The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7776-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - Bus devices;

    - Clock framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Input Device (Miscellaneous) drivers;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C support driver;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - BTRFS file system;

    - File systems infrastructure;

    - Ext4 file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - DRM display driver;

    - Memory Management;

    - Mellanox drivers;

    - Memory management;

    - Netfilter;

    - Network sockets;

    - IPC subsystem;

    - BPF subsystem;

    - Perf events;

    - Kernel exit() syscall;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Appletalk network protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Networking core;

    - IPv6 networking;

    - MultiProtocol Label Switching driver;

    - NetLabel subsystem;

    - Netlink;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - RxRPC session sockets;

    - Network traffic control;

    - TIPC protocol;

    - VMware vSockets driver;

    - USB sound devices; (CVE-2025-38420, CVE-2025-38173, CVE-2025-38305, CVE-2025-38312, CVE-2025-38458,     CVE-2024-26726, CVE-2025-38416, CVE-2025-38363, CVE-2025-38107, CVE-2025-38174, CVE-2025-38310,     CVE-2025-38406, CVE-2025-38439, CVE-2025-38245, CVE-2025-38163, CVE-2025-38111, CVE-2025-38467,     CVE-2025-38515, CVE-2025-38391, CVE-2025-21888, CVE-2025-38108, CVE-2025-38395, CVE-2025-38212,     CVE-2025-38153, CVE-2025-38226, CVE-2025-38375, CVE-2025-37958, CVE-2025-38444, CVE-2022-48703,     CVE-2025-38280, CVE-2025-38345, CVE-2025-38384, CVE-2025-38362, CVE-2025-38326, CVE-2025-38348,     CVE-2025-37752, CVE-2025-38324, CVE-2025-38298, CVE-2025-38206, CVE-2025-38219, CVE-2025-38145,     CVE-2025-38200, CVE-2025-38293, CVE-2025-38461, CVE-2025-38514, CVE-2025-38389, CVE-2025-38319,     CVE-2025-38344, CVE-2025-38160, CVE-2025-38159, CVE-2025-38424, CVE-2025-38412, CVE-2025-38346,     CVE-2025-38466, CVE-2024-27407, CVE-2025-38211, CVE-2025-38419, CVE-2025-38227, CVE-2025-38120,     CVE-2025-38143, CVE-2025-38122, CVE-2025-38197, CVE-2025-38285, CVE-2025-38273, CVE-2025-38112,     CVE-2025-38403, CVE-2025-38249, CVE-2025-38448, CVE-2025-38203, CVE-2025-38085, CVE-2024-44939,     CVE-2025-38119, CVE-2025-38184, CVE-2025-38443, CVE-2025-38084, CVE-2025-38194, CVE-2025-38459,     CVE-2025-38231, CVE-2025-38229, CVE-2025-38418, CVE-2025-38415, CVE-2024-57883, CVE-2025-38513,     CVE-2025-38460, CVE-2025-38377, CVE-2025-38147, CVE-2025-38371, CVE-2025-38428, CVE-2025-38237,     CVE-2025-38542, CVE-2025-38100, CVE-2025-38251, CVE-2025-38430, CVE-2025-38336, CVE-2025-38103,     CVE-2025-38342, CVE-2025-38154, CVE-2025-38540, CVE-2025-38161, CVE-2025-38399, CVE-2024-57996,     CVE-2025-38350, CVE-2025-38516, CVE-2025-38262, CVE-2025-38393, CVE-2025-38204, CVE-2024-26775,     CVE-2025-38464, CVE-2025-38135, CVE-2025-38313, CVE-2025-38387, CVE-2025-38102, CVE-2025-37963,     CVE-2025-38401, CVE-2025-38257, CVE-2025-38400, CVE-2025-38386, CVE-2025-38138, CVE-2025-38074,     CVE-2025-38410, CVE-2025-38218, CVE-2025-38115, CVE-2025-38222, CVE-2025-38286, CVE-2025-38136,     CVE-2025-38328, CVE-2025-38146, CVE-2025-38462, CVE-2025-38157, CVE-2025-38067, CVE-2025-38086,     CVE-2025-38445, CVE-2025-38090, CVE-2025-38498, CVE-2025-38167, CVE-2025-38352, CVE-2025-38441,     CVE-2025-38337, CVE-2025-37948, CVE-2025-38320, CVE-2025-38332, CVE-2025-38181, CVE-2025-38457,     CVE-2025-38465, CVE-2025-38263, CVE-2025-38088)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7775-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - Bus devices;

