遠端 Ubuntu 22.04 LTS 主機上安裝的一個套件受到 USN-7766-1 公告中所提及的多個弱點影響。

    在 Linux 核心中發現數個安全性問題。攻擊者可能會利用這些弱點入侵系統。此更新可更正下列子系統中的瑕疵：

    - ARM32 架構;

    - ARM64 架構;

    - x86 架構；

    - 計算加速架構;

    - 匯流排裝置；

    - AMD CDX 匯流排驅動程式；

    - DPLL 子系統；

    - EFI 核心；

    - GPIO 子系統；

    - GPU 驅動程式；

    - HID 子系統;

    - I2C 子系統 ;

    - InfiniBand 驅動程式；

    - 多個裝置驅動程式；

    - 網路驅動程式 ;

    - Mellanox 網路驅動程式;

    - NVME 驅動程式；

    - 針腳控制器子系統；

    - RapidIO 驅動程式;

    - 電壓和電流調節器驅動程式；

    - SCSI 子系統；

    - SLIMbus 驅動程式;

    - QCOM SoC 驅動程式；

    - UFS 子系統;

    - USB DSL 驅動程式；

    - Renesas USBHS 控制器驅動程式;

    - USB Type-C Connector System Software Interface 驅動程式；

    - Framebuffer 層；

    - ACRN Hypervisor 服務模組驅動程式；

    - 網路檔案系統 (NFS) 用戶端；

    - Proc 檔案系統；

    - SMB 網路檔案系統；

    - 記憶體管理 ;

    - 排程器基礎架構；

    - SoC 音訊核心驅動程式 ;；

    - Perf 事件；

    - 追蹤基礎架構；

    - 記憶體管理；

    - 802.1Q VLAN 通訊協定；

    - 非同步傳輸模式 (ATM) 子系統；

    - 藍牙子系統；

    - Devlink API；

    - IPv4 網路；

    - IPv6 網路 ;

    - 邏輯連結層 ;

    - 管理元件傳輸通訊協定 (MCTP)；

    - 多重路徑 TCP;

    - Netfilter ;

    - 網路流量控制；

    - 交換器裝置 API；

    - 無線網路 ；

    - eXpress 資料路徑；（CVE-2025-21961, CVE-2025-21895, CVE-2025-21934, CVE-2025-21898, CVE-2024-58090, CVE-2025-21999, CVE-2025-22004, CVE-2025-21966, CVE-2025-21922, CVE-2025-21920, CVE-2025-21911, CVE-2025-21885, CVE-2025-21912, CVE-2025-21996, CVE-2025-21924, CVE-2025-21914, CVE-2025-21936, CVE-2025-21944, CVE-2025-21877, CVE-2025-21909, CVE-2025-21986, CVE-2025-21890, CVE-2025-22009, CVE-2025-21905, CVE-2025-21969, CVE-2025-21935, CVE-2025-21917, CVE-2025-22008, CVE-2025-21994, CVE-2025-21980, CVE-2025-22014, CVE-2025-21915, CVE-2025-21991, CVE-2025-22015, CVE-2025-21875, CVE-2025-21975, CVE-2025-21878, CVE-2025-21930, CVE-2025-21967, CVE-2025-21908, CVE-2025-22007, CVE-2025-21899, CVE-2025-21950, CVE-2025-21959, CVE-2025-21937, CVE-2025-22010, CVE-2025-21945, CVE-2025-21997, CVE-2025-21992, CVE-2025-22003, CVE-2025-22013, CVE-2025-21963, CVE-2025-22001, CVE-2025-21927, CVE-2025-21894, CVE-2025-21960, CVE-2025-21956, CVE-2025-21948, CVE-2025-21929, CVE-2025-21919, CVE-2025-21972, CVE-2025-21883, CVE-2025-21880, CVE-2025-21976, CVE-2025-22005, CVE-2025-22016, CVE-2025-21978, CVE-2025-21873, CVE-2025-21925, CVE-2025-21904, CVE-2025-21928, CVE-2025-21892, CVE-2025-21891, CVE-2025-21995, CVE-2025-21968, CVE-2025-21982, CVE-2025-21918, CVE-2025-21889, CVE-2025-21970, CVE-2025-21910, CVE-2025-21913, CVE-2025-21926, CVE-2025-21955, CVE-2025-21947, CVE-2025-21979, CVE-2025-21981, CVE-2025-22011, CVE-2025-21888, CVE-2025-37889, CVE-2025-21957, CVE-2025-21977, CVE-2025-21903, CVE-2025-21946, CVE-2025-21941, CVE-2025-21964, CVE-2025-21951, CVE-2025-21962, CVE-2025-22017, CVE-2025-21872, CVE-2025-21881, CVE-2025-21916）

Tenable 已直接從 Ubuntu 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Ubuntu 22.04 LTS 主機上安裝的一個套件受到 USN-7801-1 公告中所提及的多個弱點影響。

    在 Linux 核心中發現數個安全性問題。攻擊者可能會利用這些弱點入侵系統。此更新可更正下列子系統中的瑕疵：

    - ARM32 架構;

    - ARM64 架構;

    - x86 架構；

    - 計算加速架構;

    - 匯流排裝置；

    - AMD CDX 匯流排驅動程式；

    - DPLL 子系統；

    - EFI 核心；

    - GPIO 子系統；

    - GPU 驅動程式；

    - HID 子系統;

    - I2C 子系統 ;

    - InfiniBand 驅動程式；

    - 多個裝置驅動程式；

    - 網路驅動程式 ;

    - Mellanox 網路驅動程式;

    - NVME 驅動程式；

    - 針腳控制器子系統；

    - RapidIO 驅動程式;

    - 電壓和電流調節器驅動程式；

    - SCSI 子系統；

    - SLIMbus 驅動程式;

    - QCOM SoC 驅動程式；

    - UFS 子系統;

    - USB DSL 驅動程式；

    - Renesas USBHS 控制器驅動程式;

    - USB Type-C Connector System Software Interface 驅動程式；

    - Framebuffer 層；

    - ACRN Hypervisor 服務模組驅動程式；

    - Ext4 檔案系統；

    - 網路檔案系統 (NFS) 用戶端；

    - Proc 檔案系統；

    - SMB 網路檔案系統；

    - 記憶體管理 ;

    - 排程器基礎架構；

    - SoC 音訊核心驅動程式 ;；

    - Perf 事件；

    - 追蹤基礎架構；

    - 記憶體管理；

    - 802.1Q VLAN 通訊協定；

    - 非同步傳輸模式 (ATM) 子系統；

    - 藍牙子系統；

    - Devlink API；

    - IPv4 網路；

    - IPv6 網路 ;

    - 邏輯連結層 ;

    - 管理元件傳輸通訊協定 (MCTP)；

    - 多重路徑 TCP;

