According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    net: netpoll: fix incorrect refcount handling causing incorrect cleanup(CVE-2025-68245)

    ftrace: Fix softlockup in ftrace_module_enable(CVE-2025-68173)

    ima: Handle error code returned by ima_filter_rule_match()(CVE-2025-68740)

    netfilter: nft_ct: add seqadj extension for natted connections(CVE-2025-68206)

    tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()(CVE-2025-68188)

    page_pool: always add GFP_NOWARN for ATOMIC allocations(CVE-2025-68321)

    net: bridge: fix use-after-free due to MST port state bypass(CVE-2025-40297)

    net/mlx5: Clean up only new IRQ glue on request_irq() failure(CVE-2025-40250)

    net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()(CVE-2025-40252)

    KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced(CVE-2025-68259)

    crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id(CVE-2025-68724)

    xfrm: delete x-tunnel as we delete x(CVE-2025-40215)

    erofs: avoid infinite loops due to corrupted subpage compact indexes(CVE-2025-68251)

    ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr(CVE-2025-68183)

    bonding: provide a net pointer to __skb_flow_dissect()(CVE-2026-23119)

    KVM: Don't clobber irqfd routing type when deassigning irqfd(CVE-2026-23198)

    NFS: Fix a deadlock involving nfs_release_folio()(CVE-2026-23053)

    btrfs: don't log conflicting inode if it's a dir moved in the current transaction(CVE-2025-68778)

    tracing: Fix crash on synthetic stacktrace field usage(CVE-2026-23088)

    crypto: aead - Fix reqsize handling(CVE-2025-68726)

    fs/xattr: missing fdput() in fremovexattr error path(CVE-2024-14027)

    uacce: ensure safe queue release with state management(CVE-2026-23063)

    netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()(CVE-2026-23111)

    l2tp: avoid one data-race in l2tp_tunnel_del_work()(CVE-2026-23120)

    net: fix segmentation of forwarding fraglist GRO(CVE-2026-23154)

    netfilter: nf_conncount: update last_gc only when GC has been performed(CVE-2026-23139)

    ipv6: annotate data-race in ndisc_router_discovery()(CVE-2026-23124)

    ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF(CVE-2026-23200)

    uacce: fix isolate sysfs check condition(CVE-2026-23094)

    regmap: Fix race condition in hwspinlock irqsave routine(CVE-2026-23071)

    nvme-fc: use lock accessing port_state and rport state(CVE-2025-40342)

    SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf(CVE-2025-71120)

    nvmet-fc: avoid scheduling association deletion twice(CVE-2025-40343)

    smb: client: fix potential UAF in smb2_close_cached_fid()(CVE-2025-40328)

    tracing: Do not register unsupported perf events(CVE-2025-71125)

    drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb(CVE-2025-40329)

    cifs: client: fix memory leak in smb3_fs_context_parse_param(CVE-2025-40268)

    nvme-multipath: fix lockdep WARN due to partition scan work(CVE-2025-68218)

    bpf: Do not let BPF test infra emit invalid GSO types to stack(CVE-2025-68725)

    bpf: Check skb-transport_header is set in bpf_skb_check_mtu(CVE-2025-68363)

    binfmt_misc: restore write access before closing files opened by open_exec()(CVE-2025-68239)

    fbcon: Set fb_display[i]-mode to NULL when the mode is released(CVE-2025-40323)

    usb: gadget: udc: fix use-after-free in usb_gadget_state_work(CVE-2025-68282)

    drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE(CVE-2025-40277)

    ipv4: Fix reference count leak when using error routes with nexthop objects(CVE-2025-71097)

    futex: Don't leak robust_list pointer on exec race(CVE-2025-40341)

    ksm: use range-walk function to jump over holes in scan_get_next_rmap_item(CVE-2025-68211)

    cifs: fix memory leak in smb3_fs_context_parse_param error path(CVE-2025-68219)

    e1000: fix OOB in e1000_tbi_should_accept()(CVE-2025-71093)

    net/mlx5: fw_tracer, Validate format string parameters(CVE-2025-68816)

    scsi: smartpqi: Fix device resources accessed after device removal(CVE-2025-68371)

    x86/CPU/AMD: Add RDSEED fix for Zen5(CVE-2025-68313)

    ipv6: Fix use-after-free in inet6_addr_del().(CVE-2026-23010)

    macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse(CVE-2025-68367)

    s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump(CVE-2025-68310)

    virtio-net: fix received length check in big packets(CVE-2025-40292)

    iavf: fix off-by-one issues in iavf_config_rss_reg()(CVE-2025-71087)

    vsock: Ignore signal/timeout on connect() if already established(CVE-2025-40248)

    scsi: qla2xxx: Clear cmds after chip reset(CVE-2025-68745)

    NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid(CVE-2025-68349)

    RDMA/cm: Fix leaking the multicast GID table reference(CVE-2025-71084)

    KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer(CVE-2025-71104)

    usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data     transfer(CVE-2025-68331)

    net: hns3: add VLAN id validation before using(CVE-2025-71112)

    media: imon: make send_packet() more robust(CVE-2025-68194)

    smb: client: fix memory leak in cifs_construct_tcon()(CVE-2025-68295)

    bpf: Fix stackmap overflow check in __bpf_get_stackid()(CVE-2025-68378)

    net: hns3: using the num_tqps in the vf driver to apply for resources(CVE-2025-71064)

    nvme: fix admin request_queue lifetime(CVE-2025-68265)

    net: openvswitch: fix middle attribute validation in push_nsh() action(CVE-2025-68785)

    net: fix memory leak in skb_segment_list for GRO packets(CVE-2026-22979)

    ipv4: ip_gre: make ipgre_header() robust(CVE-2026-23011)

    ip6_gre: make ip6gre_header() robust(CVE-2025-71098)

    ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()(CVE-2025-71085)

    svcrdma: bound check rq_pages index in inline path(CVE-2025-71068)

    inet: frags: flush pending skbs in fqdir_pre_exit()(CVE-2025-68768)

    ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()(CVE-2026-23003)

    net: sock: fix hardened usercopy panic in sock_recv_errqueue(CVE-2026-22977)

    HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()(CVE-2025-39808)

    ethtool: Avoid overflowing userspace buffer on stats query(CVE-2025-68795)

    can: j1939: make j1939_session_activate() fail if device is no longer registered(CVE-2025-71182)

    regulator: dummy: force synchronous probing(CVE-2025-22009)

    net/mlx5e: Fix crash on profile change rollback failure(CVE-2026-23000)

    net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv(CVE-2026-22996)

    driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()(CVE-2025-21810)

    crypto: aspeed - fix double free caused by devm(CVE-2025-68172)

    macvlan: fix possible UAF in macvlan_forward_source()(CVE-2026-23001)

    RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly(CVE-2025-71096)

    wifi: avoid kernel-infoleak from struct iw_point(CVE-2026-22978)

    crypto: seqiv - Do not use req-iv after crypto_aead_encrypt(CVE-2025-71131)

    bpf: Fix reference count leak in bpf_prog_test_run_xdp()(CVE-2026-22994)

    net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv(CVE-2026-23035)

    driver core: Fix a potential null-ptr-deref in module_add_driver()(CVE-2024-47688)

    crypto: af_alg - zero initialize memory allocated via sock_kmalloc(CVE-2025-71113)

    HID: multitouch: Add NULL check in mt_input_configured(CVE-2024-58020)

    net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second     rts(CVE-2026-22997)

    netfilter: nf_tables: avoid chain re-validation if possible(CVE-2025-71160)

    ipvs: fix ipv4 null-ptr-deref in route error path(CVE-2025-68813)

    bpf: Sync pending IRQ work before freeing ring buffer(CVE-2025-40319)

    scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()(CVE-2025-68229)

    net/handshake: duplicate handshake cancellations leak socket(CVE-2025-68775)

    PCI/AER: Fix NULL pointer access by aer_info(CVE-2025-68309)

    bpf: account for current allocated stack depth in widen_imprecise_scalars()(CVE-2025-68208)

    ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe(CVE-2025-68241)

    drm/sysfb: Do not dereference NULL pointer in plane reset(CVE-2025-40360)

    usb: storage: Fix memory leak in USB bulk transport(CVE-2025-68288)

    net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ(CVE-2025-40350)

    bpf: Free special fields when update [lru_,]percpu_hash maps(CVE-2025-68744)

    ipvlan: Make the addrs_lock be per port(CVE-2026-23103)

    usbnet: Prevents free active kevent(CVE-2025-68312)

    net/handshake: restore destructor on submit failure(CVE-2025-71148)

    x86/fpu: Ensure XFD state on signal delivery(CVE-2025-68171)

    devlink: rate: Unset parent pointer in devl_rate_nodes_destroy(CVE-2025-40251)

    md: fix rcu protection in md_wakeup_thread(CVE-2025-68374)

    vsock: fix lock inversion in vsock_assign_transport()(CVE-2025-40231)

    NFSD: free copynotify stateid in nfs4_free_ol_stateid()(CVE-2025-40273)

    net: ipv6: fix field-spanning memcpy warning in AH output(CVE-2025-40363)

    smb: client: fix potential cfid UAF in smb2_query_info_compound(CVE-2025-40320)

    iomap: adjust read range correctly for non-block-aligned positions(CVE-2025-68794)

    NFSD: NFSv4 file creation neglects setting ACL(CVE-2025-68803)

    mm, shmem: prevent infinite loop on truncate race(CVE-2026-23177)

    ALSA: usb-mixer: us16x08: validate meter packet indices(CVE-2025-68783)

    perf/x86/amd: Check event before enable to avoid GPF(CVE-2025-68798)

    mm/secretmem: fix use-after-free race in fault handler(CVE-2025-40272)

    usb: typec: ucsi: Handle incorrect num_connectors capability(CVE-2025-71108)

    mm/page_alloc: prevent pcp corruption with SMP=n(CVE-2026-23025)

    shmem: fix recovery on rename failures(CVE-2025-71072)

    x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1(CVE-2026-23005)

    leds: led-class: Only Add LED to leds_list when it is fully ready(CVE-2026-23101)

    scsi: qla2xxx: Fix bsg_done() causing double free(CVE-2025-71238)

    iommu: disable SVA when CONFIG_X86 is set(CVE-2025-71089)

    mm/shmem, swap: fix race of truncate and swap entry split(CVE-2026-23161)

    crypto: authencesn - reject too-short AAD (assoclen8) to match ESP/ESN spec(CVE-2026-23060)

    fsnotify: do not generate ACCESS/MODIFY events on child for special files(CVE-2025-68788)

    scsi: target: Reset t_task_cdb pointer in error case(CVE-2025-68782)

    drm/ttm: Avoid NULL pointer deref for evicted BOs(CVE-2025-71083)

    f2fs: fix to avoid potential deadlock(CVE-2025-71065)

    pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()(CVE-2026-23038)

    sched/deadline: only set free_cpus for online runqueues(CVE-2025-68780)

    iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED(CVE-2025-71122)

    ext4: xattr: fix null pointer deref in ext4_raw_inode()(CVE-2025-68820)

    flex_proportions: make fprop_new_period() hardirq safe(CVE-2026-23168)

    scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path'(CVE-2025-68818)

    Input: alps - fix use-after-free bugs caused by dev3_register_work(CVE-2025-68822)

    pNFS: Fix a deadlock when returning a delegation during open()(CVE-2026-23050)

    fuse: fix readahead reclaim deadlock(CVE-2025-68821)

    tpm: Cap the number of PCR banks(CVE-2025-71077)

    btrfs: always detect conflicting inodes when logging inode refs(CVE-2025-71183)

    ACPICA: Avoid walking the Namespace if start_node is NULL(CVE-2025-71118)

    io_uring/poll: correctly handle io_poll_add() return value on update(CVE-2025-71149)

    mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure(CVE-2026-23144)

    nfsd: provide locking for v4_end_grace(CVE-2026-22980)

    ext4: fix string copying in parse_apply_sb_mount_options()(CVE-2025-71123)

    powerpc/kexec: Enable SMT before waking offline CPUs(CVE-2025-71119)

    block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set-tag_list_lock(CVE-2025-68756)

    media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()(CVE-2025-68819)

    null_blk: fix kmemleak by releasing references to fault configfs items(CVE-2026-23032)

    via_wdt: fix critical boot hang due to unnamed resource allocation(CVE-2025-71114)

    f2fs: use global inline_xattr_slab instead of per-sb slab cache(CVE-2025-71105)

    crypto: virtio - Add spinlock protection with virtqueue notification(CVE-2026-23229)

    This vulnerability affects the function nvmet_tcp_handle_h2c_data_pdu.(CVE-2026-22998)

    arm64/fpsimd: signal: Fix restoration of SVE context(CVE-2026-23102)

    crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly(CVE-2026-23222)

    NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags(CVE-2025-68764)

    macvlan: fix error recovery in macvlan_common_newlink()(CVE-2026-23209)

    KEYS: trusted: Fix a memory leak in tpm2_load_cmd(CVE-2025-71147)

    scsi: qla2xxx: Sanitize payload size to prevent member overflow(CVE-2026-23059)

    mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure(CVE-2026-23142)

    io_uring: fix filename leak in __io_openat_prep()(CVE-2025-68814)

    mlx5: Fix default values in create CQ(CVE-2025-68209)

    In the Linux kernel, the is_open, has_lease and on_list bitfields are stored in the same byte in struct     cached_fid but are updated in different code paths that may run concurrently. Bitfield assignments     generate byte read-modify-write operations, so updating one flag can restore stale values of the others.
    To avoid this class of races, convert these flags to separate bool fields.(CVE-2026-23230)

    drm/msm/dpu: Add missing NULL pointer check for pingpong interface(CVE-2025-71138)

    cifs: Fix memory and information leak in smb3_reconfigure()(CVE-2025-71151)

    sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT(CVE-2026-23125)

    net/sched: cls_u32: use skb_header_pointer_careful()(CVE-2026-23204)

    ext4: refresh inline data size before write operations(CVE-2025-68264)

    efivarfs: fix error propagation in efivar_entry_get()(CVE-2026-23156)

    io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop(CVE-2026-23113)

    scsi: qla2xxx: Fix improper freeing of purex item(CVE-2025-68741)

    tracing: Add recursion protection in kernel stack trace recording(CVE-2026-23138)

    bonding: limit BOND_MODE_8023AD to Ethernet devices(CVE-2026-23099)

    md: suspend array while updating raid_disks via sysfs(CVE-2025-71225)

    uacce: fix cdev handling in the cleanup path(CVE-2026-23096)

    bpf: Fix invalid prog-stats access when update_effective_progs fails(CVE-2025-68742)

    nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot(CVE-2025-68235)

    ocfs2: clear extent cache after moving/defragmenting extents(CVE-2025-40233)

    migrate: correct lock ordering for hugetlb file folios(CVE-2026-23097)

    scsi: qla2xxx: Free sp in error path to fix system crash(CVE-2025-71232)

    scsi: qla2xxx: Delay module unload while fabric scan in progress(CVE-2025-71235)

    smb/client: fix memory leak in smb2_open_file()(CVE-2026-23205)

    nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()(CVE-2026-23179)

    scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()(CVE-2026-23216)

    nbd: defer config put in recv_work(CVE-2025-68372)

    ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()(CVE-2025-68261)

    bpf: Add bpf_prog_run_data_pointers()(CVE-2025-68200)

    usb: storage: sddr55: Reject out-of-bound new_pba(CVE-2025-40345)

    nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec(CVE-2026-23112)

    scsi: sg: Do not sleep in atomic context(CVE-2025-40259)

    mm/damon/vaddr: do not repeat pte_offset_map_lock() until success(CVE-2025-40218)

    mm/huge_memory: fix NULL pointer deference when splitting folio(CVE-2025-68293)

    A NULL pointer dereference vulnerability exists in the SCSI qla2xxx driver subsystem of the Linux kernel.
    When the system attempts to free associated memory in the qla_fab_async_scan function, it fails to     validate whether the sp pointer is NULL, leading to kernel NULL pointer dereference and system crashes.
    This vulnerability can be exploited by attackers to cause denial of service.(CVE-2025-71236)

    crash: fix crashkernel resource shrink(CVE-2025-68198)

    jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted(CVE-2025-68337)

    bonding: annotate data-races around slave-last_rx(CVE-2026-23212)

    bonding: fix use-after-free due to enslave fail after slave array update(CVE-2026-23171)

    scsi: core: Wake up the error handler when final completions race against each other(CVE-2026-23110)

    blk-cgroup: fix possible deadlock while configuring policy(CVE-2025-68178)

    nbd: defer config unlock in nbd_genl_connect(CVE-2025-68366)

    drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup(CVE-2025-68296)

    nvme: nvme-fc: Ensure -ioerr_work is cancelled in nvme_fc_delete_ctrl()(CVE-2025-40261)

    scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()(CVE-2026-23193)

    uacce: implement mremap in uacce_vm_ops to return -EPERM(CVE-2026-23056)

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain()(CVE-2026-23231)

    vsock/virtio: cap TX credit to local buffer size(CVE-2026-23086)

    bpf, test_run: Subtract size of xdp_frame from allowed metadata size(CVE-2026-23140)

    vsock/virtio: fix potential underflow in virtio_transport_get_credit()(CVE-2026-23069)

    netdevsim: fix a race issue related to the operation on bpf_bound_progs list(CVE-2026-23126)

    net: hv_netvsc: reject RSS hash key programming without RX indirection table(CVE-2026-23054)

    fbdev: bitblit: bound-check glyph index in bit_putcs*(CVE-2025-40322)

    regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex(CVE-2025-68354)

    mtdchar: fix integer overflow in read/write ioctls(CVE-2025-68237)

    arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()(CVE-2025-40346)

    fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds(CVE-2025-40304)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - can: j1939: make j1939_session_activate() fail if device is no longer registered syzbot is still reporting     unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 even after commit 93a27b5891b8     (can: j1939: add missing calls in NETDEV_UNREGISTER notification handler) was added. A debug printk()     patch found that j1939_session_activate() can succeed even after j1939_cancel_active_session() from     j1939_netdev_notify(NETDEV_UNREGISTER) has completed. Since j1939_cancel_active_session() is processed     with the session list lock held, checking ndev->reg_state in j1939_session_activate() with the session     list lock held can reliably close the race window. (CVE-2025-71182)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8669-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Foo-over-UDP (FOU);

    - ARM64 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Drivers core;

    - Null block device driver;

    - Bluetooth drivers;

    - Counter interface drivers;

    - DMA engine subsystem;

    - DPLL subsystem;

    - GPIO subsystem;

    - GPU drivers;

    - I2C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - On-Chip Interconnect management framework;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Modular ISDN driver;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - UACCE accelerator framework;

    - MMC subsystem;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - Texas Instruments network drivers;

    - NVME drivers;

    - Device tree and open firmware driver;

    - PHY drivers;

    - x86 platform drivers;