    - Clock framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Input Device (Miscellaneous) drivers;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C support driver;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - BTRFS file system;

    - File systems infrastructure;

    - Ext4 file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - SMB network file system;

    - DRM display driver;

    - Memory Management;

    - Mellanox drivers;

    - Memory management;

    - Netfilter;

    - Network sockets;

    - IPC subsystem;

    - BPF subsystem;

    - Perf events;

    - Kernel exit() syscall;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Appletalk network protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Networking core;

    - IPv6 networking;

    - MultiProtocol Label Switching driver;

    - NetLabel subsystem;

    - Netlink;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - RxRPC session sockets;

    - Network traffic control;

    - TIPC protocol;

    - VMware vSockets driver;

    - USB sound devices; (CVE-2025-38181, CVE-2025-38200, CVE-2025-38115, CVE-2025-38375, CVE-2025-38457,     CVE-2025-38371, CVE-2025-38145, CVE-2025-38540, CVE-2025-38305, CVE-2025-38443, CVE-2025-38222,     CVE-2025-38143, CVE-2025-38173, CVE-2025-38466, CVE-2025-38458, CVE-2025-38293, CVE-2025-38412,     CVE-2025-38418, CVE-2025-38513, CVE-2025-38459, CVE-2025-38084, CVE-2022-48703, CVE-2025-38419,     CVE-2025-38336, CVE-2025-37963, CVE-2025-38204, CVE-2025-38227, CVE-2025-38088, CVE-2025-38401,     CVE-2025-38107, CVE-2025-38285, CVE-2025-37958, CVE-2025-38389, CVE-2025-38444, CVE-2025-38465,     CVE-2025-38206, CVE-2025-38326, CVE-2025-38103, CVE-2024-44939, CVE-2025-38154, CVE-2025-38348,     CVE-2025-38229, CVE-2025-38514, CVE-2025-38231, CVE-2025-38136, CVE-2024-26775, CVE-2025-38439,     CVE-2025-38386, CVE-2025-38219, CVE-2025-38163, CVE-2025-38498, CVE-2025-38312, CVE-2025-38074,     CVE-2025-38328, CVE-2025-38430, CVE-2025-38102, CVE-2024-57883, CVE-2025-38406, CVE-2025-38515,     CVE-2025-38363, CVE-2025-38319, CVE-2025-38395, CVE-2025-38111, CVE-2025-38462, CVE-2025-38184,     CVE-2025-38324, CVE-2025-38197, CVE-2025-38100, CVE-2025-38112, CVE-2025-38384, CVE-2025-38420,     CVE-2025-38403, CVE-2025-38415, CVE-2025-38067, CVE-2025-38157, CVE-2025-38146, CVE-2025-38310,     CVE-2025-38377, CVE-2025-38174, CVE-2025-38135, CVE-2025-38320, CVE-2025-38387, CVE-2025-21888,     CVE-2025-38516, CVE-2025-38448, CVE-2025-38441, CVE-2025-38313, CVE-2025-38410, CVE-2025-38424,     CVE-2025-38161, CVE-2025-38090, CVE-2025-38362, CVE-2025-38138, CVE-2025-38160, CVE-2025-38218,     CVE-2025-38460, CVE-2025-38542, CVE-2025-38122, CVE-2025-38086, CVE-2025-38245, CVE-2025-38391,     CVE-2025-38400, CVE-2025-38467, CVE-2025-38280, CVE-2025-38273, CVE-2025-38147, CVE-2025-38257,     CVE-2025-38263, CVE-2025-38464, CVE-2025-38352, CVE-2025-38120, CVE-2025-38159, CVE-2025-38237,     CVE-2025-38212, CVE-2025-38399, CVE-2025-38346, CVE-2025-38262, CVE-2025-38345, CVE-2025-38332,     CVE-2025-38445, CVE-2024-26726, CVE-2025-38249, CVE-2025-38428, CVE-2025-38167, CVE-2025-38119,     CVE-2025-38461, CVE-2025-38194, CVE-2025-38226, CVE-2025-38203, CVE-2025-38342, CVE-2025-38344,     CVE-2025-38251, CVE-2025-37948, CVE-2025-38393, CVE-2025-37954, CVE-2025-38286, CVE-2025-38337,     CVE-2025-38416, CVE-2025-38108, CVE-2025-38211, CVE-2025-38153, CVE-2025-38085, CVE-2025-38298)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    sfc: fix use after free when disabling sriov(CVE-2022-49626)

