The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0153-1 advisory.

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-802 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (CVE-2024-36478)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring: fix possible deadlock in io_register_iowq_max_workers() (CVE-2024-41080)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix timer use-after-free on failed mount (CVE-2024-49960)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Limit the number of concurrent async COPY operations (CVE-2024-49974)

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: Fix buffer overflow when parsing NFS reparse points (CVE-2024-49996)

    In the Linux kernel, the following vulnerability has been resolved:

    cpufreq: Avoid a bad reference count on CPU node (CVE-2024-50012)

    In the Linux kernel, the following vulnerability has been resolved:

    net: do not delay dst_entries_add() in dst_release() (CVE-2024-50036)

    In the Linux kernel, the following vulnerability has been resolved:

    uprobe: avoid out-of-bounds memory access of fetching args (CVE-2024-50067)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/bugs: Use code segment selector for VERW operand (CVE-2024-50072)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix potential deadlock with newly created symlinks (CVE-2024-50229)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Additional check in ntfs_file_release (CVE-2024-50242)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Fix general protection fault in run_is_mapped_full (CVE-2024-50243)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Additional check in ni_clear() (CVE-2024-50244)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Fix possible deadlock in mi_read (CVE-2024-50245)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Check if more than chunk-size bytes are written (CVE-2024-50247)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: CPPC: Make rmw_lock a raw_spin_lock (CVE-2024-50249)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CVE-2024-50251)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (CVE-2024-50256)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: Fix use-after-free in get_info() (CVE-2024-50257)

    In the Linux kernel, the following vulnerability has been resolved:

    netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()     (CVE-2024-50259)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264)

    In the Linux kernel, the following vulnerability has been resolved:

    signal: restore the override_rlimit logic (CVE-2024-50271)

    In the Linux kernel, the following vulnerability has been resolved:

    filemap: Fix bounds checking in filemap_read() (CVE-2024-50272)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: reinitialize delayed ref list after deleting it from the list (CVE-2024-50273)

    In the Linux kernel, the following vulnerability has been resolved:

    dm cache: fix potential out-of-bounds access on the first resume (CVE-2024-50278)

    In the Linux kernel, the following vulnerability has been resolved:

    dm cache: fix out-of-bounds access to the dirty bitset when resizing (CVE-2024-50279)

    In the Linux kernel, the following vulnerability has been resolved:

    dm cache: fix flushing uninitialized delayed_work on cache_ctr error (CVE-2024-50280)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: properly validate chunk size in sctp_sf_ootb() (CVE-2024-50299)

    In the Linux kernel, the following vulnerability has been resolved:

    security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301)

    In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report     buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it     during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted     report. (CVE-2024-50302)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (CVE-2024-53042)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (CVE-2024-53057)

    In the Linux kernel, the following vulnerability has been resolved:

    nfs: Fix KMSAN warning in decode_getfattr_attrs() (CVE-2024-53066)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio_net: Add hash_key_length check (CVE-2024-53082)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme-multipath: defer partition scanning (CVE-2024-53093)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Fix use-after-free of network namespace. (CVE-2024-53095)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: resolve faulty mmap_region() error path behaviour (CVE-2024-53096)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: krealloc: Fix MTE false alarm in __do_krealloc (CVE-2024-53097)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: tcp: avoid race between queue_lock lock and destroy (CVE-2024-53100)

    In the Linux kernel, the following vulnerability has been resolved:

    hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (CVE-2024-53103)

    In the Linux kernel, the following vulnerability has been resolved:

    ima: fix buffer overrun in ima_eventdigest_init_common (CVE-2024-53106)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: fs, lock FTE when checking if active (CVE-2024-53121)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: error out earlier on disconnect (CVE-2024-53123)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/rockchip: vop: Fix a dereferenced before check warning (CVE-2024-53129)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (CVE-2024-53130)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (CVE-2024-53131)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: kTLS, Fix incorrect page refcounting (CVE-2024-53138)

    In the Linux kernel, the following vulnerability has been resolved:

    netlink: terminate outstanding dump on socket close (CVE-2024-53140)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    initramfs: avoid filename buffer overrun(CVE-2024-53142)

    bpf, sockmap: Several fixes to bpf_msg_pop_data(CVE-2024-56720)

    scsi: sg: Fix slab-use-after-free read in sg_release()(CVE-2024-56631)

    dmaengine: idxd: Let probe fail when workqueue cannot be enabled(CVE-2022-48868)

    smb: client: fix use-after-free of signing key(CVE-2024-53179)

    bpf, sockmap: Fix race between element replace and close()(CVE-2024-56664)

    ftrace: Fix regression with module command in stack_trace_filter(CVE-2024-56569)

