The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3748-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
    - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns     (bsc#1248673).
    - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158).
    - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376).
    - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794).
    - CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458).
    - CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).
    - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075).
    - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7856-1 advisory.

    Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Kpf, Stavros Volos, and Flavien Solt discovered     that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting     in the leakage of privileged information. A local attacker could possibly use this to expose sensitive     information. (CVE-2024-36350, CVE-2024-36357)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - ACPI drivers;

    - Serial ATA and Parallel ATA drivers;

    - ATM drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Ublk userspace block driver;

    - Bus devices;

    - DMA engine subsystem;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - Cirrus firmware drivers;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - I2C subsystem;

    - InfiniBand drivers;

    - Input Device (Miscellaneous) drivers;

    - Multiple devices driver;

    - Media drivers;

    - TI TPS6594 PFSM driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - NVME drivers;

    - x86 platform drivers;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - S/390 drivers;

    - SCSI subsystem;

    - TCM subsystem;

    - Trusted Execution Environment drivers;

    - TTY drivers;

    - ChipIdea USB driver;

    - USB Type-C support driver;

    - Framebuffer layer;

    - TSM Common Guest driver;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - SMB network file system;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Memory Management;

    - Bluetooth subsystem;

    - Tracing infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - BPF subsystem;

    - Perf events;

    - Kernel exit() syscall;

    - IRQ subsystem;

    - Scheduler infrastructure;

    - Maple Tree data structure library;

    - Memory management;

    - Ethernet bridge;

    - Networking core;

    - IPv6 networking;

    - MultiProtocol Label Switching driver;

    - Netfilter;

    - NFC subsystem;

    - Rose network layer;

    - Network traffic control;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - WCD audio codecs;