    gfs2: Check sb_bsize_shift after reading superblock(CVE-2022-49769)

    dm ioctl: fix misbehavior if list_versions races with module loading(CVE-2022-49771)

    mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()(CVE-2022-49787)

    misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()(CVE-2022-49788)

    ata: libata-transport: fix double ata_host_put() in ata_tport_add()(CVE-2022-49826)

    udf: Fix a slab-out-of-bounds write bug in udf_find_entry()(CVE-2022-49846)

    tipc: fix the msg-req tlv len check in tipc_nl_compat_name_table_dump_header(CVE-2022-49862)

    ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network(CVE-2022-49865)

    HID: hyperv: fix possible memory leak in mousevsc_probe()(CVE-2022-49874)

    ipv6: fix WARNING in ip6_route_net_exit_late()(CVE-2022-49903)

    net: mdio: fix undefined behavior in bit shift for __mdiobus_register(CVE-2022-49907)

    net: sched: Fix use after free in red_enqueue()(CVE-2022-49921)

    media: pvrusb2: fix memory leak in pvr_probe(CVE-2022-49982)

    scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq(CVE-2022-49986)

    md: call __md_stop_writes in md_stop(CVE-2022-49987)

    xen/privcmd: fix error exit of privcmd_ioctl_dm_op()(CVE-2022-49989)

    drivers:md:fix a potential use-after-free bug(CVE-2022-50022)

    iavf: Fix reset error handling(CVE-2022-50053)

    net: atlantic: fix aq_vec index out of range error(CVE-2022-50066)

    iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)(CVE-2022-50093)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    sched, cpuset: Fix dl_cpu_busy() panic due to empty cs-cpus_allowed(CVE-2022-50103)

    RDMA/rxe: Fix error unwind in rxe_create_qp()(CVE-2022-50127)

    PM: hibernate: defer device probing when resuming from hibernation(CVE-2022-50202)

    md-raid10: fix KASAN warning(CVE-2022-50211)

    usbnet: Fix linkwatch use-after-free on disconnect(CVE-2022-50220)

    KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0(CVE-2022-50228)

    net: usb: smsc95xx: Limit packet length to skb-len(CVE-2023-53062)

    ext4: update s_journal_inum if it changes after journal replay(CVE-2023-53091)

    nvmet: avoid potential UAF in nvmet_req_complete()(CVE-2023-53116)

    net: usb: smsc75xx: Limit packet length to skb-len(CVE-2023-53125)

    media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()(CVE-2023-53146)

    xfrm: state: fix out-of-bounds read during lookup(CVE-2024-57982)

    ipv6: mcast: extend RCU protection in igmp6_send()(CVE-2025-21759)

    ndisc: extend RCU protection in ndisc_send_skb()(CVE-2025-21760)

    openvswitch: use RCU protection in ovs_vport_cmd_fill_info()(CVE-2025-21761)

    arp: use RCU protection in arp_xmit()(CVE-2025-21762)

    neighbour: use RCU protection in __neigh_notify()(CVE-2025-21763)

    ndisc: use RCU protection in ndisc_alloc_skb()(CVE-2025-21764)

    ext4: fix off-by-one error in do_split(CVE-2025-23150)

    mm/vmscan: don't try to reclaim hwpoison folio(CVE-2025-37834)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    block: fix resource leak in blk_register_queue() error path(CVE-2025-37980)

    module: ensure that kobject_put() is safe for module type kobjects(CVE-2025-37995)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()(CVE-2025-38000)

    nfs: handle failure of nfs_get_lock_context in unlock path(CVE-2025-38023)

    RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug(CVE-2025-38024)

    nvmet-tcp: don't restore null sk_state_change(CVE-2025-38035)

    smb: client: Fix use-after-free in cifs_fill_dirent(CVE-2025-38051)

    __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock(CVE-2025-38058)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    ipc: fix to protect IPCS lookups using RCU(CVE-2025-38212)

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38215)

    media: cxusb: no longer judge rbuf when the write fails(CVE-2025-38229)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()(CVE-2025-38337)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02969-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
    - CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing     before MONITOR (bsc#1238896).
    - CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
    - CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
    - CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
    - CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
    - CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
    - CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
    - CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
    - CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
    - CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
    - CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
    - CVE-2025-37885: KVM: x86: Reset IRTE to host control if *new* route isn't postable (bsc#1242960).
    - CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
    - CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
    - CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
    - CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
    - CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
    - CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
    - CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write()     (bsc#1245440).
    - CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
    - CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
    - CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
    - CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
    - CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
    - CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
    - CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
    - CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers     (bsc#1245671).
    - CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
    - CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
    - CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
    - CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
    - CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping     (bsc#1245708).
    - CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
    - CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
    - CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
    - CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
    - CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
    - CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
    - CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
    - CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
    - CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()     (bsc#1246006).
    - CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
    - CVE-2025-38188: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (bsc#1246098).
    - CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
    - CVE-2025-38202: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (bsc#1245980).
    - CVE-2025-38203: jfs: Fix null-ptr-deref in jfs_ioc_trim (bsc#1246044).
    - CVE-2025-38204: jfs: fix array-index-out-of-bounds read in add_missing_indices (bsc#1245983).
    - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
    - CVE-2025-38210: configfs-tsm-report: Fix NULL dereference of tsm_ops (bsc#1246020).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
    - CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
    - CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
    - CVE-2025-38236: af_unix: Disable MSG_OOB for unprivileged users (bsc#1246093).
    - CVE-2025-38239: scsi: megaraid_sas: Fix invalid node index (bsc#1246178).
    - CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
    - CVE-2025-38248: bridge: mcast: Fix use-after-free during router port configuration (bsc#1246173).
    - CVE-2025-38250: kABI workaround for bluetooth hci_dev changes (bsc#1246182).
    - CVE-2025-38264: llist: add interface to check if a node is on a list (bsc#1246387).
    - CVE-2025-38272: net: dsa: b53: do not enable EEE on bcm63xx (bsc#1246268).
    - CVE-2025-38279: selftests/bpf: Add tests with stack ptr register in conditional jmp (bsc#1246264).
    - CVE-2025-38283: hisi_acc_vfio_pci: bugfix live migration function without VF device driver     (bsc#1246273).
    - CVE-2025-38303: Bluetooth: eir: Fix possible crashes on eir_create_adv_data (bsc#1246354).
    - CVE-2025-38310: seg6: Fix validation of nexthop addresses (bsc#1246361).
    - CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
    - CVE-2025-38334: x86/sgx: Prevent attempts to reclaim poisoned pages (bsc#1246384).
    - CVE-2025-38335: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (bsc#1246250).
    - CVE-2025-38337: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (bsc#1246253).
    - CVE-2025-38349: eventpoll: do not decrement ep refcount while still holding the ep mutex (bsc#1246777).
    - CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
    - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()     (bsc#1246911).
    - CVE-2025-38364: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (bsc#1247091).
    - CVE-2025-38365: btrfs: fix a race between renames and directory logging (bsc#1247023).
    - CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
    - CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
    - CVE-2025-38382: btrfs: fix iteration of extrefs during log replay (bsc#1247031).
    - CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
    - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247156).
    - CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()     (bsc#1247097).
    - CVE-2025-38403: vsock/vmci: Clear the vmci transport packet properly when initializing it (bsc#1247141).
    - CVE-2025-38414: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (bsc#1247145).
    - CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
    - CVE-2025-38429: bus: mhi: ep: Update read pointer only after buffer is written (bsc#1247253).
    - CVE-2025-38455: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight     (bsc#1247101).
    - CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
    - CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
    - CVE-2025-38461: vsock: Fix transport_* TOCTOU (bsc#1247103).
    - CVE-2025-38462: vsock: Fix transport_{g2h,h2g} TOCTOU (bsc#1247104).
    - CVE-2025-38463: tcp: Correct signedness in skb remaining space calculation (bsc#1247113).
    - CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
    - CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
    - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
    - CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    tracing: Add down_write(trace_event_sem) when adding trace event(CVE-2025-38539)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    pinmux: fix race causing mux_owner NULL with active mux_usecount(CVE-2025-38632)

    openvswitch: Fix unsafe attribute parsing in output_userspace()(CVE-2025-37998)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38214)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    padata: do not leak refcount in reorder_work(CVE-2025-38031)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow(CVE-2025-22086)

