The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3244 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3244-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     December 20, 2022                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-5.10     Version        : 5.10.158-2~deb10u1     CVE ID         : CVE-2021-3759 CVE-2022-3169 CVE-2022-3435 CVE-2022-3521                      CVE-2022-3524 CVE-2022-3564 CVE-2022-3565 CVE-2022-3594                      CVE-2022-3628 CVE-2022-3640 CVE-2022-3643 CVE-2022-4139                      CVE-2022-4378 CVE-2022-41849 CVE-2022-41850 CVE-2022-42328                      CVE-2022-42329 CVE-2022-42895 CVE-2022-42896 CVE-2022-47518                      CVE-2022-47519 CVE-2022-47520 CVE-2022-47521     Debian Bug     : 1022806 1024697

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    CVE-2021-3759

        It was discovered that the memory cgroup controller did not         account for kernel memory allocated for IPC objects.  A local user         could use this for denial of service (memory exhaustion).

    CVE-2022-3169

        It was discovered that the NVMe host driver did not prevent a         concurrent reset and subsystem reset.  A local user with access to         an NVMe device could use this to cause a denial of service (device         disconnect or crash).

    CVE-2022-3435

        Gwangun Jung reported a flaw in the IPv4 forwarding subsystem         which would lead to an out-of-bounds read.  A local user with         CAP_NET_ADMIN capability in any user namespace could possibly         exploit this to cause a denial of service (crash).

    CVE-2022-3521

        The syzbot tool found a race condition in the KCM subsystem         which could lead to a crash.

        This subsystem is not enabled in Debian's official kernel         configurations.

    CVE-2022-3524

        The syzbot tool found a race condition in the IPv6 stack which         could lead to a memory leak.  A local user could exploit this to         cause a denial of service (memory exhaustion).

    CVE-2022-3564

        A flaw was discovered in the Bluetooh L2CAP subsystem which         would lead to a use-after-free.  This might be exploitable         to cause a denial of service (crash or memory corruption) or         possibly for privilege escalation.

    CVE-2022-3565

        A flaw was discovered in the mISDN driver which would lead to a         use-after-free.  This might be exploitable to cause a denial of         service (crash or memory corruption) or possibly for privilege         escalation.

    CVE-2022-3594

        Andrew Gaul reported that the r8152 Ethernet driver would log         excessive numbers of messages in response to network errors.  A         remote attacker could possibly exploit this to cause a denial of         service (resource exhaustion).

    CVE-2022-3628

        Dokyung Song, Jisoo Jang, and Minsuk Kang reported a potential         heap-based buffer overflow in the brcmfmac Wi-Fi driver.  A user         able to connect a malicious USB device could exploit this to cause         a denial of service (crash or memory corruption) or possibly for         privilege escalation.

    CVE-2022-3640

        A flaw was discovered in the Bluetooh L2CAP subsystem which         would lead to a use-after-free.  This might be exploitable         to cause a denial of service (crash or memory corruption) or         possibly for privilege escalation.

    CVE-2022-3643 (XSA-423)

        A flaw was discovered in the Xen network backend driver that would         result in it generating malformed packet buffers.  If these         packets were forwarded to certain other network devices, a Xen         guest could exploit this to cause a denial of service (crash or         device reset).

    CVE-2022-4139

        A flaw was discovered in the i915 graphics driver.  On gen12 Xe         GPUs it failed to flush TLBs when necessary, resulting in GPU         programs retaining access to freed memory.  A local user with         access to the GPU could exploit this to leak sensitive         information, cause a denial of service (crash or memory         corruption) or likely for privilege escalation.

    CVE-2022-4378

        Kyle Zeng found a flaw in procfs that would cause a stack-based         buffer overflow.  A local user permitted to write to a sysctl         could use this to cause a denial of service (crash or memory         corruption) or possibly for privilege escalation.

    CVE-2022-41849

        A race condition was discovered in the smscufx graphics driver,         which could lead to a use-after-free.  A user able to remove the         physical device while also accessing its device node could exploit         this to cause a denial of service (crash or memory corruption) or         possibly for privilege escalation.

