The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around     sk->sk_forward_alloc Syzkaller reported this warning: ------------[ cut here ]------------ WARNING: CPU: 0     PID: 16 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x1c5/0x1e0 Modules linked in: CPU: 0 UID: 0 PID: 16     Comm: ksoftirqd/0 Not tainted 6.12.0-rc5 #26 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS     1.15.0-1 04/01/2014 RIP: 0010:inet_sock_destruct+0x1c5/0x1e0 Code: 24 12 4c 89 e2 5b 48 c7 c7 98 ec bb 82     41 5c e9 d1 18 17 ff 4c 89 e6 5b 48 c7 c7 d0 ec bb 82 41 5c e9 bf 18 17 ff 0f 0b eb 83 <0f> 0b eb 97 0f 0b     eb 87 0f 0b e9 68 ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0018:ffffc9000008bd90 EFLAGS: 00010206 RAX:
    0000000000000300 RBX: ffff88810b172a90 RCX: 0000000000000007 RDX: 0000000000000002 RSI: 0000000000000300     RDI: ffff88810b172a00 RBP: ffff88810b172a00 R08: ffff888104273c00 R09: 0000000000100007 R10:
    0000000000020000 R11: 0000000000000006 R12: ffff88810b172a00 R13: 0000000000000004 R14: 0000000000000000     R15: ffff888237c31f78 FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010     DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc63fecac8 CR3: 000000000342e000 CR4: 00000000000006f0     DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6:
    00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? __warn+0x88/0x130 ?     inet_sock_destruct+0x1c5/0x1e0 ? report_bug+0x18e/0x1a0 ? handle_bug+0x53/0x90 ? exc_invalid_op+0x18/0x70     ? asm_exc_invalid_op+0x1a/0x20 ? inet_sock_destruct+0x1c5/0x1e0 __sk_destruct+0x2a/0x200     rcu_do_batch+0x1aa/0x530 ? rcu_do_batch+0x13b/0x530 rcu_core+0x159/0x2f0 handle_softirqs+0xd3/0x2b0 ?
    __pfx_smpboot_thread_fn+0x10/0x10 run_ksoftirqd+0x25/0x30 smpboot_thread_fn+0xdd/0x1d0 kthread+0xd3/0x100     ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30     </TASK> ---[ end trace 0000000000000000 ]--- Its possible that two threads call     tcp_v6_do_rcv()/sk_forward_alloc_add() concurrently when sk->sk_state == TCP_LISTEN with sk->sk_lock     unlocked, which triggers a data-race around sk->sk_forward_alloc: tcp_v6_rcv tcp_v6_do_rcv     skb_clone_and_charge_r sk_rmem_schedule __sk_mem_schedule sk_forward_alloc_add() skb_set_owner_r     sk_mem_charge sk_forward_alloc_add() __kfree_skb skb_release_all skb_release_head_state sock_rfree     sk_mem_uncharge sk_forward_alloc_add() sk_mem_reclaim // set local var reclaimable __sk_mem_reclaim     sk_forward_alloc_add() In this syzkaller testcase, two threads call tcp_v6_do_rcv() with     skb->truesize=768, the sk_forward_alloc changes like this: (cpu 1) | (cpu 2) | sk_forward_alloc ... | ...
    | 0 __sk_mem_schedule() | | +4096 = 4096 | __sk_mem_schedule() | +4096 = 8192 sk_mem_charge() | | -768 =     7424 | sk_mem_charge() | -768 = 6656 ... | ... | sk_mem_uncharge() | | +768 = 7424 reclaimable=7424 | | |     sk_mem_uncharge() | +768 = 8192 | reclaimable=8192 | __sk_mem_reclaim() | | -4096 = 4096 |
    __sk_mem_reclaim() | -8192 = -4096 != 0 The skb_clone_and_charge_r() should not be called in     tcp_v6_do_rcv() when sk->sk_state is TCP_LISTEN, it happens later in tcp_v6_syn_recv_sock(). Fix the same     issue in dccp_v6_do_rcv(). (CVE-2024-53124)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of kernel installed on the remote host is prior to 5.10.234-225.895. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-082 advisory.

    Integer Overflow or Wraparound vulnerability in Linux kernel on x86 and ARM (md, raid, raid5 modules)     allows Forced Integer Overflow. (CVE-2024-23307)

    In the Linux kernel, the following vulnerability has been resolved:

    gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/radeon: check bo_va->bo is non-NULL before using it (CVE-2024-41060)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (CVE-2024-47707)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (CVE-2024-50304)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix data-races around sk->sk_forward_alloc (CVE-2024-53124)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631)

    In the Linux kernel, the following vulnerability has been resolved:

    net: defer final 'struct net' free in netns dismantle (CVE-2024-56658)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CVE-2024-57929)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix the infinite loop in exfat_readdir() (CVE-2024-57940)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Handle CPU state correctly on hotplug (CVE-2024-57951)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: auth_enable: avoid using current->nsproxy (CVE-2025-21638)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: rto_min/max: avoid using current->nsproxy (CVE-2025-21639)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (CVE-2025-21640)

    In the Linux kernel, the following vulnerability has been resolved:

    afs: Fix the maximum cell name length (CVE-2025-21646)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653)

    In the Linux kernel, the following vulnerability has been resolved:

    dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CVE-2025-21666)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: discard packets if the transport changes (CVE-2025-21669)

    In the Linux kernel, the following vulnerability has been resolved:

    gtp: Destroy device along with udp socket's netns dismantle. (CVE-2025-21678)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix bpf_sk_select_reuseport() memory leak (CVE-2025-21683)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/platform: check the bounds of read/write syscalls (CVE-2025-21687)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (CVE-2025-21689)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix softlockup in __read_vmcore (part 2) (CVE-2025-21694)