    HID: core: ensure the allocated report buffer can contain the reserved report ID(CVE-2025-38495)

    net_sched: sch_sfq: fix a potential crash on gso_skb handling(CVE-2025-38115)

    pinctrl: qcom: msm: mark certain pins as invalid for interrupts(CVE-2025-38516)

    fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass(CVE-2025-38396)

    ata: libata-sff: Ensure that we cannot write outside the allocated buffer(CVE-2025-21738)

    HID: intel-ish-hid: ipc: Fix potential use-after-free in work function(CVE-2023-53039)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation(CVE-2025-38162)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns(CVE-2025-38499)

    crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)

    pptp: ensure minimal skb length in pptp_xmit()(CVE-2025-38574)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    net: openvswitch: Fix the dead loop of MPLS parse(CVE-2025-38146)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()(CVE-2025-38399)

    i2c: qup: jump out of the loop in case of timeout(CVE-2025-38671)

    x86/sgx: Prevent attempts to reclaim poisoned pages(CVE-2025-38334)

    nvmet-tcp: don't restore null(CVE-2025-38035)

    net: fix udp gso skb_segment after pull from frag_list(CVE-2025-38124)

    net/mlx5e: Fix cleanup null-ptr deref on encap lock(CVE-2023-53105)

    net: fix NULL pointer dereference in l3mdev_l3_rcv(CVE-2025-22103)

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    bpf: check changes_pkt_data property for extension programs(CVE-2024-58100)

    bpf: fix ktls panic with sockmap(CVE-2025-38166)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported(CVE-2025-22075)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace(CVE-2022-49932)

    net/mdiobus: Fix potential out-of-bounds read/write access(CVE-2025-38111)

    dmaengine: idxd: fix memory leak in error handling path of idxd_alloc(CVE-2025-38015)

    tcp: add accessors to read/set tp-snd_cwnd(CVE-2022-49325)

    perf: Fix sample vs do_exit()(CVE-2025-38424)

    regulator: core: fix NULL dereference on unbind due to stale coupling data(CVE-2025-38668)

    calipso: Don't call calipso functions for AF_INET sk.(CVE-2025-38147)

    Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If     fb_add_videomode()(CVE-2025-38215)

    usb: typec: altmodes/displayport: do not index invalid pin_assignments(CVE-2025-38391)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    netdevsim: Fix memory leak of nsim_dev-fa_cookie(CVE-2022-49803)

    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()(CVE-2025-38103)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    netlink: Fix wraparounds of sk-sk_rmem_alloc(CVE-2025-38465)

    EDAC/skx_common: Fix general protection fault(CVE-2025-38298)

    drm/nouveau: prime: fix ttm_bo_delayed_delete oops(CVE-2025-37765)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    netfilter: nf_set_pipapo_avx2: fix initial map fill(CVE-2025-38120)

    bpf, sockmap: Fix panic when calling skb_linearize(CVE-2025-38165)

    nvme-tcp: sanitize request list handling(CVE-2025-38264)

    bpf, sockmap: Avoid using sk_socket after free when sending(CVE-2025-38154)

    bpf: consider that tail calls invalidate packet pointers(CVE-2024-58237)

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction(CVE-2025-38211)

    NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN(CVE-2025-38393)

    ipc: fix to protect IPCS lookups using(CVE-2025-38212)

    net_sched: Flush gso_skb list too during -change()(CVE-2025-37992)

    netfilter: socket: Lookup orig tuple for IPv6 SNAT(CVE-2025-22021)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    net: tls: explicitly disallow disconnect(CVE-2025-37756)

    bpf: Scrub packet on bpf_redirect_peer(CVE-2025-37959)

    netfilter: allow exp not to be removed in nf_ct_find_expectation(CVE-2023-52927)

    net: ppp: Add bound checking for skb data on ppp_sync_txmung(CVE-2025-37749)

    net: decrease cached dst counters in dst_release(CVE-2025-22057)

    net: openvswitch: fix nested key length validation in the set() action(CVE-2025-37789)

    netfilter: conntrack: revisit gc autotuning(CVE-2022-49110)

    bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()(CVE-2023-53133)

    blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()(CVE-2023-53421)

    writeback: fix use-after-free in __mark_inode_dirty()(CVE-2025-39866)

    scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure(CVE-2025-38695)

    serial: mctrl_gpio: split disable_ms into sync and no_sync APIs(CVE-2025-38040)

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including     the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.(CVE-2024-2201)

    perf/core: Prevent VMA split of buffer mappings(CVE-2025-38563)

    ipvs: fix uninit-value for saddr in do_output_route4(CVE-2025-37961)

    net: phy: leds: fix memory leak(CVE-2025-37989)

    seg6: Fix validation of nexthop addresses(CVE-2025-38310)

    page_pool: avoid infinite loop to schedule delayed worker(CVE-2025-37859)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    perf/core: Exit early on perf_mmap() fail(CVE-2025-38565)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777633439 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: capabilities: fix undefined behavior     in bit shift for CAP_TO_MASK Shifting signed 32-bit value by 31 bits is undefined, so changing significant     bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in     security/commoncap.c:1252:2 left shift of 1 by 31 places cannot be represented in type 'int' Call Trace:
    <TASK> dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e
    __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c cap_task_prctl+0x561/0x6f0 security_task_prctl+0x5a/0xb0
    __x64_sys_prctl+0x61/0x8f0 do_syscall_64+0x58/0x80 entry_SYSCALL_64_after_hwframe+0x63/0xcd </TASK>     (CVE-2022-49870)

  - In the Linux kernel, the following vulnerability has been resolved: intel_th: Fix a resource leak in an     error handling path If an error occurs after calling 'pci_alloc_irq_vectors()', 'pci_free_irq_vectors()'     must be called as already done in the remove function. (CVE-2022-50143)

  - In the Linux kernel, the following vulnerability has been resolved: xsk: Fix xsk_diag use-after-free error     during socket cleanup Fix a use-after-free error that is possible if the xsk_diag interface is used after     the socket has been unbound from the device. This can happen either due to the socket being closed or the     device disappearing. In the early days of AF_XDP, the way we tested that a socket was not bound to a     device was to simply check if the netdevice pointer in the xsk socket structure was NULL. Later, a better     system was introduced by having an explicit state variable in the xsk socket struct. For example, the     state of a socket that is on the way to being closed and has been unbound from the device is XSK_UNBOUND.
    The commit in the Fixes tag below deleted the old way of signalling that a socket is unbound, setting dev     to NULL. This in the belief that all code using the old way had been exterminated. That was unfortunately     not true as the xsk diagnostics code was still using the old way and thus does not work as intended when a     socket is going down. Fix this by introducing a test against the state variable. If the socket is in the     state XSK_UNBOUND, simply abort the diagnostic's netlink operation. (CVE-2023-53426)

