The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4075 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4075-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.234-1     CVE ID         : CVE-2021-47469 CVE-2023-52530 CVE-2023-52917 CVE-2024-26921                      CVE-2024-27017 CVE-2024-27072 CVE-2024-35965 CVE-2024-35966                      CVE-2024-36476 CVE-2024-36899 CVE-2024-38538 CVE-2024-38544                      CVE-2024-38588 CVE-2024-38591 CVE-2024-39497 CVE-2024-40953                      CVE-2024-41016 CVE-2024-41060 CVE-2024-41080 CVE-2024-42315                      CVE-2024-43098 CVE-2024-44931 CVE-2024-44940 CVE-2024-46695                      CVE-2024-46809 CVE-2024-46841 CVE-2024-46849 CVE-2024-46853                      CVE-2024-46854 CVE-2024-46858 CVE-2024-46865 CVE-2024-47143                      CVE-2024-47670 CVE-2024-47671 CVE-2024-47672 CVE-2024-47674                      CVE-2024-47679 CVE-2024-47684 CVE-2024-47685 CVE-2024-47692                      CVE-2024-47696 CVE-2024-47697 CVE-2024-47698 CVE-2024-47699                      CVE-2024-47701 CVE-2024-47705 CVE-2024-47706 CVE-2024-47707                      CVE-2024-47709 CVE-2024-47710 CVE-2024-47712 CVE-2024-47713                      CVE-2024-47718 CVE-2024-47723 CVE-2024-47735 CVE-2024-47737                      CVE-2024-47739 CVE-2024-47740 CVE-2024-47742 CVE-2024-47748                      CVE-2024-47749 CVE-2024-47756 CVE-2024-47757 CVE-2024-48881                      CVE-2024-49851 CVE-2024-49858 CVE-2024-49860 CVE-2024-49863                      CVE-2024-49867 CVE-2024-49868 CVE-2024-49875 CVE-2024-49877                      CVE-2024-49878 CVE-2024-49879 CVE-2024-49881 CVE-2024-49882                      CVE-2024-49883 CVE-2024-49884 CVE-2024-49889 CVE-2024-49890                      CVE-2024-49892 CVE-2024-49894 CVE-2024-49895 CVE-2024-49896                      CVE-2024-49900 CVE-2024-49902 CVE-2024-49903 CVE-2024-49907                      CVE-2024-49913 CVE-2024-49930 CVE-2024-49933 CVE-2024-49936                      CVE-2024-49938 CVE-2024-49944 CVE-2024-49948 CVE-2024-49949                      CVE-2024-49952 CVE-2024-49955 CVE-2024-49957 CVE-2024-49958                      CVE-2024-49959 CVE-2024-49962 CVE-2024-49963 CVE-2024-49965                      CVE-2024-49966 CVE-2024-49969 CVE-2024-49973 CVE-2024-49974                      CVE-2024-49975 CVE-2024-49977 CVE-2024-49981 CVE-2024-49982                      CVE-2024-49983 CVE-2024-49985 CVE-2024-49995 CVE-2024-49996                      CVE-2024-50001 CVE-2024-50006 CVE-2024-50007 CVE-2024-50008                      CVE-2024-50010 CVE-2024-50013 CVE-2024-50015 CVE-2024-50024                      CVE-2024-50033 CVE-2024-50035 CVE-2024-50036 CVE-2024-50039                      CVE-2024-50040 CVE-2024-50044 CVE-2024-50045 CVE-2024-50046                      CVE-2024-50049 CVE-2024-50055 CVE-2024-50058 CVE-2024-50059                      CVE-2024-50072 CVE-2024-50074 CVE-2024-50082 CVE-2024-50083                      CVE-2024-50095 CVE-2024-50096 CVE-2024-50099 CVE-2024-50103                      CVE-2024-50115 CVE-2024-50116 CVE-2024-50117 CVE-2024-50121                      CVE-2024-50127 CVE-2024-50131 CVE-2024-50134 CVE-2024-50142                      CVE-2024-50148 CVE-2024-50150 CVE-2024-50151 CVE-2024-50153                      CVE-2024-50167 CVE-2024-50171 CVE-2024-50179 CVE-2024-50180                      CVE-2024-50181 CVE-2024-50184 CVE-2024-50185 CVE-2024-50188                      CVE-2024-50192 CVE-2024-50193 CVE-2024-50194 CVE-2024-50195                      CVE-2024-50198 CVE-2024-50199 CVE-2024-50201 CVE-2024-50202                      CVE-2024-50205 CVE-2024-50208 CVE-2024-50209 CVE-2024-50210                      CVE-2024-50218 CVE-2024-50229 CVE-2024-50230 CVE-2024-50233                      CVE-2024-50234 CVE-2024-50236 CVE-2024-50237 CVE-2024-50251                      CVE-2024-50262 CVE-2024-50264 