    CVE-2022-41850

        A race condition was discovered in the hid-roccat input driver,         which could lead to a use-after-free.  A local user able to access         such a device could exploit this to cause a denial of service         (crash or memory corruption) or possibly for privilege escalation.

    CVE-2022-42328, CVE-2022-42329 (XSA-424)

        Yang Yingliang reported that the Xen network backend driver did         not use the proper function to free packet buffers in one case,         which could lead to a deadlock.  A Xen guest could exploit this to         cause a denial of service (hang).

    CVE-2022-42895

        Tams Koczka reported a flaw in the Bluetooh L2CAP subsystem         that would result in reading uninitialised memory.  A nearby         attacker able to make a Bluetooth connection could exploit         this to leak sensitive information.

    CVE-2022-42896

        Tams Koczka reported flaws in the Bluetooh L2CAP subsystem that         can lead to a use-after-free.  A nearby attacker able to make a         Bluetooth SMP connection could exploit this to cause a denial of         service (crash or memory corruption) or possibly for remote code         execution.

    CVE-2022-47518, CVE-2022-47519, CVE-2022-47521

        Several flaws were discovered in the wilc1000 Wi-Fi driver which         could lead to a heap-based buffer overflow.  A nearby attacker         could exploit these for denial of service (crash or memory         corruption) or possibly for remote code execution.

    CVE-2022-47520

        A flaw was discovered in the wilc1000 Wi-Fi driver which could         lead to a heap-based buffer overflow.  A local user with         CAP_NET_ADMIN capability over such a Wi-Fi device could exploit         this for denial of service (crash or memory corruption) or         possibly for privilege escalation.

    For Debian 10 buster, these problems have been fixed in version     5.10.158-2~deb10u1.

    We recommend that you upgrade your linux-5.10 packages.

    For the detailed security status of linux-5.10 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-5.10

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

    --     Ben Hutchings - Debian developer, member of kernel, installer and LTS     teams     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0152-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-0266: Fixed a use-after-free bug led by a missing lock in ALSA. (bsc#1207134)
    - CVE-2022-47929: Fixed a NULL pointer dereference bug in the traffic control subsystem which allowed an     unprivileged user to trigger a denial of service via a crafted traffic control configuration.
    (bsc#1207237)
    - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036)
    - CVE-2023-23455: Fixed a bug that could allow attackers to cause a denial of service because of type     confusion in atm_tc_enqueue. (bsc#1207125)
    - CVE-2022-3435: Fixed an out-of-bounds read in fib_nh_match() of the file net/ipv4/fib_semantics.c     (bsc#1204171).
    - CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock.
    (bsc#1206664)
    - CVE-2022-3115: Fixed a null pointer dereference in malidp_crtc.c caused by a lack of checks of the     return value of kzalloc. (bsc#1206393)
    - CVE-2022-47520: Fixed an out-of-bounds read when parsing a Robust Security Network (RSN) information     element from a Netlink packet. (bsc#1206515)
    - CVE-2022-3112: Fixed a  null pointer dereference caused by lacks check of the return value of kzalloc()     in vdec_helpers.c:amvdec_set_canvases. (bsc#1206399)
    - CVE-2022-3564: Fixed a bug which could lead to use after free, it was found in the function     l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. (bsc#1206073)
    - CVE-2022-3108: Fixed a bug in kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c where a     lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389)
    - CVE-2019-19083: Fixed a memory leaks in clock_source_create that could allow attackers to cause a denial     of service (bsc#1157049).
    - CVE-2022-42328: Fixed a bug which could allow guests to trigger denial of service via the netback driver     (bsc#1206114).
    - CVE-2022-42329: Fixed a bug which could allow guests to trigger denial of service via the netback driver     (bsc#1206113).
    - CVE-2022-3643: Fixed a bug which could allow guests to trigger NIC interface reset/abort/crash via     netback driver (bsc#1206113).
    - CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of     kvmalloc_array. (bsc#1206395)
    - CVE-2022-3111: Fixed a missing release of resource after effective lifetime bug caused by a missing free     of the WM8350_IRQ_CHG_FAST_RDY in wm8350_init_charger. (bsc#1206394)
    - CVE-2022-3105: Fixed a null pointer dereference caused by a missing check of the return value of     kmalloc_array. (bsc#1206398)
    - CVE-2022-3106: Fixed a null pointer dereference caused by a missing check of the return value of     kmalloc. (bsc#1206397)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5774-1 advisory.

    Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA     mappings in some situations, leading to potential data structure reuse. A local attacker could use this to     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42703)

    It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm     64-bit systems. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2022-20422)

    It was discovered that the KVM implementation in the Linux kernel did not properly handle virtual CPUs     without APICs in certain situations. A local attacker could possibly use this to cause a denial of service     (host system crash). (CVE-2022-2153)

    Hao Sun and Jiacheng Xu discovered that the NILFS file system implementation in the Linux kernel contained     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2022-2978)

    Abhishek Shah discovered a race condition in the PF_KEYv2 implementation in the Linux kernel. A local     attacker could use this to cause a denial of service (system crash) or possibly expose sensitive     information (kernel memory). (CVE-2022-3028)

    It was discovered that the video4linux driver for Empia based TV cards in the Linux kernel did not     properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local     attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2022-3239)

    It was discovered that a memory leak existed in the IPv6 implementation of the Linux kernel. A local     attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3524)

    It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2022-3564)

    It was discovered that the ISDN implementation of the Linux kernel contained a use-after-free     vulnerability. A privileged user could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-3565)

    It was discovered that the TCP implementation in the Linux kernel contained a data race condition. An     attacker could possibly use this to cause undesired behaviors. (CVE-2022-3566)

    It was discovered that the IPv6 implementation in the Linux kernel contained a data race condition. An     attacker could possibly use this to cause undesired behaviors. (CVE-2022-3567)

    It was discovered that the Realtek RTL8152 USB Ethernet adapter driver in the Linux kernel did not     properly handle certain error conditions. A local attacker with physical access could plug in a specially     crafted USB device to cause a denial of service (memory exhaustion). (CVE-2022-3594)

    It was discovered that a null pointer dereference existed in the NILFS2 file system implementation in the     Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3621)

    It was discovered that the IDT 77252 ATM PCI device driver in the Linux kernel did not properly remove any     pending timers during device exit, resulting in a use-after-free vulnerability. A local attacker could     possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-3635)

    It was discovered that the Netlink Transformation (XFRM) subsystem in the Linux kernel contained a     reference counting error. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2022-36879)