  - In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing     resource in vmci_resource_remove() When removing a resource from vmci_resource_table in     vmci_resource_remove(), the search is performed using the resource handle by comparing context and     resource fields. It is possible though to create two resources with different types but same handle (same     context and resource fields). When trying to remove one of the resources, vmci_resource_remove() may not     remove the intended one, but the object will still be freed as in the case of the datagram type in     vmci_datagram_destroy_handle(). vmci_resource_table will still hold a pointer to this freed resource     leading to a use-after-free vulnerability. BUG: KASAN: use-after-free in vmci_handle_is_equal     include/linux/vmw_vmci_defs.h:142 [inline] BUG: KASAN: use-after-free in vmci_resource_remove+0x3a1/0x410     drivers/misc/vmw_vmci/vmci_resource.c:147 Read of size 4 at addr ffff88801c16d800 by task syz-     executor197/1592 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x82/0xa9     lib/dump_stack.c:106 print_address_description.constprop.0+0x21/0x366 mm/kasan/report.c:239
    __kasan_report.cold+0x7f/0x132 mm/kasan/report.c:425 kasan_report+0x38/0x51 mm/kasan/report.c:442     vmci_handle_is_equal include/linux/vmw_vmci_defs.h:142 [inline] vmci_resource_remove+0x3a1/0x410     drivers/misc/vmw_vmci/vmci_resource.c:147 vmci_qp_broker_detach+0x89a/0x11b9     drivers/misc/vmw_vmci/vmci_queue_pair.c:2182 ctx_free_ctx+0x473/0xbe1     drivers/misc/vmw_vmci/vmci_context.c:444 kref_put include/linux/kref.h:65 [inline] vmci_ctx_put     drivers/misc/vmw_vmci/vmci_context.c:497 [inline] vmci_ctx_destroy+0x170/0x1d6     drivers/misc/vmw_vmci/vmci_context.c:195 vmci_host_close+0x125/0x1ac drivers/misc/vmw_vmci/vmci_host.c:143
    __fput+0x261/0xa34 fs/file_table.c:282 task_work_run+0xf0/0x194 kernel/task_work.c:164     tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0x184/0x189     kernel/entry/common.c:187 exit_to_user_mode_prepare+0x11b/0x123 kernel/entry/common.c:220
    __syscall_exit_to_user_mode_work kernel/entry/common.c:302 [inline] syscall_exit_to_user_mode+0x18/0x42     kernel/entry/common.c:313 do_syscall_64+0x41/0x85 arch/x86/entry/common.c:86     entry_SYSCALL_64_after_hwframe+0x6e/0x0 This change ensures the type is also checked when removing the     resource from vmci_resource_table in vmci_resource_remove(). (CVE-2024-46738)

  - In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character     when validating the event length strlen() returns a string length excluding the null byte. If the string     length equals to the maximum buffer length, the buffer will have no space for the NULL terminating     character. This commit checks this condition and returns failure for it. (CVE-2024-50131)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt(), iff mode->refresh     somehow happens to be 0x80000000, cvt.f_refresh will become 0 when multiplying it by 2 due to overflow.
    It's then passed to fb_cvt_hperiod(), where it's used as a divider -- division by 0 will result in kernel     oops. Add a sanity check for cvt.f_refresh to avoid such overflow... Found by Linux Verification Center     (linuxtesting.org) with the Svace static analysis tool. (CVE-2025-38312)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7774-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - Bus devices;

    - Clock framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - GPU drivers;

    - HID subsystem;

    - InfiniBand drivers;

    - Input Device (Miscellaneous) drivers;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C support driver;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - BTRFS file system;

    - File systems infrastructure;

    - Ext4 file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - DRM display driver;

    - Memory Management;

    - Mellanox drivers;

    - Memory management;

    - Netfilter;

    - Network sockets;

    - IPC subsystem;

    - BPF subsystem;

    - Perf events;

    - Kernel exit() syscall;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Appletalk network protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Networking core;

    - IPv6 networking;

    - MultiProtocol Label Switching driver;

    - NetLabel subsystem;

    - Netlink;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - RxRPC session sockets;

    - Network traffic control;

    - TIPC protocol;

    - VMware vSockets driver;

