The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4201-1 advisory.

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.44 fixes various security issues

    The following security issues were fixed:

    - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface     (bsc#1248672).
    - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4268-1 advisory.

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.60 fixes various security issues

    The following security issues were fixed:

    - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface     (bsc#1248672).
    - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5975 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5975-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     August 13, 2025                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2025-22115 CVE-2025-27558 CVE-2025-37925 CVE-2025-37984                      CVE-2025-38067 CVE-2025-38104 CVE-2025-38335 CVE-2025-38349                      CVE-2025-38351 CVE-2025-38437 CVE-2025-38438 CVE-2025-38439                      CVE-2025-38440 CVE-2025-38441 CVE-2025-38443 CVE-2025-38444                      CVE-2025-38445 CVE-2025-38446 CVE-2025-38448 CVE-2025-38449                      CVE-2025-38450 CVE-2025-38451 CVE-2025-38452 CVE-2025-38454                      CVE-2025-38455 CVE-2025-38456 CVE-2025-38457 CVE-2025-38458                      CVE-2025-38459 CVE-2025-38460 CVE-2025-38461 CVE-2025-38462                      CVE-2025-38463 CVE-2025-38464 CVE-2025-38465 CVE-2025-38466                      CVE-2025-38467 CVE-2025-38468 CVE-2025-38469 CVE-2025-38470                      CVE-2025-38471 CVE-2025-38472 CVE-2025-38473 CVE-2025-38474                      CVE-2025-38475 CVE-2025-38476 CVE-2025-38477 CVE-2025-38478                      CVE-2025-38480 CVE-2025-38481 CVE-2025-38482 CVE-2025-38483                      CVE-2025-38484 CVE-2025-38485 CVE-2025-38487 CVE-2025-38488                      CVE-2025-38489 CVE-2025-38490 CVE-2025-38491 CVE-2025-38493                      CVE-2025-38494 CVE-2025-38495 CVE-2025-38496 CVE-2025-38497                      CVE-2025-38499 CVE-2025-38500

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.41-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
276807	SUSE SLES15 Security Update : kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2025:4201-1)	Nessus	SuSE Local Security Checks	11/25/2025	3/3/2026	high
277250	SUSE SLES15 Security Update : kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2025:4268-1)	Nessus	SuSE Local Security Checks	12/3/2025	2/27/2026	high
277736	Debian dsa-5975 : ata-modules-6.12.31-armmp-di - security update	Nessus	Debian Local Security Checks	12/8/2025	2/26/2026	high
337084	Photon OS 5.0: Linux PHSA-2026-5.0-91-0837	Nessus	PhotonOS Local Security Checks	8/18/2026	8/19/2026	high

Detections

Analytics

Plugins Search

high

high

high

high