The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7295-1 advisory.

    Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle     locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21400)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - Block layer subsystem;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - TPM device driver;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - InfiniBand drivers;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - Parport drivers;

    - PCI subsystem;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - TTY drivers;

    - USB Device Class drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - Framebuffer layer;

    - BTRFS file system;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - File systems infrastructure;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - SMB network file system;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - BPF subsystem;

    - Perf events;

    - Arbitrary resource management;

    - Timer substystem drivers;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Netfilter;

    - Netlink;

    - SCTP protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - XFRM subsystem;

    - Key management;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - Amlogic Meson SoC drivers;

    - KVM core; (CVE-2024-50116, CVE-2024-43863, CVE-2024-47757, CVE-2024-50236, CVE-2024-53104,     CVE-2024-47701, CVE-2024-46854, CVE-2024-50024, CVE-2024-46849, CVE-2024-50035, CVE-2024-50262,     CVE-2024-50184, CVE-2023-52458, CVE-2024-47696, CVE-2024-49957, CVE-2024-47692, CVE-2024-50007,     CVE-2024-49867, CVE-2024-49900, CVE-2024-50167, CVE-2024-47697, CVE-2024-53164, CVE-2024-50179,     CVE-2024-44931, CVE-2024-50301, CVE-2024-50218, CVE-2024-49995, CVE-2024-47742, CVE-2024-47756,     CVE-2021-47469, CVE-2024-49982, CVE-2024-50229, CVE-2024-49851, CVE-2024-47685, CVE-2024-50265,     CVE-2024-50195, CVE-2024-47747, CVE-2024-50273, CVE-2024-53066, CVE-2024-49924, CVE-2024-49963,     CVE-2024-50287, CVE-2024-49948, CVE-2024-47674, CVE-2024-40967, CVE-2024-35887, CVE-2024-50044,     CVE-2024-50099, CVE-2024-53059, CVE-2024-50171, CVE-2024-50082, CVE-2024-41066, CVE-2024-50202,     CVE-2024-49868, CVE-2024-49952, CVE-2024-49965, CVE-2024-50296, CVE-2024-49903, CVE-2024-50194,     CVE-2024-47712, CVE-2024-53101, CVE-2024-40953, CVE-2024-47706, CVE-2024-49958, CVE-2024-50059,     CVE-2024-47713, CVE-2024-47737, CVE-2024-49902, CVE-2024-49959, CVE-2024-53103, CVE-2024-49973,     CVE-2024-50045, CVE-2024-47710, CVE-2024-50131, CVE-2024-47671, CVE-2024-50205, CVE-2024-47672,     CVE-2024-50234, CVE-2024-50233, CVE-2024-49860, CVE-2024-50127, CVE-2024-50168, CVE-2024-49962,     CVE-2024-38544, CVE-2024-47749, CVE-2024-49949, CVE-2024-50096, CVE-2024-50033, CVE-2024-49955,     CVE-2024-49938, CVE-2024-47698, CVE-2024-50230, CVE-2024-47723, CVE-2024-49877, CVE-2024-50180,     CVE-2024-49879, CVE-2024-53061, CVE-2024-47679, CVE-2024-49892, CVE-2024-50299, CVE-2024-49896,     CVE-2024-40911, CVE-2024-50134, CVE-2024-47740, CVE-2024-50039, CVE-2024-49985, CVE-2024-41016,     CVE-2024-50269, CVE-2024-50290, CVE-2024-49882, CVE-2024-47699, CVE-2023-52917, CVE-2024-50267,     CVE-2024-50151, CVE-2024-50251, CVE-2024-49966, CVE-2024-49981, CVE-2024-50008, CVE-2024-50006,     CVE-2024-50117, CVE-2024-47670, CVE-2024-46853, CVE-2024-50282, CVE-2024-46731, CVE-2024-35896,     CVE-2024-53141, CVE-2024-50279, CVE-2024-50040, CVE-2024-49883, CVE-2024-49878, CVE-2024-47684,     CVE-2024-49997, CVE-2024-53063, CVE-2024-50302, CVE-2024-42252, CVE-2024-47709, CVE-2024-49894,     CVE-2024-50142, CVE-2024-49944, CVE-2024-50278, CVE-2024-50150, CVE-2024-40965, CVE-2024-50237,     CVE-2024-49975, CVE-2024-50074, CVE-2024-50143, CVE-2024-50199, CVE-2024-50148)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7311-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - TPM device driver;