    - Netfilter；

    - 封包通訊端；

    - 網路流量控制；

    - 交換器裝置 API；

    - TLS 通訊協定 ;

    - VMware vSockets 驅動程式 ;

    - 無線網路 ；

    - eXpress 資料路徑；

    - XFRM 子系統；（CVE-2025-21928, CVE-2025-21976, CVE-2025-21890, CVE-2025-21929, CVE-2025-21960, CVE-2025-21978, CVE-2025-21937, CVE-2025-21908, CVE-2025-21999, CVE-2025-22015, CVE-2025-21967, CVE-2025-21913, CVE-2025-21898, CVE-2025-37756, CVE-2025-38617, CVE-2025-21927, CVE-2025-21956, CVE-2025-21979, CVE-2025-21955, CVE-2025-21895, CVE-2025-21969, CVE-2025-21877, CVE-2025-21936, CVE-2025-22001, CVE-2025-37889, CVE-2025-21875, CVE-2025-21888, CVE-2025-21911, CVE-2025-21904, CVE-2025-21878, CVE-2025-21961, CVE-2025-22013, CVE-2025-21986, CVE-2025-21915, CVE-2025-21889, CVE-2025-21903, CVE-2025-21909, CVE-2025-21950, CVE-2025-21885, CVE-2025-21966, CVE-2025-21873, CVE-2025-21883, CVE-2025-21946, CVE-2025-22003, CVE-2025-22014, CVE-2024-58090, CVE-2025-21891, CVE-2025-21962, CVE-2025-21948, CVE-2025-21924, CVE-2025-22017, CVE-2025-21975, CVE-2025-21920, CVE-2025-21972, CVE-2025-21964, CVE-2025-21917, CVE-2025-21894, CVE-2025-21982, CVE-2025-21945, CVE-2025-21996, CVE-2025-21995, CVE-2025-21912, CVE-2025-21910, CVE-2025-21980, CVE-2025-21951, CVE-2025-21934, CVE-2025-21994, CVE-2025-37785, CVE-2025-22009, CVE-2025-38618, CVE-2025-21992, CVE-2025-21930, CVE-2025-21941, CVE-2025-21916, CVE-2025-22004, CVE-2025-21919, CVE-2025-21880, CVE-2025-21963, CVE-2025-21914, CVE-2025-21981, CVE-2025-38500, CVE-2025-22005, CVE-2025-21959, CVE-2025-21899, CVE-2025-21926, CVE-2025-21968, CVE-2025-21944, CVE-2025-22016, CVE-2025-38477, CVE-2025-22008, CVE-2025-21925, CVE-2025-21997, CVE-2025-21935, CVE-2025-21947, CVE-2025-22010, CVE-2025-21977, CVE-2025-21922, CVE-2025-21881, CVE-2025-21970, CVE-2025-22007, CVE-2025-21991, CVE-2025-21918, CVE-2025-21905, CVE-2025-22011, CVE-2025-21872, CVE-2025-21957, CVE-2025-21892）

Tenable 已直接從 Ubuntu 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Oracle Linux 9 主機中安裝的套件受到 ELSA-2025-20480 公告中提及的多個弱點影響。

