The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7453-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Compressed RAM block device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - EDAC drivers;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - PCI subsystem;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Voltage and Current Regulator drivers;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Media staging drivers;

    - TCM subsystem;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - EROFS file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - DRM display driver;

    - BPF subsystem;

    - StackDepot library;

    - Bluetooth subsystem;

    - IP tunnels definitions;

    - Netfilter;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - DMA mapping infrastructure;

    - Kernel fork() syscall;

    - KCSAN framework;

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Task handling mechanism;

    - Timer subsystem;

    - KUnit library;

    - Memory management;

    - 9P file system network protocol;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Ethtool driver;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Packet sockets;

    - RxRPC session sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2024-53187, CVE-2024-50268, CVE-2024-53161, CVE-2024-56721, CVE-2024-53059,     CVE-2024-53217, CVE-2022-49034, CVE-2024-53061, CVE-2024-50284, CVE-2024-50167, CVE-2024-53221,     CVE-2024-56773, CVE-2024-53051, CVE-2024-50263, CVE-2024-56631, CVE-2024-53106, CVE-2024-50051,     CVE-2024-50164, CVE-2024-56533, CVE-2024-53218, CVE-2024-56678, CVE-2024-56692, CVE-2024-50155,     CVE-2025-21702, CVE-2024-53100, CVE-2024-50208, CVE-2024-56707, CVE-2024-56781, CVE-2024-48873,     CVE-2024-50159, CVE-2024-50138, CVE-2024-50291, CVE-2024-53091, CVE-2024-56708, CVE-2024-50142,     CVE-2024-50105, CVE-2024-50299, CVE-2024-50203, CVE-2024-53210, CVE-2024-56625, CVE-2024-53147,     CVE-2024-50226, CVE-2024-50294, CVE-2024-50128, CVE-2024-53060, CVE-2024-56776, CVE-2024-56586,     CVE-2024-56569, CVE-2024-53214, CVE-2024-53172, CVE-2024-48881, CVE-2024-53119, CVE-2024-50121,     CVE-2024-53195, CVE-2024-56703, CVE-2024-56572, CVE-2024-50225, CVE-2024-50133, CVE-2024-50280,     CVE-2024-53190, CVE-2024-56685, CVE-2024-53067, CVE-2024-56538, CVE-2024-53200, CVE-2024-56694,     CVE-2024-53173, CVE-2024-53118, CVE-2024-53047, CVE-2024-50103, CVE-2024-56638, CVE-2024-50257,     CVE-2024-53171, CVE-2024-57874, CVE-2024-56626, CVE-2024-56611, CVE-2024-56642, CVE-2024-56636,     CVE-2025-21756, CVE-2024-53188, CVE-2024-56633, CVE-2024-53181, CVE-2024-50218, CVE-2024-56771,     CVE-2024-56778, CVE-2024-56568, CVE-2024-56720, CVE-2024-50249, CVE-2024-53175, CVE-2024-53160,     CVE-2024-53093, CVE-2024-56754, CVE-2024-53084, CVE-2024-53215, CVE-2024-47794, CVE-2024-50287,     CVE-2024-49899, CVE-2024-56651, CVE-2024-53191, CVE-2024-56744, CVE-2024-50158, CVE-2024-56619,     CVE-2024-53162, CVE-2024-53208, CVE-2024-56729, CVE-2024-56545, CVE-2024-56605, CVE-2024-48876,     CVE-2024-50290, CVE-2024-53154, CVE-2024-56620, CVE-2025-21700, CVE-2024-53148, CVE-2024-50156,     CVE-2024-53138, CVE-2024-50269, CVE-2024-50141, CVE-2024-56551, CVE-2024-50221, CVE-2024-50288,     CVE-2024-56546, CVE-2024-50209, CVE-2024-53234, CVE-2024-50232, CVE-2024-53086, CVE-2024-53232,     CVE-2024-50112, CVE-2024-57838, CVE-2024-53220, CVE-2024-53121, CVE-2024-53142, CVE-2024-56610,     CVE-2024-57872, CVE-2024-50160, CVE-2024-50010, CVE-2024-56690, CVE-2024-53128, CVE-2024-56650,     CVE-2024-53158, CVE-2024-57850, CVE-2024-53088, CVE-2024-56629, CVE-2024-50239, CVE-2024-50145,     