    - Hardware crypto device drivers;

    - ARM SCMI message protocol;

    - EFI core;

    - GPU drivers;

    - I2C subsystem;

    - I3C subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - Mailbox framework;

    - Media drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - x86 platform drivers;

    - Powercap sysfs driver;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - USB Device Class drivers;

    - vDPA drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - SMB network file system;

    - BPF subsystem;

    - Virtio network driver;

    - TCP network protocol;

    - Perf events;

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Static call mechanism;

    - Tracing infrastructure;

    - Memory management;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - RxRPC session sockets;

    - Network traffic control;

    - SCTP protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - Wireless networking;

    - AudioScience HPI driver;

    - KVM core; (CVE-2024-49867, CVE-2024-47675, CVE-2024-49999, CVE-2024-49884, CVE-2024-49992,     CVE-2024-49945, CVE-2024-49889, CVE-2024-49890, CVE-2024-49900, CVE-2024-49934, CVE-2024-49976,     CVE-2024-49878, CVE-2024-50008, CVE-2024-49919, CVE-2024-47698, CVE-2024-47731, CVE-2024-47673,     CVE-2024-49959, CVE-2024-47715, CVE-2024-49912, CVE-2024-47702, CVE-2024-50007, CVE-2024-49953,     CVE-2024-49929, CVE-2024-47730, CVE-2024-49966, CVE-2024-47756, CVE-2024-47687, CVE-2024-50002,     CVE-2024-49911, CVE-2024-47714, CVE-2024-47704, CVE-2024-50017, CVE-2024-47709, CVE-2024-49858,     CVE-2024-47712, CVE-2024-49870, CVE-2024-49883, CVE-2024-47672, CVE-2024-49963, CVE-2024-49926,     CVE-2024-49860, CVE-2024-47748, CVE-2024-49928, CVE-2024-49931, CVE-2024-47749, CVE-2024-49913,     CVE-2024-49957, CVE-2024-49948, CVE-2024-47732, CVE-2024-47753, CVE-2024-47727, CVE-2024-49896,     CVE-2024-47707, CVE-2024-47743, CVE-2024-49915, CVE-2024-47695, CVE-2024-49960, CVE-2024-49935,     CVE-2024-49868, CVE-2024-49918, CVE-2024-49969, CVE-2024-53164, CVE-2024-49879, CVE-2024-50012,     CVE-2024-50000, CVE-2024-49974, CVE-2024-49998, CVE-2024-49933, CVE-2024-47733, CVE-2024-49924,     CVE-2024-47757, CVE-2024-47699, CVE-2024-49983, CVE-2024-50016, CVE-2024-49907, CVE-2024-49965,     CVE-2024-49859, CVE-2024-50013, CVE-2024-49871, CVE-2024-49994, CVE-2024-49850, CVE-2024-49947,     CVE-2024-49955, CVE-2024-49962, CVE-2024-47692, CVE-2024-53141, CVE-2024-50014, CVE-2024-47689,     CVE-2024-49874, CVE-2024-50005, CVE-2024-47741, CVE-2024-49880, CVE-2024-47738, CVE-2024-47745,     CVE-2024-49917, CVE-2024-47728, CVE-2024-49856, CVE-2024-49925, CVE-2024-47671, CVE-2023-52917,     CVE-2024-47679, CVE-2024-49975, CVE-2024-47734, CVE-2024-47720, CVE-2024-47686, CVE-2024-49892,     CVE-2024-49936, CVE-2024-49888, CVE-2024-49909, CVE-2024-49986, CVE-2024-49930, CVE-2024-47740,     CVE-2024-49923, CVE-2024-47754, CVE-2024-50179, CVE-2024-49978, CVE-2024-47735, CVE-2024-49886,     CVE-2024-49903, CVE-2024-47681, CVE-2024-49897, CVE-2024-49951, CVE-2024-49946, CVE-2024-49954,     CVE-2024-47691, CVE-2024-49863, CVE-2024-47719, CVE-2024-47693, CVE-2024-47713, CVE-2024-50006,     CVE-2024-49855, CVE-2024-49851, CVE-2024-49894, CVE-2024-49895, CVE-2024-49987, CVE-2024-47700,     CVE-2024-47688, CVE-2024-49982, CVE-2024-47685, CVE-2024-53144, CVE-2024-47670, CVE-2024-47696,     CVE-2024-47710, CVE-2024-47737, CVE-2024-49988, CVE-2024-47684, CVE-2024-47718, CVE-2024-49876,     CVE-2024-49852, CVE-2024-49980, CVE-2024-49877, CVE-2024-50175, CVE-2024-49981, CVE-2024-47677,     CVE-2024-49973, CVE-2024-49922, CVE-2024-50015, CVE-2024-49938, CVE-2024-47752, CVE-2024-49902,     CVE-2024-49944, CVE-2024-49952, CVE-2024-47747, CVE-2024-41016, CVE-2024-50001, CVE-2024-49891,     CVE-2024-47703, CVE-2024-47744, CVE-2024-49861, CVE-2024-49875, CVE-2024-49901, CVE-2024-49881,     CVE-2024-49937, CVE-2024-47706, CVE-2024-47690, CVE-2024-49958, CVE-2024-49961, CVE-2024-49882,     CVE-2024-47739, CVE-2024-49996, CVE-2024-49905, CVE-2024-47705, CVE-2024-49942, CVE-2024-47697,     CVE-2024-47723, CVE-2024-49853, CVE-2024-49862, CVE-2024-47751, CVE-2024-49950, CVE-2024-50176,     CVE-2024-49939, CVE-2024-49864, CVE-2024-49997, CVE-2024-49995, CVE-2024-49885, CVE-2024-49949,     CVE-2024-53103, CVE-2024-49991, CVE-2024-49866, CVE-2024-49977, CVE-2024-47682, CVE-2024-49927,     CVE-2024-49985, CVE-2024-49898, CVE-2024-47678, CVE-2024-47701, CVE-2024-47742, CVE-2024-47750,     CVE-2024-47716, CVE-2024-49989)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7303-3 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - TPM device driver;