    In the Linux kernel, the following vulnerability has been resolved:

    gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (CVE-2025-21699)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4075 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4075-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.234-1     CVE ID         : CVE-2021-47469 CVE-2023-52530 CVE-2023-52917 CVE-2024-26921                      CVE-2024-27017 CVE-2024-27072 CVE-2024-35965 CVE-2024-35966                      CVE-2024-36476 CVE-2024-36899 CVE-2024-38538 CVE-2024-38544                      CVE-2024-38588 CVE-2024-38591 CVE-2024-39497 CVE-2024-40953                      CVE-2024-41016 CVE-2024-41060 CVE-2024-41080 CVE-2024-42315                      CVE-2024-43098 CVE-2024-44931 CVE-2024-44940 CVE-2024-46695                      CVE-2024-46809 CVE-2024-46841 CVE-2024-46849 CVE-2024-46853                      CVE-2024-46854 CVE-2024-46858 CVE-2024-46865 CVE-2024-47143                      CVE-2024-47670 CVE-2024-47671 CVE-2024-47672 CVE-2024-47674                      CVE-2024-47679 CVE-2024-47684 CVE-2024-47685 CVE-2024-47692                      CVE-2024-47696 CVE-2024-47697 CVE-2024-47698 CVE-2024-47699                      CVE-2024-47701 CVE-2024-47705 CVE-2024-47706 CVE-2024-47707                      CVE-2024-47709 CVE-2024-47710 CVE-2024-47712 CVE-2024-47713                      CVE-2024-47718 CVE-2024-47723 CVE-2024-47735 CVE-2024-47737                      CVE-2024-47739 CVE-2024-47740 CVE-2024-47742 CVE-2024-47748                      CVE-2024-47749 CVE-2024-47756 CVE-2024-47757 CVE-2024-48881                      CVE-2024-49851 CVE-2024-49858 CVE-2024-49860 CVE-2024-49863                      CVE-2024-49867 CVE-2024-49868 CVE-2024-49875 CVE-2024-49877                      CVE-2024-49878 CVE-2024-49879 CVE-2024-49881 CVE-2024-49882                      CVE-2024-49883 CVE-2024-49884 CVE-2024-49889 CVE-2024-49890                      CVE-2024-49892 CVE-2024-49894 CVE-2024-49895 CVE-2024-49896                      CVE-2024-49900 CVE-2024-49902 CVE-2024-49903 CVE-2024-49907                      CVE-2024-49913 CVE-2024-49930 CVE-2024-49933 CVE-2024-49936                      CVE-2024-49938 CVE-2024-49944 CVE-2024-49948 CVE-2024-49949                      CVE-2024-49952 CVE-2024-49955 CVE-2024-49957 CVE-2024-49958                      CVE-2024-49959 CVE-2024-49962 CVE-2024-49963 CVE-2024-49965                      CVE-2024-49966 CVE-2024-49969 CVE-2024-49973 CVE-2024-49974                      CVE-2024-49975 CVE-2024-49977 CVE-2024-49981 CVE-2024-49982                      CVE-2024-49983 CVE-2024-49985 CVE-2024-49995 CVE-2024-49996                      CVE-2024-50001 CVE-2024-50006 CVE-2024-50007 CVE-2024-50008                      CVE-2024-50010 CVE-2024-50013 CVE-2024-50015 CVE-2024-50024                      CVE-2024-50033 CVE-2024-50035 CVE-2024-50036 CVE-2024-50039                      CVE-2024-50040 CVE-2024-50044 CVE-2024-50045 CVE-2024-50046                      CVE-2024-50049 CVE-2024-50055 CVE-2024-50058 CVE-2024-50059                      CVE-2024-50072 CVE-2024-50074 CVE-2024-50082 CVE-2024-50083                      CVE-2024-50095 CVE-2024-50096 CVE-2024-50099 CVE-2024-50103                      CVE-2024-50115 CVE-2024-50116 CVE-2024-50117 CVE-2024-50121                      CVE-2024-50127 CVE-2024-50131 CVE-2024-50134 CVE-2024-50142                      CVE-2024-50148 CVE-2024-50150 CVE-2024-50151 CVE-2024-50153                      CVE-2024-50167 CVE-2024-50171 CVE-2024-50179 CVE-2024-50180                      CVE-2024-50181 CVE-2024-50184 CVE-2024-50185 CVE-2024-50188                      CVE-2024-50192 CVE-2024-50193 CVE-2024-50194 CVE-2024-50195                      CVE-2024-50198 CVE-2024-50199 CVE-2024-50201 CVE-2024-50202                      CVE-2024-50205 CVE-2024-50208 CVE-2024-50209 CVE-2024-50210                      CVE-2024-50218 CVE-2024-50229 CVE-2024-50230 CVE-2024-50233                      CVE-2024-50234 CVE-2024-50236 CVE-2024-50237 CVE-2024-50251                      CVE-2024-50262 CVE-2024-50264 CVE-2024-50265 CVE-2024-50267                      CVE-2024-50268 CVE-2024-50269 CVE-2024-50273 CVE-2024-50278                      CVE-2024-50279 CVE-2024-50282 CVE-2024-50287 CVE-2024-50290                      CVE-2024-50292 CVE-2024-50295 CVE-2024-50296 CVE-2024-50299                      CVE-2024-50301 CVE-2024-50302 CVE-2024-50304 CVE-2024-52332                      CVE-2024-53042 CVE-2024-53052 CVE-2024-53057 CVE-2024-53059                      CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066                      CVE-2024-53096 CVE-2024-53097 CVE-2024-53099 CVE-2024-53101                      CVE-2024-53103 CVE-2024-53104 CVE-2024-53112 CVE-2024-53119                      CVE-2024-53121 CVE-2024-53124 CVE-2024-53125 CVE-2024-53127                      CVE-2024-53130 CVE-2024-53131 CVE-2024-53135 CVE-2024-53136                      CVE-2024-53138 CVE-2024-53140 CVE-2024-53141 CVE-2024-53142                      CVE-2024-53145 CVE-2024-53146 CVE-2024-53148 CVE-2024-53150                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53171 CVE-2024-53172                      CVE-2024-53173 CVE-2024-53174 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53194 CVE-2024-53197 CVE-2024-53198                      CVE-2024-53214 CVE-2024-53217 CVE-2024-53226 CVE-2024-53227                      CVE-2024-53237 CVE-2024-53239 CVE-2024-53240 CVE-2024-53241                      CVE-2024-53680 CVE-2024-53685 CVE-2024-53690 CVE-2024-54031                      CVE-2024-55916 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56548 CVE-2024-56558 CVE-2024-56562                      CVE-2024-56567 CVE-2024-56568 CVE-2024-56569 CVE-2024-56570                      CVE-2024-56574 CVE-2024-56576 CVE-2024-56581 CVE-2024-56586                      CVE-2024-56587 CVE-2024-56589 CVE-2024-56593 CVE-2024-56594                      CVE-2024-56595 CVE-2024-56596 CVE-2024-56597 CVE-2024-56598                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56605 CVE-2024-56606 CVE-2024-56610 CVE-2024-56615                      CVE-2024-56616 CVE-2024-56619 CVE-2024-56623 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56642 CVE-2024-56643                      CVE-2024-56644 CVE-2024-56645 CVE-2024-56648 CVE-2024-56650                      CVE-2024-56659 CVE-2024-56661 CVE-2024-56662 CVE-2024-56670                      CVE-2024-56672 CVE-2024-56681 CVE-2024-56688 CVE-2024-56690                      CVE-2024-56691 CVE-2024-56694 CVE-2024-56698 CVE-2024-56700                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56716 CVE-2024-56720                      CVE-2024-56723 CVE-2024-56724 CVE-2024-56728 CVE-2024-56739                      CVE-2024-56741 CVE-2024-56747 CVE-2024-56748 CVE-2024-56754                      CVE-2024-56756 CVE-2024-56759 CVE-2024-56763 CVE-2024-56766                      CVE-2024-56767 CVE-2024-56769 CVE-2024-56770 CVE-2024-56779                      CVE-2024-56780 CVE-2024-57791 CVE-2024-57792 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57850 CVE-2024-57874 CVE-2024-57884                      CVE-2024-57887 CVE-2024-57889 CVE-2024-57890 CVE-2024-57892                      CVE-2024-57896 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57904 CVE-2024-57906 CVE-2024-57907 CVE-2024-57908                      CVE-2024-57910 CVE-2024-57911 CVE-2024-57912 CVE-2024-57913                      CVE-2024-57922 CVE-2024-57929 CVE-2024-57931 CVE-2024-57938                      CVE-2024-57940 CVE-2024-57946 CVE-2024-57948 CVE-2024-57951                      CVE-2025-21638 CVE-2025-21639 CVE-2025-21640 CVE-2025-21646                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21664 CVE-2025-21666                      CVE-2025-21669 CVE-2025-21678 CVE-2025-21683 CVE-2025-21687                      CVE-2025-21688 CVE-2025-21689 CVE-2025-21692 CVE-2025-21694                      CVE-2025-21697 CVE-2025-21699     Debian Bug     : 1082001

