     CVE-2024-42091, CVE-2024-42097, CVE-2024-41054, CVE-2024-41041, CVE-2024-42131, CVE-2024-41089,     CVE-2024-41018, CVE-2024-42067, CVE-2024-41039, CVE-2024-42128, CVE-2024-42248, CVE-2024-41090,     CVE-2024-42073, CVE-2024-43858, CVE-2024-42225, CVE-2024-42077, CVE-2024-42247, CVE-2024-42109,     CVE-2024-41045, CVE-2024-41019, CVE-2024-42231, CVE-2024-41017, CVE-2024-42145, CVE-2024-41046,     CVE-2024-42063, CVE-2024-41087, CVE-2024-41033, CVE-2024-41021, CVE-2024-42241, CVE-2024-42229,     CVE-2024-41015, CVE-2024-42087, CVE-2024-42133, CVE-2024-41073, CVE-2024-42070, CVE-2024-41067,     CVE-2024-41077, CVE-2024-42102, CVE-2024-42158, CVE-2024-42126, CVE-2024-41042, CVE-2024-41055,     CVE-2024-42092, CVE-2024-42114, CVE-2024-41059, CVE-2024-41058, CVE-2024-41071, CVE-2024-42144,     CVE-2024-42146, CVE-2024-41084, CVE-2024-42155, CVE-2024-42245, CVE-2024-42156, CVE-2024-41050,     CVE-2024-42141, CVE-2024-42095, CVE-2024-41097, CVE-2024-42103, CVE-2024-42152, CVE-2024-42140,     CVE-2024-41023, CVE-2024-41083, CVE-2024-42138, CVE-2024-42271, CVE-2024-42252, CVE-2024-42237,     CVE-2024-42132, CVE-2024-41098, CVE-2024-42086, CVE-2024-41063, CVE-2024-42153, CVE-2024-41070,     CVE-2024-42115, CVE-2024-42111, CVE-2024-42142, CVE-2024-42069, CVE-2024-41027, CVE-2024-42130,     CVE-2024-42090, CVE-2024-42251, CVE-2024-42118, CVE-2024-41060, CVE-2024-41029, CVE-2024-41095,     CVE-2024-41038, CVE-2024-42243, CVE-2024-42112, CVE-2024-41035, CVE-2024-42240, CVE-2024-41066,     CVE-2024-41085, CVE-2024-42082, CVE-2024-42117, CVE-2024-42250, CVE-2024-41080, CVE-2024-42147,     CVE-2024-41081, CVE-2024-42113, CVE-2023-52888, CVE-2024-42136, CVE-2024-41057, CVE-2024-41086,     CVE-2024-42064, CVE-2024-42234, CVE-2024-42076, CVE-2024-42084, CVE-2024-42094, CVE-2024-42230,     CVE-2024-41068, CVE-2024-43855, CVE-2024-42080, CVE-2024-41052, CVE-2024-41051, CVE-2024-42074,     CVE-2024-41010, CVE-2024-41028, CVE-2024-41030, CVE-2024-41022, CVE-2024-42120, CVE-2024-42108,     CVE-2024-41075, CVE-2024-42106, CVE-2024-42280, CVE-2024-42110, CVE-2024-42151)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-1 advisory.

    It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing     xattr debug information. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-40902)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - MIPS architecture;

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - Drivers core;

    - GPIO subsystem;

    - GPU drivers;

    - Greybus drivers;

    - HID subsystem;

    - I2C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - VMware VMCI Driver;

    - Network drivers;

    - Pin controllers subsystem;

    - S/390 drivers;

    - SCSI drivers;

    - USB subsystem;

    - JFFS2 file system;

    - JFS file system;

    - File systems infrastructure;

    - NILFS2 file system;

    - IOMMU subsystem;

    - Sun RPC protocol;

    - Netfilter;

    - Memory management;

    - B.A.T.M.A.N. meshing protocol;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - NET/ROM layer;

    - Network traffic control;