    Xingyuan Mo and Gengjia Chen discovered that the Promise SuperTrak EX storage controller driver in the     Linux kernel did not properly handle certain structures. A local attacker could potentially use this to     expose sensitive information (kernel memory). (CVE-2022-40768)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01983-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-47670: can: peak_usb: fix use after free bugs (bsc#1241407).
    - CVE-2022-49139: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (bsc#1238032).
    - CVE-2022-49145: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (bsc#1238162).
    - CVE-2022-49168: btrfs: do not clean up repair bio if submit fails (bsc#1238109).
    - CVE-2022-49190: kernel/resource: fix kfree() of bootmem memory again (bsc#1238130).
    - CVE-2022-49212: mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (bsc#1238331).
    - CVE-2022-49216: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (bsc#1238338).
    - CVE-2022-49235: ath9k_htc: fix uninit value bugs (bsc#1238333).
    - CVE-2022-49248: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (bsc#1238284).
    - CVE-2022-49253: media: usb: go7007: s2250-board: fix leak in probe() (bsc#1238420).
    - CVE-2022-49320: dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (bsc#1238394).
    - CVE-2022-49326: rtl818x: Prevent using not initialized queues (bsc#1238646).
    - CVE-2022-49371: driver core: fix deadlock in __device_attach (bsc#1238546).
    - CVE-2022-49382: soc: rockchip: Fix refcount leak in rockchip_grf_init (bsc#1238306).
    - CVE-2022-49396: phy: qcom-qmp: fix reset-controller leak on probe errors (bsc#1238289).
    - CVE-2022-49420: net: annotate races around sk->sk_bound_dev_if (bsc#1238887).
    - CVE-2022-49441: tty: fix deadlock caused by calling printk() under tty_port->lock (bsc#1238263).
    - CVE-2022-49445: pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()     (bsc#1238019).
    - CVE-2022-49460: PM / devfreq: rk3399_dmc: Disable edev on remove() (bsc#1238892).
    - CVE-2022-49467: drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() (bsc#1238815).
    - CVE-2022-49474: Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (bsc#1238071).
    - CVE-2022-49491: drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (bsc#1238539).
    - CVE-2022-49503: ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix     (bsc#1238868).
    - CVE-2022-49592: net: stmmac: fix dma queue left shift overflow issue (bsc#1238311).
    - CVE-2022-49625: sfc: fix kernel panic when creating VF (bsc#1238411).
    - CVE-2022-49635: drm/i915/selftests: fix subtraction overflow bug (bsc#1238806).
    - CVE-2022-49652: dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (bsc#1238871).
    - CVE-2022-49715: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions (bsc#1238818).
    - CVE-2022-49728: kABI workaround for changeing the variable length type to size_t (bsc#1239111).
    - CVE-2022-49729: nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred (bsc#1239060).
    - CVE-2022-49751: w1: fix WARNING after calling w1_process() (bsc#1240254).
    - CVE-2022-49761: btrfs: always report error in run_one_delayed_ref() (bsc#1240261).
    - CVE-2022-49772: ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (bsc#1242147).
    - CVE-2022-49775: tcp: cdg: allow tcp_cdg_release() to be called multiple times (bsc#1242245).
    - CVE-2022-49776: macvlan: enforce a consistent minimal mtu (bsc#1242248).
    - CVE-2022-49787: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (bsc#1242352).
    - CVE-2022-49788: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (bsc#1242353).
    - CVE-2022-49813: net: ena: Fix error handling in ena_init() (bsc#1242497).
    - CVE-2022-49821: mISDN: fix possible memory leak in mISDN_dsp_element_register() (bsc#1242542).
    - CVE-2022-49826: ata: libata-transport: fix double ata_host_put() in ata_tport_add() (bsc#1242549).
    - CVE-2022-49829: drm/scheduler: fix fence ref counting (bsc#1242691).
    - CVE-2022-49832: pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (bsc#1242154).
    - CVE-2022-49835: ALSA: hda: fix potential memleak in 'add_widget_node' (bsc#1242385).
    - CVE-2022-49840: bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (bsc#1242447).
    - CVE-2022-49842: ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (bsc#1242484).
    - CVE-2022-49853: net: macvlan: fix memory leaks of macvlan_common_newlink (bsc#1242688).
    - CVE-2022-49861: dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (bsc#1242580).
    - CVE-2022-49862: tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header     (bsc#1242755).
    - CVE-2022-49865: ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (bsc#1242570).
    - CVE-2022-49871: net: tun: call napi_schedule_prep() to ensure we own a napi (bsc#1242558).
