According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    i3c: Use i3cdev-desc-info instead of calling i3c_device_get_info() to avoid deadlock(CVE-2024-43098)

    KVM: arm64: Get rid of userspace_irqchip_in_use(CVE-2024-53195)

    virtio-blk: don't keep queue frozen during system suspend(CVE-2024-57946)

    workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker(CVE-2024-57888)

    mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim().(CVE-2024-57884)

    net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue(CVE-2025-21650)

    ceph: give up on paths longer than PATH_MAX(CVE-2024-53685)

    net: hns3: fix kernel crash when 1588 is sent on HIP08 devices(CVE-2025-21649)

    drm/dp_mst: Fix resetting msg rx state after topology removal(CVE-2024-57876)

    arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL(CVE-2024-57874)

    hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur(CVE-2025-21656)

    mm: hugetlb: independent PMD page table shared count(CVE-2024-57883)

    Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet(CVE-2024-55916)

    netfilter: IDLETIMER: Fix for possible ABBA deadlock(CVE-2024-54683)

    scsi: megaraid_sas: Fix for a potential deadlock(CVE-2024-57807)

    bpf: Prevent tailcall infinite loop caused by freplace(CVE-2024-47794)

    fs: relax assertions on failure to encode file handles(CVE-2024-57924)

    smb: client: fix TCP timers deadlock after rmmod(CVE-2024-54680)

    media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal().(CVE-2024-56572)

    net/sched: netem: account for backlog updates from child qdisc(CVE-2024-56770)

    nvme-rdma: unquiesce admin_q before destroy it(CVE-2024-49569)

    nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur(CVE-2024-56779)

    netdevsim: prevent bad user input in nsim_dev_health_break_write().(CVE-2024-56716)

    xsk: fix OOB map writes when deleting elements(CVE-2024-56614)

    bpf, sockmap: Several fixes to bpf_msg_pop_data(CVE-2024-56720)

    net: inet6: do not leave a dangling sk pointer in inet6_create().(CVE-2024-56600)

    af_packet: avoid erroring out after sock_init_data() in packet_create().(CVE-2024-56606)

    NFSv4.0: Fix a use-after-free problem in the asynchronous open()(CVE-2024-53173)

    pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking(CVE-2024-57889)

    drm/modes: Avoid divide by zero harder in drm_mode_vrefresh().(CVE-2024-56369)

    scsi: hisi_sas: Create all dump files during debugfs initialization(CVE-2024-56588)

    scsi: qla2xxx: Fix use after free on unload(CVE-2024-56623)

    RDMA/hns: Fix cpu stuck caused by printings during reset(CVE-2024-56722)

    bpf: Call free_htab_elem() after htab_unlock_bucket().(CVE-2024-56592)

    ipv6: release nexthop on device removal(CVE-2024-56751)

    scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()(CVE-2024-56747)

    NFSD: Prevent a potential integer overflow(CVE-2024-53146)

    net: Fix icmp host relookup triggering ip_rt_bug(CVE-2024-56647)

    hv_sock: Initializing vsk-trans to NULL to prevent a dangling pointer(CVE-2024-53103)

    acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl(CVE-2024-56662)

    blk-cgroup: Fix UAF in blkcg_unpin_online().(CVE-2024-56672)

    net: defer final 'struct net' free in netns dismantle(CVE-2024-56658)

    nvme-pci: fix freeing of the HMB descriptor table(CVE-2024-56756)

    media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg(CVE-2024-56769)

    tracing: Prevent bad count for tracing_cpumask_write(CVE-2024-56763)

    netfilter: x_tables: fix LED ID check in led_tg_check().(CVE-2024-56650)

    quota: flush quota_release_work upon quota writeback(CVE-2024-56780)

    smb: client: fix use-after-free of signing key(CVE-2024-53179)

    crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY(CVE-2024-56690)

    firmware: arm_scpi: Check the DVFS OPP count returned by the firmware(CVE-2024-53157)

    posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime().(CVE-2024-50210)

    tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg(CVE-2024-56633)

    SUNRPC: make sure cache entry active before cache_show(CVE-2024-53174)

    io_uring/tctx: work around xa_store() allocation error issue(CVE-2024-56584)

    PCI: Fix use-after-free of slot-bus on hot remove(CVE-2024-53194)

    media: v4l2-dv-timings.c: fix too strict blanking sanity checks(CVE-2022-48987)

    virtiofs: use pages instead of pointer for kernel direct IO(CVE-2024-53219)

    mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM(CVE-2024-56611)

    rtc: check if __rtc_read_time was successful in rtc_timer_do_work()(CVE-2024-56739)

    ipv6: Fix soft lockups in fib6_select_path under high next hop churn(CVE-2024-56703)

    sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport(CVE-2024-56688)

    tipc: Fix use-after-free of kernel socket in cleanup_bearer().(CVE-2024-56642)

    net: inet: do not leave a dangling sk pointer in inet_create().(CVE-2024-56601)

    bpf, sockmap: Fix race between element replace and close()(CVE-2024-56664)

    scsi: sg: Fix slab-use-after-free read in sg_release()(CVE-2024-56631)

    RDMA/mlx5: Move events notifier registration to be after device registration(CVE-2024-53224)

    io_uring: check for overflows in io_pin_pages(CVE-2024-53187)

    sched/deadline: Fix warning in migrate_enable for boosted tasks(CVE-2024-56583)

    leds: class: Protect brightness_show() with led_cdev-led_access mutex(CVE-2024-56587)

    io_uring: check if iowq is killed before queuing(CVE-2024-56709)

    bpf: fix OOB devmap writes when deleting elemen(CVE-2024-56615)

    vfio/pci: Properly hide first-in-list PCIe extended capability(CVE-2024-53214)

    smb: client: fix NULL ptr deref in crypto_aead_setkey().(CVE-2024-53185)

    cachefiles: Fix NULL pointer dereference in object-file At present, the object-file has the NULL     pointer dereference problem in ondemand-mode.(CVE-2024-56549)

    ovl: Filter invalid inodes with missing lookup function(CVE-2024-56570)

    scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb().(CVE-2024-56748)

    ftrace: Fix regression with module command in stack_trace_filter(CVE-2024-56569)

    media: ts2020: fix null-ptr-deref in ts2020_probe().(CVE-2024-56574)

    KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN(CVE-2024-53135)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    net: fix data-races around sk-sk_forward_alloc(CVE-2024-53124)

    nvme-multipath: defer partition scanning(CVE-2024-53093)

    bpf: sync_linked_regs() must preserve subreg_def(CVE-2024-53125)

    KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN(CVE-2024-53135)

    netlink: terminate outstanding dump on socket close(CVE-2024-53140)

    media: ts2020: fix null-ptr-deref in ts2020_probe().(CVE-2024-56574)

    drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'(CVE-2024-56608)

    ftrace: Fix regression with module command in stack_trace_filter(CVE-2024-56569)

    scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb().(CVE-2024-56748)

    ovl: Filter invalid inodes with missing lookup function(CVE-2024-56570)

    smb: client: fix NULL ptr deref in crypto_aead_setkey().(CVE-2024-53185)

    vfio/pci: Properly hide first-in-list PCIe extended capability(CVE-2024-53214)

    bpf: fix OOB devmap writes when deleting elemen(CVE-2024-56615)

    io_uring: check if iowq is killed before queuing(CVE-2024-56709)

    leds: class: Protect brightness_show() with led_cdev-led_access mutex(CVE-2024-56587)

    io_uring: check for overflows in io_pin_pages(CVE-2024-53187)

    RDMA/mlx5: Move events notifier registration to be after device registration(CVE-2024-53224)

    scsi: sg: Fix slab-use-after-free read in sg_release()(CVE-2024-56631)

    bpf, sockmap: Fix race between element replace and close()(CVE-2024-56664)

    net: inet: do not leave a dangling sk pointer in inet_create().(CVE-2024-56601)

    tipc: Fix use-after-free of kernel socket in cleanup_bearer().(CVE-2024-56642)

    sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport(CVE-2024-56688)

    ipv6: Fix soft lockups in fib6_select_path under high next hop churn(CVE-2024-56703)

    rtc: check if __rtc_read_time was successful in rtc_timer_do_work()(CVE-2024-56739)

    mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM(CVE-2024-56611)

    virtiofs: use pages instead of pointer for kernel direct IO(CVE-2024-53219)

    PCI: Fix use-after-free of slot-bus on hot remove(CVE-2024-53194)

    io_uring/tctx: work around xa_store() allocation error issue(CVE-2024-56584)