    - Hardware crypto device drivers;

    - ARM SCMI message protocol;

    - EFI core;

    - GPU drivers;

    - I2C subsystem;

    - I3C subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - Mailbox framework;

    - Media drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - x86 platform drivers;

    - Powercap sysfs driver;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - USB Device Class drivers;

    - vDPA drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - SMB network file system;

    - BPF subsystem;

    - Virtio network driver;

    - TCP network protocol;

    - Perf events;

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Static call mechanism;

    - Tracing infrastructure;

    - Memory management;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - NCSI (Network Controller Sideband Interface) driver;

    - RxRPC session sockets;

    - SCTP protocol;

    - TIPC protocol;

    - Wireless networking;

    - AudioScience HPI driver;

    - KVM core; (CVE-2024-47709, CVE-2024-49889, CVE-2024-49931, CVE-2024-50008, CVE-2024-49969,     CVE-2024-49975, CVE-2024-49958, CVE-2024-47756, CVE-2024-49944, CVE-2024-47707, CVE-2024-47693,     CVE-2024-47686, CVE-2024-47734, CVE-2024-47750, CVE-2024-50179, CVE-2024-49942, CVE-2024-49864,     CVE-2024-49891, CVE-2024-49965, CVE-2024-49905, CVE-2024-47719, CVE-2024-49877, CVE-2024-47688,     CVE-2024-47691, CVE-2024-47710, CVE-2024-47748, CVE-2024-49948, CVE-2024-49998, CVE-2024-47673,     CVE-2024-47738, CVE-2024-47701, CVE-2024-47705, CVE-2024-49930, CVE-2024-49985, CVE-2024-50016,     CVE-2024-53144, CVE-2023-52917, CVE-2024-47690, CVE-2024-47675, CVE-2024-50176, CVE-2024-49922,     CVE-2024-47704, CVE-2024-49982, CVE-2024-47741, CVE-2024-49991, CVE-2024-49902, CVE-2024-49883,     CVE-2024-49892, CVE-2024-50002, CVE-2024-49945, CVE-2024-49959, CVE-2024-47732, CVE-2024-49856,     CVE-2024-47677, CVE-2024-49978, CVE-2024-49966, CVE-2024-49937, CVE-2024-47744, CVE-2024-49890,     CVE-2024-47739, CVE-2024-50012, CVE-2024-47742, CVE-2024-49980, CVE-2024-47706, CVE-2024-49994,     CVE-2024-50017, CVE-2024-47697, CVE-2024-49996, CVE-2024-49953, CVE-2024-49871, CVE-2024-47723,     CVE-2024-49987, CVE-2024-49917, CVE-2024-49888, CVE-2024-49866, CVE-2024-50005, CVE-2024-47681,     CVE-2024-49870, CVE-2024-49898, CVE-2024-49981, CVE-2024-49947, CVE-2024-49918, CVE-2024-49983,     