CVE-2024-56724, CVE-2024-56566, CVE-2024-50303, CVE-2024-53053, CVE-2024-56539, CVE-2024-50153,     CVE-2024-50242, CVE-2024-53055, CVE-2024-53127, CVE-2024-56751, CVE-2024-56588, CVE-2024-56691,     CVE-2024-53180, CVE-2024-53076, CVE-2024-53072, CVE-2024-53196, CVE-2024-56679, CVE-2024-53042,     CVE-2024-56777, CVE-2024-42122, CVE-2024-50244, CVE-2024-50169, CVE-2024-50205, CVE-2024-53110,     CVE-2024-53157, CVE-2024-50295, CVE-2024-53680, CVE-2024-56613, CVE-2024-53194, CVE-2024-56779,     CVE-2024-56597, CVE-2024-50130, CVE-2024-53083, CVE-2024-50246, CVE-2024-53131, CVE-2024-53107,     CVE-2024-56756, CVE-2024-56727, CVE-2024-50162, CVE-2024-50273, CVE-2024-56726, CVE-2024-50255,     CVE-2024-53185, CVE-2024-50137, CVE-2024-41932, CVE-2024-56787, CVE-2024-56765, CVE-2024-56601,     CVE-2024-56698, CVE-2024-56558, CVE-2024-57876, CVE-2024-56581, CVE-2024-53202, CVE-2024-50236,     CVE-2024-56681, CVE-2024-50297, CVE-2024-53203, CVE-2024-53081, CVE-2024-53155, CVE-2024-50275,     CVE-2024-56630, CVE-2024-50166, CVE-2024-57843, CVE-2024-56677, CVE-2024-53094, CVE-2024-53048,     CVE-2024-50125, CVE-2024-50216, CVE-2024-56774, CVE-2024-44955, CVE-2024-56748, CVE-2024-50223,     CVE-2024-53087, CVE-2024-56775, CVE-2024-50298, CVE-2024-56627, CVE-2024-50139, CVE-2024-53134,     CVE-2024-53224, CVE-2024-53150, CVE-2024-56704, CVE-2024-53198, CVE-2024-53111, CVE-2024-50251,     CVE-2024-53082, CVE-2024-56785, CVE-2024-56647, CVE-2024-50282, CVE-2024-53058, CVE-2024-56637,     CVE-2024-50283, CVE-2024-50135, CVE-2024-56622, CVE-2024-50301, CVE-2024-50147, CVE-2024-50252,     CVE-2024-56567, CVE-2024-50230, CVE-2024-53105, CVE-2024-56574, CVE-2024-56589, CVE-2024-56543,     CVE-2024-50267, CVE-2024-53163, CVE-2024-53123, CVE-2024-50248, CVE-2024-53219, CVE-2024-50238,     CVE-2024-50296, CVE-2024-56593, CVE-2024-56645, CVE-2024-50270, CVE-2024-56780, CVE-2024-56576,     CVE-2024-53114, CVE-2024-53089, CVE-2024-56644, CVE-2024-56739, CVE-2024-53184, CVE-2024-56700,     CVE-2024-56786, CVE-2024-43098, CVE-2024-50115, CVE-2024-53201, CVE-2024-50220, CVE-2024-53226,     CVE-2024-53222, CVE-2024-53133, CVE-2024-50222, CVE-2024-56640, CVE-2024-50206, CVE-2024-53229,     CVE-2024-41014, CVE-2024-50272, CVE-2024-56641, CVE-2024-53237, CVE-2024-50207, CVE-2024-53168,     CVE-2024-56592, CVE-2024-53090, CVE-2024-56782, CVE-2024-53043, CVE-2024-50289, CVE-2024-56687,     CVE-2024-56755, CVE-2024-50111, CVE-2024-57849, CVE-2024-53231, CVE-2024-56550, CVE-2024-50247,     CVE-2024-53085, CVE-2024-56745, CVE-2024-56600, CVE-2024-56596, CVE-2024-50150, CVE-2024-56623,     CVE-2024-53108, CVE-2024-56579, CVE-2024-50151, CVE-2024-56548, CVE-2024-56565, CVE-2024-50110,     CVE-2024-47141, CVE-2024-41935, CVE-2024-50274, CVE-2024-56603, CVE-2024-53197, CVE-2024-56688,     CVE-2024-56577, CVE-2024-53174, CVE-2024-56723, CVE-2024-56616, CVE-2024-56573, CVE-2024-53044,     CVE-2024-53109, CVE-2024-52332, CVE-2024-53079, CVE-2024-50131, CVE-2024-53068, CVE-2024-50163,     CVE-2024-56772, CVE-2024-56634, CVE-2024-53095, CVE-2024-50215, CVE-2024-50243, CVE-2024-50265,     CVE-2024-56540, CVE-2024-53045, CVE-2024-56562, CVE-2024-53135, CVE-2024-56689, CVE-2024-56570,     CVE-2024-53066, CVE-2024-53145, CVE-2024-56580, CVE-2024-53101, CVE-2024-53177, CVE-2024-53183,     CVE-2024-53115, CVE-2024-56722, CVE-2025-21993, CVE-2024-49569, CVE-2025-21831, CVE-2024-50279,     CVE-2024-53052, CVE-2024-53113, CVE-2024-50292, CVE-2024-50224, CVE-2024-50259, CVE-2024-56615,     CVE-2024-56649, CVE-2024-53169, CVE-2024-56635, CVE-2024-50261, CVE-2024-50172, CVE-2024-53228,     CVE-2024-53166, CVE-2024-50140, CVE-2024-50170, CVE-2024-56587, CVE-2024-56607, CVE-2024-56575,     