    SUNRPC: make sure cache entry active before cache_show(CVE-2024-53174)

    tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg(CVE-2024-56633)

    firmware: arm_scpi: Check the DVFS OPP count returned by the firmware(CVE-2024-53157)

    crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY(CVE-2024-56690)

    smb: client: fix use-after-free of signing key(CVE-2024-53179)

    quota: flush quota_release_work upon quota writeback(CVE-2024-56780)

    netfilter: x_tables: fix LED ID check in led_tg_check().(CVE-2024-56650)

    tracing: Prevent bad count for tracing_cpumask_write(CVE-2024-56763)

    media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg(CVE-2024-56769)

    nvme-pci: fix freeing of the HMB descriptor table(CVE-2024-56756)

    net: defer final 'struct net' free in netns dismantle(CVE-2024-56658)

    blk-cgroup: Fix UAF in blkcg_unpin_online().(CVE-2024-56672)

    acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl(CVE-2024-56662)

    hv_sock: Initializing vsk-trans to NULL to prevent a dangling pointer(CVE-2024-53103)

    net: Fix icmp host relookup triggering ip_rt_bug(CVE-2024-56647)

    NFSD: Prevent a potential integer overflow(CVE-2024-53146)

    scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()(CVE-2024-56747)

    ipv6: release nexthop on device removal(CVE-2024-56751)

    bpf: Call free_htab_elem() after htab_unlock_bucket().(CVE-2024-56592)

    RDMA/hns: Fix cpu stuck caused by printings during reset(CVE-2024-56722)

    scsi: qla2xxx: Fix use after free on unload(CVE-2024-56623)

    scsi: hisi_sas: Create all dump files during debugfs initialization(CVE-2024-56588)

    drm/modes: Avoid divide by zero harder in drm_mode_vrefresh().(CVE-2024-56369)

    NFSv4.0: Fix a use-after-free problem in the asynchronous open()(CVE-2024-53173)

    af_packet: avoid erroring out after sock_init_data() in packet_create().(CVE-2024-56606)

    net: inet6: do not leave a dangling sk pointer in inet6_create().(CVE-2024-56600)

    wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw().(CVE-2024-56593)

    bpf, sockmap: Several fixes to bpf_msg_pop_data(CVE-2024-56720)

    xsk: fix OOB map writes when deleting elements(CVE-2024-56614)

    netdevsim: prevent bad user input in nsim_dev_health_break_write().(CVE-2024-56716)

    nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur(CVE-2024-56779)

    nvme-rdma: unquiesce admin_q before destroy it(CVE-2024-49569)

    net/sched: netem: account for backlog updates from child qdisc(CVE-2024-56770)

    smb: client: fix TCP timers deadlock after rmmod(CVE-2024-54680)

    fs: relax assertions on failure to encode file handles(CVE-2024-57924)

    bpf: Prevent tailcall infinite loop caused by freplace(CVE-2024-47794)

    netfilter: IDLETIMER: Fix for possible ABBA deadlock(CVE-2024-54683)

    scsi: megaraid_sas: Fix for a potential deadlock(CVE-2024-57807)

    Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet(CVE-2024-55916)

    mm: hugetlb: independent PMD page table shared count(CVE-2024-57883)

    arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL(CVE-2024-57874)

    drm/dp_mst: Fix resetting msg rx state after topology removal(CVE-2024-57876)

    ceph: give up on paths longer than PATH_MAX(CVE-2024-53685)

    mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim().(CVE-2024-57884)

    workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker(CVE-2024-57888)

    virtio-blk: don't keep queue frozen during system suspend(CVE-2024-57946)

    KVM: arm64: Get rid of userspace_irqchip_in_use(CVE-2024-53195)

    netfilter: nf_set_pipapo: fix initial map fill(CVE-2024-57947)

    sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket(CVE-2024-53168)

    net: restrict SO_REUSEPORT to inet sockets(CVE-2024-57903)

    bpf: Fix bpf_sk_select_reuseport() memory leak(CVE-2025-21683)

    selinux: ignore unknown extended permissions(CVE-2024-57931)

    pinmux: Use sequential access to access desc-pinmux data(CVE-2024-47141)

    drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req().(CVE-2024-57798)

    RDMA/uverbs: Prevent integer overflow issue(CVE-2024-57890)

    dlm: fix possible lkb_resource null dereference(CVE-2024-47809)

    net/sctp: Prevent autoclose integer overflow in sctp_association_init().(CVE-2024-57938)

    iommu/arm-smmu: Defer probe of clients after smmu device bound(CVE-2024-56568)

    NFSD: Prevent NULL dereference in nfsd4_process_cb_update()(CVE-2024-53217)

    net/ipv6: release expired exception dst cached in socket(CVE-2024-56644)

    RDMA/rxe: Remove the direct link to net_device(CVE-2024-57795)

    af_packet: fix vlan_get_tci() vs MSG_PEEK(CVE-2024-57902)

    net: sched: fix ordering of qlen adjustment(CVE-2024-53164)

    af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK(CVE-2024-57901)

    sctp: sysctl: cookie_hmac_alg: avoid using current-nsproxy(CVE-2025-21640)

    sctp: sysctl: auth_enable: avoid using current-nsproxy(CVE-2025-21638)

    gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag(CVE-2025-21699)

    netfilter: ipset: Hold module reference while requesting a module(CVE-2024-56637)

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute(CVE-2025-21653)

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX(CVE-2025-21648)

    fs/proc: fix softlockup in __read_vmcore (part 2).(CVE-2025-21694)

    filemap: avoid truncating 64-bit offset to 32 bits(CVE-2025-21665)

    mm: zswap: properly synchronize freeing resources during CPU hotunplug(CVE-2025-21693)

    bpf: fix recursive lock when verdict program return SK_PASS(CVE-2024-56694)

    net/mlx5: Fix variable not being completed when function returns(CVE-2025-21662)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7524-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Ublk userspace block driver;

    - Virtio block driver;

    - Compressed RAM block device driver;

    - Bluetooth drivers;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - iSCSI Boot Firmware Table Attributes driver;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - Hardware monitoring drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - Microchip PCI driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Power supply drivers;

    - Voltage and Current Regulator drivers;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Framebuffer layer;

    - TDX Guest driver;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - DRM display driver;

    - BPF subsystem;

    - VLANs driver;

    - Kernel Samepage Merging mechanism;

    - Memory management;

    - Network file system (NFS) superblock;

    - Kernel stack handling interfaces;

    - StackDepot library;

    - Task handling mechanism;

    - userfaultfd() syscall;

    - Bluetooth subsystem;

    - IP tunnels definitions;

    - LAPB network protocol;

    - Network namespace;

    - Netfilter;

    - Network traffic control;

    - Network sockets;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - Control group (cgroup);

    - DMA mapping infrastructure;

    - Kernel fork() syscall;

    - KCSAN framework;

    - Kernel thread helper (kthread);

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Timer subsystem;

    - Workqueue subsystem;

    - Vector I/O iterator library;

    - KUnit library;