    - i.MX PM domains;

    - SCSI subsystem;

    - SLIMbus drivers;

    - SPI subsystem;

    - TTY drivers;

    - USB Host Controller drivers;

    - W1 Dallas's 1-wire bus driver;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - EFI Variable file system;

    - File systems infrastructure;

    - Ext4 file system;

    - FUSE (File system in Userspace);

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - SMB network file system;

    - Memory Management;

    - Memory management;

    - Scheduler infrastructure;

    - Tracing infrastructure;

    - IPv4 networking;

    - Netfilter;

    - NFC subsystem;

    - Network traffic control;

    - TCP network protocol;

    - io_uring subsystem;

    - Perf events;

    - Locking primitives;

    - Hibernation control;

    - Timer subsystem;

    - BPF subsystem;

    - Floating proportions library;

    - Bluetooth subsystem;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - IPv6 networking;

    - L2TP protocol;

    - MAC80211 subsystem;

    - Multipath TCP;

    - NET/ROM layer;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - ALSA AC97 driver;

    - Creative Sound Blaster X-Fi driver;

    - Texas InstrumentS Audio (ASoC/HDA) drivers;

    - USB sound devices; (CVE-2025-71158, CVE-2025-71160, CVE-2025-71161, CVE-2025-71162, CVE-2025-71163,     CVE-2025-71180, CVE-2025-71182, CVE-2025-71183, CVE-2025-71184, CVE-2025-71185, CVE-2025-71186,     CVE-2025-71187, CVE-2025-71188, CVE-2025-71189, CVE-2025-71190, CVE-2025-71191, CVE-2025-71192,     CVE-2025-71193, CVE-2025-71194, CVE-2025-71195, CVE-2025-71196, CVE-2025-71197, CVE-2025-71198,     CVE-2025-71199, CVE-2025-71200, CVE-2025-71201, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978,     CVE-2026-22979, CVE-2026-22980, CVE-2026-22981, CVE-2026-22982, CVE-2026-22985, CVE-2026-22986,     CVE-2026-22987, CVE-2026-22989, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22993,     CVE-2026-22994, CVE-2026-22996, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23000,     CVE-2026-23001, CVE-2026-23002, CVE-2026-23003, CVE-2026-23004, CVE-2026-23005, CVE-2026-23006,     CVE-2026-23007, CVE-2026-23008, CVE-2026-23009, CVE-2026-23010, CVE-2026-23011, CVE-2026-23012,     CVE-2026-23013, CVE-2026-23014, CVE-2026-23015, CVE-2026-23017, CVE-2026-23018, CVE-2026-23019,     CVE-2026-23020, CVE-2026-23021, CVE-2026-23022, CVE-2026-23023, CVE-2026-23024, CVE-2026-23025,     CVE-2026-23026, CVE-2026-23030, CVE-2026-23031, CVE-2026-23032, CVE-2026-23033, CVE-2026-23034,     CVE-2026-23035, CVE-2026-23036, CVE-2026-23037, CVE-2026-23038, CVE-2026-23042, CVE-2026-23044,     CVE-2026-23045, CVE-2026-23046, CVE-2026-23047, CVE-2026-23049, CVE-2026-23050, CVE-2026-23051,     CVE-2026-23052, CVE-2026-23053, CVE-2026-23054, CVE-2026-23055, CVE-2026-23056, CVE-2026-23057,     CVE-2026-23058, CVE-2026-23059, CVE-2026-23061, CVE-2026-23062, CVE-2026-23063, CVE-2026-23064,     CVE-2026-23065, CVE-2026-23066, CVE-2026-23067, CVE-2026-23068, CVE-2026-23069, CVE-2026-23070,     CVE-2026-23071, CVE-2026-23072, CVE-2026-23073, CVE-2026-23075, CVE-2026-23076, CVE-2026-23077,     CVE-2026-23078, CVE-2026-23079, CVE-2026-23080, CVE-2026-23081, CVE-2026-23083, CVE-2026-23084,     CVE-2026-23085, CVE-2026-23086, CVE-2026-23087, CVE-2026-23088, CVE-2026-23089, CVE-2026-23090,     CVE-2026-23092, CVE-2026-23093, CVE-2026-23094, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097,     CVE-2026-23098, CVE-2026-23099, CVE-2026-23100, CVE-2026-23101, CVE-2026-23102, CVE-2026-23103,     CVE-2026-23104, CVE-2026-23105, CVE-2026-23106, CVE-2026-23107, CVE-2026-23108, CVE-2026-23109,     CVE-2026-23110, CVE-2026-23113, CVE-2026-23114, CVE-2026-23115, CVE-2026-23116, CVE-2026-23118,     CVE-2026-23119, CVE-2026-23120, CVE-2026-23121, CVE-2026-23122, CVE-2026-23123, CVE-2026-23124,     CVE-2026-23125, CVE-2026-23126, CVE-2026-23128, CVE-2026-23129, CVE-2026-23130, CVE-2026-23131,     CVE-2026-23133, CVE-2026-23135, CVE-2026-23136, CVE-2026-23137, CVE-2026-23138, CVE-2026-23139,     CVE-2026-23140, CVE-2026-23141, CVE-2026-23142, CVE-2026-23143, CVE-2026-23144, CVE-2026-23145,     CVE-2026-23146, CVE-2026-23147, CVE-2026-23148, CVE-2026-23150, CVE-2026-23151, CVE-2026-23152,     CVE-2026-23154, CVE-2026-23156, CVE-2026-23157, CVE-2026-23158, CVE-2026-23159, CVE-2026-23160,     CVE-2026-23161, CVE-2026-23162, CVE-2026-23163, CVE-2026-23164, CVE-2026-23165, CVE-2026-23166,     CVE-2026-23167, CVE-2026-23168, CVE-2026-23169, CVE-2026-23170, CVE-2026-23171, CVE-2026-23172,     CVE-2026-23173, CVE-2026-23212, CVE-2026-31405, CVE-2026-31414, CVE-2026-31444, CVE-2026-31501,     CVE-2026-31589, CVE-2026-31633, CVE-2026-31636, CVE-2026-31705, CVE-2026-43198, CVE-2026-43379,     CVE-2026-43465, CVE-2026-43499, CVE-2026-46113, CVE-2026-46137, CVE-2026-46242, CVE-2026-46290,     CVE-2026-46317, CVE-2026-46331, CVE-2026-52924, CVE-2026-52989, CVE-2026-53086, CVE-2026-53131,     CVE-2026-53176, CVE-2026-53212, CVE-2026-53225, CVE-2026-53228, CVE-2026-53277, CVE-2026-53359)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782155469 advisory.