CVE-2024-50265 CVE-2024-50267                      CVE-2024-50268 CVE-2024-50269 CVE-2024-50273 CVE-2024-50278                      CVE-2024-50279 CVE-2024-50282 CVE-2024-50287 CVE-2024-50290                      CVE-2024-50292 CVE-2024-50295 CVE-2024-50296 CVE-2024-50299                      CVE-2024-50301 CVE-2024-50302 CVE-2024-50304 CVE-2024-52332                      CVE-2024-53042 CVE-2024-53052 CVE-2024-53057 CVE-2024-53059                      CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066                      CVE-2024-53096 CVE-2024-53097 CVE-2024-53099 CVE-2024-53101                      CVE-2024-53103 CVE-2024-53104 CVE-2024-53112 CVE-2024-53119                      CVE-2024-53121 CVE-2024-53124 CVE-2024-53125 CVE-2024-53127                      CVE-2024-53130 CVE-2024-53131 CVE-2024-53135 CVE-2024-53136                      CVE-2024-53138 CVE-2024-53140 CVE-2024-53141 CVE-2024-53142                      CVE-2024-53145 CVE-2024-53146 CVE-2024-53148 CVE-2024-53150                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53171 CVE-2024-53172                      CVE-2024-53173 CVE-2024-53174 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53194 CVE-2024-53197 CVE-2024-53198                      CVE-2024-53214 CVE-2024-53217 CVE-2024-53226 CVE-2024-53227                      CVE-2024-53237 CVE-2024-53239 CVE-2024-53240 CVE-2024-53241                      CVE-2024-53680 CVE-2024-53685 CVE-2024-53690 CVE-2024-54031                      CVE-2024-55916 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56548 CVE-2024-56558 CVE-2024-56562                      CVE-2024-56567 CVE-2024-56568 CVE-2024-56569 CVE-2024-56570                      CVE-2024-56574 CVE-2024-56576 CVE-2024-56581 CVE-2024-56586                      CVE-2024-56587 CVE-2024-56589 CVE-2024-56593 CVE-2024-56594                      CVE-2024-56595 CVE-2024-56596 CVE-2024-56597 CVE-2024-56598                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56605 CVE-2024-56606 CVE-2024-56610 CVE-2024-56615                      CVE-2024-56616 CVE-2024-56619 CVE-2024-56623 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56642 CVE-2024-56643                      CVE-2024-56644 CVE-2024-56645 CVE-2024-56648 CVE-2024-56650                      CVE-2024-56659 CVE-2024-56661 CVE-2024-56662 CVE-2024-56670                      CVE-2024-56672 CVE-2024-56681 CVE-2024-56688 CVE-2024-56690                      CVE-2024-56691 CVE-2024-56694 CVE-2024-56698 CVE-2024-56700                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56716 CVE-2024-56720                      CVE-2024-56723 CVE-2024-56724 CVE-2024-56728 CVE-2024-56739                      CVE-2024-56741 CVE-2024-56747 CVE-2024-56748 CVE-2024-56754                      CVE-2024-56756 CVE-2024-56759 CVE-2024-56763 CVE-2024-56766                      CVE-2024-56767 CVE-2024-56769 CVE-2024-56770 CVE-2024-56779                      CVE-2024-56780 CVE-2024-57791 CVE-2024-57792 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57850 CVE-2024-57874 CVE-2024-57884                      CVE-2024-57887 CVE-2024-57889 CVE-2024-57890 CVE-2024-57892                      CVE-2024-57896 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57904 CVE-2024-57906 CVE-2024-57907 CVE-2024-57908                      CVE-2024-57910 CVE-2024-57911 CVE-2024-57912 CVE-2024-57913                      CVE-2024-57922 CVE-2024-57929 CVE-2024-57931 CVE-2024-57938                      CVE-2024-57940 CVE-2024-57946 CVE-2024-57948 CVE-2024-57951                      CVE-2025-21638 CVE-2025-21639 CVE-2025-21640 CVE-2025-21646                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21664 CVE-2025-21666                      CVE-2025-21669 CVE-2025-21678 CVE-2025-21683 CVE-2025-21687                      CVE-2025-21688 CVE-2025-21689 CVE-2025-21692 CVE-2025-21694                      CVE-2025-21697 CVE-2025-21699     Debian Bug     : 1082001