    - SoC Audio for Freescale CPUs drivers; (CVE-2024-40905, CVE-2024-41095, CVE-2024-41035, CVE-2024-36974,     CVE-2024-40959, CVE-2024-40978, CVE-2024-42236, CVE-2024-40963, CVE-2024-40916, CVE-2024-41006,     CVE-2024-39495, CVE-2023-52803, CVE-2024-42070, CVE-2024-41041, CVE-2024-42157, CVE-2024-36894,     CVE-2024-42153, CVE-2024-42127, CVE-2024-42224, CVE-2024-40932, CVE-2024-42105, CVE-2024-40968,     CVE-2024-41044, CVE-2024-41046, CVE-2023-52887, CVE-2024-42094, CVE-2024-40960, CVE-2024-41007,     CVE-2024-40961, CVE-2024-39487, CVE-2024-39502, CVE-2024-42086, CVE-2024-36978, CVE-2024-39503,     CVE-2024-41049, CVE-2024-42090, CVE-2024-42232, CVE-2024-39499, CVE-2024-40902, CVE-2024-37078,     CVE-2024-39501, CVE-2024-42119, CVE-2024-40901, CVE-2024-42101, CVE-2024-42104, CVE-2024-42145,     CVE-2024-41097, CVE-2024-40942, CVE-2024-41034, CVE-2024-40904, CVE-2024-41089, CVE-2024-42084,     CVE-2024-42093, CVE-2024-40945, CVE-2024-40958, CVE-2024-42124, CVE-2024-40987, CVE-2024-40912,     CVE-2024-39506, CVE-2024-40941, CVE-2024-39509, CVE-2024-40974, CVE-2024-39505, CVE-2024-42115,     CVE-2024-40988, CVE-2024-40995, CVE-2024-42097, CVE-2024-41087, CVE-2024-42106, CVE-2024-40984,     CVE-2024-40981, CVE-2024-42102, CVE-2024-42148, CVE-2024-42154, CVE-2024-42096, CVE-2024-40934,     CVE-2024-40980, CVE-2024-42076, CVE-2024-40943, CVE-2024-42092, CVE-2024-42089, CVE-2024-42223,     CVE-2024-38619, CVE-2024-42087, CVE-2024-39469)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-1 advisory.

    Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the     device to be enabled before writing. A local attacker could possibly use this to cause a denial of     service. (CVE-2024-25741)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - MIPS architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Cryptographic API;

    - Serial ATA and Parallel ATA drivers;

    - Null block device driver;

    - Bluetooth drivers;

    - Cdrom driver;

    - Clock framework and drivers;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - Cirrus firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - I2C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - ISDN/mISDN subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Fastrpc Driver;

    - Network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - Near Field Communication (NFC) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - S/390 drivers;

    - SCSI drivers;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - USB core drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - VFIO drivers;

    - VHOST drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system client;

    - NILFS2 file system;

    - NTFS3 file system;

    - SMB network file system;

    - Memory management;

    - Netfilter;

    - Tracing infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Core kernel;

    - Bluetooth subsystem;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Network traffic control;

    - Sun RPC protocol;

    - Wireless networking;

    - AMD SoC Alsa drivers;

    - SoC Audio for Freescale CPUs drivers;

    - MediaTek ASoC drivers;

    - SoC audio core drivers;

    - SOF drivers;