    - Maple Tree data structure library;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Ethtool driver;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2025-21651, CVE-2024-55881, CVE-2024-50223, CVE-2024-50033, CVE-2024-57907,     CVE-2024-53233, CVE-2024-57798, CVE-2024-50262, CVE-2024-50265, CVE-2024-50197, CVE-2024-50066,     CVE-2024-50271, CVE-2024-57892, CVE-2024-56767, CVE-2024-50237, CVE-2024-56638, CVE-2024-50084,     CVE-2025-21638, CVE-2024-56630, CVE-2024-50193, CVE-2024-50093, CVE-2024-49914, CVE-2024-50221,     CVE-2024-50202, CVE-2025-21659, CVE-2024-50009, CVE-2024-53059, CVE-2024-50206, CVE-2024-53239,     CVE-2024-53219, CVE-2024-53139, CVE-2024-56752, CVE-2024-50125, CVE-2024-53226, CVE-2024-57940,     CVE-2024-57925, CVE-2024-53081, CVE-2024-53053, CVE-2024-56627, CVE-2024-57882, CVE-2025-21645,     CVE-2025-21642, CVE-2024-50120, CVE-2024-50240, CVE-2024-53168, CVE-2024-53178, CVE-2024-53166,     CVE-2024-50030, CVE-2024-50299, CVE-2024-57926, CVE-2024-55916, CVE-2024-56593, CVE-2024-53083,     CVE-2024-56641, CVE-2024-50049, CVE-2024-56761, CVE-2024-56664, CVE-2024-50242, CVE-2024-56589,     CVE-2024-50248, CVE-2024-41013, CVE-2024-50291, CVE-2024-53061, CVE-2024-50105, CVE-2024-53171,     CVE-2024-56568, CVE-2024-50133, CVE-2024-56594, CVE-2024-56582, CVE-2024-53100, CVE-2024-50021,     CVE-2024-56603, CVE-2024-50055, CVE-2024-56637, CVE-2024-50273, CVE-2025-21660, CVE-2024-50083,     CVE-2024-53063, CVE-2024-56599, CVE-2024-56783, CVE-2025-21993, CVE-2024-50019, CVE-2024-53177,     CVE-2024-50038, CVE-2024-53113, CVE-2024-50215, CVE-2024-50036, CVE-2024-44955, CVE-2024-56602,     CVE-2024-54193, CVE-2024-56685, CVE-2024-50137, CVE-2025-21640, CVE-2024-57838, CVE-2024-50024,     CVE-2024-57849, CVE-2024-50304, CVE-2024-50263, CVE-2024-50048, CVE-2024-53176, CVE-2024-50191,     CVE-2024-56781, CVE-2024-56548, CVE-2024-50278, CVE-2024-57906, CVE-2024-53114, CVE-2025-21646,     CVE-2024-53196, CVE-2024-50135, CVE-2024-50286, CVE-2025-21831, CVE-2024-50163, CVE-2024-56694,     CVE-2024-50023, CVE-2024-50031, CVE-2024-56709, CVE-2024-50107, CVE-2024-56672, CVE-2024-57887,     CVE-2024-50162, CVE-2024-50207, CVE-2024-53155, CVE-2024-50095, CVE-2024-56703, CVE-2024-50268,     CVE-2024-56607, CVE-2024-53115, CVE-2024-56739, CVE-2024-53091, CVE-2024-50086, CVE-2024-56580,     CVE-2024-56572, CVE-2024-56693, CVE-2024-57904, CVE-2025-21938, CVE-2024-56698, CVE-2024-50039,     CVE-2024-50233, CVE-2024-50282, CVE-2024-50251, CVE-2024-53184, CVE-2025-21700, CVE-2024-56565,     CVE-2024-53117, CVE-2024-50288, CVE-2024-50171, CVE-2024-56583, CVE-2024-50115, CVE-2024-53687,     CVE-2024-49568, CVE-2024-53047, CVE-2024-53150, CVE-2024-56549, CVE-2024-50148, CVE-2024-56679,     CVE-2024-57888, CVE-2024-53680, CVE-2024-50155, CVE-2024-56751, CVE-2024-56610, CVE-2024-50272,     CVE-2024-50182, CVE-2024-57916, CVE-2024-53237, CVE-2024-50211, CVE-2024-56605, CVE-2024-56601,     CVE-2024-48873, CVE-2024-50166, CVE-2024-50085, CVE-2024-50108, CVE-2024-57792, CVE-2024-50224,     CVE-2024-56779, CVE-2024-50068, CVE-2024-53151, CVE-2024-56657, CVE-2024-50026, CVE-2024-53138,     CVE-2024-57896, CVE-2024-53222, CVE-2024-50164, CVE-2024-53230, CVE-2024-56614, CVE-2024-53089,     CVE-2024-57895, CVE-2024-56755, CVE-2024-50096, CVE-2024-56645, CVE-2024-53162, CVE-2024-56566,     CVE-2024-53086, CVE-2024-56718, CVE-2024-50062, CVE-2024-50065, CVE-2024-56763, CVE-2024-56538,     CVE-2024-53127, CVE-2024-49893, CVE-2024-53087, CVE-2024-53058, CVE-2024-57945, CVE-2024-53174,     CVE-2024-53096, CVE-2024-56546, CVE-2024-56754, CVE-2024-49865, CVE-2024-56635, CVE-2024-56539,     CVE-2024-56551, CVE-2024-53044, CVE-2024-56700, CVE-2024-56787, CVE-2024-56586, CVE-2024-56687,     CVE-2024-53236, CVE-2024-50058, CVE-2024-53146, CVE-2024-50269, CVE-2024-50056, CVE-2024-56608,     CVE-2024-49899, CVE-2024-53099, CVE-2024-57902, CVE-2024-56656, CVE-2024-50126, CVE-2024-50274,     CVE-2025-21654, CVE-2025-21971, CVE-2024-53130, CVE-2024-49571, CVE-2024-56742, CVE-2024-56613,     CVE-2024-56575, CVE-2024-56540, CVE-2024-53194, CVE-2024-50044, CVE-2024-49906, CVE-2024-53163,     CVE-2024-56774, CVE-2024-50143, CVE-2024-49968, CVE-2024-53202, CVE-2024-57876, CVE-2024-56650,     CVE-2024-53685, CVE-2025-21656, CVE-2024-56648, CVE-2025-21636, CVE-2024-56782, CVE-2024-50198,     CVE-2024-50110, CVE-2024-56775, CVE-2024-50239, CVE-2024-53156, CVE-2024-50045, CVE-2024-53045,     CVE-2024-58237, CVE-2024-50167, CVE-2024-50060, CVE-2024-56372, CVE-2024-56756, CVE-2024-54455,     CVE-2024-56543, CVE-2024-56772, CVE-2024-50131, CVE-2024-56616, CVE-2024-50185, CVE-2024-53154,     CVE-2024-50138, CVE-2024-53111, CVE-2024-50025, CVE-2024-50156, CVE-2024-39282, CVE-2024-53140,     CVE-2024-57872, CVE-2024-50077, CVE-2025-21652, CVE-2025-21655, CVE-2024-57901, CVE-2024-57791,     CVE-2024-50259, CVE-2024-57890, CVE-2024-56770, CVE-2024-53170, CVE-2024-56705, CVE-2024-56597,     CVE-2024-50047, CVE-2024-53101, CVE-2024-50128, CVE-2024-50287, CVE-2024-50186, CVE-2024-56745,     CVE-2024-56720, CVE-2024-57889, CVE-2024-56590, CVE-2024-57807, CVE-2024-50158, CVE-2024-53198,     CVE-2024-57843, CVE-2024-53095, CVE-2024-56678, CVE-2024-56758, CVE-2024-53120, CVE-2024-50087,     CVE-2024-50147, CVE-2024-56652, CVE-2024-56692, CVE-2024-56724, CVE-2024-50226, CVE-2024-56609,     CVE-2024-56769, CVE-2024-47408, CVE-2024-53187, CVE-2024-56596, CVE-2024-48875, CVE-2024-50236,     CVE-2024-50284, CVE-2024-49921, CVE-2024-53229, CVE-2024-50256, CVE-2024-57946, CVE-2024-53175,     CVE-2024-56619, CVE-2024-50257, CVE-2024-53210, CVE-2024-53203, CVE-2025-21658, CVE-2024-56683,     CVE-2024-50302, CVE-2024-56570, CVE-2024-50187, CVE-2025-21650, CVE-2024-50082, CVE-2024-50194,     CVE-2024-53072, CVE-2024-50118, CVE-2024-53043, CVE-2024-50160, CVE-2025-21635, CVE-2024-57900,     CVE-2024-57879, CVE-2024-50294, CVE-2024-48876, CVE-2024-50250, CVE-2024-50220, CVE-2025-21648,     CVE-2024-50032, CVE-2024-56765, CVE-2024-56369, CVE-2024-53109, CVE-2024-47143, CVE-2025-21643,     CVE-2024-50261, CVE-2024-56558, CVE-2024-49920, CVE-2024-56689, CVE-2024-56647, CVE-2024-50290,     CVE-2024-57908, CVE-2024-53209, CVE-2024-53220, CVE-2024-50073, CVE-2024-47711, CVE-2024-50183,     CVE-2024-56690, CVE-2024-50067, CVE-2024-56778, CVE-2024-56622, CVE-2024-56729, CVE-2024-53157,     CVE-2024-53213, CVE-2024-50130, CVE-2024-56629, CVE-2024-57885, CVE-2025-21637, CVE-2024-50078,     CVE-2024-53224, CVE-2024-50116, CVE-2024-53068, CVE-2024-50300, CVE-2024-53084, CVE-2024-50099,     CVE-2024-56723, CVE-2024-50230, CVE-2024-56636, CVE-2024-50252, CVE-2024-56587, CVE-2024-53131,     CVE-2024-50046, CVE-2024-50200, CVE-2024-56588, CVE-2024-47726, CVE-2024-56615, CVE-2024-57917,     CVE-2024-50063, CVE-2024-50246, CVE-2024-53055, CVE-2024-53133, CVE-2024-50205, CVE-2024-53076,     CVE-2024-50283, CVE-2024-56660, CVE-2024-56707, CVE-2024-50180, CVE-2024-56746, CVE-2025-21756,     CVE-2024-50127, CVE-2024-50145, CVE-2024-56625, CVE-2024-56760, CVE-2024-53121, CVE-2024-53122,     CVE-2024-53062, CVE-2024-53046, CVE-2024-56764, CVE-2024-57801, CVE-2024-56728, CVE-2022-49034,     CVE-2024-53094, CVE-2024-53147, CVE-2024-56776, CVE-2024-57898, CVE-2024-53148, CVE-2024-56704,     CVE-2024-50035, CVE-2024-50152, CVE-2024-50169, CVE-2024-56600, CVE-2024-56681, CVE-2024-45828,     CVE-2024-53052, CVE-2024-56574, CVE-2024-56531, CVE-2024-50303, CVE-2024-57897, CVE-2024-53123,     CVE-2024-57874, CVE-2024-57939, CVE-2024-47141, CVE-2024-56659, CVE-2024-50069, CVE-2024-50141,     CVE-2024-50201, CVE-2024-50270, CVE-2024-56621, CVE-2024-56606, CVE-2024-53129, CVE-2024-57938,     CVE-2024-50203, CVE-2024-56708, CVE-2024-53197, CVE-2024-53208, CVE-2024-50028, CVE-2024-56677,     CVE-2025-21664, CVE-2024-50121, CVE-2024-56644, CVE-2024-57804, CVE-2024-53145, CVE-2024-56780,     CVE-2024-50112, CVE-2024-56759, CVE-2024-50192, CVE-2024-53181, CVE-2024-50170, CVE-2024-50080,     CVE-2024-50238, CVE-2024-57912, CVE-2024-50222, CVE-2024-36476, CVE-2024-53107, CVE-2024-53119,     CVE-2024-43098, CVE-2024-56604, CVE-2024-56567, CVE-2024-47736, CVE-2024-53180, CVE-2024-38608,     CVE-2024-53227, CVE-2024-50136, CVE-2024-53105, CVE-2024-50225, CVE-2024-56649, CVE-2024-57899,     CVE-2024-41014, CVE-2024-50188, CVE-2024-53160, CVE-2024-53183, CVE-2024-54460, CVE-2024-56725,     CVE-2024-56642, CVE-2024-53223, CVE-2024-56631, CVE-2024-50134, CVE-2024-53135, CVE-2024-56573,     CVE-2024-50104, CVE-2024-53126, CVE-2024-56667, CVE-2025-21662, CVE-2024-53221, CVE-2024-56786,     CVE-2024-50040, CVE-2024-53085, CVE-2024-50051, CVE-2024-56721, CVE-2024-52332, CVE-2024-50075,     CVE-2024-50208, CVE-2024-50209, CVE-2024-56710, CVE-2024-50296, CVE-2024-53066, CVE-2025-21701,     CVE-2024-56584, CVE-2024-41932, CVE-2024-50059, CVE-2024-57911, CVE-2024-56785, CVE-2024-50216,     CVE-2024-50249, CVE-2024-49569, CVE-2024-50098, CVE-2024-56777, CVE-2024-53093, CVE-2024-53067,     CVE-2025-21634, CVE-2024-53190, CVE-2024-50199, CVE-2024-56577, CVE-2024-56653, CVE-2024-50027,     CVE-2024-50285, CVE-2025-21632, CVE-2025-21702, CVE-2024-57893, CVE-2024-50235, CVE-2024-56658,     CVE-2024-57802, CVE-2024-58087, CVE-2024-53112, CVE-2024-47809, CVE-2024-50111, CVE-2024-57910,     CVE-2024-53142, CVE-2024-50196, CVE-2024-56578, CVE-2024-53200, CVE-2024-50276, CVE-2024-53188,     CVE-2024-53048, CVE-2024-56771, CVE-2024-53228, CVE-2024-57850, CVE-2024-49972, CVE-2025-21647,     CVE-2024-50072, CVE-2024-56701, CVE-2024-53232, CVE-2024-50088, CVE-2024-56557, CVE-2024-56632,     CVE-2024-50142, CVE-2024-57806, CVE-2024-53051, CVE-2024-57931, CVE-2024-50103, CVE-2024-50258,     CVE-2024-53172, CVE-2024-53106, CVE-2024-53158, CVE-2024-56595, CVE-2024-53108, CVE-2024-56626,     CVE-2024-56691, CVE-2024-50289, CVE-2024-53217, CVE-2024-50234, CVE-2024-54683, CVE-2024-53042,     CVE-2024-56675, CVE-2024-50195, CVE-2024-53195, CVE-2024-56654, CVE-2024-56715, CVE-2025-21639,     CVE-2024-57913, CVE-2024-56717, CVE-2024-56651, CVE-2024-56688, CVE-2024-53128, CVE-2024-53169,     CVE-2024-56620, CVE-2024-50189, CVE-2024-56550, CVE-2024-50244, CVE-2024-50279, CVE-2024-42122,     CVE-2024-58099, CVE-2024-53179, CVE-2024-56532, CVE-2024-53215, CVE-2024-50232, CVE-2024-50029,     CVE-2024-57933, CVE-2024-56662, CVE-2024-53690, CVE-2024-53134, CVE-2024-48881, CVE-2024-56727,     CVE-2024-56576, CVE-2024-56670, CVE-2024-56598, CVE-2024-53161, CVE-2024-50061, CVE-2024-50117,     CVE-2025-21653, CVE-2024-50101, CVE-2024-55639, CVE-2025-21649, CVE-2024-53231, CVE-2024-50041,     CVE-2024-50231, CVE-2024-57932, CVE-2024-50076, CVE-2024-53165, CVE-2024-57793, CVE-2024-53082,     CVE-2024-50020, CVE-2024-50267, CVE-2024-57883, CVE-2024-50298, CVE-2024-56643, CVE-2024-56640,     CVE-2024-50074, CVE-2024-53125, CVE-2024-56748, CVE-2024-56634, CVE-2024-50064, CVE-2024-50172,     CVE-2024-50255, CVE-2024-50042, CVE-2024-57929, CVE-2024-56773, CVE-2024-53214, CVE-2024-53110,     CVE-2024-56569, CVE-2024-56581, CVE-2024-56716, CVE-2024-50090, CVE-2024-53218, CVE-2024-57884,     CVE-2024-56611, CVE-2024-50243, CVE-2024-56545, CVE-2024-56623, CVE-2024-53173, CVE-2024-53090,     CVE-2025-21631, CVE-2024-56744, CVE-2024-56722, CVE-2024-50297, CVE-2024-56726, CVE-2024-56592,     CVE-2024-50275, CVE-2025-21663, CVE-2024-57841, CVE-2024-50150, CVE-2024-50301, CVE-2024-56579,     CVE-2024-53088, CVE-2024-50153, CVE-2024-50280, CVE-2024-50124, CVE-2024-50229, CVE-2024-50146,     CVE-2024-50057, CVE-2024-56562, CVE-2024-50070, CVE-2024-50218, CVE-2024-53118, CVE-2024-47794,     CVE-2024-50295, CVE-2024-56747, CVE-2024-56663, CVE-2024-50292, CVE-2024-50140, CVE-2024-50154,     CVE-2024-53050, CVE-2024-41935, CVE-2024-56533, CVE-2024-50139, CVE-2024-56633, CVE-2024-50184,     CVE-2024-53191, CVE-2024-50022, CVE-2024-50010, CVE-2024-50245, CVE-2024-53079, CVE-2024-50151,     CVE-2024-53234, CVE-2024-50247, CVE-2024-50159, CVE-2024-57903)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0289-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security     bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
    - CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events     (bsc#1220355).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
    - CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
    - CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
    - CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
    - CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
    - CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
    - CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
    - CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
    - CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
    - CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
    - CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
    - CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
    - CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
    - CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
    - CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
    - CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
    - CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
    - CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
    - CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
    - CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
    - CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe()     (bsc#1234923).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
    - CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
    - CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
    - CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
    - CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
    - CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
    - CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
    - CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()     (bsc#1235521).
    - CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()     (bsc#1235061).
    - CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM     (bsc#1235391).
    - CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
    - CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
    - CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU     (bsc#1235429).
    - CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
    - CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
    - CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
    - CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
    - CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
    - CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
    - CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
    - CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
    - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
    - CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
    - CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
    - CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
    - CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
    - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
    - CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
    - CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
    - CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
    - CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
    - CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
    - CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
    - CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
    - CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
    - CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).
    - CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
    - CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
    - CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
    - CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
    - CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
    - CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
    - CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
    - CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
    - CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
    - CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
    - CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
    - CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
    - CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount     (bsc#1235965).
    - CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
    - CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
    - CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
    - CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
    - CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
    - CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
    - CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue     (bsc#1236144).
    - CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
    - CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0428-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
    - CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
    - CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
    - CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
    - CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
    - CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
    - CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
    - CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
    - CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
    - CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum()     (bsc#1233248).
    - CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
    - CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
    - CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
    - CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
    - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
    - CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
    - CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
    - CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
    - CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
    - CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
    - CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
    - CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
    - CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe()     (bsc#1234923).
    - CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
    - CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
    - CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
    - CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
    - CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
    - CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
    - CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
    - CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
    - CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
    - CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
    - CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
    - CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
    - CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
    - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
    - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
    - CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()     (bsc#1235521).
    - CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
    - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()     (bsc#1235061).
    - CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
    - CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
    - CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM     (bsc#1235391).
    - CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
    - CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
    - CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU     (bsc#1235429).
    - CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
    - CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
    - CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
    - CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
    - CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
    - CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
    - CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
    - CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
    - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
    - CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
    - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
    - CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
    - CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
    - CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
    - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
    - CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
    - CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
    - CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
    - CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
    - CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
    - CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
    - CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
    - CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
    - CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
    - CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
    - CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
    - CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
    - CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
    - CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
    - CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
    - CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
    - CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
    - CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
    - CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
    - CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
    - CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
    - CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
    - CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
    - CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
    - CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
    - CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
    - CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
    - CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
    - CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
    - CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
    - CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
    - CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()     (bsc#1235948).
    - CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
    - CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount     (bsc#1235965).
    - CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
    - CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
    - CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
    - CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
    - CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
    - CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
    - CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
    - CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
    - CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
    - CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
    - CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue     (bsc#1236144).
    - CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
    - CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
    - CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
    - CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
    - CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
    - CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
    - CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
    - CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
    - CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
    - CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
    - CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8668-1 advisory.

    Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly     validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use     this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive     information (kernel memory). (CVE-2023-45896)

    It was discovered that some AMD processors did not properly clear data in the floating point divider unit     during speculative execution. A local attacker could use this to expose sensitive information.
    (CVE-2025-54505)

    It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the     operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a     higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - S390 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - ATM drivers;

    - Drivers core;

    - Power management core;

    - DRBD Distributed Replicated Block Device drivers;

    - RNBD block device driver;

    - Bluetooth drivers;

    - Bus devices;

    - Character device driver;

    - TPM device driver;

    - Clocksource drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - CPU idle management framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - I2C subsystem;

    - IIO subsystem;

    - IIO ADC drivers;

    - InfiniBand drivers;

    - Input Device (Miscellaneous) drivers;

    - IOMMU subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - MediaTek SMI driver;

    - NVIDIA Tegra memory controller driver;

    - Multifunction device drivers;

    - IBM Advanced System Management driver;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Ethernet bonding driver;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - MediaTek network drivers;

    - Near Field Communication (NFC) drivers;

    - NTB driver;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Broadcom BCM2835 power domain driver;

    - Power supply drivers;

    - RapidIO drivers;

    - Remote Processor subsystem;

    - RPMSG subsystem;

    - SCSI subsystem;

    - Freescale SoC drivers;

    - Texas Instruments SoC drivers;

    - SPI subsystem;

    - Greybus lights staging drivers;

    - Media staging drivers;

    - Realtek RTL8723BS SDIO drivers;

    - SM750 framebuffer staging driver;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - Cadence USB3 driver;

    - USB Device Class drivers;

    - ULPI bus;

    - USB core drivers;

    - DesignWare USB2 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Mustek MDC800 USB digital camera driver;

    - USB YUREX driver;

    - Renesas USBHS Controller drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - FAT file system;

    - FUSE (File system in Userspace);

    - GFS2 file system;

    - HFS+ file system;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - OCFS2 file system;

    - Proc file system;

    - Pstore file system;

    - Diskquota system;

    - SMB network file system;

    - SquashFS file system;

    - UDF file system;

    - XFS file system;

    - Audit subsystem;

    - RAS (Reliability, Availability, Serviceability) subsystem;

    - Software nodes and device properties;

    - Memory Management;

    - KVM subsystem;

    - Memory management;

    - PPP protocol drivers and compressors;

    - Linux Security Modules (LSM) Framework;

    - Network traffic control;

    - Bluetooth subsystem;

    - MAC80211 subsystem;

    - Netfilter;

    - IP tunnels definitions;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - io_uring subsystem;

    - BPF subsystem;

    - Control group (cgroup);

    - Kernel fork() syscall;

    - Kernel futex primitives;

    - Kernel kexec() syscall;

    - Kernel module support;

    - Scheduler infrastructure;

    - Cryptographic library;

    - KASAN memory debugging framework;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - B.A.T.M.A.N. meshing protocol;

    - Ethernet bridge;

    - CAIF protocol;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - XFRM subsystem;

    - L2TP protocol;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - NFC subsystem;

    - Open vSwitch;

    - Phonet protocol;

    - Qualcomm IPC Router (QRTR);

    - RDS protocol;

    - RF switch subsystem;

    - Rose network layer;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Stream parser;

    - Sun RPC protocol;

    - TIPC protocol;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - X.25 network layer;

    - eXpress Data Path;

    - AppArmor security module;

    - Simplified Mandatory Access Control Kernel framework;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - AudioScience HPI driver;

    - Creative Sound Blaster X-Fi driver;

    - AMD SoC Alsa drivers;

    - SoC audio core drivers;

    - STI ASoC drivers;