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.234-1.  This additionally includes many more bug fixes from     stable updates 5.10.227-5.10.234 inclusive.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7459-1 advisory.

    Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an     out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system     crash) or escalate their privileges. (CVE-2022-0995)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Media staging drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Network namespace;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Memory management;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - Ethtool driver;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - SELinux security module;

    - ALSA framework;

    - USB sound devices; (CVE-2024-57913, CVE-2024-56748, CVE-2024-46871, CVE-2024-57900, CVE-2025-21637,     CVE-2025-21756, CVE-2024-53680, CVE-2024-56728, CVE-2024-46826, CVE-2024-57910, CVE-2024-56679,     CVE-2024-53215, CVE-2024-56640, CVE-2024-56634, CVE-2024-56594, CVE-2024-56619, CVE-2024-50242,     CVE-2024-53150, CVE-2024-49925, CVE-2024-56648, CVE-2024-53121, CVE-2024-36476, CVE-2025-21631,     CVE-2024-49996, CVE-2024-56723, CVE-2025-21690, CVE-2024-56769, CVE-2024-56767, CVE-2025-21664,     CVE-2024-53155, CVE-2024-48881, CVE-2024-57925, CVE-2024-53197, CVE-2024-53156, CVE-2024-35864,     CVE-2024-53122, CVE-2024-50121, CVE-2025-21700, CVE-2022-49034, CVE-2025-21648, CVE-2024-57903,     CVE-2024-57902, CVE-2024-53184, CVE-2024-57922, CVE-2024-56644, CVE-2024-53151, CVE-2024-53239,     CVE-2024-56636, CVE-2024-56651, CVE-2024-57911, CVE-2024-56532, CVE-2024-56739, CVE-2024-56600,     CVE-2024-57917, CVE-2024-57901, CVE-2024-56623, CVE-2024-56570, CVE-2024-57838, CVE-2024-56586,     CVE-2024-50055, CVE-2024-47730, CVE-2024-57841, CVE-2024-56548, CVE-2024-57906, CVE-2024-56606,     CVE-2024-57896, CVE-2024-56787, CVE-2024-56785, CVE-2024-57849, CVE-2024-57807, CVE-2024-50248,     CVE-2024-56576, CVE-2024-53158, CVE-2024-53198, CVE-2024-53194, CVE-2025-21701, CVE-2024-57890,     CVE-2025-21703, CVE-2024-56629, CVE-2025-21687, CVE-2024-53146, CVE-2024-56643, CVE-2024-56637,     CVE-2024-56745, CVE-2025-21665, CVE-2024-53165, CVE-2024-57850, CVE-2024-57889, CVE-2024-56558,     CVE-2024-56659, CVE-2024-56781, CVE-2024-57892, CVE-2024-56601, CVE-2024-56597, CVE-2024-57791,     CVE-2025-21653, CVE-2024-56746, CVE-2024-56631, CVE-2024-56590, CVE-2024-56596, CVE-2024-56756,     CVE-2024-56569, CVE-2024-47707, CVE-2024-47143, CVE-2024-57940, CVE-2024-42315, CVE-2025-21689,     CVE-2024-53161, CVE-2024-57951, CVE-2024-50256, CVE-2024-56598, CVE-2024-57884, CVE-2024-56662,     CVE-2024-56716, CVE-2024-26837, CVE-2025-21683, CVE-2024-56593, CVE-2024-53129, CVE-2024-45828,     CVE-2024-53206, CVE-2024-56650, CVE-2024-57912, CVE-2024-56715, CVE-2024-56630, CVE-2024-53113,     CVE-2024-56763, CVE-2025-21669, CVE-2024-53174, CVE-2024-56776, CVE-2024-53119, CVE-2024-55881,     CVE-2024-53099, CVE-2024-56539, CVE-2024-56724, CVE-2024-53142, CVE-2024-53157, CVE-2024-56774,     CVE-2024-57802, CVE-2024-53183, CVE-2024-56759, CVE-2024-58087, CVE-2024-50304, CVE-2024-26928,     CVE-2024-56531, CVE-2024-56747, CVE-2024-56625, CVE-2024-53127, CVE-2024-53136, CVE-2025-21993,     CVE-2024-53226, CVE-2024-56778, CVE-2024-53124, CVE-2024-57798, CVE-2024-56562, CVE-2024-50275,     CVE-2024-57907, CVE-2024-56589, CVE-2024-53217, CVE-2024-50051, CVE-2024-56574, CVE-2024-55916,     CVE-2024-56572, CVE-2024-56627, CVE-2024-56720, CVE-2024-57939, CVE-2025-21699, CVE-2024-56642,     CVE-2024-56670, CVE-2024-56622, CVE-2024-56575, CVE-2024-53685, CVE-2024-56678, CVE-2024-56779,     CVE-2024-56690, CVE-2024-57938, CVE-2024-49950, CVE-2024-56726, CVE-2024-53227, CVE-2024-53131,     CVE-2025-21680, CVE-2024-56605, CVE-2024-57908, CVE-2024-56704, CVE-2024-43900, CVE-2024-56708,     CVE-2024-56777, CVE-2024-53120, CVE-2025-21640, CVE-2024-56615, CVE-2024-53138, CVE-2024-53214,     CVE-2024-53130, CVE-2024-56770, CVE-2024-56603, CVE-2024-53180, CVE-2024-53181, CVE-2024-47408,     CVE-2025-21692, CVE-2024-56698, CVE-2024-49571, CVE-2024-56681, CVE-2024-56614, CVE-2024-56693,     CVE-2024-56633, CVE-2024-56610, CVE-2024-56645, CVE-2024-57874, CVE-2025-21678, CVE-2024-56691,     CVE-2024-56578, CVE-2024-57897, CVE-2024-46784, CVE-2024-56694, CVE-2025-21636, CVE-2024-43098,     CVE-2024-53172, CVE-2024-56780, CVE-2024-36899, CVE-2024-56595, CVE-2024-49998, CVE-2024-53140,     CVE-2024-56581, CVE-2024-56688, CVE-2024-56369, CVE-2024-53690, CVE-2024-46841, CVE-2025-21702,     CVE-2024-53148, CVE-2024-57792, CVE-2024-53135, CVE-2024-53145, CVE-2024-46809, CVE-2025-21666,     CVE-2024-53173, CVE-2024-53171, CVE-2025-21646, CVE-2025-21639, CVE-2024-44938, CVE-2024-56626,     CVE-2024-49974, CVE-2024-57931, CVE-2024-56568, CVE-2025-21694, CVE-2024-56658, CVE-2024-57929,     CVE-2024-56533, CVE-2024-56602, CVE-2024-53237, CVE-2024-56701, CVE-2024-57882, CVE-2024-56587,     CVE-2024-56616, CVE-2024-56705, CVE-2024-53125, CVE-2024-57904, CVE-2025-21638, CVE-2024-52332,     CVE-2024-57946, CVE-2024-56754, CVE-2024-56700, CVE-2024-56567, CVE-2024-50283, CVE-2025-21697,     CVE-2024-57948, CVE-2024-53096, CVE-2024-53112)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu Pro FIPS-updates 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7393-1 advisory.

    Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2024-23848)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Virtio block driver;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - LED subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - USB Device Class drivers;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - File systems infrastructure;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - Perf events;