    - Sound sequencer drivers; (CVE-2024-42104, CVE-2024-42084, CVE-2024-42252, CVE-2024-41096,     CVE-2024-42237, CVE-2024-42140, CVE-2024-42150, CVE-2024-41031, CVE-2024-41059, CVE-2024-41062,     CVE-2024-41051, CVE-2024-41028, CVE-2024-41090, CVE-2024-41092, CVE-2024-43855, CVE-2024-41021,     CVE-2024-42229, CVE-2024-41056, CVE-2024-41048, CVE-2024-41036, CVE-2024-42094, CVE-2024-41089,     CVE-2024-41068, CVE-2024-41039, CVE-2024-41095, CVE-2024-41069, CVE-2024-42234, CVE-2024-42136,     CVE-2024-41025, CVE-2024-42157, CVE-2024-42248, CVE-2024-42087, CVE-2024-41041, CVE-2024-42230,     CVE-2024-42151, CVE-2024-42130, CVE-2024-42244, CVE-2024-41079, CVE-2024-42253, CVE-2024-42092,     CVE-2024-41022, CVE-2024-42137, CVE-2024-42132, CVE-2024-42108, CVE-2024-42155, CVE-2024-42127,     CVE-2024-41060, CVE-2024-42074, CVE-2024-41081, CVE-2024-42066, CVE-2024-42098, CVE-2024-42082,     CVE-2024-42093, CVE-2024-42245, CVE-2024-41072, CVE-2024-41052, CVE-2024-42161, CVE-2024-42096,     CVE-2024-42115, CVE-2024-41074, CVE-2024-42120, CVE-2024-41046, CVE-2024-42239, CVE-2024-41063,     CVE-2024-42090, CVE-2024-41023, CVE-2024-42069, CVE-2024-41087, CVE-2024-42158, CVE-2024-41067,     CVE-2024-41084, CVE-2024-41077, CVE-2024-42240, CVE-2024-42145, CVE-2024-42102, CVE-2024-41020,     CVE-2024-42231, CVE-2024-41053, CVE-2024-42131, CVE-2024-42089, CVE-2024-41083, CVE-2024-42247,     CVE-2024-42105, CVE-2024-41044, CVE-2024-42128, CVE-2024-42271, CVE-2024-41037, CVE-2024-42114,     CVE-2024-42106, CVE-2024-41076, CVE-2024-42088, CVE-2024-41057, CVE-2024-41091, CVE-2024-42152,     CVE-2024-41070, CVE-2024-41035, CVE-2024-41050, CVE-2024-39487, CVE-2024-42113, CVE-2024-42250,     CVE-2024-41047, CVE-2024-42149, CVE-2024-42079, CVE-2024-42091, CVE-2024-42227, CVE-2024-42095,     CVE-2024-42109, CVE-2024-41033, CVE-2023-52888, CVE-2024-41061, CVE-2024-42223, CVE-2024-42235,     CVE-2024-41086, CVE-2024-42133, CVE-2024-41082, CVE-2024-41071, CVE-2024-41007, CVE-2023-52887,     CVE-2024-39486, CVE-2024-41075, CVE-2024-42101, CVE-2024-42077, CVE-2024-41042, CVE-2024-42225,     CVE-2024-42126, CVE-2024-41094, CVE-2024-41085, CVE-2024-41019, CVE-2024-41058, CVE-2024-41066,     CVE-2024-42156, CVE-2024-42119, CVE-2024-41032, CVE-2024-41088, CVE-2024-42100, CVE-2024-42142,     CVE-2024-41054, CVE-2024-42103, CVE-2024-42124, CVE-2024-41034, CVE-2024-42251, CVE-2024-42153,     CVE-2024-41045, CVE-2024-42086, CVE-2024-42243, CVE-2024-41055, CVE-2024-41078, CVE-2024-42117,     CVE-2024-41030, CVE-2024-42068, CVE-2024-42110, CVE-2024-42147, CVE-2024-42121, CVE-2024-41080,     CVE-2024-41027, CVE-2024-43858, CVE-2024-42085, CVE-2024-42111, CVE-2024-42238, CVE-2024-41018,     CVE-2024-42138, CVE-2024-41038, CVE-2024-42070, CVE-2024-42141, CVE-2024-41098, CVE-2024-42118,     CVE-2024-41073, CVE-2024-42144, CVE-2024-42280, CVE-2024-41049, CVE-2024-42076, CVE-2024-41065,     CVE-2024-42063, CVE-2024-41064, CVE-2024-41017, CVE-2024-42112, CVE-2024-42064, CVE-2024-42135,     CVE-2024-42146, CVE-2024-41010, CVE-2024-41097, CVE-2024-41012, CVE-2024-42097, CVE-2024-42067,     CVE-2024-42236, CVE-2024-42080, CVE-2024-42241, CVE-2024-42065, CVE-2024-42232, CVE-2024-42246,     CVE-2024-41093, CVE-2024-41015, CVE-2024-42129, CVE-2024-42073, CVE-2024-41029)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-2 advisory.

    Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the     device to be enabled before writing. A local attacker could possibly use this to cause a denial of     service. (CVE-2024-25741)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - MIPS architecture;

    - PA-RISC architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Cryptographic API;

    - Serial ATA and Parallel ATA drivers;

    - Null block device driver;

    - Bluetooth drivers;

    - Cdrom driver;

    - Clock framework and drivers;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - Cirrus firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - I2C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - ISDN/mISDN subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Fastrpc Driver;

    - Network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - Near Field Communication (NFC) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - S/390 drivers;

    - SCSI drivers;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - USB core drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - VFIO drivers;

    - VHOST drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system client;

    - NILFS2 file system;

    - NTFS3 file system;

    - SMB network file system;

    - Memory management;

    - Netfilter;

    - Tracing infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Core kernel;

    - Bluetooth subsystem;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Network traffic control;

    - Sun RPC protocol;

    - Wireless networking;

    - AMD SoC Alsa drivers;

    - SoC Audio for Freescale CPUs drivers;

    - MediaTek ASoC drivers;