CVE-2024-53099, CVE-2024-49906, CVE-2024-50234, CVE-2024-56531, CVE-2024-50127, CVE-2024-56608,     CVE-2024-56583, CVE-2024-56648, CVE-2024-48875, CVE-2024-50152, CVE-2024-53062, CVE-2024-53176,     CVE-2024-50250, CVE-2024-53233, CVE-2024-56578, CVE-2024-53112, CVE-2024-53146, CVE-2024-56590,     CVE-2024-56584, CVE-2024-50211, CVE-2024-50116, CVE-2024-50124, CVE-2024-50067, CVE-2024-53050,     CVE-2024-45828, CVE-2024-47809, CVE-2024-50276, CVE-2024-56557, CVE-2024-50304, CVE-2024-56742,     CVE-2024-50108, CVE-2024-53122, CVE-2024-56602, CVE-2024-50235, CVE-2024-50278, CVE-2024-56561,     CVE-2024-56632, CVE-2025-21701, CVE-2024-56752, CVE-2024-50262, CVE-2024-56621, CVE-2024-53129,     CVE-2024-50285, CVE-2024-56643, CVE-2024-53227, CVE-2024-50258, CVE-2024-53139, CVE-2024-53209,     CVE-2024-56701, CVE-2024-56594, CVE-2024-53223, CVE-2024-50136, CVE-2024-50256, CVE-2024-53178,     CVE-2024-53236, CVE-2024-56549, CVE-2024-56683, CVE-2024-53126, CVE-2024-53120, CVE-2024-53117,     CVE-2024-50104, CVE-2024-50146, CVE-2024-53239, CVE-2024-56599, CVE-2024-50210, CVE-2024-56609,     CVE-2024-50245, CVE-2024-56705, CVE-2024-56604, CVE-2024-50118, CVE-2024-56783, CVE-2024-50271,     CVE-2024-53151, CVE-2024-56728, CVE-2024-56746, CVE-2024-53213, CVE-2024-50231, CVE-2024-56532,     CVE-2024-53130, CVE-2024-50143, CVE-2024-50286, CVE-2024-53230, CVE-2024-53096, CVE-2024-50154,     CVE-2024-50237, CVE-2024-50240, CVE-2024-56725, CVE-2024-56693, CVE-2024-56606, CVE-2024-50126,     CVE-2024-56747, CVE-2024-50107, CVE-2024-50300, CVE-2024-47143, CVE-2024-53046, CVE-2024-50120)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4193 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4193-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     May 30, 2025                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.137-1~deb11u1     CVE ID         : CVE-2023-52857 CVE-2023-52927 CVE-2023-53034 CVE-2024-24855                      CVE-2024-26656 CVE-2024-26739 CVE-2024-26767 CVE-2024-26982                      CVE-2024-27056 CVE-2024-35866 CVE-2024-36908 CVE-2024-38541                      CVE-2024-38611 CVE-2024-40973 CVE-2024-42129 CVE-2024-43831                      CVE-2024-46733 CVE-2024-46742 CVE-2024-46753 CVE-2024-46772                      CVE-2024-46774 CVE-2024-46816 CVE-2024-46823 CVE-2024-47753                      CVE-2024-47754 CVE-2024-50056 CVE-2024-50063 CVE-2024-50246                      CVE-2024-53166 CVE-2024-56609 CVE-2024-57977 CVE-2024-58002                      CVE-2024-58005 CVE-2024-58079 CVE-2024-58090 CVE-2025-21702                      CVE-2025-21712 CVE-2025-21721 CVE-2025-21756 CVE-2025-21838                      CVE-2025-21844 CVE-2025-21846 CVE-2025-21848 CVE-2025-21853                      CVE-2025-21855 CVE-2025-21858 CVE-2025-21859 CVE-2025-21862                      CVE-2025-21864 CVE-2025-21865 CVE-2025-21866 CVE-2025-21867                      CVE-2025-21871 CVE-2025-21875 CVE-2025-21877 CVE-2025-21878                      CVE-2025-21881 CVE-2025-21887 CVE-2025-21891 CVE-2025-21898                      CVE-2025-21899 CVE-2025-21904 CVE-2025-21905 CVE-2025-21909                      CVE-2025-21910 CVE-2025-21912 CVE-2025-21913 CVE-2025-21914                      CVE-2025-21916 CVE-2025-21917 CVE-2025-21918 CVE-2025-21919                      CVE-2025-21920 CVE-2025-21922 CVE-2025-21924 CVE-2025-21925                      CVE-2025-21926 CVE-2025-21928 CVE-2025-21934 CVE-2025-21935                      CVE-2025-21936 CVE-2025-21937 CVE-2025-21938 CVE-2025-21941                      CVE-2025-21943 CVE-2025-21944 