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.234-1.  This additionally includes many more bug fixes from     stable updates 5.10.227-5.10.234 inclusive.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7413-1 advisory.

    Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error     conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this     vulnerability to cause a denial of service. (CVE-2022-38096)

    Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle     locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21400)

    Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2024-23848)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Virtio block driver;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - LED subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - TTY drivers;

    - USB Device Class drivers;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - File systems infrastructure;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - Bluetooth subsystem;

    - LAPB network protocol;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - Perf events;

    - Arbitrary resource management;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - Amlogic Meson SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-53680, CVE-2024-49957, CVE-2024-50179, CVE-2024-57913, CVE-2024-57938,     CVE-2024-35965, CVE-2024-56746, CVE-2024-50151, CVE-2024-49962, CVE-2024-50082, CVE-2024-50278,     CVE-2024-46854, CVE-2024-56539, CVE-2024-50150, CVE-2024-56606, CVE-2024-50234, CVE-2024-56748,     CVE-2024-57807, CVE-2024-47692, CVE-2024-56614, CVE-2024-57931, CVE-2024-50265, CVE-2024-57884,     CVE-2024-50264, CVE-2024-56601, CVE-2024-49894, CVE-2024-50040, CVE-2024-49892, CVE-2024-57802,     CVE-2024-38544, CVE-2024-56779, CVE-2024-49924, CVE-2024-56681, CVE-2021-47101, CVE-2024-47672,     CVE-2024-47670, CVE-2024-50143, CVE-2024-57922, CVE-2024-50195, CVE-2022-49034, CVE-2024-47740,     CVE-2024-56615, CVE-2024-56637, CVE-2024-47747, CVE-2024-53057, CVE-2024-50290, CVE-2024-50116,     CVE-2024-50134, CVE-2024-47707, CVE-2024-53155, CVE-2024-56630, CVE-2024-53183, CVE-2024-56642,     CVE-2024-57892, CVE-2024-56603, CVE-2024-53059, CVE-2025-21653, CVE-2024-53194, CVE-2024-50024,     CVE-2024-52332, CVE-2024-50168, CVE-2024-53156, CVE-2024-56595, CVE-2024-53104, CVE-2024-49948,     CVE-2024-53066, CVE-2024-56747, CVE-2024-50148, CVE-2024-53197, CVE-2024-50184, CVE-2024-53214,     CVE-2024-50230, CVE-2024-57908, CVE-2024-56694, CVE-2025-21694, CVE-2024-47749, CVE-2024-47742,     CVE-2024-53198, CVE-2024-49997, CVE-2024-53135, CVE-2024-36952, CVE-2024-53103, CVE-2024-49860,     CVE-2024-50007, CVE-2024-49949, CVE-2024-57911, CVE-2024-53101, CVE-2024-56576, CVE-2024-56558,     CVE-2024-56570, CVE-2024-50131, CVE-2024-56587, CVE-2024-56780, CVE-2024-53145, CVE-2024-53112,     CVE-2025-21697, CVE-2024-56596, CVE-2024-48881, CVE-2024-49958, CVE-2024-53148, CVE-2024-47671,     CVE-2024-56659, CVE-2024-50267, CVE-2024-50279, CVE-2024-56633, CVE-2024-50205, CVE-2024-49944,     CVE-2024-53157, CVE-2024-43892, CVE-2025-21699, CVE-2024-49882, CVE-2024-43098, CVE-2023-52821,     CVE-2024-47685, CVE-2024-50218, CVE-2024-49975, CVE-2024-53171, CVE-2024-57948, CVE-2024-56756,     CVE-2024-47679, CVE-2024-53140, CVE-2024-56739, CVE-2024-56629, CVE-2024-47698, CVE-2024-53217,     CVE-2024-53146, CVE-2024-49966, CVE-2024-53227, CVE-2024-50167, CVE-2024-57910, CVE-2024-57951,     CVE-2024-56643, CVE-2024-53172, CVE-2024-50299, CVE-2024-53690, CVE-2024-50035, CVE-2024-50202,     