  - A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function     j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is     recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932.
    (CVE-2022-3633)

  - In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at     indirect extent boundary When preallocation extent is the first one in the extent block, the code would     corrupt extent tree header instead. Fix the problem and use udf_delete_aext() for deleting extent to avoid     some code duplication. (CVE-2022-48946)

  - In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix error exit of     privcmd_ioctl_dm_op() The error exit of privcmd_ioctl_dm_op() is calling unlock_pages() potentially with     pages being NULL, leading to a NULL dereference. Additionally lock_pages() doesn't check for     pin_user_pages_fast() having been completely successful, resulting in potentially not locking all pages     into memory. This could result in sporadic failures when using the related memory in user mode. Fix all of     that by calling unlock_pages() always with the real number of pinned pages, which will be zero in case     pages being NULL, and by checking the number of pages pinned by pin_user_pages_fast() matching the     expected number of pages. (CVE-2022-49989)

  - In the Linux kernel, the following vulnerability has been resolved: net: USB: Fix wrong-direction WARNING     in plusb.c The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT     transfer was treated as a read instead of a write. In modern kernels this error provokes a WARNING: usb     1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 WARNING: CPU: 0 PID: 4645 at     drivers/usb/core/urb.c:411 usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 Modules linked in: CPU:
    1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0 Hardware name: Google     Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 RIP: 0010:usb_submit_urb+0x14a7/0x1880     drivers/usb/core/urb.c:411 ... Call Trace: <TASK> usb_start_wait_urb+0x101/0x4b0     drivers/usb/core/message.c:58 usb_internal_control_msg drivers/usb/core/message.c:102 [inline]     usb_control_msg+0x320/0x4a0 drivers/usb/core/message.c:153 __usbnet_read_cmd+0xb9/0x390     drivers/net/usb/usbnet.c:2010 usbnet_read_cmd+0x96/0xf0 drivers/net/usb/usbnet.c:2068 pl_vendor_req     drivers/net/usb/plusb.c:60 [inline] pl_set_QuickLink_features drivers/net/usb/plusb.c:75 [inline]     pl_reset+0x2f/0xf0 drivers/net/usb/plusb.c:85 usbnet_open+0xcc/0x5d0 drivers/net/usb/usbnet.c:889
    __dev_open+0x297/0x4d0 net/core/dev.c:1417 __dev_change_flags+0x587/0x750 net/core/dev.c:8530     dev_change_flags+0x97/0x170 net/core/dev.c:8602 devinet_ioctl+0x15a2/0x1d70 net/ipv4/devinet.c:1147     inet_ioctl+0x33f/0x380 net/ipv4/af_inet.c:979 sock_do_ioctl+0xcc/0x230 net/socket.c:1169     sock_ioctl+0x1f8/0x680 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870     [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64     arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80     entry_SYSCALL_64_after_hwframe+0x63/0xcd The fix is to call usbnet_write_cmd() instead of     usbnet_read_cmd() and remove the USB_DIR_IN flag. (CVE-2023-52742)

  - In the Linux kernel, the following vulnerability has been resolved: tracing: Make sure trace_printk() can     output as soon as it can be used Currently trace_printk() can be used as soon as early_trace_init() is     called from start_kernel(). But if a crash happens, and ftrace_dump_on_oops is set on the kernel command     line, all you get will be: [ 0.456075] <idle>-0 0dN.2. 347519us : Unknown type 6 [ 0.456075] <idle>-0     0dN.2. 353141us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 358684us : Unknown type 6 This is because the     trace_printk() event (type 6) hasn't been registered yet. That gets done via an early_initcall(), which     may be early, but not early enough. Instead of registering the trace_printk() event (and other ftrace     events, which are not trace events) via an early_initcall(), have them registered at the same time that     trace_printk() can be used. This way, if there is a crash before early_initcall(), then the     trace_printk()s will actually be useful. (CVE-2023-53007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8096-1 advisory.

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM).
    An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor     profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege     escalation, or possibly escape a container. (LP: #2143853)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - ATM drivers;

    - Drivers core;

    - Network block device driver;

    - Bluetooth drivers;

    - Character device driver;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Counter interface drivers;

    - CPU frequency scaling framework;

    - Intel Stratix 10 firmware drivers;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Tablet) drivers;

    - ISDN/mISDN subsystem;

    - Macintosh device drivers;

    - Media drivers;

    - MOST (Media Oriented Systems Transport) drivers;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Texas Instruments network drivers;

    - Ethernet team driver;

    - MediaTek network drivers;

    - NVME drivers;

    - PA-RISC drivers;

    - PCI subsystem;

    - Chrome hardware platform drivers;

    - x86 platform drivers;

    - ARM PM domains;

    - Voltage and Current Regulator drivers;

    - S/390 drivers;

    - SCSI subsystem;

    - Texas Instruments SoC drivers;

    - SPI subsystem;

    - Realtek RTL8723BS SDIO drivers;

    - TCM subsystem;

    - Cadence USB3 driver;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Mass Storage drivers;

    - USB Type-C Connector System Software Interface driver;

    - Backlight driver;

    - Framebuffer layer;

    - Watchdog drivers;

    - BFS file system;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - FUSE (File system in Userspace);

    - HFS+ file system;

    - Journaling layer for block devices (JBD2);

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - File system notification infrastructure;

    - NTFS3 file system;

    - OCFS2 file system;

    - OrangeFS file system;

    - Proc file system;

    - SMB network file system;

    - XFS file system;

    - BPF subsystem;

    - Ethernet bridge;

    - Memory management;

    - Network traffic control;

    - io_uring subsystem;

    - Locking primitives;

    - Scheduler infrastructure;

    - Shadow Call Stack mechanism;

    - Tracing infrastructure;

    - Bluetooth subsystem;

    - CAIF protocol;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - Ethtool driver;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NET/ROM layer;

    - NFC subsystem;

    - Open vSwitch;

    - Rose network layer;

    - SCTP protocol;

    - Network sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - Rust bindings mechanism;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - Simplified Mandatory Access Control Kernel framework;

    - FireWire sound drivers;