    RDMA/mlx5: Move events notifier registration to be after device registration(CVE-2024-53224)

    sched/deadline: Fix warning in migrate_enable for boosted tasks(CVE-2024-56583)

    af_packet: avoid erroring out after sock_init_data() in packet_create().(CVE-2024-56606)

    netdevsim: prevent bad user input in nsim_dev_health_break_write().(CVE-2024-56716)

    leds: class: Protect brightness_show() with led_cdev-led_access mutex(CVE-2024-56587)

    bpf: fix OOB devmap writes when deleting elemen(CVE-2024-56615)

    net: inet6: do not leave a dangling sk pointer in inet6_create().(CVE-2024-56600)

    nvme-multipath: defer partition scanning(CVE-2024-53093)

    virtiofs: use pages instead of pointer for kernel direct IO(CVE-2024-53219)

    mm/thp: fix deferred split unqueue naming and locking(CVE-2024-53079)

    io_uring/tctx: work around xa_store() allocation error issue(CVE-2024-56584)

    net: defer final 'struct net' free in netns dismantle(CVE-2024-56658)

    media: v4l2-dv-timings.c: fix too strict blanking sanity checks(CVE-2022-48987)

    NFSv4.0: Fix a use-after-free problem in the asynchronous open()(CVE-2024-53173)

    scsi: qla2xxx: Fix use after free on unload(CVE-2024-56623)

    tipc: Fix use-after-free of kernel socket in cleanup_bearer().(CVE-2024-56642)

    tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg(CVE-2024-56633)

    net: Fix icmp host relookup triggering ip_rt_bug(CVE-2024-56647)

    smb: client: fix NULL ptr deref in crypto_aead_setkey().(CVE-2024-53185)

    blk-cgroup: Fix UAF in blkcg_unpin_online().(CVE-2024-56672)

    scsi: hisi_sas: Create all dump files during debugfs initialization(CVE-2024-56588)

    crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY(CVE-2024-56690)

    vfio/pci: Properly hide first-in-list PCIe extended capability(CVE-2024-53214)

    net/mlx5: fs, lock FTE when checking if active(CVE-2024-53121)

    xsk: fix OOB map writes when deleting elements(CVE-2024-56614)

    bpf: Call free_htab_elem() after htab_unlock_bucket().(CVE-2024-56592)

    media: ts2020: fix null-ptr-deref in ts2020_probe().(CVE-2024-56574)

    io_uring: check if iowq is killed before queuing(CVE-2024-56709)

    NFSD: Prevent a potential integer overflow(CVE-2024-53146)

    ipv6: release nexthop on device removal(CVE-2024-56751)

    firmware: arm_scpi: Check the DVFS OPP count returned by the firmware(CVE-2024-53157)

    io_uring: check for overflows in io_pin_pages(CVE-2024-53187)

    virtio/vsock: Fix accept_queue memory leak(CVE-2024-53119)

    hv_sock: Initializing vsk-trans to NULL to prevent a dangling pointer(CVE-2024-53103)

    netlink: terminate outstanding dump on socket close(CVE-2024-53140)

    PCI: Fix use-after-free of slot-bus on hot remove(CVE-2024-53194)

    mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM(CVE-2024-56611)

    nvme-pci: fix freeing of the HMB descriptor table(CVE-2024-56756)

    scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb().(CVE-2024-56748)

    SUNRPC: make sure cache entry active before cache_sho(CVE-2024-53174)

    sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport(CVE-2024-56688)

    netfilter: ipset: add missing range check in bitmap_ip_uadt(CVE-2024-53141)

    scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()(CVE-2024-56747)

    KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN(CVE-2024-53135)

    netfilter: x_tables: fix LED ID check in led_tg_check().(CVE-2024-56650)

    rtc: check if __rtc_read_time was successful in rtc_timer_do_work()(CVE-2024-56739)

    acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl(CVE-2024-56662)

    ipv6: Fix soft lockups in fib6_select_path under high next hop churn(CVE-2024-56703)

    tracing: Prevent bad count for tracing_cpumask_write(CVE-2024-56763)

    quota: flush quota_release_work upon quota writeback(CVE-2024-56780)

    net: inet: do not leave a dangling sk pointer in inet_create().(CVE-2024-56601)

    nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur(CVE-2024-56779)

    net/sched: netem: account for backlog updates from child qdisc(CVE-2024-56770)

    posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime().(CVE-2024-50210)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7413-1 advisory.

    Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error     conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this     vulnerability to cause a denial of service. (CVE-2022-38096)

    Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle     locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21400)

    Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2024-23848)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Virtio block driver;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - LED subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - TTY drivers;

    - USB Device Class drivers;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - File systems infrastructure;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - Bluetooth subsystem;

    - LAPB network protocol;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - Perf events;

    - Arbitrary resource management;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - Amlogic Meson SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-53680, CVE-2024-49957, CVE-2024-50179, CVE-2024-57913, CVE-2024-57938,     CVE-2024-35965, CVE-2024-56746, CVE-2024-50151, CVE-2024-49962, CVE-2024-50082, CVE-2024-50278,     CVE-2024-46854, CVE-2024-56539, CVE-2024-50150, CVE-2024-56606, CVE-2024-50234, CVE-2024-56748,     CVE-2024-57807, CVE-2024-47692, CVE-2024-56614, CVE-2024-57931, CVE-2024-50265, CVE-2024-57884,     CVE-2024-50264, CVE-2024-56601, CVE-2024-49894, CVE-2024-50040, CVE-2024-49892, CVE-2024-57802,     CVE-2024-38544, CVE-2024-56779, CVE-2024-49924, CVE-2024-56681, CVE-2021-47101, CVE-2024-47672,     CVE-2024-47670, CVE-2024-50143, CVE-2024-57922, CVE-2024-50195, CVE-2022-49034, CVE-2024-47740,     CVE-2024-56615, CVE-2024-56637, CVE-2024-47747, CVE-2024-53057, CVE-2024-50290, CVE-2024-50116,     CVE-2024-50134, CVE-2024-47707, CVE-2024-53155, CVE-2024-56630, CVE-2024-53183, CVE-2024-56642,     CVE-2024-57892, CVE-2024-56603, CVE-2024-53059, CVE-2025-21653, CVE-2024-53194, CVE-2024-50024,     CVE-2024-52332, CVE-2024-50168, CVE-2024-53156, CVE-2024-56595, CVE-2024-53104, CVE-2024-49948,     CVE-2024-53066, CVE-2024-56747, CVE-2024-50148, CVE-2024-53197, CVE-2024-50184, CVE-2024-53214,     CVE-2024-50230, CVE-2024-57908, CVE-2024-56694, CVE-2025-21694, CVE-2024-47749, CVE-2024-47742,     CVE-2024-53198, CVE-2024-49997, CVE-2024-53135, CVE-2024-36952, CVE-2024-53103, CVE-2024-49860,     CVE-2024-50007, CVE-2024-49949, CVE-2024-57911, CVE-2024-53101, CVE-2024-56576, CVE-2024-56558,     CVE-2024-56570, CVE-2024-50131, CVE-2024-56587, CVE-2024-56780, CVE-2024-53145, CVE-2024-53112,     CVE-2025-21697, CVE-2024-56596, CVE-2024-48881, CVE-2024-49958, CVE-2024-53148, CVE-2024-47671,     CVE-2024-56659, CVE-2024-50267, CVE-2024-50279, CVE-2024-56633, CVE-2024-50205, CVE-2024-49944,     CVE-2024-53157, CVE-2024-43892, CVE-2025-21699, CVE-2024-49882, CVE-2024-43098, CVE-2023-52821,     CVE-2024-47685, CVE-2024-50218, CVE-2024-49975, CVE-2024-53171, CVE-2024-57948, CVE-2024-56756,     CVE-2024-47679, CVE-2024-53140, CVE-2024-56739, CVE-2024-56629, CVE-2024-47698, CVE-2024-53217,     CVE-2024-53146, CVE-2024-49966, CVE-2024-53227, CVE-2024-50167, CVE-2024-57910, CVE-2024-57951,     CVE-2024-56643, CVE-2024-53172, CVE-2024-50299, CVE-2024-53690, CVE-2024-50035, CVE-2024-50202,     CVE-2024-49878, CVE-2024-50251, CVE-2024-47699, CVE-2024-50296, CVE-2024-56569, CVE-2024-42252,     CVE-2024-47713, CVE-2024-56650, CVE-2024-53150, CVE-2024-56634, CVE-2024-56691, CVE-2024-53239,     