    - USB sound devices; (CVE-2025-38465, CVE-2025-38386, CVE-2025-38273, CVE-2025-38227, CVE-2025-38107,     CVE-2025-37958, CVE-2025-38371, CVE-2025-38328, CVE-2025-38348, CVE-2025-38100, CVE-2025-38336,     CVE-2025-38420, CVE-2025-38154, CVE-2025-38542, CVE-2025-38222, CVE-2025-38406, CVE-2025-37948,     CVE-2025-38112, CVE-2025-38145, CVE-2025-38163, CVE-2025-38464, CVE-2025-38085, CVE-2025-38342,     CVE-2025-38310, CVE-2025-38326, CVE-2025-38418, CVE-2025-38362, CVE-2025-38412, CVE-2025-38219,     CVE-2025-38332, CVE-2025-38387, CVE-2025-38262, CVE-2025-38157, CVE-2025-38514, CVE-2025-38466,     CVE-2025-38313, CVE-2025-38159, CVE-2024-44939, CVE-2025-38352, CVE-2025-38459, CVE-2025-38419,     CVE-2025-38086, CVE-2025-38298, CVE-2025-38146, CVE-2025-38181, CVE-2025-38448, CVE-2025-38231,     CVE-2025-38461, CVE-2025-38251, CVE-2025-38391, CVE-2025-38515, CVE-2024-26726, CVE-2025-38462,     CVE-2025-38416, CVE-2025-38280, CVE-2025-38226, CVE-2025-38211, CVE-2025-38120, CVE-2025-38377,     CVE-2025-38147, CVE-2025-38204, CVE-2025-38345, CVE-2025-38424, CVE-2025-38203, CVE-2025-38443,     CVE-2025-38197, CVE-2025-38067, CVE-2025-38400, CVE-2025-38229, CVE-2025-38108, CVE-2025-38319,     CVE-2025-38445, CVE-2025-38212, CVE-2025-38184, CVE-2025-38363, CVE-2025-38160, CVE-2024-57883,     CVE-2025-38441, CVE-2025-38320, CVE-2025-38393, CVE-2025-38200, CVE-2025-38467, CVE-2025-38444,     CVE-2025-38194, CVE-2025-38460, CVE-2025-38167, CVE-2025-38428, CVE-2025-38312, CVE-2025-38111,     CVE-2025-38498, CVE-2025-38135, CVE-2025-38237, CVE-2025-38457, CVE-2025-38401, CVE-2025-38206,     CVE-2025-38293, CVE-2025-38143, CVE-2025-38161, CVE-2025-38136, CVE-2022-48703, CVE-2025-38513,     CVE-2025-38430, CVE-2025-38384, CVE-2025-38346, CVE-2025-38337, CVE-2025-38088, CVE-2025-38257,     CVE-2025-38395, CVE-2025-38153, CVE-2025-38263, CVE-2025-38218, CVE-2024-26775, CVE-2025-38305,     CVE-2025-38119, CVE-2025-38389, CVE-2025-38102, CVE-2025-38074, CVE-2025-38173, CVE-2025-38138,     CVE-2025-38103, CVE-2025-38286, CVE-2025-38458, CVE-2025-38174, CVE-2025-38245, CVE-2025-38084,     CVE-2025-38415, CVE-2025-38516, CVE-2025-38090, CVE-2025-38439, CVE-2025-38403, CVE-2025-38115,     CVE-2025-38344, CVE-2025-38410, CVE-2025-38375, CVE-2025-37963, CVE-2025-38249, CVE-2025-38324,     CVE-2025-38122, CVE-2025-38540, CVE-2025-38399, CVE-2025-21888, CVE-2025-38285)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
265954	Ubuntu 20.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7776-1)	Nessus	Ubuntu Local Security Checks	9/26/2025	9/26/2025	medium
265984	Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7775-1)	Nessus	Ubuntu Local Security Checks	9/26/2025	6/11/2026	high
287964	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-1101)	Nessus	Huawei Local Security Checks	1/16/2026	1/16/2026	high
348098	EulerOS Virtualization 2.11.0 : kernel (EulerOS-SA-2026-3511)	Nessus	Huawei Local Security Checks	9/18/2026	10/5/2026	critical
242163	Photon OS 5.0: Linux PHSA-2025-5.0-0558	Nessus	PhotonOS Local Security Checks	7/16/2025	7/21/2026	high
255199	SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2025:02969-1)	Nessus	SuSE Local Security Checks	8/26/2025	6/26/2026	high
274905	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2330)	Nessus	Huawei Local Security Checks	11/12/2025	11/12/2025	high
360900	AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1777633439)	Nessus	Alma Linux Local Security Checks	10/1/2026	10/2/2026	high
244085	Linux Distros Unpatched Vulnerability : CVE-2025-38312	Nessus	Misc.	8/6/2025	9/30/2026	medium
261146	Photon OS 4.0: Linux PHSA-2025-4.0-0831	Nessus	PhotonOS Local Security Checks	9/3/2025	3/7/2026	high
265983	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7774-1)	Nessus	Ubuntu Local Security Checks	9/26/2025	10/6/2026	high

Detections

Analytics

Plugins Search

medium

high

high

critical

high

high

high

high

medium

high

high