    - Arbitrary resource management;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - Amlogic Meson SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-49938, CVE-2024-41066, CVE-2024-57951, CVE-2024-56779, CVE-2024-50194,     CVE-2024-50265, CVE-2024-56596, CVE-2024-57922, CVE-2024-56614, CVE-2024-57912, CVE-2024-50251,     CVE-2024-56569, CVE-2024-56587, CVE-2024-57807, CVE-2024-50051, CVE-2024-49997, CVE-2024-57911,     CVE-2024-50195, CVE-2024-50205, CVE-2024-35896, CVE-2025-21689, CVE-2024-43098, CVE-2024-47757,     CVE-2025-21639, CVE-2024-57900, CVE-2024-56634, CVE-2024-50230, CVE-2024-57946, CVE-2024-53059,     CVE-2024-50290, CVE-2024-49985, CVE-2024-50142, CVE-2024-49925, CVE-2024-50199, CVE-2024-47699,     CVE-2024-53172, CVE-2024-53173, CVE-2024-56631, CVE-2024-57938, CVE-2024-53101, CVE-2024-53197,     CVE-2024-49896, CVE-2024-47697, CVE-2024-56644, CVE-2024-50236, CVE-2024-46731, CVE-2024-47674,     CVE-2024-38544, CVE-2024-46853, CVE-2024-47740, CVE-2024-53121, CVE-2024-50082, CVE-2024-53165,     CVE-2024-50040, CVE-2024-57929, CVE-2024-57889, CVE-2024-49860, CVE-2024-50287, CVE-2022-49034,     CVE-2024-56690, CVE-2024-50302, CVE-2024-50006, CVE-2024-49949, CVE-2024-49868, CVE-2024-49903,     CVE-2024-47723, CVE-2024-49936, CVE-2024-49955, CVE-2024-50234, CVE-2024-50301, CVE-2024-47670,     CVE-2024-56574, CVE-2024-50168, CVE-2024-57913, CVE-2024-56602, CVE-2024-56630, CVE-2024-53130,     CVE-2024-53145, CVE-2024-56642, CVE-2024-50202, CVE-2024-38588, CVE-2024-56767, CVE-2024-50024,     CVE-2024-53198, CVE-2024-56548, CVE-2024-50184, CVE-2024-47756, CVE-2024-50167, CVE-2025-21694,     CVE-2024-53063, CVE-2024-49966, CVE-2024-50299, CVE-2024-50143, CVE-2024-49924, CVE-2024-53061,     CVE-2024-53124, CVE-2024-49902, CVE-2024-56739, CVE-2024-49952, CVE-2025-21664, CVE-2024-49877,     CVE-2024-47701, CVE-2024-52332, CVE-2024-49975, CVE-2024-56645, CVE-2024-53140, CVE-2024-49948,     CVE-2024-56724, CVE-2024-49963, CVE-2025-21687, CVE-2024-47698, CVE-2024-50039, CVE-2024-56595,     CVE-2024-50282, CVE-2023-52458, CVE-2024-56615, CVE-2024-40965, CVE-2024-49965, CVE-2024-53112,     CVE-2024-53135, CVE-2024-56601, CVE-2024-56532, CVE-2024-53184, CVE-2024-47672, CVE-2024-53155,     CVE-2024-50171, CVE-2024-50035, CVE-2024-56704, CVE-2024-53156, CVE-2024-47685, CVE-2024-50044,     CVE-2024-47712, CVE-2024-47707, CVE-2024-50179, CVE-2024-56594, CVE-2024-56688, CVE-2024-50151,     CVE-2025-21699, CVE-2024-56598, CVE-2024-47737, CVE-2024-57849, CVE-2024-56576, CVE-2025-21638,     CVE-2024-53181, CVE-2024-50033, CVE-2024-49995, CVE-2024-56756, CVE-2024-49867, CVE-2025-21697,     CVE-2024-56600, CVE-2024-56670, CVE-2024-47713, CVE-2024-46854, CVE-2024-47671, CVE-2024-53680,     CVE-2024-49851, CVE-2024-49883, CVE-2024-56780, CVE-2024-56770, CVE-2024-56650, CVE-2024-53146,     CVE-2024-50218, CVE-2024-56531, CVE-2024-47706, CVE-2024-56572, CVE-2024-47709, CVE-2024-49958,     CVE-2024-57948, CVE-2024-40911, CVE-2024-57904, CVE-2024-56769, CVE-2024-35887, CVE-2025-21678,     CVE-2024-57802, CVE-2024-56700, CVE-2024-43900, CVE-2024-47747, CVE-2024-50059, CVE-2024-56606,     CVE-2024-53161, CVE-2024-50116, CVE-2024-50180, CVE-2024-50127, CVE-2024-53131, CVE-2024-53157,     CVE-2024-50279, CVE-2024-57850, CVE-2024-56619, CVE-2024-49982, CVE-2024-56748, CVE-2024-53104,     CVE-2024-49981, CVE-2024-56643, CVE-2024-49962, CVE-2024-50131, CVE-2024-56781, CVE-2024-50233,     CVE-2024-56597, CVE-2024-56567, CVE-2024-57902, CVE-2024-43863, CVE-2024-56581, CVE-2024-53171,     CVE-2024-56633, CVE-2024-50296, CVE-2024-49879, CVE-2024-56593, CVE-2024-47679, CVE-2024-53148,     CVE-2024-50237, CVE-2024-49959, CVE-2024-50269, CVE-2024-53138, CVE-2024-49957, CVE-2024-50278,     CVE-2024-49894, CVE-2024-49900, CVE-2024-56586, CVE-2024-50148, CVE-2024-50262, CVE-2024-56720,     CVE-2024-50096, CVE-2024-57931, CVE-2024-56681, CVE-2021-47219, CVE-2025-21640, CVE-2024-56603,     CVE-2024-50229, CVE-2024-53174, CVE-2024-50007, CVE-2024-49944, CVE-2024-50273, CVE-2024-49878,     CVE-2024-56605, CVE-2024-53150, CVE-2024-44931, CVE-2024-53214, CVE-2024-49882, CVE-2024-53158,     CVE-2024-55916, CVE-2024-50117, CVE-2024-56570, CVE-2024-44938, CVE-2024-53239, CVE-2024-53217,     CVE-2024-50099, CVE-2024-50267, CVE-2024-56562, CVE-2024-40953, CVE-2024-57884, CVE-2024-49892,     CVE-2024-56659, CVE-2024-56746, CVE-2024-50074, CVE-2024-41016, CVE-2024-53142, CVE-2024-57901,     CVE-2024-56637, CVE-2024-47710, CVE-2024-46849, CVE-2024-57910, CVE-2024-47692, CVE-2024-48881,     CVE-2024-53194, CVE-2024-56558, CVE-2024-56747, CVE-2024-56629, CVE-2024-47696, CVE-2024-56691,     CVE-2024-53227, CVE-2024-57908, CVE-2024-57892, CVE-2024-53183, CVE-2024-56723, CVE-2024-42252,     CVE-2024-57890, CVE-2024-50134, CVE-2024-56694, CVE-2024-57906, CVE-2024-56539, CVE-2024-53690,     CVE-2024-53066, CVE-2024-49973, CVE-2024-47684, CVE-2024-50045, CVE-2024-49884, CVE-2025-21653,     CVE-2024-47749, CVE-2024-47742, CVE-2024-50008, CVE-2024-50150, CVE-2024-53127, CVE-2024-49996)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01707-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack     (bsc#1224757).