    - Turtle Beach Wavefront ALSA driver;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014,     CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121,     CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110,     CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257,     CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264,     CVE-2025-40269, CVE-2025-40271, CVE-2025-40272, CVE-2025-40273, CVE-2025-40275, CVE-2025-40277,     CVE-2025-40278, CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283,     CVE-2025-40304, CVE-2025-40306, CVE-2025-40308, CVE-2025-40309, CVE-2025-40312, CVE-2025-40313,     CVE-2025-40314, CVE-2025-40315, CVE-2025-40317, CVE-2025-40319, CVE-2025-40321, CVE-2025-40322,     CVE-2025-40324, CVE-2025-40331, CVE-2025-40342, CVE-2025-40343, CVE-2025-40345, CVE-2025-40360,     CVE-2025-40363, CVE-2025-68168, CVE-2025-68176, CVE-2025-68177, CVE-2025-68185, CVE-2025-68191,     CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204, CVE-2025-68217, CVE-2025-68220,     CVE-2025-68227, CVE-2025-68229, CVE-2025-68238, CVE-2025-68241, CVE-2025-68244, CVE-2025-68245,     CVE-2025-68254, CVE-2025-68255, CVE-2025-68257, CVE-2025-68258, CVE-2025-68261, CVE-2025-68264,     CVE-2025-68266, CVE-2025-68282, CVE-2025-68284, CVE-2025-68285, CVE-2025-68286, CVE-2025-68287,     CVE-2025-68288, CVE-2025-68289, CVE-2025-68290, CVE-2025-68295, CVE-2025-68301, CVE-2025-68302,     CVE-2025-68303, CVE-2025-68308, CVE-2025-68312, CVE-2025-68321, CVE-2025-68325, CVE-2025-68327,     CVE-2025-68328, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336,     CVE-2025-68337, CVE-2025-68339, CVE-2025-68344, CVE-2025-68346, CVE-2025-68349, CVE-2025-68354,     CVE-2025-68362, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367, CVE-2025-68372, CVE-2025-68724,     CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68734, CVE-2025-68740,     CVE-2025-68746, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68764, CVE-2025-68765,     CVE-2025-68767, CVE-2025-68769, CVE-2025-68771, CVE-2025-68774, CVE-2025-68776, CVE-2025-68777,     CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68787, CVE-2025-68788,     CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801,     CVE-2025-68803, CVE-2025-68804, CVE-2025-68808, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815,     CVE-2025-68816, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-71064,     CVE-2025-71066, CVE-2025-71068, CVE-2025-71069, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078,     CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085,     CVE-2025-71086, CVE-2025-71087, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71096,     CVE-2025-71097, CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71108,     CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116, CVE-2025-71118,     CVE-2025-71120, CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131, CVE-2025-71132,     CVE-2025-71133, CVE-2025-71136, CVE-2025-71137, CVE-2025-71147, CVE-2025-71154, CVE-2025-71180,     CVE-2025-71182, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982,     CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-23019, CVE-2026-23020,     CVE-2026-23021, CVE-2026-23047)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8141-1 advisory.

    Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM).
    An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor     profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege     escalation, or possibly escape a container. (LP: #2143853, CVE-2026-23268, CVE-2026-23269)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Nios II architecture;

    - PowerPC architecture;

    - Sun Sparc architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - ATM drivers;

    - Drivers core;

    - Network block device driver;

    - Bluetooth drivers;

    - Bus devices;

    - Character device driver;

    - Hardware random number generator core;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Counter interface drivers;

    - CPU frequency scaling framework;

    - DMA engine subsystem;

    - Intel Stratix 10 firmware drivers;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - CoreSight HW tracing drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Input Device (Miscellaneous) drivers;

    - Input Device (Tablet) drivers;

    - ISDN/mISDN subsystem;

    - Macintosh device drivers;

    - Multiple devices driver;

    - Media drivers;

    - MOST (Media Oriented Systems Transport) drivers;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Texas Instruments network drivers;

    - Ethernet team driver;

    - MediaTek network drivers;

    - NVME drivers;

    - PA-RISC drivers;

    - PCI subsystem;

    - Performance monitor drivers;

    - Pin controllers subsystem;

    - Chrome hardware platform drivers;

    - x86 platform drivers;

    - ARM PM domains;

    - PPS (Pulse Per Second) driver;

    - PWM drivers;

    - Voltage and Current Regulator drivers;

    - S/390 drivers;

    - SCSI subsystem;

    - Texas Instruments SoC drivers;

    - SPI subsystem;

    - Realtek RTL8723BS SDIO drivers;

    - TCM subsystem;

    - Userspace I/O drivers;

    - Cadence USB3 driver;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Mass Storage drivers;

    - USB Type-C Connector System Software Interface driver;

    - Backlight driver;

    - Framebuffer layer;

    - Watchdog drivers;

    - BFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ext4 file system;

    - F2FS file system;

    - FUSE (File system in Userspace);

    - HFS file system;

    - HFS+ file system;

    - HugeTLB file system;

    - Journaling layer for block devices (JBD2);

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - File system notification infrastructure;

    - NTFS3 file system;

    - OCFS2 file system;

    - OrangeFS file system;

    - Proc file system;

    - SMB network file system;

    - SquashFS file system;

    - UDF file system;

    - XFS file system;

    - BPF subsystem;

    - Ethernet bridge;

    - Memory management;

    - padata parallel execution mechanism;

    - IP tunnels definitions;

    - Network traffic control;

    - Network sockets;

    - XFRM subsystem;

    - io_uring subsystem;

    - Control group (cgroup);

    - Locking primitives;

    - Padata parallel execution mechanism;

    - PID allocator;

    - Scheduler infrastructure;

    - Shadow Call Stack mechanism;

    - Tracing infrastructure;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAIF protocol;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - Ethtool driver;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NET/ROM layer;

    - NFC subsystem;

    - Open vSwitch;

    - RF switch subsystem;

    - Rose network layer;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - Rust bindings mechanism;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - Simplified Mandatory Access Control Kernel framework;

    - FireWire sound drivers;

    - Turtle Beach Wavefront ALSA driver;

