The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7835-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Ublk userspace block driver;

    - Clock framework and drivers;

    - GPU drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - NTB driver;

    - PCI subsystem;

    - Remote Processor subsystem;

    - Thermal drivers;

    - Virtio Host (VHOST) subsystem;

    - 9P distributed file system;

    - File systems infrastructure;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - SMB network file system;

    - Memory management;

    - RDMA verbs API;

    - Kernel fork() syscall;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - TLS protocol;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-23136, CVE-2025-22062, CVE-2025-22035,     CVE-2025-22020, CVE-2025-22083, CVE-2025-22071, CVE-2025-22060, CVE-2025-22073, CVE-2025-22044,     CVE-2025-22063, CVE-2025-22079, CVE-2025-22057, CVE-2025-22095, CVE-2025-39735, CVE-2025-39682,     CVE-2025-22058, CVE-2025-22021, CVE-2025-22018, CVE-2025-22056, CVE-2025-22054, CVE-2025-22080,     CVE-2025-22039, CVE-2025-22019, CVE-2025-22038, CVE-2025-22028, CVE-2023-53034, CVE-2024-58092,     CVE-2025-38637, CVE-2025-22089, CVE-2025-40114, CVE-2025-22068, CVE-2025-37937, CVE-2025-22070,     CVE-2025-22072, CVE-2025-22086, CVE-2025-22050, CVE-2025-22040, CVE-2025-22065, CVE-2025-38575,     CVE-2025-22064, CVE-2025-22033, CVE-2025-22041, CVE-2025-22090, CVE-2025-22036, CVE-2025-23138,     CVE-2025-22047, CVE-2025-38240, CVE-2025-22066, CVE-2025-22042, CVE-2025-38152, CVE-2025-22055,     CVE-2025-22081, CVE-2025-22045, CVE-2025-22053, CVE-2025-22075, CVE-2025-22027, CVE-2025-22025,     CVE-2025-22097)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7605-1 advisory.

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bus devices;

    - AMD CDX bus driver;

    - Clock framework and drivers;

    - DMA engine subsystem;

    - DPLL subsystem;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - VideoCore services drivers;

    - Thermal drivers;

    - USB DSL drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - W1 Dallas's 1-wire bus driver;

    - 9P distributed file system;

    - File systems infrastructure;

    - Ext4 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Key Management;

    - Memory management;

    - Scheduler infrastructure;

    - UProbes tracing;

    - RDMA verbs API;

    - SoC audio core drivers;

    - BPF subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path;

    - Key management;