    - USB sound devices; (CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38087, CVE-2025-38089,     CVE-2025-38090, CVE-2025-38179, CVE-2025-38180, CVE-2025-38181, CVE-2025-38182, CVE-2025-38183,     CVE-2025-38184, CVE-2025-38185, CVE-2025-38186, CVE-2025-38188, CVE-2025-38189, CVE-2025-38190,     CVE-2025-38191, CVE-2025-38192, CVE-2025-38193, CVE-2025-38194, CVE-2025-38196, CVE-2025-38197,     CVE-2025-38198, CVE-2025-38199, CVE-2025-38200, CVE-2025-38201, CVE-2025-38202, CVE-2025-38203,     CVE-2025-38204, CVE-2025-38205, CVE-2025-38206, CVE-2025-38208, CVE-2025-38210, CVE-2025-38211,     CVE-2025-38212, CVE-2025-38214, CVE-2025-38215, CVE-2025-38217, CVE-2025-38218, CVE-2025-38219,     CVE-2025-38220, CVE-2025-38222, CVE-2025-38223, CVE-2025-38224, CVE-2025-38225, CVE-2025-38226,     CVE-2025-38227, CVE-2025-38228, CVE-2025-38229, CVE-2025-38230, CVE-2025-38231, CVE-2025-38232,     CVE-2025-38233, CVE-2025-38234, CVE-2025-38236, CVE-2025-38237, CVE-2025-38238, CVE-2025-38239,     CVE-2025-38241, CVE-2025-38242, CVE-2025-38244, CVE-2025-38245, CVE-2025-38246, CVE-2025-38248,     CVE-2025-38249, CVE-2025-38250, CVE-2025-38251, CVE-2025-38253, CVE-2025-38254, CVE-2025-38255,     CVE-2025-38256, CVE-2025-38257, CVE-2025-38258, CVE-2025-38259, CVE-2025-38260, CVE-2025-38261,     CVE-2025-38262, CVE-2025-38263, CVE-2025-38264, CVE-2025-38320, CVE-2025-38321, CVE-2025-38322,     CVE-2025-38323, CVE-2025-38324, CVE-2025-38325, CVE-2025-38326, CVE-2025-38328, CVE-2025-38329,     CVE-2025-38330, CVE-2025-38331, CVE-2025-38332, CVE-2025-38333, CVE-2025-38334, CVE-2025-38336,     CVE-2025-38337, CVE-2025-38338, CVE-2025-38339, CVE-2025-38340, CVE-2025-38341, CVE-2025-38342,     CVE-2025-38343, CVE-2025-38344, CVE-2025-38345, CVE-2025-38346, CVE-2025-38347, CVE-2025-38348,     CVE-2025-38353, CVE-2025-38354, CVE-2025-38355, CVE-2025-38356, CVE-2025-38359, CVE-2025-38360,     CVE-2025-38361, CVE-2025-38362, CVE-2025-38363, CVE-2025-38364, CVE-2025-38365, CVE-2025-38368,     CVE-2025-38369, CVE-2025-38370, CVE-2025-38371, CVE-2025-38372, CVE-2025-38373, CVE-2025-38374,     CVE-2025-38375, CVE-2025-38376, CVE-2025-38377, CVE-2025-38381, CVE-2025-38382, CVE-2025-38383,     CVE-2025-38384, CVE-2025-38385, CVE-2025-38386, CVE-2025-38387, CVE-2025-38388, CVE-2025-38389,     CVE-2025-38390, CVE-2025-38391, CVE-2025-38392, CVE-2025-38393, CVE-2025-38395, CVE-2025-38396,     CVE-2025-38399, CVE-2025-38400, CVE-2025-38401, CVE-2025-38402, CVE-2025-38403, CVE-2025-38405,     CVE-2025-38406, CVE-2025-38407, CVE-2025-38408, CVE-2025-38409, CVE-2025-38410, CVE-2025-38411,     CVE-2025-38412, CVE-2025-38413, CVE-2025-38416, CVE-2025-38417, CVE-2025-38418, CVE-2025-38419,     CVE-2025-38420, CVE-2025-38421, CVE-2025-38422, CVE-2025-38423, CVE-2025-38424, CVE-2025-38425,     CVE-2025-38426, CVE-2025-38427, CVE-2025-38428, CVE-2025-38429, CVE-2025-38430, CVE-2025-38431,     CVE-2025-38434, CVE-2025-38435, CVE-2025-38436, CVE-2025-38523, CVE-2025-38541, CVE-2025-39682)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    tracing: Add down_write(trace_event_sem) when adding trace event(CVE-2025-38539)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    pinmux: fix race causing mux_owner NULL with active mux_usecount(CVE-2025-38632)

    openvswitch: Fix unsafe attribute parsing in output_userspace()(CVE-2025-37998)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38214)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    padata: do not leak refcount in reorder_work(CVE-2025-38031)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow(CVE-2025-22086)

    HID: core: ensure the allocated report buffer can contain the reserved report ID(CVE-2025-38495)

    net_sched: sch_sfq: fix a potential crash on gso_skb handling(CVE-2025-38115)

    pinctrl: qcom: msm: mark certain pins as invalid for interrupts(CVE-2025-38516)

    fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass(CVE-2025-38396)

    ata: libata-sff: Ensure that we cannot write outside the allocated buffer(CVE-2025-21738)

    HID: intel-ish-hid: ipc: Fix potential use-after-free in work function(CVE-2023-53039)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation(CVE-2025-38162)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns(CVE-2025-38499)

    crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)

    pptp: ensure minimal skb length in pptp_xmit()(CVE-2025-38574)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    net: openvswitch: Fix the dead loop of MPLS parse(CVE-2025-38146)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()(CVE-2025-38399)

    i2c: qup: jump out of the loop in case of timeout(CVE-2025-38671)

    x86/sgx: Prevent attempts to reclaim poisoned pages(CVE-2025-38334)

    nvmet-tcp: don't restore null(CVE-2025-38035)

    net: fix udp gso skb_segment after pull from frag_list(CVE-2025-38124)

    net/mlx5e: Fix cleanup null-ptr deref on encap lock(CVE-2023-53105)

    net: fix NULL pointer dereference in l3mdev_l3_rcv(CVE-2025-22103)