CVE-2024-49878, CVE-2024-50251, CVE-2024-47699, CVE-2024-50296, CVE-2024-56569, CVE-2024-42252,     CVE-2024-47713, CVE-2024-56650, CVE-2024-53150, CVE-2024-56634, CVE-2024-56691, CVE-2024-53239,     CVE-2024-50180, CVE-2024-56602, CVE-2024-44938, CVE-2024-50236, CVE-2024-49884, CVE-2024-47757,     CVE-2024-50044, CVE-2024-46853, CVE-2024-50045, CVE-2024-50194, CVE-2024-35887, CVE-2024-56594,     CVE-2024-50302, CVE-2024-56631, CVE-2024-35967, CVE-2024-56690, CVE-2024-56723, CVE-2024-49973,     CVE-2024-53165, CVE-2024-50237, CVE-2024-50117, CVE-2024-57929, CVE-2024-49883, CVE-2024-46849,     CVE-2024-49903, CVE-2024-50142, CVE-2024-56770, CVE-2024-50301, CVE-2024-53130, CVE-2024-53131,     CVE-2024-47710, CVE-2024-49995, CVE-2024-44931, CVE-2024-56720, CVE-2024-49867, CVE-2024-49879,     CVE-2024-53138, CVE-2024-53184, CVE-2024-47737, CVE-2024-50127, CVE-2024-57904, CVE-2024-56572,     CVE-2024-56704, CVE-2024-35896, CVE-2024-40953, CVE-2024-56600, CVE-2024-50282, CVE-2024-47756,     CVE-2024-49959, CVE-2024-49936, CVE-2024-53173, CVE-2024-57902, CVE-2025-21639, CVE-2024-46731,     CVE-2024-56700, CVE-2024-57890, CVE-2025-21687, CVE-2024-47674, CVE-2024-50099, CVE-2024-56769,     CVE-2024-50287, CVE-2024-53127, CVE-2024-41066, CVE-2024-53158, CVE-2025-21638, CVE-2024-47706,     CVE-2024-47684, CVE-2024-53124, CVE-2024-49902, CVE-2024-56598, CVE-2024-57906, CVE-2024-53121,     CVE-2024-35963, CVE-2024-49996, CVE-2024-53141, CVE-2024-50051, CVE-2024-56644, CVE-2024-56688,     CVE-2024-57849, CVE-2024-57900, CVE-2024-56593, CVE-2024-56767, CVE-2024-49982, CVE-2024-49965,     CVE-2024-50229, CVE-2024-53161, CVE-2024-49868, CVE-2024-49900, CVE-2024-50269, CVE-2024-57946,     CVE-2024-47709, CVE-2024-49851, CVE-2024-50199, CVE-2024-56724, CVE-2024-50039, CVE-2024-56581,     CVE-2024-50233, CVE-2024-56670, CVE-2024-50006, CVE-2024-35966, CVE-2024-56597, CVE-2024-50273,     CVE-2024-53063, CVE-2024-56781, CVE-2024-56574, CVE-2024-56567, CVE-2024-47723, CVE-2024-53061,     CVE-2025-0927, CVE-2024-53142, CVE-2024-49877, CVE-2024-47697, CVE-2024-49952, CVE-2024-53174,     CVE-2024-56645, CVE-2021-47219, CVE-2024-49981, CVE-2025-21640, CVE-2024-49955, CVE-2023-52458,     CVE-2024-53164, CVE-2024-57850, CVE-2025-21678, CVE-2024-56532, CVE-2024-40965, CVE-2024-56586,     CVE-2021-47001, CVE-2024-40967, CVE-2024-49896, CVE-2024-47701, CVE-2024-50008, CVE-2024-43863,     CVE-2024-43900, CVE-2024-49938, CVE-2024-56562, CVE-2024-40910, CVE-2024-38588, CVE-2025-21689,     CVE-2024-53181, CVE-2024-56619, CVE-2024-49985, CVE-2024-50096, CVE-2024-56605, CVE-2024-50059,     CVE-2024-47696, CVE-2024-50074, CVE-2024-57889, CVE-2024-56548, CVE-2024-57901, CVE-2024-49963,     CVE-2024-41016, CVE-2024-47712, CVE-2024-49925, CVE-2024-50033, CVE-2024-50262, CVE-2024-56531,     CVE-2024-57912, CVE-2024-40911, CVE-2024-38553, CVE-2024-50171, CVE-2025-21664, CVE-2024-55916,     CVE-2024-38597, CVE-2021-47469)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Bluetooth: L2CAP: Fix not validating setsockopt user input    Check user input length before copying data.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
216984	Debian dla-4075 : ata-modules-5.10.0-29-armmp-di - security update	Nessus	Debian Local Security Checks	3/1/2025	10/28/2025	critical
233822	Ubuntu 20.04 LTS : Linux kernel (IoT) vulnerabilities (USN-7413-1)	Nessus	Ubuntu Local Security Checks	4/3/2025	9/24/2025	critical
503532	Siemens SIMATIC Devices Classic Buffer Overflow (CVE-2024-35965)	Tenable OT Security	Tenable.ot	10/27/2025	10/29/2025	medium

Detections

Analytics

Plugins Search

critical

critical

medium