    - SoC audio core drivers;

    - SOF drivers;

    - Sound sequencer drivers; (CVE-2024-42104, CVE-2024-42101, CVE-2024-41052, CVE-2024-42157,     CVE-2024-41020, CVE-2024-41055, CVE-2024-42124, CVE-2023-52888, CVE-2024-42079, CVE-2024-43858,     CVE-2024-41075, CVE-2024-42073, CVE-2024-42113, CVE-2024-42110, CVE-2024-41080, CVE-2024-42097,     CVE-2024-41046, CVE-2024-42076, CVE-2024-41010, CVE-2024-41018, CVE-2024-42115, CVE-2024-41048,     CVE-2024-42231, CVE-2024-42241, CVE-2024-41034, CVE-2024-42065, CVE-2024-42140, CVE-2024-42094,     CVE-2024-41029, CVE-2024-42225, CVE-2024-41096, CVE-2024-42088, CVE-2024-41087, CVE-2023-52887,     CVE-2024-42141, CVE-2024-42135, CVE-2024-42247, CVE-2024-39487, CVE-2024-42229, CVE-2024-42147,     CVE-2024-42252, CVE-2024-41038, CVE-2024-41083, CVE-2024-42091, CVE-2024-42156, CVE-2024-42149,     CVE-2024-41015, CVE-2024-41047, CVE-2024-42129, CVE-2024-42120, CVE-2024-41097, CVE-2024-42243,     CVE-2024-42084, CVE-2024-42250, CVE-2024-41023, CVE-2024-41028, CVE-2024-42108, CVE-2024-41045,     CVE-2024-42098, CVE-2024-41064, CVE-2024-42087, CVE-2024-42080, CVE-2024-41049, CVE-2024-42271,     CVE-2024-41037, CVE-2024-42114, CVE-2024-41044, CVE-2024-42126, CVE-2024-42119, CVE-2024-42223,     CVE-2024-42280, CVE-2024-42112, CVE-2024-41019, CVE-2024-42133, CVE-2024-42152, CVE-2024-41074,     CVE-2024-41042, CVE-2024-41093, CVE-2024-41025, CVE-2024-42253, CVE-2024-42136, CVE-2024-42127,     CVE-2024-41036, CVE-2024-42237, CVE-2024-42111, CVE-2024-41031, CVE-2024-41069, CVE-2024-41084,     CVE-2024-41076, CVE-2024-41090, CVE-2024-41088, CVE-2024-41070, CVE-2024-42118, CVE-2024-42238,     CVE-2024-42234, CVE-2024-41089, CVE-2024-41095, CVE-2024-41085, CVE-2024-42106, CVE-2024-42155,     CVE-2024-42146, CVE-2024-42130, CVE-2024-42089, CVE-2024-42132, CVE-2024-41091, CVE-2024-42153,     CVE-2024-42236, CVE-2024-42085, CVE-2024-41065, CVE-2024-41032, CVE-2024-42090, CVE-2024-41030,     CVE-2024-41017, CVE-2024-42230, CVE-2024-42144, CVE-2024-42137, CVE-2024-41082, CVE-2024-41056,     CVE-2024-42145, CVE-2024-41041, CVE-2024-42240, CVE-2024-41081, CVE-2024-42103, CVE-2024-41053,     CVE-2024-42070, CVE-2024-42121, CVE-2024-42105, CVE-2024-41022, CVE-2024-42151, CVE-2024-42142,     CVE-2024-41035, CVE-2024-42232, CVE-2024-41058, CVE-2024-42109, CVE-2024-41077, CVE-2024-42095,     CVE-2024-39486, CVE-2024-42131, CVE-2024-42068, CVE-2024-41073, CVE-2024-41079, CVE-2024-42082,     CVE-2024-41071, CVE-2024-41066, CVE-2024-42102, CVE-2024-43855, CVE-2024-41061, CVE-2024-41072,     CVE-2024-41059, CVE-2024-41094, CVE-2024-41021, CVE-2024-41098, CVE-2024-42158, CVE-2024-41033,     CVE-2024-42096, CVE-2024-42251, CVE-2024-42077, CVE-2024-42063, CVE-2024-42227, CVE-2024-41007,     CVE-2024-41057, CVE-2024-41063, CVE-2024-41039, CVE-2024-41067, CVE-2024-41062, CVE-2024-42100,     CVE-2024-42074, CVE-2024-42064, CVE-2024-41092, CVE-2024-42128, CVE-2024-41086, CVE-2024-41054,     CVE-2024-42239, CVE-2024-41027, CVE-2024-42093, CVE-2024-42244, CVE-2024-41050, CVE-2024-41012,     CVE-2024-42246, CVE-2024-42117, CVE-2024-42069, CVE-2024-42067, CVE-2024-42086, CVE-2024-42066,     CVE-2024-41060, CVE-2024-42248, CVE-2024-41068, CVE-2024-42161, CVE-2024-42092, CVE-2024-42245,     CVE-2024-41078, CVE-2024-42235, CVE-2024-42150, CVE-2024-41051, CVE-2024-42138)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.4.281-193.378. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2024-080 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (CVE-2023-52803)