    - sunrpc在 svc 驗證處理期間將 SVC_GARBAGE視為驗證錯誤處理 (Jeff Layton) [Orabug: 38178286] {CVE-2025-38089}
    - 新增 Zen34 用戶端 (Borislav Petkov (AMD)) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357}
    - x86/處理程序將緩衝區清除移至 MONITOR 之前 (Kim Phillips) [Orabug: 38023239] {CVE-2024-36350} {CVE-2024-36357}
    - 新增一般計數器 (Borislav Petkov (AMD)) [Orabug38023239] {CVE-2024-36350} {CVE-2024-36357}
    - KVMSVM將 TSA CPUID 位元公告給客體 (Borislav Petkov (AMD)) [Orabug38023239] {CVE-2024-36350} {CVE-2024-36357}
    - x86/錯誤新增暫時性排程器攻擊緩解 (Borislav Petkov (AMD)) [Orabug38023239] {CVE-2024-36350} {CVE-2024-36357}
    - x86/錯誤將 MDS 機器重新命名為更通用的名稱 (Borislav Petkov (AMD)) [Orabug38023239] {CVE-2024-36350} {CVE-2024-36357}
    - block修正將作品集新增到 bio 的問題 (Ming Lei) [Orabug: 37844657] {CVE-2025-22122}
    - f2fs修正以避免存取未初始化的 curseg (Chao Yu) [Orabug: 37844644] {CVE-2025-22123}
    - gpiovirtuser修正潛在的超出邊界寫入 (Markus Burri) [Orabug: 38095181] {CVE-2025-38082}
    - net_schedhfsc將類別新增至 eltree 的可重入入列解決兩次 (Pedro Tammela) [Orabug:
    38049363] {CVE-2025-38001}
    - smb用戶端修正 cifs_fill_dirent 中的釋放後使用 (Zhaolong Wang) [Orabug: 38094970] {CVE-2025-38051}
    - platform/x86dell-wmi-sysman避免 current_password_store() 中發生緩衝區溢位 (Vladimir Moskovkin) [Orabug: 38095141] {CVE-2025-38077}
    - ALSApcm修正 PCM OSS 層的緩衝區存取爭用 (Takashi Iwai) [Orabug: 38095145] {CVE-2025-38078}
    - canbcm針對 procfs 內容新增缺少的 rcu 讀取保護 (Oliver Hartkopp) [Orabug: 38049369] {CVE-2025-38003}
    - canbcm為 bcm_op 運行時間更新新增鎖定 (Oliver Hartkopp) [Orabug: 38049374] {CVE-2025-38004}
    - padata不洩漏 reorder_work 中的 refcount (Dominik Grzegorzek) [Orabug: 38094842] {CVE-2025-38031}
    - cryptoalgif_hash - 修正 hash_accept 中的重複釋放 (Ivan Pravdin) [Orabug: 38095153] {CVE-2025-38079}
    - net/tipc修正 tipc_aead_encrypt_done 中的 slab-use-after-free 讀取 (Wang Liang) [Orabug: 38094978] {CVE-2025-38052}
    - sch_hfsc修正在 hfsc_enqueue() 中使用 peek 時的 qlen 計量錯誤 (Cong Wang) [Orabug: 38049357] {CVE-2025-38000}
    - idpf修正 idpf_features_check 中的 null-ptr-deref (Pavan Kumar Linga) [Orabug: 38094982] {CVE-2025-38053}
    - ptpocp限制摘要輸出函式中的訊號/頻率計數 (Sagi Maimon) [Orabug: 38094984] {CVE-2025-38054}
    - perf/x86/intel使用 sample_freq 修正 PEBS-via-PT 的 segfault (Adrian Hunter) [Orabug: 38094988] {CVE-2025-38055}
    - ASoCSOFIntelhda重新載入模組時修正 UAF (Tavian Barnes) [Orabug: 38094991] {CVE-2025-38056}
    - espintcp修正 skb 洩漏 (Sabrina Dubroca) [Orabug: 38094993] {CVE-2025-38057}
    - __legitimize_mnt()MNT_SYNC_UMOUNT 的檢查應位於 mount_lock 之下 (Al Viro) [Orabug38095000] {CVE-2025-38058}
    - x86/Kconfig使 CFI_AUTO_DEFAULT 相依於 !RUST 或 Rust >= 1.88 (Pawel Anikiel) [Orabug38094847] {CVE-2025-38033}
    - btrfs如果沒有有效的 csum 樹狀結構避免 NULL 指標解除參照 (Qu Wenruo) [Orabug: 38095010] {CVE-2025-38059}
    - btrfs更正 btrfs__prelim_ref 中 prelim_ref 引數的順序 (Goldwyn Rodrigues) [Orabug:
    38094856] {CVE-2025-38034}
    - nvmet-tcp不還原 null sk_state_change (Alistair Francis) [Orabug: 38094863] {CVE-2025-38035}
    - vxlan註釋 FDB 資料爭用 (Ido Schimmel) [Orabug: 38094879] {CVE-2025-38037}
    - cpufreqamd-pstate移除 set_boost 中不必要的 driver_lock (Dhananjay Ugwekar) [Orabug: 38094888] {CVE-2025-38038}
    - drm/amd/display增加 block_sequence 陣列大小 (Joshua Aberback) [Orabug: 38095164] {CVE-2025-38080}
    - bpfcopy_verifier_state() 應複製 'loop_entry' 欄位 (Eduard Zingerman) [Orabug: 38095018] {CVE-2025-38060}
    - serialmctrl_gpio將 disable_ms 分割為 sync 和 no_sync API (Alexis Lothore) [Orabug: 38094901] {CVE-2025-38040}
    - net: pktgen修正 pktgen_thread_write() 中使用者指定緩衝區之外的存取 (Peter Seiderer) [Orabug:
    38095024] {CVE-2025-38061}
    - genirq/msi將 IOMMU IOVA 直接儲存在 msi_desc 中而非 iommu_cookie 中 (Jason Gunthorpe) [Orabug:
    38095031] {CVE-2025-38062}
    - dm修正由 REQ_PREFLUSH 造成的無條件 IO 節流 (Jinliang Zheng) [Orabug: 38095038] {CVE-2025-38063}
    - firmwarearm_ffa針對 ffa 裝置設定 dma_mask (Viresh Kumar) [Orabug: 38094925] {CVE-2025-38043}
    - mediacx231xx設定 417 的 device_caps (Hans Verkuil) [Orabug: 38094934] {CVE-2025-38044}
    - Orangefs不截斷檔案大小 (Matthew Wilcox) [Orabug: 38095056] {CVE-2025-38065}
    - dm cache透過封鎖失敗的裝置恢復時的重試來防止 BUG_ON (Ming-Hung Tsai) [Orabug
    38095063] {CVE-2025-38066}
    - cryptolzo - 修正壓縮緩衝區滿溢 (Herbert Xu) [Orabug: 38095079] {CVE-2025-38068}
    - PCI: endpoint: pci-epf-test修正導致核心 oops 的重複釋放 (Christian Bruel) [Orabug
    38095087] {CVE-2025-38069}
    - wifiiwlwifi修正除錯動作順序 (Johannes Berg) [Orabug: 38094942] {CVE-2025-38045}
    - x86/mm檢查 memblock_phys_alloc_range() 的傳回值 (Philip Redkin) [Orabug: 38095101] {CVE-2025-38071}
    - libnvdimm/labels修正 nd_label_data_init() 中的除法錯誤 (Robert Richter) [Orabug: 38095109] {CVE-2025-38072}
    - spi-rockchip修正暫存器超出邊界存取 (Luis de Arquer) [Orabug: 38095173] {CVE-2025-38081}
    - x86/fred修正在啟用 FRED 的情況下 S4 恢復期間發生的系統懸置 (Xin Li) [Orabug: 38094951] {CVE-2025-38047}
    - block修正 set_blocksize 和讀取路徑之間的爭用 (Darrick J. Wong) [Orabug: 38095117] {CVE-2025-38073}
    - virtio_ring將 KCSAN 的 event_triggered 標記為 racy進而修正資料爭用 (Zhongqiu Han) [Orabug
    38094958] {CVE-2025-38048}
    - scsi目標iscsi修正刪除的連線逾時 (Dmitry Bogdanov) [Orabug: 38095134] {CVE-2025-38075}
    - usbtypecucsidisplayport修正鎖死 (Andrei Kuzynski) [Orabug: 37977018] {CVE-2025-37967}