    - CVE-2022-49872: net: gso: fix panic on frag_list with mixed head alloc types (bsc#1242594).
    - CVE-2022-49874: HID: hyperv: fix possible memory leak in mousevsc_probe() (bsc#1242478).
    - CVE-2022-49898: btrfs: fix tree mod log mishandling of reallocated nodes (bsc#1242472).
    - CVE-2022-49907: net: mdio: fix undefined behavior in bit shift for __mdiobus_register (bsc#1242450).
    - CVE-2022-49913: btrfs: fix inode list leak during backref walking at find_parent_nodes() (bsc#1242470).
    - CVE-2022-49914: btrfs: fix inode list leak during backref walking at resolve_indirect_refs()     (bsc#1242427).
    - CVE-2022-49922: nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (bsc#1242378).
    - CVE-2022-49923: nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (bsc#1242394).
    - CVE-2022-49924: nfc: fdp: Fix potential memory leak in fdp_nci_send() (bsc#1242426).
    - CVE-2022-49925: RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (bsc#1242371).
    - CVE-2022-49931: IB/hfi1: Correctly move list in sc_disable() (bsc#1242382).
    - CVE-2023-52868: thermal: core: prevent potential string overflow (bsc#1225044).
    - CVE-2023-52975: scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (bsc#1240322).
    - CVE-2023-52988: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()     (bsc#1240293).
    - CVE-2023-52989: firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region     (bsc#1240266).
    - CVE-2023-52993: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (bsc#1240297).
    - CVE-2023-53039: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (bsc#1242745).
    - CVE-2023-53045: usb: gadget: u_audio: do not let userspace block driver unbind (bsc#1242756).
    - CVE-2023-53066: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (bsc#1242227).
    - CVE-2023-53079: net/mlx5: Fix steering rules cleanup (bsc#1242765).
    - CVE-2023-53080: xsk: Add missing overflow check in xdp_umem_reg (bsc#1242287).
    - CVE-2023-53094: tty: serial: fsl_lpuart: fix race on RX DMA shutdown (bsc#1242288).
    - CVE-2023-53103: bonding: Fix memory leak when changing bond type to Ethernet (bsc#1242408).
    - CVE-2023-53114: i40e: Fix kernel crash during reboot when adapter is in recovery mode (bsc#1242398).
    - CVE-2023-53139: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties     (bsc#1242361).
    - CVE-2024-26740: Fixed use the backlog for mirred ingress  (bsc#1222563).
    - CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
    - CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
    - CVE-2024-46751: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info()     (bsc#1230786).
    - CVE-2024-46752: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (bsc#1230794).
    - CVE-2024-50106: nfsd: fix race between laundromat and free_stateid() (bsc#1232882).
    - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1234887).
    - CVE-2024-56779: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (bsc#1235632).
    - CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21704: usb: cdc-acm: Check control transfer buffer size before access (bsc#1237571).
    - CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
    - CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
    - CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
    - CVE-2025-22027: media: streamzap: fix race between device disconnection and urb callback (bsc#1241369).
    - CVE-2025-22050: usbnet:fix NPE during rx_complete (bsc#1241441).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-23136: thermal: int340x: Add NULL check for adev (bsc#1241357).
    - CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
    - CVE-2025-23161: PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (bsc#1242792).
    - CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
    - CVE-2025-37782: hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (bsc#1242770).
    - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
    - CVE-2025-37794: wifi: mac80211: Purge vif txq in ieee80211_do_stop() (bsc#1242566).
    - CVE-2025-37796: wifi: at76c50x: fix use after free access in at76_disconnect (bsc#1242727).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
    - CVE-2025-37852: drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()     (bsc#1243074).
    - CVE-2025-37879: 9p/net: fix improper handling of bogus negative read/write replies (bsc#1243077).
    - CVE-2025-37949: xenbus: Use kref to track req lifetime (bsc#1243541).
    - CVE-2025-37989: net: phy: leds: fix memory leak (bsc#1243511).
    - CVE-2025-38637: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel-generic installed on the remote host is prior to 5.15.80 / 5.15.80_smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-333-01 advisory.