    In the Linux kernel, the following vulnerability has been resolved:

    net: relax socket state check at accept time. (CVE-2024-36484)

    In the Linux kernel, the following vulnerability has been resolved:

    bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CVE-2024-39487)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: avoid too many retransmit packets (CVE-2024-41007)

    In the Linux kernel, the following vulnerability has been resolved:

    filelock: Remove locks reliably when fcntl/close race is detected (CVE-2024-41012)

    In the Linux kernel, the following vulnerability has been resolved:

    filelock: Fix fcntl/close race recovery compat path (CVE-2024-41020)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (CVE-2024-41022)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix kernel bug on rename operation of broken directory (CVE-2024-41034)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CVE-2024-41035)

    In the Linux kernel, the following vulnerability has been resolved:

    udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CVE-2024-41041)

    In the Linux kernel, the following vulnerability has been resolved:

    ppp: reject claimed-as-LCP but actually malformed packets (CVE-2024-41044)

    In the Linux kernel, the following vulnerability has been resolved:

    filelock: fix potential use-after-free in posix_lock_inode (CVE-2024-41049)

    In the Linux kernel, the following vulnerability has been resolved:

    hfsplus: fix uninit-value in copy_name (CVE-2024-41059)

    In the Linux kernel, the following vulnerability has been resolved:

    ila: block BH in ila_output() (CVE-2024-41081)

    kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)

    kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (CVE-2024-42101)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-42102)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: add missing check for inode numbers on directory entries (CVE-2024-42104)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix inode number range checks (CVE-2024-42105)

    In the Linux kernel, the following vulnerability has been resolved:

    inet_diag: Initialize pad field in struct inet_diag_req_v2 (CVE-2024-42106)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qedf: Make qedf_execute_tmf() non-preemptible (CVE-2024-42124)

    In the Linux kernel, the following vulnerability has been resolved:

    IB/core: Implement a limit on UMAD receive List (CVE-2024-42145)

    In the Linux kernel, the following vulnerability has been resolved:

    bnx2x: Fix multiple UBSAN array-index-out-of-bounds (CVE-2024-42148)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp_metrics: validate source addr length (CVE-2024-42154)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: fix race between delayed_work() and ceph_monc_stop() (CVE-2024-42232)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001463 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    filelock: fix potential use-after-free in posix_lock_inode

    Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode().
    The request pointer had been changed earlier to point to a lock entry     that was added to the inode's list. However, before the tracepoint could     fire, another task raced in and freed that lock.

    Fix this by moving the tracepoint inside the spinlock, which should     ensure that this doesn't happen.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
210912	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-4)	Nessus	Ubuntu Local Security Checks	11/13/2024	2/3/2026	high
211360	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-5)	Nessus	Ubuntu Local Security Checks	11/14/2024	2/3/2026	high
207055	Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7003-1)	Nessus	Ubuntu Local Security Checks	9/12/2024	9/24/2025	high
210060	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel kernel vulnerabilities (USN-7089-1)	Nessus	Ubuntu Local Security Checks	11/1/2024	2/3/2026	high
210257	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-2)	Nessus	Ubuntu Local Security Checks	11/5/2024	2/3/2026	high
205699	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2024-080 (ALASKERNEL-5.4-2024-080)	Nessus	Amazon Linux Local Security Checks	8/17/2024	2/26/2026	high
276035	TencentOS Server 2: kernel (TSSA-2025:0431)	Nessus	Tencent Local Security Checks	11/20/2025	11/20/2025	high
276160	TencentOS Server 4: kernel (TSSA-2025:0432)	Nessus	Tencent Local Security Checks	11/20/2025	11/20/2025	high
341426	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001463)	Nessus	Unity Linux Local Security Checks	8/29/2026	8/29/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high