    - 藍牙btnxpuart修正 FW 釋放期間的核心錯誤 (Neeraj Sanjay Kale) [Orabug: 37844459] {CVE-2025-22102}
    - iiolightopt3001修正因並行旗標存取造成的鎖死 (Luca Ceresoli) [Orabug: 37977026] {CVE-2025-37968}
    - mm/page_alloc修正未接受的記憶體處理中的爭用情形 (Kirill A. Shutemov) [Orabug: 38094767] {CVE-2025-38008}
    - dmaengineidxd使用 idxd_cleanup() 協助程式重構移除呼叫 (Shuai Xue) [Orabug: 38094790] {CVE-2025-38014}
    - dmaengineidxd修正 idxd_alloc 錯誤處理路徑中的記憶體洩漏 (Shuai Xue) [Orabug: 38094793] {CVE-2025-38015}
    - dmaengineti: k3-udma新增缺少的鎖定 (Ronald Wahl) [Orabug: 38094756] {CVE-2025-38005}
    - wifimt76移除驅動程式時停用 napi (Fedor Pchelkin) [Orabug: 38094770] {CVE-2025-38009}
    - phytegraxusb使用位元遮罩進行 UTMI pad 電源狀態追踪 (Wayne Chang) [Orabug: 38094777] {CVE-2025-38010}
    - drm/amdgpucsa 取消對應使用不中斷的鎖定 (Philip Yang) [Orabug: 38094779] {CVE-2025-38011}
    - HIDbpf如果裝置遭到損毀則中止分派 (Rongrong) [Orabug: 38094796] {CVE-2025-38016}
    - sched_extbpf_iter_scx_dsq_new() 應一律初始化 iterator (Tejun Heo) [Orabug: 38094786] {CVE-2025-38012}
    - net/tls修正 alloc_page 失敗時發生的核心錯誤 (Pengtao He) [Orabug: 38094802] {CVE-2025-38018}
    - mlxswspectrum_router刪除 GRE 網路裝置時修正釋放後使用 (Ido Schimmel) [Orabug:
    38094804] {CVE-2025-38019}
    - wifi: mac80211配置 struct cfg80211_scan_request 後設定 n_channels (Kees Cook) [Orabug:
    38094788] {CVE-2025-38013}
    -ulatormax20086修正無效的記憶體存取 (Cosmin Tanislav) [Orabug: 38094833] {CVE-2025-38027}
    - net/mlx5e停用上傳連結代表設定檔的 MACsec 卸載 (Carolina Jubran) [Orabug: 38094808] {CVE-2025-38020}
    - net_sched在 ->change() 期間也排清 gso_skb 清單 (Cong Wang) [Orabug: 37998128] {CVE-2025-37992}
    - RDMA/核心修正「KASAN: slab-use-after-free Read in ib_register_device」問題 (Zhu Yanjun) [Orabug:
    38094813] {CVE-2025-38022}
    - nfs處理解除鎖定路徑中的 nfs_get_lock_context 失敗 (Li Lingfeng) [Orabug: 38094818] {CVE-2025-38023}
    - HIDuclogic在 uclogic_input_configured() 中新增 NULL 檢查 (Henry Martin) [Orabug: 38094764] {CVE-2025-38007}
    - RDMA/rxe修正 rxe_queue_cleanup 錯誤中的 slab-use-after-free Read (Zhu Yanjun) [Orabug38094827] {CVE-2025-38024}
    - arm64bpf僅緩解無權限使用者載入的 cBPF 程式 (James Morse) [Orabug: 37977004] {CVE-2025-37963}
    - arm64bpf將 BHB 緩解措施新增至 cBPF 程式的結尾 (James Morse) [Orabug: 37976926] {CVE-2025-37948}
    - usbtypecucsi: displayport修正 NULL 指標存取 (Andrei Kuzynski) [Orabug: 38015126] {CVE-2025-37994}
    - module確保 kobject_put() 對於模組類型 kobjects 是安全的 (Dmitry Antipov) [Orabug: 38015131] {CVE-2025-37995}
    - memblock在 memblock_double_array() 中使用前接受配置的記憶體 (Tom Lendacky) [Orabug:
    37976994] {CVE-2025-37960}
    - xenbus使用 kref 追踪 req 存留期 (Jason Andryuk) [Orabug: 37976934] {CVE-2025-37949}
    - smbclient避免租用中斷在 open_cached_dir 中發生爭用 (Paul Aurich) [Orabug: 37976959] {CVE-2025-37954}
    - drm/amd/display修正 dml 協助程式中的無效內容錯誤 (Roman Li) [Orabug: 37977185] {CVE-2025-37965}
    - drm/v3d如果略過重設則新增工作至擱置清單 (Maira Canal) [Orabug: 37976942] {CVE-2025-37951}
    - iio: imu: st_lsm6dsx修正 st_lsm6dsx_read_tugged_fifo 中可能的鎖定 (Silvano Seva) [Orabug:
    37977031] {CVE-2025-37969}
    - iioimu st_lsm6dsx修正 st_lsm6dsx_read_fifo 中可能的鎖定 (Silvano Seva) [Orabug: 37977037] {CVE-2025-37970}
    - KVMSVM在 SHUTDOWN 攔截時強制離開 SMM 模式 (Mikhail Lobanov) [Orabug: 37976977] {CVE-2025-37957}
    - mm/huge_memory修正無效的 pmd 移轉項目解除參照 (Gavin Guo) [Orabug: 37976982] {CVE-2025-37958}
    - x86/mm消除可能會意外略過 TLB 排清的視窗 (Dave Hansen) [Orabug: 37977013] {CVE-2025-37964}
    - stagingbcm2835-camera初始化 v4l2_dev 中的 dev (Dave Stevenson) [Orabug: 37977042] {CVE-2025-37971}
    - Input: mtk-pmic-keys - 修正可能的 null 指標解除參照 (Gary Bisson) [Orabug: 37977044] {CVE-2025-37972}
    - bpf在 bpf_redirect_peer 上抹除封包 (Paul Chaignon) [Orabug: 37976990] {CVE-2025-37959}
    - netfilteripset修正雜湊類型中的區域鎖定 (Jozsef Kadlecsik) [Orabug: 38015141] {CVE-2025-37997}
    - ipvs修正 do_output_route4 中 saddr 的 uninit-value (Julian Anastasov) [Orabug: 37976996] {CVE-2025-37961}
    - canm_canm_can_class_allocate_dev()初始化裝置探查上的微調鎖定 (Antonios Salios) [Orabug
    38015123] {CVE-2025-37993}
    - virtio-net在 virtnet_xsk_pool_enable() 中發生錯誤時釋放 xsk_buffs (Jakub Kicinski) [Orabug: 37976969] {CVE-2025-37955}
    - sch_htb使 htb_deactivate() 等冪 (Cong Wang) [Orabug: 37977176] {CVE-2025-37953}
    - ksmbd修正 parse_lease_state() 中的記憶體洩漏 (Zhaolong Wang) [Orabug: 37977180] {CVE-2025-37962}
    - openvswitch修正 output_userspace() 中不安全的屬性剖析 (Eelco Chaudron) [Orabug: 38015148] {CVE-2025-37998}
    - ksmbd修正 __close_file_table_ids 中的 UAF (Sean Heelan) [Orabug: 37976951] {CVE-2025-37952}
    - ksmbd透過驗證 *pos 來防止越界資料流寫入 (Norbert Szetei) [Orabug: 37976923] {CVE-2025-37947}
    - ksmbd防止使用空白字串重新命名 (Namjae Jeon) [Orabug: 37976972] {CVE-2025-37956}
    - s390/pci當 PF 具有子 VF 時在 disable_slot() 中修正重複的 pci_dev_put() (Niklas Schnelle) [Orabug:
    37976920] {CVE-2025-37946}
    - wificfg80211修正多重連結元素重組期間的超出邊界存取 (Veerendranath Jakkam) [Orabug: 37977046] {CVE-2025-37973}
    - s390/pci修正遺漏的 zpci_create_device() 錯誤傳回檢查 (Niklas Schnelle) [Orabug: 37977050] {CVE-2025-37974}
    - fs/erofs/fileio在 bio_add_folio() 之後呼叫 erofs_onlinefolio_split() (Max Kellermann) [Orabug:
    38015155] {CVE-2025-37999}
    - mlxbf-bootctl在 secure_boot_fuse_state_show() 中使用 sysfs_emit_at() (David Thompson) [Orabug:
    37964051,38037120] {CVE-2025-37866}