    - CVE-2024-28956: Intel CPU: Indirect Target Selection (ITS) (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-46763: fou: Fix null-ptr-deref in GRO (bsc#1230764).
    - CVE-2024-50038: netfilter: xtables: avoid NFPROTO_UNSPEC where needed (bsc#1231910).
    - CVE-2024-50162: bpf: devmap: provide rxq after redirect (bsc#1233075).
    - CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
    - CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
    - CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
    - CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
    - CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
    - CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
    - CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
    - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
    - CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
    - CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
    - CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (bsc#1239470).
    - CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
    - CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
    - CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
    - CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
    - CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
    - CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
    - CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
    - CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
    - CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
    - CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
    - CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
    - CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
    - CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
    - CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
    - CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
    - CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an     error (bsc#1240720).
    - CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
    - CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
    - CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
    - CVE-2025-21957: scsi: qla1280: Fix kernel oops when debug level > 2 (bsc#1240742).
    - CVE-2025-21960: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1240815).
    - CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1240816).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-21969: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (bsc#1240784).
    - CVE-2025-21970: net/mlx5: Bridge, fix the crash caused by LAG state check (bsc#1240819).
    - CVE-2025-21972: net: mctp: unshare packets when reassembling (bsc#1240813).
    - CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1240812).
    - CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
    - CVE-2025-21981: ice: fix memory leak in aRFS after reset (bsc#1240612).
    - CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
    - CVE-2025-21991: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (bsc#1240795).
    - CVE-2025-21993: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (bsc#1240797).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
    - CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
    - CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
    - CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
    - CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
    - CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
    - CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
    - CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
    - CVE-2025-22090: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (bsc#1241537).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22105: bonding: check xdp prog when set bond mode (bsc#1241548).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups()     (bsc#1241578).
    - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593).
    - CVE-2025-2312: CIFS: New mount option for cifs.upcall namespace resolution (bsc#1239684).
    - CVE-2025-23133: wifi: ath11k: update channel list in reg notifier instead reg worker (bsc#1241451).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-37860: sfc: fix NULL dereferences in ef100_process_design_param() (bsc#1241452).
    - CVE-2025-39728: clk: samsung: Fix UBSAN panic in samsung_clk_init() (bsc#1241626).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7863-1 advisory.

    Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel     contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain     processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose     sensitive information from the host OS. (CVE-2025-40300)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - DMA engine subsystem;

    - GPU drivers;

    - HSI subsystem;

    - Ethernet team driver;

    - TTY drivers;

    - Ext4 file system;

    - Timer subsystem;

    - DCCP (Datagram Congestion Control Protocol);

    - IPv6 networking;

    - NET/ROM layer;

    - SCTP protocol;

    - USB sound devices; (CVE-2021-47294, CVE-2021-47330, CVE-2023-52574, CVE-2023-52650, CVE-2024-50006,     CVE-2024-50299, CVE-2024-53124, CVE-2024-53150, CVE-2024-56767, CVE-2025-37838, CVE-2025-38352)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7875-1 advisory.

    Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel     contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain     processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose     sensitive information from the host OS. (CVE-2025-40300)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - DMA engine subsystem;

    - GPU drivers;

    - HSI subsystem;

    - Media drivers;

    - Ethernet team driver;

    - SPI subsystem;

    - USB core drivers;

    - Framebuffer layer;

    - BTRFS file system;

    - Ext4 file system;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Timer subsystem;

    - DCCP (Datagram Congestion Control Protocol);

    - IPv6 networking;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - VMware vSockets driver;

    - USB sound devices; (CVE-2023-52477, CVE-2023-52574, CVE-2023-52650, CVE-2024-27074, CVE-2024-35849,     CVE-2024-41006, CVE-2024-47685, CVE-2024-49924, CVE-2024-50006, CVE-2024-50051, CVE-2024-50202,     CVE-2024-50299, CVE-2024-53124, CVE-2024-53130, CVE-2024-53131, CVE-2024-53150, CVE-2024-56767,     CVE-2024-57996, CVE-2025-21796, CVE-2025-37752, CVE-2025-37785, CVE-2025-37838, CVE-2025-38350,     CVE-2025-38352, CVE-2025-38477, CVE-2025-38617, CVE-2025-38618)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    cifs: Fix UAF in cifs_demultiplex_thread()(CVE-2023-52572)

    net: fix data-races around sk-sk_forward_alloc(CVE-2024-53124)

    quota: flush quota_release_work upon quota writeback(CVE-2024-56780)

    af_packet: avoid erroring out after sock_init_data() in packet_create()(CVE-2024-56606)

    net: defer final 'struct net' free in netns dismantle(CVE-2024-56658)

    netfilter: x_tables: fix LED ID check in led_tg_check()(CVE-2024-56650)

    mm: hugetlb: independent PMD page table shared count(CVE-2024-57883)

    NFSv4.0: Fix a use-after-free problem in the asynchronous open()(CVE-2024-53173)

    NFSD: Prevent NULL dereference in nfsd4_process_cb_update()(CVE-2024-53217)

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX(CVE-2025-21648)

    vfio/platform: check the bounds of read/write syscalls(CVE-2025-21687)

    mm: fix unexpected zeroed page mapping with zram swap(CVE-2022-49052)

    ext4: fix race condition between ext4_write and ext4_convert_inline_data(CVE-2022-49414)

    block: Fix handling of offline queues in blk_mq_alloc_request_hctx()(CVE-2022-49720)

    scsi: libfc: Fix use after free in fc_exch_abts_resp()(CVE-2022-49114)

    nbd: don't allow reconnect after disconnect(CVE-2025-21731)

    md/bitmap: don't set sb values if can't pass sanity check(CVE-2022-49526)

    ARM: hisi: Add missing of_node_put after of_find_compatible_node(CVE-2022-49447)

    bpf, arm64: Clear prog-jited_len along prog-jited(CVE-2022-49341)

    extcon: Modify extcon device to be created after driver data is set(CVE-2022-49308)

    scsi: target: tcmu: Fix possible page UAF(CVE-2022-49053)

    drm/plane: Move range check for format_count earlier(CVE-2021-47659)

    trace_events_hist: add check for return value of 'create_hist_field'(CVE-2023-53005)

    tracing: Make sure trace_printk() can output as soon as it can be used(CVE-2023-53007)

    bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation(CVE-2023-53024)

    sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket(CVE-2024-53168)

    tracing/histograms: Fix memory leak problem(CVE-2022-49648)

    vrf: use RCU protection in l3mdev_l3_out()(CVE-2025-21791)

    net_sched: sch_sfq: don't allow 1 packet limit(CVE-2024-57996)

    net: sched: Disallow replacing of child qdisc from one parent to another(CVE-2025-21700)

    geneve: Fix use-after-free in geneve_find_dev().(CVE-2025-21858)

    macsec: fix UAF bug for real_dev(CVE-2022-49390)

    net: let net.core.dev_weight always be non-zero(CVE-2025-21806)

    net: mdio: unexport __init-annotated mdio_bus_init()(CVE-2022-49350)

    ip: Fix data-races around sysctl_ip_fwd_update_priority.(CVE-2022-49603)

    mmc: sdio: fix possible resource leaks in some error paths(CVE-2023-52730)

    ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()(CVE-2023-52997)

    pfifo_tail_enqueue: Drop new packet when sch-limit == 0(CVE-2025-21702)

    net/sched: act_skbmod: prevent kernel-infoleak(CVE-2024-35893)

    netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.(CVE-2023-53032)

    net: openvswitch: fix leak of nested actions(CVE-2022-49086)

    net: mdio: validate parameter addr in mdiobus_get_phy()(CVE-2023-53019)

    selinux: ignore unknown extended permissions(CVE-2024-57931)

    vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF(CVE-2023-52973)

    driver: base: fix UAF when driver_attach failed(CVE-2022-49385)

    scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()(CVE-2022-48758)

    sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly     to its callers, like fq_codel_dequeue().(CVE-2025-38177)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    net/sched: Always pass notifications when child class becomes empty(CVE-2025-38350)

    loop: Check for overflow while configuring loop(CVE-2022-49993)

    NFSv4/pnfs: Fix a use-after-free bug in open(CVE-2022-50072)

    rxrpc: Fix listen() setting the bar too high for the prealloc rings(CVE-2022-49450)

    ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl(CVE-2021-47634)

    media: uvcvideo: Fix double free in error path(CVE-2024-57980)

    scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI(CVE-2022-49535)

    dmaengine: Fix double increment of client_count in dma_chan_get()(CVE-2022-49753)

    memcg: fix soft lockup in the OOM process(CVE-2024-57977)

    firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle(CVE-2022-49370)

    dm raid: fix accesses beyond end of raid member array(CVE-2022-49674)

    nfsd: clear acl_access/acl_default after releasing them(CVE-2025-21796)

    Input: MT - limit max slots(CVE-2024-45008)

    ubi: ubi_create_volume: Fix use-after-free when volume creation failed(CVE-2022-49388)

    drivers: core: synchronize really_probe() and dev_uevent()(CVE-2024-39501)

    scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()(CVE-2022-49155)

    NFSD: prevent underflow in nfssvc_decode_writeargs()(CVE-2022-49280)

    dm integrity: fix memory corruption when tag_size is less than digest size(CVE-2022-49044)

    cpufreq: governor: Use kobject release() method to free dbs_data(CVE-2022-49513)

    virtio_console: eliminate anonymous module_init  module_exit(CVE-2022-49100)

    mm/khugepaged: fix -anon_vma race(CVE-2023-52935)

    tty: fix deadlock caused by calling printk() under tty_port-lock(CVE-2022-49441)

    tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()(CVE-2022-49307)

    dyndbg: fix old BUG_ON in control parser(CVE-2024-35947)

    ext4: fix OOB read when checking dotdot dir(CVE-2025-37785)

    arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array(CVE-2025-21785)

    net_sched: sch_sfq: move the limit validation(CVE-2025-37752)

    ext4: update s_journal_inum if it changes after journal replay(CVE-2023-53091)

    arp: use RCU protection in arp_xmit()(CVE-2025-21762)

    io_uring: prevent opcode speculation(CVE-2025-21863)

    jbd2: remove wrong sb-s_sequence check(CVE-2025-37839)

    udf: Fix a slab-out-of-bounds write bug in udf_find_entry()(CVE-2022-49846)

    udp: Fix memory accounting leak.(CVE-2025-22058)

    nvmet: avoid potential UAF in nvmet_req_complete()(CVE-2023-53116)

    ext4: fix off-by-one error in do_split(CVE-2025-23150)

    cgroup: Use separate src/dst nodes when preloading css_sets for migration(CVE-2022-49647)

    PM: hibernate: defer device probing when resuming from hibernation(CVE-2022-50202)

    video: fbdev: amba-clcd: Fix refcount leak bugs(CVE-2022-50109)

    mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()(CVE-2022-49787)

    capabilities: fix undefined behavior in bit shift for CAP_TO_MASK(CVE-2022-49870)

    tty: vt: initialize unicode screen buffer(CVE-2022-50222)

    ndisc: extend RCU protection in ndisc_send_skb()(CVE-2025-21760)

    ndisc: use RCU protection in ndisc_alloc_skb()(CVE-2025-21764)

    ata: libata-transport: fix double ata_host_put() in ata_tport_add()(CVE-2022-49826)

    proc: fix UAF in proc_get_inode()(CVE-2025-21999)

    vt: Clear selection before changing the font(CVE-2022-49948)

    module: ensure that kobject_put() is safe for module type kobjects(CVE-2025-37995)

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info()(CVE-2025-21761)

    arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level(CVE-2022-49964)

    neighbour: use RCU protection in __neigh_notify()(CVE-2025-21763)

    ipv6: mcast: extend RCU protection in igmp6_send()(CVE-2025-21759)

    bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()(CVE-2022-49840)

    ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network(CVE-2022-49865)

    ftrace: Fix use-after-free for dynamic ftrace_ops(CVE-2022-49892)

    ipv6: fix WARNING in ip6_route_net_exit_late()(CVE-2022-49903)

    net: mdio: fix undefined behavior in bit shift for __mdiobus_register(CVE-2022-49907)

     ipvs: fix WARNING in ip_vs_app_net_cleanup() (CVE-2022-49917)

    ipvs: fix WARNING in __ip_vs_cleanup_batch()(CVE-2022-49918)

    net: sched: Fix use after free in red_enqueue()(CVE-2022-49921)

    drivers:md:fix a potential use-after-free bug(CVE-2022-50022)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    sched, cpuset: Fix dl_cpu_busy() panic due to empty cs-cpus_allowed(CVE-2022-50103)

    dm crypt: add cond_resched() to dmcrypt_write()(CVE-2023-53051)

    erspan: do not use skb_mac_header() in ndo_start_xmit()(CVE-2023-53053)

    net: usb: smsc95xx: Limit packet length to skb-len(CVE-2023-53062)

    qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info(CVE-2023-53066)

    net: tunnels: annotate lockless accesses to dev-needed_headroom(CVE-2023-53109)

    net: usb: smsc75xx: Limit packet length to skb-len(CVE-2023-53125)

    xfrm: state: fix out-of-bounds read during lookup(CVE-2024-57982)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()(CVE-2025-38000)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    ipc: fix to protect IPCS lookups using RCU(CVE-2025-38212)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    bpf: Fix WARN() in get_bpf_raw_tp_regs(CVE-2025-38285)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()(CVE-2025-38337)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    perf: Fix sample vs do_exit()(CVE-2025-38424)

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns(CVE-2025-38499)

    tracing: Fix race issue between cpu buffer write and swap(CVE-2023-53368)

    ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS(CVE-2022-50315)

    usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()(CVE-2022-50544)

    ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer(CVE-2023-53395)

    usb: net: sierra: check for no status endpoint(CVE-2025-38474)

    mtd: Fix device name leak when register device failed in add_mtd_device()(CVE-2022-50566)

    ext4: add bounds checking in get_max_inline_xattr_value_size()(CVE-2023-53285)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak(CVE-2022-50389)

    scsi: qla4xxx: Add length check when parsing nlattrs(CVE-2023-53456)

    ext4: avoid deadlock in fs reclaim with page writeback(CVE-2023-53149)

    kobject: Add sanity check for kset-kobj.ktype in kset_register()(CVE-2023-53480)

    virtio-mmio: don't break lifecycle of vm_dev(CVE-2023-53515)

    PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free(CVE-2023-53446)

    tracing: Limit access to parser-buffer when trace_get_user failed(CVE-2025-39683)

    binfmt_misc: fix shift-out-of-bounds in check_special_flags(CVE-2022-50497)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    tee: fix NULL pointer dereference in tee_shm_put(CVE-2025-39865)

    udf: Fix uninitialized array access for some pathnames(CVE-2023-53165)

    media: uvcvideo: Handle cameras with invalid descriptors(CVE-2023-53437)

    ext4: avoid crash when inline data creation follows DIO write(CVE-2022-50435)

    serial: 8250: Reinit port-pm on port specific driver unbind(CVE-2023-53176)

    rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails(CVE-2023-53307)

    HID: core: do not bypass hid_hw_raw_request(CVE-2025-38494)

    udf: Do not bother merging very long extents(CVE-2023-53506)

    crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg(CVE-2025-39964)

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    spi: qup: Don't skip cleanup in remove's error path(CVE-2023-53567)

    calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().(CVE-2025-38181)

    scsi: qla2xxx: Pointer may be dereferenced(CVE-2023-53150)

    ftrace: Also allocate and copy hash for reading of filter files(CVE-2025-39689)

    xhci: Remove device endpoints from bandwidth list when freeing the device(CVE-2022-50470)

    tracing/histograms: Add histograms to hist_vars if they have referenced variables(CVE-2023-53560)

    fs: writeback: fix use-after-free in __mark_inode_dirty()(CVE-2025-39866)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    usbnet: Fix linkwatch use-after-free on disconnect(CVE-2022-50220)

    dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path(CVE-2023-53604)

    qede: confirm skb is allocated before using(CVE-2022-49084)

    fs: udf: fix OOB read in lengthAllocDescs handling(CVE-2025-40044)

    scsi: target: iscsi: Fix a race condition between login_work and the login thread(CVE-2022-50350)

    crypto: cavium - prevent integer overflow loading firmware(CVE-2022-50330)

    recordmcount: Fix memory leaks in the uwrite function(CVE-2023-53318)

    blk-mq: use quiesced elevator switch when reinitializing queues(CVE-2022-50552)

    pnode: terminate at peers of source(CVE-2022-50280)

    ext4: fix WARNING in mb_find_extent(CVE-2023-53317)

    drm/sched: Increment job count before swapping tail spsc queue(CVE-2025-38515)

    posix-timers: Ensure timer ID search-loop limit is valid(CVE-2023-53728)

    net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb(CVE-2023-53548)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
231339	Linux Distros Unpatched Vulnerability : CVE-2024-53124	Nessus	Misc.	3/6/2025	5/21/2026	medium
232712	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-082 (ALASKERNEL-5.10-2025-082)	Nessus	Amazon Linux Local Security Checks	3/14/2025	1/26/2026	high
215225	Photon OS 4.0: Linux PHSA-2025-4.0-0750	Nessus	PhotonOS Local Security Checks	2/10/2025	3/6/2026	high
216984	Debian dla-4075 : ata-modules-5.10.0-29-armmp-di - security update	Nessus	Debian Local Security Checks	3/1/2025	1/6/2026	critical
234817	Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-7459-1)	Nessus	Ubuntu Local Security Checks	4/24/2025	1/6/2026	high
233668	Ubuntu Pro FIPS-updates 20.04 LTS : Linux kernel (FIPS) vulnerabilities (USN-7393-1)	Nessus	Ubuntu Local Security Checks	4/1/2025	1/6/2026	critical
237279	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:01707-1)	Nessus	SuSE Local Security Checks	5/27/2025	9/24/2025	medium
274479	Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-7863-1)	Nessus	Ubuntu Local Security Checks	11/7/2025	11/7/2025	high
276524	Ubuntu 16.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7875-1)	Nessus	Ubuntu Local Security Checks	11/22/2025	11/22/2025	critical
297309	EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2026-1123)	Nessus	Huawei Local Security Checks	1/31/2026	1/31/2026	high

Detections

Analytics

Plugins Search

medium

high

high

critical

high

critical

medium

high

critical

high