CVE-2025-21945 CVE-2025-21947                      CVE-2025-21948 CVE-2025-21950 CVE-2025-21951 CVE-2025-21956                      CVE-2025-21957 CVE-2025-21959 CVE-2025-21960 CVE-2025-21962                      CVE-2025-21963 CVE-2025-21964 CVE-2025-21968 CVE-2025-21970                      CVE-2025-21971 CVE-2025-21975 CVE-2025-21978 CVE-2025-21979                      CVE-2025-21980 CVE-2025-21981 CVE-2025-21986 CVE-2025-21991                      CVE-2025-21992 CVE-2025-21993 CVE-2025-21994 CVE-2025-21996                      CVE-2025-21997 CVE-2025-21999 CVE-2025-22004 CVE-2025-22005                      CVE-2025-22007 CVE-2025-22008 CVE-2025-22010 CVE-2025-22014                      CVE-2025-22015 CVE-2025-22018 CVE-2025-22020 CVE-2025-22021                      CVE-2025-22025 CVE-2025-22027 CVE-2025-22033 CVE-2025-22035                      CVE-2025-22038 CVE-2025-22040 CVE-2025-22041 CVE-2025-22042                      CVE-2025-22044 CVE-2025-22045 CVE-2025-22049 CVE-2025-22050                      CVE-2025-22054 CVE-2025-22055 CVE-2025-22056 CVE-2025-22058                      CVE-2025-22060 CVE-2025-22063 CVE-2025-22066 CVE-2025-22071                      CVE-2025-22072 CVE-2025-22073 CVE-2025-22075 CVE-2025-22079                      CVE-2025-22081 CVE-2025-22086 CVE-2025-22088 CVE-2025-22089                      CVE-2025-22093 CVE-2025-22095 CVE-2025-22097 CVE-2025-22126                      CVE-2025-23136 CVE-2025-23138 CVE-2025-23140 CVE-2025-23141                      CVE-2025-23142 CVE-2025-23144 CVE-2025-23145 CVE-2025-23146                      CVE-2025-23147 CVE-2025-23148 CVE-2025-23150 CVE-2025-23151                      CVE-2025-23156 CVE-2025-23157 CVE-2025-23158 CVE-2025-23159                      CVE-2025-23161 CVE-2025-23163 CVE-2025-37738 CVE-2025-37739                      CVE-2025-37740 CVE-2025-37741 CVE-2025-37742 CVE-2025-37748                      CVE-2025-37749 CVE-2025-37752 CVE-2025-37756 CVE-2025-37757                      CVE-2025-37758 CVE-2025-37765 CVE-2025-37766 CVE-2025-37767                      CVE-2025-37768 CVE-2025-37769 CVE-2025-37770 CVE-2025-37771                      CVE-2025-37772 CVE-2025-37773 CVE-2025-37775 CVE-2025-37778                      CVE-2025-37780 CVE-2025-37781 CVE-2025-37782 CVE-2025-37785                      CVE-2025-37787 CVE-2025-37788 CVE-2025-37789 CVE-2025-37790                      CVE-2025-37792 CVE-2025-37794 CVE-2025-37796 CVE-2025-37797                      CVE-2025-37798 CVE-2025-37801 CVE-2025-37803 CVE-2025-37805                      CVE-2025-37808 CVE-2025-37810 CVE-2025-37811 CVE-2025-37812                      CVE-2025-37815 CVE-2025-37817 CVE-2025-37818 CVE-2025-37820                      CVE-2025-37823 CVE-2025-37824 CVE-2025-37829 CVE-2025-37830                      CVE-2025-37836 CVE-2025-37838 CVE-2025-37839 CVE-2025-37840                      CVE-2025-37841 CVE-2025-37844 CVE-2025-37849 CVE-2025-37850                      CVE-2025-37851 CVE-2025-37852 CVE-2025-37854 CVE-2025-37857                      CVE-2025-37858 CVE-2025-37859 CVE-2025-37862 CVE-2025-37865                      CVE-2025-37867 CVE-2025-37871 CVE-2025-37875 CVE-2025-37879                      CVE-2025-37881 CVE-2025-37883 CVE-2025-37884 CVE-2025-37885                      CVE-2025-37889 CVE-2025-37892 CVE-2025-37937 CVE-2025-37938                      CVE-2025-37940 CVE-2025-37979 CVE-2025-37982 CVE-2025-37983                      CVE-2025-37985 CVE-2025-37989 CVE-2025-38152 CVE-2025-38575                      CVE-2025-38637 CVE-2025-39728 CVE-2025-39735     Debian Bug     : 1050352 1086175 1088682 1100746 1100928 1103277