Tenable 已直接從 Oracle Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Ubuntu 22.04 LTS/24.04 LTS 主機上安裝的一個套件受到 USN-7779-1 公告中所提及的多個弱點影響。

    在 Linux 核心中發現數個安全性問題。攻擊者可能會利用這些弱點入侵系統。此更新可更正下列子系統中的瑕疵：

    - ARM32 架構;

    - ARM64 架構;

    - x86 架構；

    - 計算加速架構;

    - 匯流排裝置；

    - AMD CDX 匯流排驅動程式；

    - DPLL 子系統；

    - EFI 核心；

    - GPIO 子系統；

    - GPU 驅動程式；

    - HID 子系統;

    - I2C 子系統 ;

    - InfiniBand 驅動程式；

    - 多個裝置驅動程式；

    - 網路驅動程式 ;

    - Mellanox 網路驅動程式;

    - NVME 驅動程式；

    - 針腳控制器子系統；

    - RapidIO 驅動程式;

    - 電壓和電流調節器驅動程式；

    - SCSI 子系統；

    - SLIMbus 驅動程式;

    - QCOM SoC 驅動程式；

    - UFS 子系統;

    - USB DSL 驅動程式；

    - Renesas USBHS 控制器驅動程式;

    - USB Type-C Connector System Software Interface 驅動程式；

    - Framebuffer 層；

    - ACRN Hypervisor 服務模組驅動程式；

    - 網路檔案系統 (NFS) 用戶端；

    - 重疊檔案系統；

    - Proc 檔案系統；

    - SMB 網路檔案系統；

    - 記憶體管理 ;

    - 排程器基礎架構；

    - SoC 音訊核心驅動程式 ;；

    - Perf 事件；

    - 追蹤基礎架構；

    - 記憶體管理；

    - 802.1Q VLAN 通訊協定；

    - 非同步傳輸模式 (ATM) 子系統；

    - 藍牙子系統；

    - Devlink API；

    - IPv4 網路；

    - IPv6 網路 ;

    - 邏輯連結層 ;

    - 管理元件傳輸通訊協定 (MCTP)；

    - 多重路徑 TCP;

    - Netfilter ;

    - 網路流量控制；

    - 交換器裝置 API；

    - 無線網路 ；

    - eXpress 資料路徑；（CVE-2025-22017, CVE-2025-22003, CVE-2025-22009, CVE-2025-22015, CVE-2025-21934, CVE-2025-21908, CVE-2025-21885, CVE-2025-21979, CVE-2025-21887, CVE-2025-21922, CVE-2025-21944, CVE-2025-21905, CVE-2025-21969, CVE-2025-21904, CVE-2025-21926, CVE-2025-21951, CVE-2025-21997, CVE-2025-21920, CVE-2025-21994, CVE-2025-21977, CVE-2025-21976, CVE-2025-21975, CVE-2025-21972, CVE-2025-22013, CVE-2025-21894, CVE-2025-21963, CVE-2025-21978, CVE-2025-38569, CVE-2025-21936, CVE-2025-21873, CVE-2025-22010, CVE-2025-21981, CVE-2025-22005, CVE-2025-21959, CVE-2025-21929, CVE-2025-21927, CVE-2025-21966, CVE-2025-22008, CVE-2025-21957, CVE-2025-21970, CVE-2025-21968, CVE-2025-21889, CVE-2025-22047, CVE-2025-21881, CVE-2025-21956, CVE-2025-22011, CVE-2025-21986, CVE-2025-21892, CVE-2025-21964, CVE-2025-21899, CVE-2025-21877, CVE-2025-21875, CVE-2025-21912, CVE-2025-22001, CVE-2025-38350, CVE-2025-21991, CVE-2025-21930, CVE-2025-21962, CVE-2025-21880, CVE-2024-57996, CVE-2025-21914, CVE-2025-22014, CVE-2025-21888, CVE-2025-21955, CVE-2025-21937, CVE-2025-21924, CVE-2025-21895, CVE-2025-21947, CVE-2025-21946, CVE-2025-21878, CVE-2025-21918, CVE-2025-21913, CVE-2025-21945, CVE-2025-37752, CVE-2025-21935, CVE-2025-21950, CVE-2025-21960, CVE-2024-58090, CVE-2025-21992, CVE-2025-21961, CVE-2025-21948, CVE-2025-21982, CVE-2025-21910, CVE-2025-21909, CVE-2025-21925, CVE-2025-37889, CVE-2025-21967, CVE-2025-21898, CVE-2025-22007, CVE-2025-21995, CVE-2025-22016, CVE-2025-21891, CVE-2025-21911, CVE-2025-21890, CVE-2025-21999, CVE-2025-22004, CVE-2025-21915, CVE-2025-21996, CVE-2025-21980, CVE-2025-21903, CVE-2025-21916, CVE-2025-21941, CVE-2025-21928, CVE-2025-21919, CVE-2025-21883, CVE-2025-21872, CVE-2025-21917）

Tenable 已直接從 Ubuntu 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Ubuntu 22.04 LTS/24.04 LTS 主機上安裝的一個套件受到 USN-7802-1 公告中所提及的多個弱點影響。

    在 Linux 核心中發現數個安全性問題。攻擊者可能會利用這些弱點入侵系統。此更新可更正下列子系統中的瑕疵：

    - ARM32 架構;

    - ARM64 架構;

    - x86 架構；

    - 計算加速架構;

    - 匯流排裝置；

    - AMD CDX 匯流排驅動程式；

    - DPLL 子系統；

    - EFI 核心；

    - GPIO 子系統；

    - GPU 驅動程式；

    - HID 子系統;

    - I2C 子系統 ;

    - InfiniBand 驅動程式；

    - 多個裝置驅動程式；

    - 網路驅動程式 ;

    - Mellanox 網路驅動程式;

    - NVME 驅動程式；

    - 針腳控制器子系統；

    - RapidIO 驅動程式;

    - 電壓和電流調節器驅動程式；

    - SCSI 子系統；

    - SLIMbus 驅動程式;

    - QCOM SoC 驅動程式；

    - UFS 子系統;

    - USB DSL 驅動程式；

    - Renesas USBHS 控制器驅動程式;

    - USB Type-C Connector System Software Interface 驅動程式；

    - Framebuffer 層；

    - ACRN Hypervisor 服務模組驅動程式；

    - 網路檔案系統 (NFS) 用戶端；

    - 重疊檔案系統；

    - Proc 檔案系統；

    - SMB 網路檔案系統；

    - 記憶體管理 ;

    - 排程器基礎架構；

    - SoC 音訊核心驅動程式 ;；

    - Perf 事件；

    - 追蹤基礎架構；

    - 記憶體管理；

    - 802.1Q VLAN 通訊協定；

    - 非同步傳輸模式 (ATM) 子系統；

    - 藍牙子系統；

    - Devlink API；

    - IPv4 網路；

    - IPv6 網路 ;

    - 邏輯連結層 ;

    - 管理元件傳輸通訊協定 (MCTP)；

    - 多重路徑 TCP;