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    bpf: check changes_pkt_data property for extension programs(CVE-2024-58100)

    bpf: fix ktls panic with sockmap(CVE-2025-38166)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported(CVE-2025-22075)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace(CVE-2022-49932)

    net/mdiobus: Fix potential out-of-bounds read/write access(CVE-2025-38111)

    dmaengine: idxd: fix memory leak in error handling path of idxd_alloc(CVE-2025-38015)

    tcp: add accessors to read/set tp-snd_cwnd(CVE-2022-49325)

    perf: Fix sample vs do_exit()(CVE-2025-38424)

    regulator: core: fix NULL dereference on unbind due to stale coupling data(CVE-2025-38668)

    calipso: Don't call calipso functions for AF_INET sk.(CVE-2025-38147)

    Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If     fb_add_videomode()(CVE-2025-38215)

    usb: typec: altmodes/displayport: do not index invalid pin_assignments(CVE-2025-38391)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    netdevsim: Fix memory leak of nsim_dev-fa_cookie(CVE-2022-49803)

    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()(CVE-2025-38103)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    netlink: Fix wraparounds of sk-sk_rmem_alloc(CVE-2025-38465)

    EDAC/skx_common: Fix general protection fault(CVE-2025-38298)

    drm/nouveau: prime: fix ttm_bo_delayed_delete oops(CVE-2025-37765)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    netfilter: nf_set_pipapo_avx2: fix initial map fill(CVE-2025-38120)

    bpf, sockmap: Fix panic when calling skb_linearize(CVE-2025-38165)

    nvme-tcp: sanitize request list handling(CVE-2025-38264)

    bpf, sockmap: Avoid using sk_socket after free when sending(CVE-2025-38154)

    bpf: consider that tail calls invalidate packet pointers(CVE-2024-58237)

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction(CVE-2025-38211)

    NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN(CVE-2025-38393)

    ipc: fix to protect IPCS lookups using(CVE-2025-38212)

    net_sched: Flush gso_skb list too during -change()(CVE-2025-37992)

    netfilter: socket: Lookup orig tuple for IPv6 SNAT(CVE-2025-22021)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    net: tls: explicitly disallow disconnect(CVE-2025-37756)

    bpf: Scrub packet on bpf_redirect_peer(CVE-2025-37959)

    netfilter: allow exp not to be removed in nf_ct_find_expectation(CVE-2023-52927)

    net: ppp: Add bound checking for skb data on ppp_sync_txmung(CVE-2025-37749)

    net: decrease cached dst counters in dst_release(CVE-2025-22057)

    net: openvswitch: fix nested key length validation in the set() action(CVE-2025-37789)

    netfilter: conntrack: revisit gc autotuning(CVE-2022-49110)

    bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()(CVE-2023-53133)

    blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()(CVE-2023-53421)

    writeback: fix use-after-free in __mark_inode_dirty()(CVE-2025-39866)

    scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure(CVE-2025-38695)

    serial: mctrl_gpio: split disable_ms into sync and no_sync APIs(CVE-2025-38040)

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including     the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.(CVE-2024-2201)

    perf/core: Prevent VMA split of buffer mappings(CVE-2025-38563)

    ipvs: fix uninit-value for saddr in do_output_route4(CVE-2025-37961)

    net: phy: leds: fix memory leak(CVE-2025-37989)

    seg6: Fix validation of nexthop addresses(CVE-2025-38310)

    page_pool: avoid infinite loop to schedule delayed worker(CVE-2025-37859)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    perf/core: Exit early on perf_mmap() fail(CVE-2025-38565)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
271406	SUSE SLES15 Security Update : kernel (Live Patch 6 for SLE 15 SP6) (SUSE-SU-2025:3748-1)	Nessus	SuSE Local Security Checks	10/24/2025	10/24/2025	high
272302	Ubuntu 24.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7856-1)	Nessus	Ubuntu Local Security Checks	11/5/2025	11/5/2025	medium
274972	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2361)	Nessus	Huawei Local Security Checks	11/12/2025	11/12/2025	high

Detections

Analytics

Plugins Search

high

medium

high