CVE-2024-47698, CVE-2024-49850, CVE-2024-50007, CVE-2024-49900, CVE-2024-49923, CVE-2024-49909,     CVE-2024-47687, CVE-2024-50015, CVE-2024-47715, CVE-2024-47745, CVE-2024-49926, CVE-2024-49879,     CVE-2024-49986, CVE-2024-49929, CVE-2024-49949, CVE-2024-49976, CVE-2024-47749, CVE-2024-47689,     CVE-2024-47720, CVE-2024-47743, CVE-2024-49878, CVE-2024-49935, CVE-2024-49955, CVE-2024-49997,     CVE-2024-49860, CVE-2024-47703, CVE-2024-50175, CVE-2024-49855, CVE-2024-49861, CVE-2024-49951,     CVE-2024-49863, CVE-2024-49882, CVE-2024-50000, CVE-2024-49912, CVE-2024-49974, CVE-2024-49977,     CVE-2024-47752, CVE-2024-47700, CVE-2024-49911, CVE-2024-49852, CVE-2024-47740, CVE-2024-47671,     CVE-2024-49988, CVE-2024-47699, CVE-2024-47757, CVE-2024-49933, CVE-2024-49913, CVE-2024-49907,     CVE-2024-49881, CVE-2024-47751, CVE-2024-47753, CVE-2024-47731, CVE-2024-47730, CVE-2024-49934,     CVE-2024-49957, CVE-2024-49938, CVE-2024-47728, CVE-2024-49867, CVE-2024-47754, CVE-2024-49919,     CVE-2024-49992, CVE-2024-49950, CVE-2024-49954, CVE-2024-49924, CVE-2024-47670, CVE-2024-50014,     CVE-2024-47684, CVE-2024-49884, CVE-2024-47678, CVE-2024-49894, CVE-2024-49859, CVE-2024-47735,     CVE-2024-47696, CVE-2024-49999, CVE-2024-49880, CVE-2024-47747, CVE-2024-49885, CVE-2024-49963,     CVE-2024-49995, CVE-2024-49897, CVE-2024-49868, CVE-2024-49862, CVE-2024-49928, CVE-2024-47685,     CVE-2024-47692, CVE-2024-49927, CVE-2024-47695, CVE-2024-49896, CVE-2024-49875, CVE-2024-49853,     CVE-2024-47714, CVE-2024-49989, CVE-2024-49858, CVE-2024-49952, CVE-2024-49973, CVE-2024-49925,     CVE-2024-49851, CVE-2024-47712, CVE-2024-49961, CVE-2024-47713, CVE-2024-47718, CVE-2024-49962,     CVE-2024-47737, CVE-2024-50001, CVE-2024-49876, CVE-2024-49903, CVE-2024-49939, CVE-2024-49886,     CVE-2024-47679, CVE-2024-50006, CVE-2024-49874, CVE-2024-47716, CVE-2024-49895, CVE-2024-47727,     CVE-2024-47672, CVE-2024-49901, CVE-2024-47733, CVE-2024-47682, CVE-2024-47702, CVE-2024-50013,     CVE-2024-41016, CVE-2024-49960, CVE-2024-49936, CVE-2024-49946, CVE-2024-49915)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7385-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - TPM device driver;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DAX dirext access to differentiated memory framework;