    - ALSA framework;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916,     CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989,     CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962,     CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240,     CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075,     CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081,     CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000,     CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047,     CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935,     CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003,     CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016,     CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939,     CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979,     CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981,     CVE-2025-22014, CVE-2025-21947, CVE-2025-22007, CVE-2025-21925, CVE-2025-22089, CVE-2025-21923,     CVE-2025-38575, CVE-2025-22018, CVE-2025-22073, CVE-2025-21948, CVE-2025-22080, CVE-2025-22053,     CVE-2025-21903, CVE-2025-21969, CVE-2025-21926, CVE-2025-21941, CVE-2025-40114, CVE-2025-22066,     CVE-2025-22017, CVE-2025-21945, CVE-2025-22065, CVE-2025-22086, CVE-2025-22032, CVE-2025-22097,     CVE-2025-22083, CVE-2025-22044, CVE-2025-23136, CVE-2025-22046, CVE-2025-22041, CVE-2025-38479,     CVE-2025-21998, CVE-2025-22002, CVE-2025-39688, CVE-2025-22033, CVE-2025-21970, CVE-2025-22022,     CVE-2025-21936, CVE-2025-22050, CVE-2025-21984, CVE-2025-21928, CVE-2025-38637, CVE-2025-22030,     CVE-2025-21915, CVE-2025-22013, CVE-2025-21997, CVE-2025-22059, CVE-2025-21961, CVE-2025-21909,     CVE-2025-21955, CVE-2025-39778, CVE-2025-22055, CVE-2023-53034, CVE-2025-39728, CVE-2025-22020,     CVE-2025-22005, CVE-2025-22060, CVE-2025-21902, CVE-2025-22008, CVE-2025-23138, CVE-2025-21991,     CVE-2025-21999, CVE-2025-21982, CVE-2024-58092, CVE-2025-21992, CVE-2025-22028, CVE-2025-22042,     CVE-2025-22087, CVE-2025-21894, CVE-2025-21934, CVE-2025-21893, CVE-2025-22079, CVE-2025-22023,     CVE-2025-21977, CVE-2024-58093, CVE-2025-21904, CVE-2025-21910, CVE-2025-22024, CVE-2025-21964,     CVE-2025-21946, CVE-2025-21905, CVE-2025-22084, CVE-2025-21950, CVE-2025-22011, CVE-2025-21968,     CVE-2025-22035, CVE-2025-22004, CVE-2025-21919, CVE-2025-22039, CVE-2025-22063, CVE-2024-53222,     CVE-2025-21944, CVE-2025-21959, CVE-2025-21994, CVE-2025-21906)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22072 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes     prior to [POWERPC] spufs: Fix gang destroy leaks we used to have a problem with gang lifetimes -     creation of a gang returns opened gang directory, which normally gets removed when that gets closed, but     if somebody has created a context belonging to that gang and kept it alive until the gang got closed,     removal failed and we ended up with a leak. Unfortunately, it had been fixed the wrong way. Dentry of gang     directory was no longer pinned, and rmdir on close was gone. One problem was that failure of open kept     calling simple_rmdir() as cleanup, which meant an unbalanced dput(). Another bug was in the success case -     gang creation incremented link count on root directory, but that was no longer undone when gang got     destroyed. Fix consists of * reverting the commit in question * adding a counter to gang, protected by
    ->i_rwsem of gang directory inode. * having it set to 1 at creation time, dropped in both     spufs_dir_close() and spufs_gang_close() and bumped in spufs_create_context(), provided that it's not 0. *     using simple_recursive_removal() to take the gang directory out when counter reaches zero.
    (CVE-2025-22072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098853 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    spufs: fix gang directory lifetimes

    prior to [POWERPC] spufs: Fix gang destroy leaks we used to have     a problem with gang lifetimes - creation of a gang returns opened     gang directory, which normally gets removed when that gets closed,     but if somebody has created a context belonging to that gang and     kept it alive until the gang got closed, removal failed and we     ended up with a leak.

    Unfortunately, it had been fixed the wrong way.  Dentry of gang     directory was no longer pinned, and rmdir on close was gone.
    One problem was that failure of open kept calling simple_rmdir()     as cleanup, which meant an unbalanced dput().  Another bug was     in the success case - gang creation incremented link count on     root directory, but that was no longer undone when gang got     destroyed.

    Fix consists of
            * reverting the commit in question
            * adding a counter to gang, protected by ->i_rwsem     of gang directory inode.
            * having it set to 1 at creation time, dropped     in both spufs_dir_close() and spufs_gang_close() and bumped     in spufs_create_context(), provided that it's not 0.
            * using simple_recursive_removal() to take the gang     directory out when counter reaches zero.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20530 advisory.

    - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug: 38137447]     {CVE-2025-38089}
    - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
271259	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7835-1)	Nessus	Ubuntu Local Security Checks	10/23/2025	9/18/2026	high
241069	Ubuntu 24.04 LTS / 24.10 : Linux kernel vulnerabilities (USN-7605-1)	Nessus	Ubuntu Local Security Checks	7/1/2025	7/1/2025	high
295876	Azure Linux 3.0 Security Update: kernel (CVE-2025-22072)	Nessus	Azure Linux Local Security Checks	1/22/2026	1/22/2026	medium
340271	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098853)	Nessus	Unity Linux Local Security Checks	8/26/2026	8/28/2026	medium
252244	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20530)	Nessus	Oracle Linux Local Security Checks	8/19/2025	2/9/2026	medium

Detections

Analytics

Plugins Search

high

high

medium

medium

medium