    - USB sound devices; (CVE-2022-49803, CVE-2022-49961, CVE-2022-50073, CVE-2022-50116, CVE-2022-50552,     CVE-2023-52682, CVE-2023-52737, CVE-2023-53545, CVE-2023-53596, CVE-2023-53629, CVE-2024-27389,     CVE-2024-35865, CVE-2024-36898, CVE-2024-36922, CVE-2024-41079, CVE-2024-46715, CVE-2024-46770,     CVE-2024-47809, CVE-2024-50012, CVE-2024-53221, CVE-2024-56557, CVE-2024-56584, CVE-2024-56657,     CVE-2024-56719, CVE-2024-56727, CVE-2025-21712, CVE-2025-21739, CVE-2025-21863, CVE-2025-22107,     CVE-2025-23141, CVE-2025-37786, CVE-2025-38006, CVE-2025-38105, CVE-2025-38192, CVE-2025-38250,     CVE-2025-38562, CVE-2025-38626, CVE-2025-38659, CVE-2025-38710, CVE-2025-39748, CVE-2025-39764,     CVE-2025-40005, CVE-2025-40016, CVE-2025-40103, CVE-2025-40323, CVE-2025-68206, CVE-2025-68239,     CVE-2025-68256, CVE-2025-68307, CVE-2025-68358, CVE-2025-71150, CVE-2025-71161, CVE-2025-71221,     CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238,     CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71274, CVE-2025-71287,     CVE-2025-71292, CVE-2025-71304, CVE-2026-23031, CVE-2026-23066, CVE-2026-23100, CVE-2026-23113,     CVE-2026-23141, CVE-2026-23157, CVE-2026-23169, CVE-2026-23204, CVE-2026-23220, CVE-2026-23221,     CVE-2026-23222, CVE-2026-23227, CVE-2026-23228, CVE-2026-23229, CVE-2026-23234, CVE-2026-23235,     CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243,     CVE-2026-23253, CVE-2026-23266, CVE-2026-23270, CVE-2026-23277, CVE-2026-23279, CVE-2026-23281,     CVE-2026-23286, CVE-2026-23289, CVE-2026-23290, CVE-2026-23291, CVE-2026-23293, CVE-2026-23296,     CVE-2026-23298, CVE-2026-23300, CVE-2026-23303, CVE-2026-23304, CVE-2026-23307, CVE-2026-23312,     CVE-2026-23318, CVE-2026-23324, CVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,     CVE-2026-23352, CVE-2026-23356, CVE-2026-23357, CVE-2026-23359, CVE-2026-23362, CVE-2026-23365,     CVE-2026-23367, CVE-2026-23368, CVE-2026-23370, CVE-2026-23372, CVE-2026-23379, CVE-2026-23381,     CVE-2026-23382, CVE-2026-23388, CVE-2026-23391, CVE-2026-23392, CVE-2026-23395, CVE-2026-23396,     CVE-2026-23397, CVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23420, CVE-2026-23434,     CVE-2026-23438, CVE-2026-23439, CVE-2026-23442, CVE-2026-23444, CVE-2026-23446, CVE-2026-23452,     CVE-2026-23454, CVE-2026-23456, CVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23462,     CVE-2026-23463, CVE-2026-23474, CVE-2026-31393, CVE-2026-31396, CVE-2026-31399, CVE-2026-31400,     CVE-2026-31405, CVE-2026-31407, CVE-2026-31408, CVE-2026-31409, CVE-2026-31411, CVE-2026-31415,     CVE-2026-31416, CVE-2026-31417, CVE-2026-31421, CVE-2026-31422, CVE-2026-31423, CVE-2026-31424,     CVE-2026-31425, CVE-2026-31427, CVE-2026-31428, CVE-2026-31433, CVE-2026-31446, CVE-2026-31447,     CVE-2026-31450, CVE-2026-31452, CVE-2026-31454, CVE-2026-31455, CVE-2026-31464, CVE-2026-31466,     CVE-2026-31467, CVE-2026-31469, CVE-2026-31473, CVE-2026-31476, CVE-2026-31480, CVE-2026-31483,     CVE-2026-31485, CVE-2026-31489, CVE-2026-31494, CVE-2026-31495, CVE-2026-31497, CVE-2026-31498,     CVE-2026-31507, CVE-2026-31508, CVE-2026-31509, CVE-2026-31510, CVE-2026-31512, CVE-2026-31515,     CVE-2026-31518, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523, CVE-2026-31524, CVE-2026-31532,     CVE-2026-31540, CVE-2026-31545, CVE-2026-31546, CVE-2026-31549, CVE-2026-31550, CVE-2026-31551,     CVE-2026-31552, CVE-2026-31555, CVE-2026-31565, CVE-2026-31570, CVE-2026-31576, CVE-2026-31577,     CVE-2026-31578, CVE-2026-31580, CVE-2026-31581, CVE-2026-31583, CVE-2026-31585, CVE-2026-31586,     CVE-2026-31588, CVE-2026-31590, CVE-2026-31594, CVE-2026-31596, CVE-2026-31597, CVE-2026-31598,     CVE-2026-31599, CVE-2026-31602, CVE-2026-31603, CVE-2026-31605, CVE-2026-31615, CVE-2026-31616,     CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31622, CVE-2026-31623, CVE-2026-31624,     CVE-2026-31625, CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31630,     CVE-2026-31634, CVE-2026-31642, CVE-2026-31651, CVE-2026-31656, CVE-2026-31658, CVE-2026-31660,     CVE-2026-31661, CVE-2026-31662, CVE-2026-31664, CVE-2026-31665, CVE-2026-31667, CVE-2026-31670,     CVE-2026-31671, CVE-2026-31672, CVE-2026-31673, CVE-2026-31674, CVE-2026-31676, CVE-2026-31679,     CVE-2026-31680, CVE-2026-31681, CVE-2026-31683, CVE-2026-31684, CVE-2026-31686, CVE-2026-31687,     CVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699,     CVE-2026-31701, CVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31726, CVE-2026-31728,     CVE-2026-31737, CVE-2026-31738, CVE-2026-31747, CVE-2026-31748, CVE-2026-31749, CVE-2026-31751,     CVE-2026-31752, CVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758, CVE-2026-31759,     CVE-2026-31761, CVE-2026-31762, CVE-2026-31763, CVE-2026-31770, CVE-2026-31773, CVE-2026-31778,     CVE-2026-31780, CVE-2026-31781, CVE-2026-31788, CVE-2026-43014, CVE-2026-43015, CVE-2026-43020,     CVE-2026-43024, CVE-2026-43026, CVE-2026-43027, CVE-2026-43028, CVE-2026-43030, CVE-2026-43032,     CVE-2026-43035, CVE-2026-43040, CVE-2026-43041, CVE-2026-43043, CVE-2026-43046, CVE-2026-43047,     CVE-2026-43050, CVE-2026-43051, CVE-2026-43052, CVE-2026-43054, CVE-2026-43058, CVE-2026-43060,     CVE-2026-43061, CVE-2026-43062, CVE-2026-43065, CVE-2026-43066, CVE-2026-43068, CVE-2026-43069,     CVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079, CVE-2026-43080, CVE-2026-43085,     CVE-2026-43089, CVE-2026-43093, CVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104,     CVE-2026-43105, CVE-2026-43110, CVE-2026-43111, CVE-2026-43112, CVE-2026-43113, CVE-2026-43123,     CVE-2026-43124, CVE-2026-43130, CVE-2026-43132, CVE-2026-43133, CVE-2026-43134, CVE-2026-43135,     CVE-2026-43136, CVE-2026-43139, CVE-2026-43140, CVE-2026-43141, CVE-2026-43145, CVE-2026-43147,     CVE-2026-43148, CVE-2026-43149, CVE-2026-43152, CVE-2026-43156, CVE-2026-43158, CVE-2026-43159,     CVE-2026-43163, CVE-2026-43168, CVE-2026-43171, CVE-2026-43180, CVE-2026-43182, CVE-2026-43183,     CVE-2026-43184, CVE-2026-43187, CVE-2026-43190, CVE-2026-43194, CVE-2026-43196, CVE-2026-43200,     CVE-2026-43202, CVE-2026-43203, CVE-2026-43205, CVE-2026-43206, CVE-2026-43207, CVE-2026-43209,     CVE-2026-43211, CVE-2026-43218, CVE-2026-43223, CVE-2026-43225, CVE-2026-43226, CVE-2026-43227,     CVE-2026-43230, CVE-2026-43231, CVE-2026-43232, CVE-2026-43233, CVE-2026-43236, CVE-2026-43241,     CVE-2026-43242, CVE-2026-43246, CVE-2026-43251, CVE-2026-43255, CVE-2026-43257, CVE-2026-43261,     CVE-2026-43262, CVE-2026-43264, CVE-2026-43266, CVE-2026-43268, CVE-2026-43269, CVE-2026-43270,     CVE-2026-43273, CVE-2026-43275, CVE-2026-43277, CVE-2026-43279, CVE-2026-43281, CVE-2026-43283,     CVE-2026-43287, CVE-2026-43289, CVE-2026-43291, CVE-2026-43295, CVE-2026-43296, CVE-2026-43302,     CVE-2026-43312, CVE-2026-43313, CVE-2026-43314, CVE-2026-43315, CVE-2026-43316, CVE-2026-43324,     CVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43333, CVE-2026-43334, CVE-2026-43336,     CVE-2026-43339, CVE-2026-43340, CVE-2026-43342, CVE-2026-43343, CVE-2026-43357, CVE-2026-43363,     CVE-2026-43365, CVE-2026-43370, CVE-2026-43373, CVE-2026-43380, CVE-2026-43381, CVE-2026-43382,     CVE-2026-43386, CVE-2026-43387, CVE-2026-43405, CVE-2026-43411, CVE-2026-43420, CVE-2026-43425,     CVE-2026-43426, CVE-2026-43427, CVE-2026-43428, CVE-2026-43429, CVE-2026-43430, CVE-2026-43432,     CVE-2026-43439, CVE-2026-43445, CVE-2026-43449, CVE-2026-43450, CVE-2026-43451, CVE-2026-43452,     CVE-2026-43453, CVE-2026-43458, CVE-2026-43459, CVE-2026-43466, CVE-2026-43469, CVE-2026-43472,     CVE-2026-43473, CVE-2026-43475, CVE-2026-43476, CVE-2026-43480, CVE-2026-43484, CVE-2026-43496,     CVE-2026-43497, CVE-2026-43502, CVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838,     CVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844,     CVE-2026-45846, CVE-2026-45847, CVE-2026-45848, CVE-2026-45852, CVE-2026-45856, CVE-2026-45857,     CVE-2026-45860, CVE-2026-45862, CVE-2026-45864, CVE-2026-45866, CVE-2026-45867, CVE-2026-45868,     CVE-2026-45869, CVE-2026-45870, CVE-2026-45871, CVE-2026-45873, CVE-2026-45875, CVE-2026-45879,     CVE-2026-45883, CVE-2026-45885, CVE-2026-45890, CVE-2026-45891, CVE-2026-45899, CVE-2026-45902,     CVE-2026-45904, CVE-2026-45911, CVE-2026-45912, CVE-2026-45915, CVE-2026-45916, CVE-2026-45919,     CVE-2026-45920, CVE-2026-45924, CVE-2026-45935, CVE-2026-45936, CVE-2026-45941, CVE-2026-45946,     CVE-2026-45948, CVE-2026-45954, CVE-2026-45956, CVE-2026-45958, CVE-2026-45960, CVE-2026-45964,     CVE-2026-45965, CVE-2026-45968, CVE-2026-45969, CVE-2026-45970, CVE-2026-45974, CVE-2026-45978,     CVE-2026-45983, CVE-2026-45984, CVE-2026-45985, CVE-2026-45986, CVE-2026-45987, CVE-2026-45994,     CVE-2026-46002, CVE-2026-46004, CVE-2026-46006, CVE-2026-46009, CVE-2026-46015, CVE-2026-46018,     CVE-2026-46019, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024, CVE-2026-46027, CVE-2026-46033,     CVE-2026-46037, CVE-2026-46040, CVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049,     CVE-2026-46050, CVE-2026-46051, CVE-2026-46053, CVE-2026-46062, CVE-2026-46064, CVE-2026-46070,     CVE-2026-46072, CVE-2026-46077, CVE-2026-46080, CVE-2026-46082, CVE-2026-46088, CVE-2026-46098,     CVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46107, CVE-2026-46108, CVE-2026-46112,     CVE-2026-46120, CVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46127, CVE-2026-46128,     CVE-2026-46132, CVE-2026-46133, CVE-2026-46137, CVE-2026-46146, CVE-2026-46149, CVE-2026-46150,     CVE-2026-46151, CVE-2026-46161, CVE-2026-46163, CVE-2026-46167, CVE-2026-46168, CVE-2026-46172,     CVE-2026-46174, CVE-2026-46177, CVE-2026-46178, CVE-2026-46184, CVE-2026-46186, CVE-2026-46187,     CVE-2026-46189, CVE-2026-46197, CVE-2026-46198, CVE-2026-46205, CVE-2026-46206, CVE-2026-46209,     CVE-2026-46212, CVE-2026-46214, CVE-2026-46219, CVE-2026-46220, CVE-2026-46227, CVE-2026-46230,     CVE-2026-46231, CVE-2026-46233, CVE-2026-46234, CVE-2026-46236, CVE-2026-46238, CVE-2026-46249,     CVE-2026-46250, CVE-2026-46253, CVE-2026-46259, CVE-2026-46267, CVE-2026-46270, CVE-2026-46273,     CVE-2026-46274, CVE-2026-46275, CVE-2026-46285, CVE-2026-46294, CVE-2026-46301, CVE-2026-46303,     CVE-2026-46304, CVE-2026-46307, CVE-2026-46319, CVE-2026-46328, CVE-2026-52911, CVE-2026-52912,     CVE-2026-52914, CVE-2026-52915, CVE-2026-52916, CVE-2026-52919, CVE-2026-52920, CVE-2026-52921,     CVE-2026-52922, CVE-2026-52925, CVE-2026-52926, CVE-2026-52931, CVE-2026-52954, CVE-2026-52955,     CVE-2026-52957, CVE-2026-52958, CVE-2026-52962, CVE-2026-52963, CVE-2026-52969, CVE-2026-52970,     CVE-2026-52982, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52992, CVE-2026-52993,     CVE-2026-52995, CVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002, CVE-2026-53003,     CVE-2026-53004, CVE-2026-53006, CVE-2026-53011, CVE-2026-53012, CVE-2026-53016, CVE-2026-53021,     CVE-2026-53022, CVE-2026-53023, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040, CVE-2026-53041,     CVE-2026-53043, CVE-2026-53045, CVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049,     CVE-2026-53050, CVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53064,     CVE-2026-53065, CVE-2026-53068, CVE-2026-53069, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073,     CVE-2026-53074, CVE-2026-53075, CVE-2026-53077, CVE-2026-53082, CVE-2026-53088, CVE-2026-53093,     CVE-2026-53096, CVE-2026-53112, CVE-2026-53128, CVE-2026-53130, CVE-2026-53287, CVE-2026-53291,     CVE-2026-53294, CVE-2026-53295, CVE-2026-53296, CVE-2026-53304, CVE-2026-53306, CVE-2026-53309,     CVE-2026-53320, CVE-2026-53369, CVE-2026-53379, CVE-2026-63860, CVE-2026-63865, CVE-2026-64018,     CVE-2026-64032, CVE-2026-64033, CVE-2026-64034, CVE-2026-64039, CVE-2026-64046, CVE-2026-64047,     CVE-2026-64055, CVE-2026-64056, CVE-2026-64083, CVE-2026-64084, CVE-2026-64085, CVE-2026-64086,     CVE-2026-64087, CVE-2026-64088, CVE-2026-64089, CVE-2026-64096, CVE-2026-64102, CVE-2026-64103,     CVE-2026-64113, CVE-2026-64114, CVE-2026-64115, CVE-2026-64125, CVE-2026-64133, CVE-2026-64135,     CVE-2026-64153, CVE-2026-64155, CVE-2026-64164, CVE-2026-64165, CVE-2026-64166, CVE-2026-64168,     CVE-2026-64173, CVE-2026-64174, CVE-2026-64177, CVE-2026-64178, CVE-2026-64179, CVE-2026-64185,     CVE-2026-64218, CVE-2026-64219, CVE-2026-64220, CVE-2026-64221, CVE-2026-64587)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780052998 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame     reception race in isotp_rcv() When receiving a CAN frame the current code logic does not consider     concurrently receiving processes which do not show up in real world usage. Ziyang Xuan writes: The     following syz problem is one of the scenarios. so->rx.len is changed by isotp_rcv_ff() during     isotp_rcv_cf(), so->rx.len equals 0 before alloc_skb() and equals 4096 after alloc_skb(). That will     trigger skb_over_panic() in skb_put(). ======================================================= CPU: 1 PID:
    19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc8-syzkaller #0 RIP: 0010:skb_panic+0x16c/0x16e     net/core/skbuff.c:113 Call Trace: <TASK> skb_over_panic net/core/skbuff.c:118 [inline]     skb_put.cold+0x24/0x24 net/core/skbuff.c:1990 isotp_rcv_cf net/can/isotp.c:570 [inline]     isotp_rcv+0xa38/0x1e30 net/can/isotp.c:668 deliver net/can/af_can.c:574 [inline]     can_rcv_filter+0x445/0x8d0 net/can/af_can.c:635 can_receive+0x31d/0x580 net/can/af_can.c:665     can_rcv+0x120/0x1c0 net/can/af_can.c:696 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5465
    __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5579 Therefore we make sure the state changes and data     structures stay consistent at CAN frame reception time by adding a spin_lock in isotp_rcv(). This fixes     the issue reported by syzkaller but does not affect real world operation. (CVE-2022-48830)