    - ARM SCMI message protocol;

    - EFI core;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Media drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Powercap sysfs driver;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - Direct Digital Synthesis drivers;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - TI TPS6598x USB Power Delivery controller driver;

    - vDPA drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - SMB network file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - User-space API (UAPI);

    - io_uring subsystem;

    - Perf events;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Static call mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Maple Tree data structure library;

    - Memory management;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - Wireless networking;

    - eXpress Data Path;

    - AudioScience HPI driver;

    - KVM core; (CVE-2024-49927, CVE-2024-47719, CVE-2024-49878, CVE-2024-50200, CVE-2024-50013,     CVE-2024-50187, CVE-2024-49852, CVE-2024-49913, CVE-2024-50080, CVE-2024-49903, CVE-2024-47745,     CVE-2024-50184, CVE-2024-50117, CVE-2024-49863, CVE-2024-49973, CVE-2024-47727, CVE-2024-53170,     CVE-2024-49933, CVE-2024-49900, CVE-2024-50095, CVE-2024-49928, CVE-2024-49858, CVE-2024-47731,     CVE-2024-49896, CVE-2024-53104, CVE-2024-49972, CVE-2024-49969, CVE-2024-50176, CVE-2024-47739,     CVE-2024-49995, CVE-2024-49982, CVE-2024-50044, CVE-2024-49957, CVE-2024-47748, CVE-2024-47744,     CVE-2024-49978, CVE-2024-49879, CVE-2024-49987, CVE-2024-49929, CVE-2024-49905, CVE-2024-47723,     CVE-2024-53144, CVE-2024-50066, CVE-2024-47735, CVE-2024-50057, CVE-2024-49890, CVE-2024-49963,     CVE-2024-49955, CVE-2024-49974, CVE-2024-50049, CVE-2024-47710, CVE-2024-47682, CVE-2024-47734,     CVE-2024-47691, CVE-2024-49999, CVE-2024-50098, CVE-2024-47672, CVE-2024-50056, CVE-2024-49983,     CVE-2024-50005, CVE-2024-50045, CVE-2024-49866, CVE-2024-49953, CVE-2024-47750, CVE-2024-49917,     CVE-2024-50026, CVE-2024-50009, CVE-2024-47718, CVE-2024-50070, CVE-2024-47700, CVE-2024-49986,     CVE-2024-49907, CVE-2024-49884, CVE-2024-50085, CVE-2024-50087, CVE-2024-49875, CVE-2024-47728,     CVE-2024-49861, CVE-2024-49851, CVE-2024-49980, CVE-2024-49898, CVE-2024-47681, CVE-2024-49965,     CVE-2024-49960, CVE-2024-50020, CVE-2024-50012, CVE-2024-50186, CVE-2024-49889, CVE-2024-50030,     CVE-2024-50046, CVE-2024-50180, CVE-2024-49966, CVE-2024-49897, CVE-2024-49985, CVE-2024-49918,     CVE-2024-47754, CVE-2024-50082, CVE-2024-47757, CVE-2024-47711, CVE-2024-47737, CVE-2024-47716,     