    - Intel ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2022-49465, CVE-2022-49635, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354,     CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2024-53114, CVE-2024-56538,     CVE-2024-58011, CVE-2025-21780, CVE-2025-21861, CVE-2025-22022, CVE-2025-22058, CVE-2025-22111,     CVE-2025-22121, CVE-2025-23143, CVE-2025-38022, CVE-2025-38129, CVE-2025-38236, CVE-2025-38248,     CVE-2025-38556, CVE-2025-38584, CVE-2025-39869, CVE-2025-39873, CVE-2025-39876, CVE-2025-39880,     CVE-2025-39883, CVE-2025-39885, CVE-2025-39907, CVE-2025-39911, CVE-2025-39913, CVE-2025-39923,     CVE-2025-39934, CVE-2025-39937, CVE-2025-39943, CVE-2025-39945, CVE-2025-39949, CVE-2025-39951,     CVE-2025-39953, CVE-2025-39955, CVE-2025-39967, CVE-2025-39968, CVE-2025-39969, CVE-2025-39970,     CVE-2025-39971, CVE-2025-39972, CVE-2025-39973, CVE-2025-39980, CVE-2025-39985, CVE-2025-39986,     CVE-2025-39987, CVE-2025-39988, CVE-2025-39994, CVE-2025-39995, CVE-2025-39996, CVE-2025-39998,     CVE-2025-40001, CVE-2025-40006, CVE-2025-40011, CVE-2025-40020, CVE-2025-40021, CVE-2025-40026,     CVE-2025-40027, CVE-2025-40029, CVE-2025-40030, CVE-2025-40035, CVE-2025-40040, CVE-2025-40042,     CVE-2025-40043, CVE-2025-40044, CVE-2025-40048, CVE-2025-40049, CVE-2025-40053, CVE-2025-40055,     CVE-2025-40060, CVE-2025-40068, CVE-2025-40070, CVE-2025-40078, CVE-2025-40081, CVE-2025-40083,     CVE-2025-40085, CVE-2025-40087, CVE-2025-40088, CVE-2025-40092, CVE-2025-40094, CVE-2025-40105,     CVE-2025-40106, CVE-2025-40109, CVE-2025-40110, CVE-2025-40111, CVE-2025-40112, CVE-2025-40115,     CVE-2025-40116, CVE-2025-40118, CVE-2025-40120, CVE-2025-40121, CVE-2025-40124, CVE-2025-40125,     CVE-2025-40126, CVE-2025-40127, CVE-2025-40134, CVE-2025-40140, CVE-2025-40153, CVE-2025-40154,     CVE-2025-40167, CVE-2025-40171, CVE-2025-40173, CVE-2025-40178, CVE-2025-40179, CVE-2025-40183,     CVE-2025-40187, CVE-2025-40188, CVE-2025-40194, CVE-2025-40200, CVE-2025-40204, CVE-2025-40205,     CVE-2025-40211, CVE-2025-40215, CVE-2025-40219, CVE-2025-40220, CVE-2025-40223, CVE-2025-40231,     CVE-2025-40233, CVE-2025-40240, CVE-2025-40243, CVE-2025-40244, CVE-2025-40245, CVE-2025-40248,     CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259,     CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40269, CVE-2025-40271,     CVE-2025-40272, CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278, CVE-2025-40279,     CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283, CVE-2025-40304, CVE-2025-40306,     CVE-2025-40308, CVE-2025-40309, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314, CVE-2025-40315,     CVE-2025-40317, CVE-2025-40319, CVE-2025-40321, CVE-2025-40322, CVE-2025-40324, CVE-2025-40331,     CVE-2025-40342, CVE-2025-40343, CVE-2025-40345, CVE-2025-40346, CVE-2025-40349, CVE-2025-40351,     CVE-2025-40360, CVE-2025-40363, CVE-2025-68168, CVE-2025-68176, CVE-2025-68177, CVE-2025-68185,     CVE-2025-68191, CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204, CVE-2025-68217,     CVE-2025-68220, CVE-2025-68227, CVE-2025-68229, CVE-2025-68238, CVE-2025-68241, CVE-2025-68244,     CVE-2025-68245, CVE-2025-68249, CVE-2025-68254, CVE-2025-68255, CVE-2025-68257, CVE-2025-68258,     CVE-2025-68261, CVE-2025-68264, CVE-2025-68266, CVE-2025-68282, CVE-2025-68284, CVE-2025-68285,     CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289, CVE-2025-68290, CVE-2025-68295,     CVE-2025-68301, CVE-2025-68302, CVE-2025-68303, CVE-2025-68308, CVE-2025-68312, CVE-2025-68321,     CVE-2025-68325, CVE-2025-68327, CVE-2025-68328, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332,     CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68339, CVE-2025-68344, CVE-2025-68346,     CVE-2025-68349, CVE-2025-68354, CVE-2025-68362, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367,     CVE-2025-68372, CVE-2025-68724, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733,     CVE-2025-68734, CVE-2025-68740, CVE-2025-68746, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759,     CVE-2025-68764, CVE-2025-68765, CVE-2025-68767, CVE-2025-68769, CVE-2025-68771, CVE-2025-68774,     CVE-2025-68776, CVE-2025-68777, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785,     CVE-2025-68787, CVE-2025-68788, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68799,     CVE-2025-68800, CVE-2025-68801, CVE-2025-68803, CVE-2025-68804, CVE-2025-68808, CVE-2025-68813,     CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820,     CVE-2025-71064, CVE-2025-71066, CVE-2025-71068, CVE-2025-71069, CVE-2025-71075, CVE-2025-71077,     CVE-2025-71078, CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,     CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094,     CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,     CVE-2025-71108, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116,     CVE-2025-71118, CVE-2025-71120, CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131,     CVE-2025-71132, CVE-2025-71133, CVE-2025-71136, CVE-2025-71137, CVE-2025-71147, CVE-2025-71154,     CVE-2025-71180, CVE-2025-71182, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22980,     CVE-2026-22982, CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-23019,     CVE-2026-23020, CVE-2026-23021, CVE-2026-23047)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8278-1 advisory.