    New kernel packages are available for Slackware 15.0 to fix security issues.

Tenable has extracted the preceding description block directly from the kernel-generic security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5754-2 advisory.

    It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC     messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2022-43945)

    It was discovered that a memory leak existed in the IPv6 implementation of the Linux kernel. A local     attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3524)

    It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2022-3564)

    It was discovered that the ISDN implementation of the Linux kernel contained a use-after-free     vulnerability. A privileged user could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-3565)

    It was discovered that the TCP implementation in the Linux kernel contained a data race condition. An     attacker could possibly use this to cause undesired behaviors. (CVE-2022-3566)

    It was discovered that the IPv6 implementation in the Linux kernel contained a data race condition. An     attacker could possibly use this to cause undesired behaviors. (CVE-2022-3567)

    It was discovered that the Realtek RTL8152 USB Ethernet adapter driver in the Linux kernel did not     properly handle certain error conditions. A local attacker with physical access could plug in a specially     crafted USB device to cause a denial of service (memory exhaustion). (CVE-2022-3594)

    It was discovered that a null pointer dereference existed in the NILFS2 file system implementation in the     Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3621)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5779-1 advisory.

    It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC     messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2022-43945)

    Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA     mappings in some situations, leading to potential data structure reuse. A local attacker could use this to     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42703)

    It was discovered that a memory leak existed in the IPv6 implementation of the Linux kernel. A local     attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3524)

    It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2022-3564)

    It was discovered that the ISDN implementation of the Linux kernel contained a use-after-free     vulnerability. A privileged user could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-3565)

    It was discovered that the TCP implementation in the Linux kernel contained a data race condition. An     attacker could possibly use this to cause undesired behaviors. (CVE-2022-3566)

    It was discovered that the IPv6 implementation in the Linux kernel contained a data race condition. An     attacker could possibly use this to cause undesired behaviors. (CVE-2022-3567)

    It was discovered that the Realtek RTL8152 USB Ethernet adapter driver in the Linux kernel did not     properly handle certain error conditions. A local attacker with physical access could plug in a specially     crafted USB device to cause a denial of service (memory exhaustion). (CVE-2022-3594)

    It was discovered that a null pointer dereference existed in the NILFS2 file system implementation in the     Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3621)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2736 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

    * net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

    * hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)

    * malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)

    * when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds     (CVE-2021-33656)

    * possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)

    * use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679)

    * KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)

    * KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)

    * netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)

    * race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)

    * media: em28xx: initialize refcount before kref_get (CVE-2022-3239)

    * race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)

    * memory leak in ipv6_renew_options() (CVE-2022-3524)

    * data races around icsk->icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)

    * data races around sk->sk_prot (CVE-2022-3567)

    * memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)

    * denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)

    * use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)

    * USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)

    * Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)

    * l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)

    * igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)

    * Executable Space Protection Bypass (CVE-2022-25265)

    * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

    * unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)

    * TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning     (CVE-2022-39189)

    * Report vmalloc UAF in dvb-core/dmxdev (CVE-2022-41218)

    * u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)

    * use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)

    * use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)

    * BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)

    * Denial of service in beacon protection for P2P-device (CVE-2022-42722)

    * memory corruption in usbmon driver (CVE-2022-43750)

    * NULL pointer dereference in traffic control subsystem (CVE-2022-47929)

    * NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)

    * use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)

    * Soft lockup occurred during __page_mapcount (CVE-2023-1582)

    * slab-out-of-bounds read vulnerabilities in cbq_classify (CVE-2023-23454)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
169293	Debian dla-3244 : linux-config-5.10 - security update	Nessus	Debian Local Security Checks	12/24/2022	1/22/2025	high
170678	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / dtb-al / dtb-zte / etc (SUSE-SU-2023:0152-1)	Nessus	SuSE Local Security Checks	1/26/2023	6/26/2026	high
168636	Ubuntu 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5774-1)	Nessus	Ubuntu Local Security Checks	12/12/2022	8/28/2024	high
240793	SUSE SLES12 Security Update : kernel (SUSE-SU-2025:01983-1)	Nessus	SuSE Local Security Checks	6/27/2025	12/9/2025	high
168270	Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-333-01)	Nessus	Slackware Local Security Checks	11/29/2022	9/30/2025	high
168635	Ubuntu 22.10 : Linux kernel (Azure) vulnerabilities (USN-5754-2)	Nessus	Ubuntu Local Security Checks	12/12/2022	8/27/2024	high
168732	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5779-1)	Nessus	Ubuntu Local Security Checks	12/14/2022	6/3/2026	high
175866	RHEL 8 : kernel-rt (RHSA-2023:2736)	Nessus	Red Hat Local Security Checks	5/16/2023	9/10/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high