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.137-1~deb11u1.  This additionally includes many more bug fixes     from stable updates 6.1.130-6.1.137 and an update of the Microsoft     Azure Network Adapter (mana) driver.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01972-1 advisory.

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
    - CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
    - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
    - CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
    - CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
    - CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
    - CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
    - CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
    - CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
    - CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
    - CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
    - CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
    - CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
    - CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
    - CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
    - CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
    - CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
    - CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
    - CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
    - CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
    - CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
    - CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
    - CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
    - CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
    - CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
    - CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
    - CVE-2025-22094: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (bsc#1241512).
    - CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
    - CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
    - CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
    - CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()     (bsc#1241575).
    - CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error     (bsc#1242763).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
    - CVE-2025-23154: io_uring/net: fix io_req_post_cqe abuse by send bundle (bsc#1242533).
    - CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW     initialization (bsc#1242507).
    - CVE-2025-37747: kABI workaround for perf-Fix-hang-while-freeing-sigtrap-event (References: bsc#1242520).
    - CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
    - CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
    - CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
    - CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
    - CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
    - CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
    - CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered     (bsc#1242585).
    - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
    - CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
    - CVE-2025-37798: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1242414).
    - CVE-2025-37799: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283).
    - CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
    - CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
    - CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
    - CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
    - CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
    - CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
    - CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
    - CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
    - CVE-2025-37842: spi: fsl-qspi: Fix double cleanup in probe error path (bsc#1242951).
    - CVE-2025-37870: drm/amd/display: prevent hang on link training fail (bsc#1243056).
    - CVE-2025-37879: 9p/net: fix improper handling of bogus negative read/write replies (bsc#1243077).
    - CVE-2025-37886: pds_core: make wait_context part of q_info (bsc#1242944).
    - CVE-2025-37887: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (bsc#1242962).
    - CVE-2025-37949: xenbus: Use kref to track req lifetime (bsc#1243541).
    - CVE-2025-37957: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (bsc#1243513).
    - CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
    - CVE-2025-37960: memblock: Accept allocated memory before use in memblock_double_array() (bsc#1243519).
    - CVE-2025-37974: s390/pci: Fix missing check for zpci_create_device() error return (bsc#1243547).
    - CVE-2025-38152: remoteproc: core: Clear table_sz when rproc_shutdown (bsc#1241627).
    - CVE-2025-38637: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02537-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
    - CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361     bsc#1226552).
    - CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
    - CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
    - CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain     (bsc#1222634).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
    - CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
    - CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
    - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
    - CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
    - CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
    - CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses     (bsc#1242782).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1243330).
    - CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
    - CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
    - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7455-1 advisory.

    Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an     out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system     crash) or escalate their privileges. (CVE-2022-0995)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Network drivers;

    - File systems infrastructure;

    - NTFS3 file system;

    - Ethernet bridge;

    - Ethtool driver;

    - IPv6 networking;

    - Network traffic control;

    - VMware vSockets driver; (CVE-2025-21703, CVE-2024-56651, CVE-2024-50248, CVE-2025-21701, CVE-2024-26837,     CVE-2024-46826, CVE-2025-21993, CVE-2025-21702, CVE-2024-50256, CVE-2025-21756, CVE-2025-21700)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20095 advisory.

    * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)     (CVE-2024-53241)

    * kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)

    * kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)

    * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

    * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

    * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

    * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY     (CVE-2024-56690)

    * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

    * kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

    * kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

    * kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)

    * kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)

    * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

    * kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)

    * kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)

    * kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)

    * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

    * kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)

    * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

    * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

    * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

    * kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

    * kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)

    * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)

    * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)

    * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)

    * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)

    * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)

    * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)

    * kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)

    * kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)

    * kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)

    * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)

    * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)

    * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)

    * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

    * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)

    * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)

    * kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)

    * kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)

    * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)

    * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections     (CVE-2024-57986)

    * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)

    * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

    * kernel: HID: multitouch: Add NULL check in mt_input_configured (CVE-2024-58020)

    * kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition (CVE-2024-57984)

    * kernel: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)

    * kernel: sched_ext: Fix incorrect autogroup migration detection (CVE-2025-21771)

    * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)

    * kernel: memcg: fix soft lockup in the OOM process (CVE-2024-57977)

    * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)

    * kernel: usbnet: ipheth: fix DPE OoB read (CVE-2025-21741)

    * kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)

    * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)

    * kernel: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (CVE-2024-58006)

    * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)

    * kernel: wifi: brcmfmac: Check the return value of of_property_read_string_index() (CVE-2025-21750)

    * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)

    * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)

    * kernel: wifi: mac80211: prohibit deactivating all links (CVE-2024-58061)

    * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)

    * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)

    * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)

    * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)

    * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)

    * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)

    * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)

    * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)

    * kernel: net/sched: cls_api: fix error handling causing NULL dereference (CVE-2025-21857)

    * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)

    * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)

    * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)

    * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)

    * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)

    * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)

    * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)

    * kernel: acct: perform last write from workqueue (CVE-2025-21846)

    * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()     (CVE-2025-21861)

    * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)

    * kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer (CVE-2025-21976)

    * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)

    * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)

    * microcode_ctl: From CVEorg collector (CVE-2024-28956)

    * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)

    * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)

    * kernel: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (CVE-2025-38412)

    * kernel: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using     (CVE-2025-38369)

    * kernel: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CVE-2025-38468)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
234782	Ubuntu 24.04 LTS : Linux kernel (Real-time) vulnerabilities (USN-7453-1)	Nessus	Ubuntu Local Security Checks	4/23/2025	1/6/2026	high
237504	Debian dla-4193 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	5/29/2025	9/24/2025	high
240815	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:01972-1)	Nessus	SuSE Local Security Checks	6/27/2025	9/24/2025	medium
242951	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:02537-1)	Nessus	SuSE Local Security Checks	7/29/2025	9/24/2025	high
234813	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7455-1)	Nessus	Ubuntu Local Security Checks	4/24/2025	6/3/2026	high
240769	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:01919-1)	Nessus	SuSE Local Security Checks	6/27/2025	9/24/2025	medium
277182	RockyLinux 10 : kernel (RLSA-2025:20095)	Nessus	Rocky Linux Local Security Checks	12/3/2025	12/4/2025	medium

Detections

Analytics

Plugins Search

high

high

medium

high

high

medium

medium