    - Netfilter ;

    - 網路流量控制；

    - 交換器裝置 API；

    - 無線網路 ；

    - eXpress 資料路徑；（CVE-2025-21935, CVE-2025-21967, CVE-2025-21908, CVE-2025-22004, CVE-2025-21926, CVE-2025-21927, CVE-2025-21995, CVE-2025-21895, CVE-2025-21936, CVE-2025-21948, CVE-2025-21969, CVE-2025-21972, CVE-2025-21951, CVE-2025-22017, CVE-2025-21962, CVE-2025-21917, CVE-2025-22013, CVE-2025-21991, CVE-2025-22009, CVE-2025-22016, CVE-2024-57996, CVE-2025-21966, CVE-2025-21947, CVE-2025-21928, CVE-2025-21959, CVE-2025-21910, CVE-2025-21957, CVE-2025-21978, CVE-2025-21887, CVE-2025-37954, CVE-2025-21996, CVE-2025-21979, CVE-2025-37889, CVE-2025-21930, CVE-2025-21980, CVE-2025-21878, CVE-2025-21918, CVE-2025-21889, CVE-2024-58090, CVE-2025-22011, CVE-2025-21955, CVE-2025-21904, CVE-2025-21894, CVE-2025-21892, CVE-2025-21945, CVE-2025-21994, CVE-2025-21986, CVE-2025-21912, CVE-2025-21968, CVE-2025-21976, CVE-2025-21898, CVE-2025-21875, CVE-2025-21964, CVE-2025-21963, CVE-2025-21960, CVE-2025-21999, CVE-2025-21997, CVE-2025-21916, CVE-2025-21891, CVE-2025-21920, CVE-2025-21909, CVE-2025-21944, CVE-2025-21883, CVE-2025-22005, CVE-2025-22007, CVE-2025-21911, CVE-2025-21992, CVE-2025-21919, CVE-2025-22003, CVE-2025-21915, CVE-2025-21970, CVE-2025-21903, CVE-2025-21899, CVE-2025-21880, CVE-2025-21956, CVE-2025-21934, CVE-2025-21925, CVE-2025-21941, CVE-2025-21977, CVE-2025-21975, CVE-2025-21913, CVE-2025-21981, CVE-2025-21872, CVE-2025-37752, CVE-2025-22008, CVE-2025-21905, CVE-2025-21888, CVE-2025-38350, CVE-2025-21922, CVE-2025-21937, CVE-2025-21950, CVE-2025-21924, CVE-2025-22014, CVE-2025-22001, CVE-2025-21885, CVE-2025-21881, CVE-2025-21929, CVE-2025-21914, CVE-2025-21877, CVE-2025-22015, CVE-2025-21961, CVE-2025-22010, CVE-2025-21982, CVE-2025-21890, CVE-2025-21946, CVE-2025-21873）

Tenable 已直接從 Ubuntu 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fbdev: hyperv_fb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbind,     hyperv_fb driver tries to release the framebuffer forcefully. If this framebuffer is in use it produce the     following WARN and hence this framebuffer is never released. [ 44.111220] WARNING: CPU: 35 PID: 1882 at     drivers/video/fbdev/core/fb_info.c:70 framebuffer_release+0x2c/0x40 < snip > [ 44.111289] Call Trace: [     44.111290] <TASK> [ 44.111291] ? show_regs+0x6c/0x80 [ 44.111295] ? __warn+0x8d/0x150 [ 44.111298] ?     framebuffer_release+0x2c/0x40 [ 44.111300] ? report_bug+0x182/0x1b0 [ 44.111303] ? handle_bug+0x6e/0xb0 [     44.111306] ? exc_invalid_op+0x18/0x80 [ 44.111308] ? asm_exc_invalid_op+0x1b/0x20 [ 44.111311] ?     framebuffer_release+0x2c/0x40 [ 44.111313] ? hvfb_remove+0x86/0xa0 [hyperv_fb] [ 44.111315]     vmbus_remove+0x24/0x40 [hv_vmbus] [ 44.111323] device_remove+0x40/0x80 [ 44.111325]     device_release_driver_internal+0x20b/0x270 [ 44.111327] ? bus_find_device+0xb3/0xf0 Fix this by moving the     release of framebuffer and assosiated memory to fb_ops.fb_destroy function, so that framebuffer framework     handles it gracefully. While we fix this, also replace manual registrations/unregistration of framebuffer     with devm_register_framebuffer. (CVE-2025-21976)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7765-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - Bus devices;

    - AMD CDX bus driver;

    - DPLL subsystem;

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Network drivers;

    - Mellanox network drivers;

    - NVME drivers;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - Network file system (NFS) client;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Scheduler infrastructure;

    - SoC audio core drivers;

    - Perf events;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - Netfilter;

    - Network traffic control;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path; (CVE-2025-21980, CVE-2025-21999, CVE-2025-21991, CVE-2025-21937, CVE-2025-22016,     CVE-2025-21920, CVE-2025-21979, CVE-2025-21919, CVE-2025-21969, CVE-2025-21872, CVE-2025-21996,     CVE-2025-21927, CVE-2025-21904, CVE-2025-22013, CVE-2025-21928, CVE-2025-21891, CVE-2025-21889,     CVE-2025-21972, CVE-2025-21981, CVE-2025-38569, CVE-2025-21910, CVE-2025-21945, CVE-2025-22011,     CVE-2025-21916, CVE-2025-21924, CVE-2025-21922, CVE-2025-21975, CVE-2025-21880, CVE-2025-21995,     CVE-2025-21977, CVE-2025-21947, CVE-2025-21914, CVE-2025-21905, CVE-2025-22009, CVE-2025-21892,     CVE-2025-22005, CVE-2024-58090, CVE-2025-21926, CVE-2025-37889, CVE-2025-21966, CVE-2025-21955,     CVE-2025-22007, CVE-2025-21894, CVE-2025-21909, CVE-2025-21883, CVE-2025-21992, CVE-2025-21976,     CVE-2025-21890, CVE-2025-21898, CVE-2025-21982, CVE-2025-21877, CVE-2025-21925, CVE-2025-21970,     CVE-2025-21930, CVE-2025-21946, CVE-2025-22017, CVE-2025-21908, CVE-2025-21944, CVE-2025-21885,     CVE-2025-22010, CVE-2025-21917, CVE-2025-21918, CVE-2025-21934, CVE-2025-21950, CVE-2025-21963,     CVE-2025-22003, CVE-2025-21961, CVE-2025-21967, CVE-2025-21878, CVE-2025-21895, CVE-2025-21913,     CVE-2025-21875, CVE-2025-21959, CVE-2025-22008, CVE-2025-21968, CVE-2025-21936, CVE-2025-21956,     CVE-2025-21903, CVE-2025-22004, CVE-2025-21986, CVE-2025-21915, CVE-2025-21964, CVE-2025-22014,     CVE-2025-21994, CVE-2025-21912, CVE-2025-21873, CVE-2025-21957, CVE-2025-22015, CVE-2025-21997,     CVE-2025-21948, CVE-2025-21951, CVE-2025-21962, CVE-2025-22001, CVE-2025-21978, CVE-2025-21960,     CVE-2025-22047, CVE-2025-21935, CVE-2025-21899, CVE-2025-21911, CVE-2025-21881, CVE-2025-21929,     CVE-2025-21941)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu Pro 24.04 LTS Realtime Kernel host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7767-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - Bus devices;