  - In the Linux kernel, the following vulnerability has been resolved: ceph: fix deadlock or deadcode of     misusing dget() The lock order is incorrect between denty and its parent, we should always make sure that     the parent get the lock first. But since this deadcode is never used and the parent dir will always be set     from the callers, let's just remove it. (CVE-2023-52583)

  - In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for     return value of 'create_hist_field' Function 'create_hist_field' is called recursively at     trace_events_hist.c:1954 and can return NULL-value that's why we have to check it to avoid null pointer     dereference. Found by Linux Verification Center (linuxtesting.org) with SVACE. (CVE-2023-53005)

  - In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix percpu     counter block leak on error path when creating new netns Here is the stack where we allocate percpu     counter block: +-< __alloc_percpu +-< xt_percpu_counter_alloc +-< find_check_entry # {arp,ip,ip6}_tables.c     +-< translate_table And it can be leaked on this code path: +-> ip6t_register_table +-> translate_table #     allocates percpu counter block +-> xt_register_table # fails there is no freeing of the counter block on     xt_register_table fail. Note: xt_percpu_counter_free should be called to free it like we do in do_replace     through cleanup_entry helper (or in __ip6t_unregister_table). Probability of hitting this error path is     low AFAICS (xt_register_table can only return ENOMEM here, as it is not replacing anything, as we are     creating new netns, and it is hard to imagine that all previous allocations succeeded and after that one     in xt_register_table failed). But it's worth fixing even the rare leak. (CVE-2023-53200)

