The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:18281 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)

    * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)

    * kernel: sunrpc: fix client side handling of tls alerts (CVE-2025-38571)

    * kernel: sunrpc: fix handling of server side tls alerts (CVE-2025-38566)

    * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)

    * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)

    * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03636-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
    - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns     (bsc#1248673).
    - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158).
    - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376).
    - CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232384).
    - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794).
    - CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458).
    - CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).
    - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075).
    - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03646-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_10_44 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
    - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns     (bsc#1248673).
    - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158).
    - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376).
    - CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).
    - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075).
    - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3742-1 advisory.

    This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues.

    The following security issues were fixed:

    - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
    - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns     (bsc#1248673).
    - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158).
    - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376).
    - CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232384).
    - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794).
    - CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458).
    - CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749).
    - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075).
    - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
270789	RHEL 9 : kernel (RHSA-2025:18281)	Nessus	Red Hat Local Security Checks	10/20/2025	10/20/2025	high
270828	SUSE SLES15 Security Update : kernel RT (Live Patch 3 for SLE 15 SP6) (SUSE-SU-2025:03636-1)	Nessus	SuSE Local Security Checks	10/21/2025	10/21/2025	medium
270841	SUSE SLES15: kernel-livepatch-6_4_0-150600_10_44-rt / etc (SUSE-SU-2025:03646-1)	Nessus	SuSE Local Security Checks	10/21/2025	6/26/2026	high
271371	SUSE SLES15 Security Update : kernel (Live Patch 4 for SLE 15 SP6) (SUSE-SU-2025:3742-1)	Nessus	SuSE Local Security Checks	10/24/2025	10/24/2025	medium

Detections

Analytics

Plugins Search

high

medium

high

medium