    - AMD CDX bus driver;

    - DPLL subsystem;

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Network drivers;

    - Mellanox network drivers;

    - NVME drivers;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - Network file system (NFS) client;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Scheduler infrastructure;

    - SoC audio core drivers;

    - Perf events;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - Netfilter;

    - Network traffic control;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path; (CVE-2025-21966, CVE-2025-21895, CVE-2025-21944, CVE-2025-21986, CVE-2025-21918,     CVE-2025-21873, CVE-2025-21963, CVE-2025-21929, CVE-2025-21995, CVE-2025-22017, CVE-2025-21991,     CVE-2025-21960, CVE-2025-21946, CVE-2025-21976, CVE-2025-21922, CVE-2025-21925, CVE-2025-21903,     CVE-2025-21978, CVE-2025-21979, CVE-2025-22016, CVE-2025-21936, CVE-2025-21997, CVE-2025-21992,     CVE-2025-21920, CVE-2025-21875, CVE-2025-21934, CVE-2025-21919, CVE-2025-21972, CVE-2025-22001,     CVE-2025-21981, CVE-2025-21910, CVE-2025-21969, CVE-2025-22010, CVE-2025-21908, CVE-2025-21957,     CVE-2025-22009, CVE-2025-21927, CVE-2025-21930, CVE-2025-21994, CVE-2025-21980, CVE-2025-21885,     CVE-2025-21967, CVE-2025-21899, CVE-2025-21890, CVE-2025-21948, CVE-2025-21964, CVE-2025-21911,     CVE-2025-21982, CVE-2025-21883, CVE-2025-21913, CVE-2025-21917, CVE-2025-21905, CVE-2025-21968,     CVE-2025-22013, CVE-2025-22005, CVE-2025-21916, CVE-2025-21880, CVE-2025-21881, CVE-2025-22003,     CVE-2025-21892, CVE-2025-21937, CVE-2025-21970, CVE-2025-22004, CVE-2025-21950, CVE-2025-21924,     CVE-2025-21894, CVE-2025-21904, CVE-2025-21915, CVE-2025-21889, CVE-2025-21912, CVE-2025-21909,     CVE-2025-21888, CVE-2025-21935, CVE-2025-22008, CVE-2025-37889, CVE-2025-21878, CVE-2025-21926,     CVE-2025-22011, CVE-2025-21962, CVE-2025-22007, CVE-2025-21941, CVE-2025-21898, CVE-2025-21956,     CVE-2025-22015, CVE-2025-21961, CVE-2025-21872, CVE-2025-21891, CVE-2025-21947, CVE-2025-21955,     CVE-2025-21877, CVE-2025-21996, CVE-2025-21977, CVE-2025-21945, CVE-2025-21914, CVE-2025-21975,     CVE-2024-58090, CVE-2025-21959, CVE-2025-22014, CVE-2025-21951, CVE-2025-21928, CVE-2025-21999)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu Pro 24.04 LTS Realtime Kernel host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7800-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - Bus devices;

    - AMD CDX bus driver;

    - DPLL subsystem;

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Network drivers;

    - Mellanox network drivers;

    - NVME drivers;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - UFS subsystem;

    - USB DSL drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - Ext4 file system;

    - Network file system (NFS) client;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Scheduler infrastructure;

    - SoC audio core drivers;

    - Perf events;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - Netfilter;

    - Packet sockets;

    - Network traffic control;

    - Switch device API;

    - TLS protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem; (CVE-2025-38617, CVE-2025-21898, CVE-2025-21996, CVE-2025-21903, CVE-2025-21980,     CVE-2025-22007, CVE-2025-22010, CVE-2025-37756, CVE-2025-21970, CVE-2025-21930, CVE-2025-37785,     CVE-2025-22015, CVE-2025-21927, CVE-2025-21914, CVE-2025-21963, CVE-2025-22004, CVE-2025-21934,     CVE-2025-21986, CVE-2025-22008, CVE-2025-21895, CVE-2025-21928, CVE-2025-21899, CVE-2025-21891,     CVE-2025-21925, CVE-2025-21979, CVE-2025-21945, CVE-2025-22005, CVE-2025-21880, CVE-2025-21946,     CVE-2025-21957, CVE-2025-21890, CVE-2025-21955, CVE-2025-21961, CVE-2025-21935, CVE-2025-21959,     CVE-2025-37889, CVE-2025-21894, CVE-2024-58090, CVE-2025-22001, CVE-2025-21924, CVE-2025-21909,     CVE-2025-22009, CVE-2025-21892, CVE-2025-21976, CVE-2025-21875, CVE-2025-21915, CVE-2025-21967,     CVE-2025-38618, CVE-2025-21918, CVE-2025-21881, CVE-2025-21872, CVE-2025-21873, CVE-2025-21960,     CVE-2025-22014, CVE-2025-21885, CVE-2025-21950, CVE-2025-21981, CVE-2025-21917, CVE-2025-21913,     CVE-2025-21972, CVE-2025-21975, CVE-2025-21977, CVE-2025-21951, CVE-2025-21962, CVE-2025-38500,     CVE-2025-21916, CVE-2025-21888, CVE-2025-21910, CVE-2025-21994, CVE-2025-21904, CVE-2025-21947,     CVE-2025-21995, CVE-2025-22013, CVE-2025-21920, CVE-2025-21997, CVE-2025-21905, CVE-2025-21941,     CVE-2025-21877, CVE-2025-21878, CVE-2025-21937, CVE-2025-21966, CVE-2025-21919, CVE-2025-21992,     CVE-2025-21948, CVE-2025-21922, CVE-2025-21911, CVE-2025-21926, CVE-2025-21908, CVE-2025-21956,     CVE-2025-22003, CVE-2025-21969, CVE-2025-21999, CVE-2025-38477, CVE-2025-21944, CVE-2025-21936,     CVE-2025-21978, CVE-2025-21991, CVE-2025-21912, CVE-2025-21968, CVE-2025-22017, CVE-2025-21883,     CVE-2025-21964, CVE-2025-21889, CVE-2025-21982, CVE-2025-22016, CVE-2025-21929)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    ovl: Use 'buf' flexible array for memcpy() destination(CVE-2022-49743)

    cifs: fix potential memory leaks in session setup(CVE-2023-53008)

    bnxt: Do not read past the end of test names(CVE-2023-53010)

    uprobes: Reject the shared zeropage in uprobe_write_opcode().(CVE-2025-21881)

    ftrace: Avoid potential division by zero in function_stat_show().(CVE-2025-21898)

    igb: Fix potential invalid memory access in igb_init_module().(CVE-2024-52332)

    bpf: Skip invalid kfunc call in backtrack_insn(CVE-2023-52928)

    HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove().(CVE-2025-21928)

    efi: Don't map the entire mokvar table to determine its size(CVE-2025-21872)

    mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize().(CVE-2025-21861)

    net_sched: sch_sfq: don't allow 1 packet limit(CVE-2024-57996)

    scsi: hisi_sas: Add cond_resched() for no forced preemption model(CVE-2024-56589)

    ipmr: do not call mr_mfc_uses_dev() for unres entries(CVE-2025-21719)

    dm thin: make get_first_thin use rcu-safe list first function(CVE-2025-21664)

    ipvlan: ensure network headers are in skb linear part(CVE-2025-21891)

    net/mlx5: handle errors in mlx5_chains_create_table().(CVE-2025-21975)

    ppp: Fix KMSAN uninit-value warning with bpf(CVE-2025-21922)

    udp: Deal with race between UDP socket address change and rehash(CVE-2024-57974)

    net: let net.core.dev_weight always be non-zero(CVE-2025-21806)

    RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers(CVE-2025-21885)

    tracing: Fix bad hist from corrupting named_triggers list(CVE-2025-21899)

    ipv6: use RCU protection in ip6_default_advmss().(CVE-2025-21765)

    x86/kexec: fix memory leak of elf header buffer(CVE-2022-49546)

    regulator: check that dummy regulator has been probed before using it(CVE-2025-22008)

    iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic().(CVE-2025-21993)

    ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().(CVE-2025-22005)

    drm/drm_vma_manager: Add drm_vma_node_allow_once().(CVE-2023-53001)

    ext4: avoid journaling sb update on error if journal is destroying(CVE-2025-22113)

    ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all().(CVE-2025-22121)

    nfsd: don't ignore the return code of svc_proc_register().(CVE-2025-22026)

    ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.(CVE-2022-49579)

    thermal: int340x: Add NULL check for adev(CVE-2025-23136)

    dlm: prevent NPD when writing a positive value to event_done(CVE-2025-23131)

    ext4: fix OOB read when checking dotdot dir(CVE-2025-37785)

    mmc: core: use sysfs_emit() instead of sprintf().(CVE-2022-49267)

    wifi: brcmfmac: Check the return value of of_property_read_string_index().(CVE-2025-21750)

    media: streamzap: fix race between device disconnection and urb callback(CVE-2025-22027)

    hrtimers: Handle CPU state correctly on hotplug(CVE-2024-57951)

    x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range().(CVE-2025-22090)

    clk: samsung: Fix UBSAN panic in samsung_clk_init().(CVE-2025-39728)

    netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets.(CVE-2025-22063)

    bpf: Fix kmemleak warning for percpu hashmap(CVE-2025-37807)

    xfrm: state: fix out-of-bounds read during lookup(CVE-2024-57982)

    ext4: fix off-by-one error in do_split(CVE-2025-23150)

    net_sched: sch_sfq: move the limit validation(CVE-2025-37752)

    cpufreq: governor: Use kobject release() method to free dbs_data(CVE-2022-49513)

    hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio(CVE-2025-21931)

    netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree().(CVE-2025-21959)

    ice: Fix memory corruption in VF driver(CVE-2022-49722)

    PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1(CVE-2025-21831)

    usb: cdc-acm: Check control transfer buffer size before access(CVE-2025-21704)

    ipv6: mcast: add RCU protection to mld_newpack().(CVE-2025-21758)

    vlan: enforce underlying device type(CVE-2025-21920)

    fbdev: hyperv_fb: Allow graceful removal of framebuffer(CVE-2025-21976)

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end(CVE-2024-57929)

    ipv4: use RCU protection in __ip_rt_update_pmtu().(CVE-2025-21766)

    ice: fix memory leak in aRFS after reset(CVE-2025-21981)

    nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu().(CVE-2025-21927)

    net_sched: Prevent creation of classes with TC_H_ROOT(CVE-2025-21971)

    net: sched: Disallow replacing of child qdisc from one parent to another(CVE-2025-21702)

    net: gso: fix ownership in __udp_gso_segment(CVE-2025-21926)

    usbnet: gl620a: fix endpoint checking in genelink_bind().(CVE-2025-21877)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
265931	Ubuntu 22.04 LTS : Linux 核心弱點 (USN-7766-1)	Nessus	Ubuntu Local Security Checks	9/25/2025	9/25/2025	high
266451	Ubuntu 22.04 LTS：Linux 核心 (HWE) 弱點 (USN-7801-1)	Nessus	Ubuntu Local Security Checks	10/3/2025	10/3/2025	high
242347	Oracle Linux 9：Unbreakable Enterprise 核心 (ELSA-2025-20480)	Nessus	Oracle Linux Local Security Checks	7/18/2025	7/19/2025	medium
265986	Ubuntu 22.04 LTS / 24.04 LTSLinux 核心 (IBM) 弱點 (USN-7779-1)	Nessus	Ubuntu Local Security Checks	9/26/2025	9/26/2025	high
266447	Ubuntu 22.04 LTS/24.04 LTS：Linux 核心 (Azure) 弱點 (USN-7802-1)	Nessus	Ubuntu Local Security Checks	10/3/2025	10/3/2025	high
244066	Linux Distros Unpatched Vulnerability : CVE-2025-21976	Nessus	Misc.	8/6/2025	10/8/2025	high
265927	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-7765-1)	Nessus	Ubuntu Local Security Checks	9/25/2025	9/25/2025	high
265932	Ubuntu Pro 24.04 LTS Realtime Kernel : Linux kernel (Real-time) vulnerabilities (USN-7767-1)	Nessus	Ubuntu Local Security Checks	9/25/2025	9/25/2025	high
266445	Ubuntu Pro 24.04 LTS Realtime Kernel : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-7800-1)	Nessus	Ubuntu Local Security Checks	10/3/2025	10/3/2025	high
242443	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1827)	Nessus	Huawei Local Security Checks	7/21/2025	9/25/2025	high
242467	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1826)	Nessus	Huawei Local Security Checks	7/21/2025	9/25/2025	high
265114	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2025-2168)	Nessus	Huawei Local Security Checks	9/16/2025	9/16/2025	high

Detections

Analytics

Plugins Search

high

high

medium

high

high

high

high

high

high

high

high

high