  - In the Linux kernel, the following vulnerability has been resolved: spi: imx: Don't skip cleanup in     remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma     resources are not released in the error path. this is never retried later and so this is a permanent leak.
    To fix this, only skip hardware disabling if waking the device fails. (CVE-2023-53225)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4606 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4606-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     May 29, 2026                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.257-1     CVE ID         : CVE-2024-56584 CVE-2025-39748 CVE-2025-39764 CVE-2025-40219                      CVE-2025-40261 CVE-2025-68206 CVE-2025-71274 CVE-2025-71292                      CVE-2025-71304 CVE-2026-23100 CVE-2026-23112 CVE-2026-23227                      CVE-2026-23242 CVE-2026-23243 CVE-2026-23245 CVE-2026-23253                      CVE-2026-23273 CVE-2026-23274 CVE-2026-23277 CVE-2026-23279                      CVE-2026-23281 CVE-2026-23286 CVE-2026-23289 CVE-2026-23290                      CVE-2026-23291 CVE-2026-23293 CVE-2026-23298 CVE-2026-23300                      CVE-2026-23303 CVE-2026-23304 CVE-2026-23307 CVE-2026-23312                      CVE-2026-23318 CVE-2026-23336 CVE-2026-23339 CVE-2026-23351                      CVE-2026-23352 CVE-2026-23356 CVE-2026-23357 CVE-2026-23362                      CVE-2026-23365 CVE-2026-23367 CVE-2026-23368 CVE-2026-23372                      CVE-2026-23379 CVE-2026-23381 CVE-2026-23382 CVE-2026-23388                      CVE-2026-23391 CVE-2026-23395 CVE-2026-23396 CVE-2026-23397                      CVE-2026-23398 CVE-2026-23420 CVE-2026-23434 CVE-2026-23439                      CVE-2026-23446 CVE-2026-23452 CVE-2026-23455 CVE-2026-23456                      CVE-2026-23457 CVE-2026-23458 CVE-2026-23460 CVE-2026-23462                      CVE-2026-23463 CVE-2026-23474 CVE-2026-31391 CVE-2026-31393                      CVE-2026-31396 CVE-2026-31399 CVE-2026-31400 CVE-2026-31402                      CVE-2026-31403 CVE-2026-31405 CVE-2026-31411 CVE-2026-31415                      CVE-2026-31416 CVE-2026-31417 CVE-2026-31418 CVE-2026-31421                      CVE-2026-31422 CVE-2026-31423 CVE-2026-31424 CVE-2026-31425                      CVE-2026-31427 CVE-2026-31428 CVE-2026-31447 CVE-2026-31450                      CVE-2026-31452 CVE-2026-31454 CVE-2026-31455 CVE-2026-31466                      CVE-2026-31469 CVE-2026-31473 CVE-2026-31485 CVE-2026-31494                      CVE-2026-31495 CVE-2026-31497 CVE-2026-31498 CVE-2026-31504                      CVE-2026-31507 CVE-2026-31508 CVE-2026-31509 CVE-2026-31510                      CVE-2026-31512 CVE-2026-31515 CVE-2026-31518 CVE-2026-31523                      CVE-2026-31524 CVE-2026-31545 CVE-2026-31546 CVE-2026-31550                      CVE-2026-31552 CVE-2026-31555 CVE-2026-31570 CVE-2026-31628                      CVE-2026-31649 CVE-2026-31651 CVE-2026-31658 CVE-2026-31659                      CVE-2026-31660 CVE-2026-31661 CVE-2026-31662 CVE-2026-31665                      CVE-2026-31667 CVE-2026-31668 CVE-2026-31670 CVE-2026-31671                      CVE-2026-31672 CVE-2026-31674 CVE-2026-31679 CVE-2026-31680                      CVE-2026-31682 CVE-2026-31683 CVE-2026-31720 CVE-2026-31721                      CVE-2026-31726 CVE-2026-31728 CVE-2026-31737 CVE-2026-31738                      CVE-2026-31747 CVE-2026-31748 CVE-2026-31749 CVE-2026-31751                      CVE-2026-31752 CVE-2026-31758 CVE-2026-31759 CVE-2026-31761                      CVE-2026-31762 CVE-2026-31763 CVE-2026-31770 CVE-2026-31773                      CVE-2026-31778 CVE-2026-31780 CVE-2026-31781 CVE-2026-31786                      CVE-2026-31787 CVE-2026-31788 CVE-2026-43011 CVE-2026-43014                      CVE-2026-43015 CVE-2026-43020 CVE-2026-43024 CVE-2026-43026                      CVE-2026-43027 CVE-2026-43028 CVE-2026-43030 CVE-2026-43032                      CVE-2026-43035 CVE-2026-43037 CVE-2026-43038 CVE-2026-43040                      CVE-2026-43041 CVE-2026-43043 CVE-2026-43047 CVE-2026-43050                      CVE-2026-43051 CVE-2026-43060 CVE-2026-43061 CVE-2026-43062                      CVE-2026-43066 CVE-2026-43068 CVE-2026-43069 CVE-2026-43077                      CVE-2026-43078 CVE-2026-43124 CVE-2026-43130 CVE-2026-43132                      CVE-2026-43134 CVE-2026-43135 CVE-2026-43136 CVE-2026-43139                      CVE-2026-43140 CVE-2026-43141 CVE-2026-43147 CVE-2026-43149                      CVE-2026-43152 CVE-2026-43156 CVE-2026-43158 CVE-2026-43159                      CVE-2026-43163 CVE-2026-43168 CVE-2026-43171 CVE-2026-43180                      CVE-2026-43183 CVE-2026-43184 CVE-2026-43187 CVE-2026-43190                      CVE-2026-43194 CVE-2026-43196 CVE-2026-43202 CVE-2026-43203                      CVE-2026-43206 CVE-2026-43207 CVE-2026-43209 CVE-2026-43211                      CVE-2026-43218 CVE-2026-43223 CVE-2026-43226 CVE-2026-43227                      CVE-2026-43230 CVE-2026-43231 CVE-2026-43232 CVE-2026-43233                      CVE-2026-43236 CVE-2026-43241 CVE-2026-43242 CVE-2026-43246                      CVE-2026-43251 CVE-2026-43255 CVE-2026-43257 CVE-2026-43261                      CVE-2026-43264 CVE-2026-43266 CVE-2026-43268 CVE-2026-43269                      CVE-2026-43270 CVE-2026-43273 CVE-2026-43277 CVE-2026-43283                      CVE-2026-43287 CVE-2026-43289 CVE-2026-43295 CVE-2026-43296                      CVE-2026-43314 CVE-2026-43316 CVE-2026-43327 CVE-2026-43328                      CVE-2026-43334 CVE-2026-43336 CVE-2026-43339 CVE-2026-43340                      CVE-2026-43342 CVE-2026-43343 CVE-2026-43355 CVE-2026-43357                      CVE-2026-43363 CVE-2026-43370 CVE-2026-43373 CVE-2026-43381                      CVE-2026-43382 CVE-2026-43383 CVE-2026-43386 CVE-2026-43387                      CVE-2026-43407 CVE-2026-43411 CVE-2026-43420 CVE-2026-43424                      CVE-2026-43425 CVE-2026-43426 CVE-2026-43427 CVE-2026-43428                      CVE-2026-43429 CVE-2026-43430 CVE-2026-43432 CVE-2026-43437                      CVE-2026-43439 CVE-2026-43445 CVE-2026-43449 CVE-2026-43450                      CVE-2026-43451 CVE-2026-43452 CVE-2026-43453 CVE-2026-43458                      CVE-2026-43459 CVE-2026-43466 CVE-2026-43472 CVE-2026-43475                      CVE-2026-43480 CVE-2026-43503 CVE-2026-45848 CVE-2026-45852                      CVE-2026-45856 CVE-2026-45857 CVE-2026-45860 CVE-2026-45862                      CVE-2026-45866 CVE-2026-45867 CVE-2026-45868 CVE-2026-45869                      CVE-2026-45870 CVE-2026-45871 CVE-2026-45873 CVE-2026-45875                      CVE-2026-45879 CVE-2026-45883 CVE-2026-45885 CVE-2026-45890                      CVE-2026-45899 CVE-2026-45904 CVE-2026-45912 CVE-2026-45914                      CVE-2026-45915 CVE-2026-45916 CVE-2026-45919 CVE-2026-45920                      CVE-2026-45923 CVE-2026-45936 CVE-2026-45941 CVE-2026-45948                      CVE-2026-45954 CVE-2026-45956 CVE-2026-45958 CVE-2026-45960                      CVE-2026-45964 CVE-2026-45965 CVE-2026-45968 CVE-2026-45970                      CVE-2026-45974 CVE-2026-45978 CVE-2026-45981 CVE-2026-45983                      CVE-2026-45984 CVE-2026-45985 CVE-2026-46028 CVE-2026-46174                      CVE-2026-46300

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.257-1.  This version additionally includes many more bug fixes     from stable updates 5.10.252-5.10.257.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
233614	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1334)	Nessus	Huawei Local Security Checks	4/1/2025	9/25/2025	high
234145	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1360)	Nessus	Huawei Local Security Checks	4/11/2025	9/25/2025	high
237257	Ubuntu 24.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-7524-1)	Nessus	Ubuntu Local Security Checks	5/26/2025	1/6/2026	high
214901	SUSE SLES15: kernel-coco / kernel-coco-devel / kernel-coco_debug / etc (SUSE-SU-2025:0289-1)	Nessus	SuSE Local Security Checks	2/3/2025	6/26/2026	high
216191	SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2025:0428-1)	Nessus	SuSE Local Security Checks	2/12/2025	6/26/2026	high
214382	Photon OS 5.0: Linux PHSA-2025-5.0-0449	Nessus	PhotonOS Local Security Checks	1/18/2025	10/14/2026	high
310098	Photon OS 4.0: Linux PHSA-2026-4.0-1002	Nessus	PhotonOS Local Security Checks	4/24/2026	6/13/2026	high
340682	Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8668-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/24/2026	high
351722	AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1780052998)	Nessus	Alma Linux Local Security Checks	9/30/2026	10/5/2026	high
318288	Debian dla-4606 : ata-modules-5.10.0-43-armmp-di - security update	Nessus	Debian Local Security Checks	6/3/2026	9/18/2026	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

critical