CVE-2024-50180, CVE-2024-56602, CVE-2024-44938, CVE-2024-50236, CVE-2024-49884, CVE-2024-47757,     CVE-2024-50044, CVE-2024-46853, CVE-2024-50045, CVE-2024-50194, CVE-2024-35887, CVE-2024-56594,     CVE-2024-50302, CVE-2024-56631, CVE-2024-35967, CVE-2024-56690, CVE-2024-56723, CVE-2024-49973,     CVE-2024-53165, CVE-2024-50237, CVE-2024-50117, CVE-2024-57929, CVE-2024-49883, CVE-2024-46849,     CVE-2024-49903, CVE-2024-50142, CVE-2024-56770, CVE-2024-50301, CVE-2024-53130, CVE-2024-53131,     CVE-2024-47710, CVE-2024-49995, CVE-2024-44931, CVE-2024-56720, CVE-2024-49867, CVE-2024-49879,     CVE-2024-53138, CVE-2024-53184, CVE-2024-47737, CVE-2024-50127, CVE-2024-57904, CVE-2024-56572,     CVE-2024-56704, CVE-2024-35896, CVE-2024-40953, CVE-2024-56600, CVE-2024-50282, CVE-2024-47756,     CVE-2024-49959, CVE-2024-49936, CVE-2024-53173, CVE-2024-57902, CVE-2025-21639, CVE-2024-46731,     CVE-2024-56700, CVE-2024-57890, CVE-2025-21687, CVE-2024-47674, CVE-2024-50099, CVE-2024-56769,     CVE-2024-50287, CVE-2024-53127, CVE-2024-41066, CVE-2024-53158, CVE-2025-21638, CVE-2024-47706,     CVE-2024-47684, CVE-2024-53124, CVE-2024-49902, CVE-2024-56598, CVE-2024-57906, CVE-2024-53121,     CVE-2024-35963, CVE-2024-49996, CVE-2024-53141, CVE-2024-50051, CVE-2024-56644, CVE-2024-56688,     CVE-2024-57849, CVE-2024-57900, CVE-2024-56593, CVE-2024-56767, CVE-2024-49982, CVE-2024-49965,     CVE-2024-50229, CVE-2024-53161, CVE-2024-49868, CVE-2024-49900, CVE-2024-50269, CVE-2024-57946,     CVE-2024-47709, CVE-2024-49851, CVE-2024-50199, CVE-2024-56724, CVE-2024-50039, CVE-2024-56581,     CVE-2024-50233, CVE-2024-56670, CVE-2024-50006, CVE-2024-35966, CVE-2024-56597, CVE-2024-50273,     CVE-2024-53063, CVE-2024-56781, CVE-2024-56574, CVE-2024-56567, CVE-2024-47723, CVE-2024-53061,     CVE-2025-0927, CVE-2024-53142, CVE-2024-49877, CVE-2024-47697, CVE-2024-49952, CVE-2024-53174,     CVE-2024-56645, CVE-2021-47219, CVE-2024-49981, CVE-2025-21640, CVE-2024-49955, CVE-2023-52458,     CVE-2024-53164, CVE-2024-57850, CVE-2025-21678, CVE-2024-56532, CVE-2024-40965, CVE-2024-56586,     CVE-2021-47001, CVE-2024-40967, CVE-2024-49896, CVE-2024-47701, CVE-2024-50008, CVE-2024-43863,     CVE-2024-43900, CVE-2024-49938, CVE-2024-56562, CVE-2024-40910, CVE-2024-38588, CVE-2025-21689,     CVE-2024-53181, CVE-2024-56619, CVE-2024-49985, CVE-2024-50096, CVE-2024-56605, CVE-2024-50059,     CVE-2024-47696, CVE-2024-50074, CVE-2024-57889, CVE-2024-56548, CVE-2024-57901, CVE-2024-49963,     CVE-2024-41016, CVE-2024-47712, CVE-2024-49925, CVE-2024-50033, CVE-2024-50262, CVE-2024-56531,     CVE-2024-57912, CVE-2024-40911, CVE-2024-38553, CVE-2024-50171, CVE-2025-21664, CVE-2024-55916,     CVE-2024-38597, CVE-2021-47469)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
214356	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:0153-1)	Nessus	SuSE Local Security Checks	1/18/2025	9/24/2025	high
216951	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-802)	Nessus	Amazon Linux Local Security Checks	3/1/2025	9/29/2025	high
232962	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1300)	Nessus	Huawei Local Security Checks	3/20/2025	3/20/2025	high
233822	Ubuntu 20.04 LTS : Linux kernel (IoT) vulnerabilities (USN-7413-1)	Nessus	Ubuntu Local Security Checks	4/3/2025	9/24/2025	critical
237278	Alibaba Cloud Linux 3 : 0075: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2025:0075)	Nessus	Alibaba Cloud Linux Local Security Checks	5/27/2025	9/23/2025	critical

Detections

Analytics

Plugins Search

high

high

high

critical

critical