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic     operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or     possibly escape a container. (CVE-2026-31431)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - x86 architecture;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - Drivers core;

    - Null block device driver;

    - Ublk userspace block driver;

    - Bluetooth drivers;

    - Counter interface drivers;

    - DMA engine subsystem;

    - DPLL subsystem;

    - GPU drivers;

    - HID subsystem;

    - Intel Trace Hub HW tracing drivers;

    - IIO ADC drivers;

    - IIO subsystem;

    - On-Chip Interconnect management framework;

    - IRQ chip drivers;

    - Modular ISDN driver;

    - LED subsystem;

    - Multiple devices driver;

    - UACCE accelerator framework;

    - MMC subsystem;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - NVME drivers;

    - PHY drivers;

    - x86 platform drivers;

    - i.MX PM domains;

    - SCSI subsystem;

    - SLIMbus drivers;

    - SPI subsystem;

    - TCM subsystem;

    - W1 Dallas's 1-wire bus driver;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - EFI Variable file system;

    - exFAT file system;

    - Ext4 file system;

    - HFS+ file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - SMB network file system;

    - Scheduler infrastructure;

    - Netfilter;

    - NFC subsystem;

    - Tracing infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Perf events;

    - Floating proportions library;

    - Memory management;

    - Bluetooth subsystem;

    - CAN network layer;

    - Ceph Core library;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - L2TP protocol;

    - MAC80211 subsystem;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - TLS protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - ALSA AC97 driver;

    - Generic PCM loopback sound driver;

    - Creative Sound Blaster X-Fi driver;

    - AMD SoC Alsa drivers;

    - Texas InstrumentS Audio (ASoC/HDA) drivers;

    - USB sound devices;

    - KVM subsystem; (CVE-2024-50004, CVE-2024-58096, CVE-2024-58097, CVE-2025-37926, CVE-2025-38201,     CVE-2025-38591, CVE-2025-40039, CVE-2025-40082, CVE-2025-40149, CVE-2025-68351, CVE-2025-68358,     CVE-2025-68365, CVE-2025-68725, CVE-2025-68749, CVE-2025-68803, CVE-2025-68823, CVE-2025-71160,     CVE-2025-71162, CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71183, CVE-2025-71184,     CVE-2025-71185, CVE-2025-71186, CVE-2025-71188, CVE-2025-71189, CVE-2025-71190, CVE-2025-71191,     CVE-2025-71192, CVE-2025-71193, CVE-2025-71194, CVE-2025-71195, CVE-2025-71196, CVE-2025-71197,     CVE-2025-71198, CVE-2025-71199, CVE-2025-71200, CVE-2025-71220, CVE-2025-71222, CVE-2025-71224,     CVE-2025-71225, CVE-2025-71268, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22979,     CVE-2026-22980, CVE-2026-22982, CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992,     CVE-2026-22994, CVE-2026-22996, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23000,     CVE-2026-23001, CVE-2026-23003, CVE-2026-23005, CVE-2026-23006, CVE-2026-23010, CVE-2026-23011,     CVE-2026-23019, CVE-2026-23020, CVE-2026-23021, CVE-2026-23025, CVE-2026-23026, CVE-2026-23030,     CVE-2026-23031, CVE-2026-23032, CVE-2026-23033, CVE-2026-23035, CVE-2026-23037, CVE-2026-23038,     CVE-2026-23047, CVE-2026-23049, CVE-2026-23050, CVE-2026-23053, CVE-2026-23054, CVE-2026-23056,     CVE-2026-23057, CVE-2026-23058, CVE-2026-23059, CVE-2026-23061, CVE-2026-23062, CVE-2026-23063,     CVE-2026-23064, CVE-2026-23065, CVE-2026-23068, CVE-2026-23069, CVE-2026-23071, CVE-2026-23073,     CVE-2026-23075, CVE-2026-23076, CVE-2026-23078, CVE-2026-23080, CVE-2026-23083, CVE-2026-23084,     CVE-2026-23085, CVE-2026-23086, CVE-2026-23087, CVE-2026-23088, CVE-2026-23089, CVE-2026-23090,     CVE-2026-23091, CVE-2026-23093, CVE-2026-23094, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097,     CVE-2026-23098, CVE-2026-23099, CVE-2026-23101, CVE-2026-23102, CVE-2026-23103, CVE-2026-23105,     CVE-2026-23107, CVE-2026-23108, CVE-2026-23110, CVE-2026-23113, CVE-2026-23116, CVE-2026-23119,     CVE-2026-23120, CVE-2026-23121, CVE-2026-23123, CVE-2026-23124, CVE-2026-23125, CVE-2026-23126,     CVE-2026-23128, CVE-2026-23129, CVE-2026-23131, CVE-2026-23133, CVE-2026-23135, CVE-2026-23136,     CVE-2026-23139, CVE-2026-23140, CVE-2026-23141, CVE-2026-23142, CVE-2026-23144, CVE-2026-23145,     CVE-2026-23146, CVE-2026-23148, CVE-2026-23150, CVE-2026-23151, CVE-2026-23156, CVE-2026-23159,     CVE-2026-23160, CVE-2026-23163, CVE-2026-23164, CVE-2026-23166, CVE-2026-23167, CVE-2026-23168,     CVE-2026-23170, CVE-2026-23172, CVE-2026-23173, CVE-2026-23176, CVE-2026-23178, CVE-2026-23179,     CVE-2026-23180, CVE-2026-23182, CVE-2026-23187, CVE-2026-23190, CVE-2026-23191, CVE-2026-23193,     CVE-2026-23198, CVE-2026-23200, CVE-2026-23202, CVE-2026-23204, CVE-2026-23205, CVE-2026-23206,     CVE-2026-23212, CVE-2026-23213, CVE-2026-23214, CVE-2026-23215, CVE-2026-23216, CVE-2026-23254,     CVE-2026-23256, CVE-2026-23257, CVE-2026-23258, CVE-2026-23260, CVE-2026-23261, CVE-2026-23262,     CVE-2026-23264, CVE-2026-23274, CVE-2026-23351, CVE-2026-23394, CVE-2026-31419, CVE-2026-31504,     CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
301901	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50145)	Nessus	Oracle Linux Local Security Checks	3/11/2026	3/19/2026	high
377383	EulerOS Virtualization 2.15.0 : kernel (EulerOS-SA-2026-4599)	Nessus	Huawei Local Security Checks	11/7/2026	11/7/2026	critical
337084	Photon OS 5.0: Linux PHSA-2026-5.0-91-0837	Nessus	PhotonOS Local Security Checks	8/18/2026	11/2/2026	high
297461	Linux Distros Unpatched Vulnerability : CVE-2025-71182	Nessus	Misc.	1/31/2026	11/6/2026	medium
340678	Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8669-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	9/23/2026	high
359694	Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782155469)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/21/2026	low
302765	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8096-1)	Nessus	Ubuntu Local Security Checks	3/17/2026	10/6/2026	high
304789	Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-8141-1)	Nessus	Ubuntu Local Security Checks	4/3/2026	4/3/2026	high
315738	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8278-1)	Nessus	Ubuntu Local Security Checks	5/20/2026	6/11/2026	high

Detections

Analytics

Plugins Search

high

critical

high

medium

high

low

high

high

high