CVE-2024-50069, CVE-2024-47696, CVE-2024-50031, CVE-2024-50202, CVE-2024-47713, CVE-2024-49894,     CVE-2024-49921, CVE-2024-50022, CVE-2024-49856, CVE-2024-47740, CVE-2024-49868, CVE-2024-49919,     CVE-2024-47679, CVE-2024-47695, CVE-2024-47714, CVE-2024-49996, CVE-2024-50196, CVE-2024-49997,     CVE-2024-49883, CVE-2024-49936, CVE-2024-49962, CVE-2024-47673, CVE-2024-56663, CVE-2024-49892,     CVE-2024-47685, CVE-2024-50233, CVE-2024-49891, CVE-2024-47738, CVE-2024-49870, CVE-2024-49885,     CVE-2024-50025, CVE-2024-50006, CVE-2024-49968, CVE-2024-47709, CVE-2024-47751, CVE-2024-50058,     CVE-2024-50086, CVE-2024-50072, CVE-2024-50195, CVE-2024-56582, CVE-2024-50014, CVE-2024-49886,     CVE-2024-47743, CVE-2024-50185, CVE-2024-50193, CVE-2024-49909, CVE-2024-50077, CVE-2024-49930,     CVE-2024-49946, CVE-2024-50192, CVE-2024-50041, CVE-2024-47698, CVE-2024-50188, CVE-2024-49977,     CVE-2024-47687, CVE-2024-49945, CVE-2024-50008, CVE-2024-49859, CVE-2024-50062, CVE-2024-49880,     CVE-2024-47671, CVE-2024-49867, CVE-2024-49912, CVE-2024-56614, CVE-2024-49862, CVE-2024-50021,     CVE-2024-47670, CVE-2024-49911, CVE-2024-49855, CVE-2024-47712, CVE-2024-50229, CVE-2024-50096,     CVE-2024-49895, CVE-2024-47677, CVE-2024-49934, CVE-2024-53156, CVE-2024-49893, CVE-2024-49925,     CVE-2024-50063, CVE-2024-49926, CVE-2024-50201, CVE-2024-50033, CVE-2024-50199, CVE-2024-49874,     CVE-2024-47732, CVE-2024-50078, CVE-2024-49935, CVE-2024-49902, CVE-2024-49989, CVE-2024-47675,     CVE-2024-50064, CVE-2024-50015, CVE-2024-41016, CVE-2024-49949, CVE-2024-50090, CVE-2024-49860,     CVE-2024-50036, CVE-2024-50084, CVE-2024-50182, CVE-2024-50061, CVE-2024-47702, CVE-2024-47730,     CVE-2024-49951, CVE-2024-49938, CVE-2024-50088, CVE-2024-50198, CVE-2024-49998, CVE-2024-49931,     CVE-2024-49944, CVE-2024-50000, CVE-2024-49954, CVE-2024-47753, CVE-2024-49976, CVE-2024-50048,     CVE-2024-49881, CVE-2024-50093, CVE-2024-50019, CVE-2024-50059, CVE-2024-50016, CVE-2024-50068,     CVE-2024-49920, CVE-2024-50035, CVE-2024-50197, CVE-2024-47699, CVE-2024-49914, CVE-2024-50191,     CVE-2024-50083, CVE-2024-47701, CVE-2024-49877, CVE-2024-50017, CVE-2024-49915, CVE-2024-50001,     CVE-2024-49864, CVE-2024-50189, CVE-2024-50101, CVE-2024-47704, CVE-2024-50024, CVE-2024-50038,     CVE-2024-49850, CVE-2024-50027, CVE-2024-49952, CVE-2024-50074, CVE-2024-50171, CVE-2024-53165,     CVE-2024-47689, CVE-2024-49865, CVE-2024-49853, CVE-2024-47742, CVE-2024-49994, CVE-2024-50179,     CVE-2024-47686, CVE-2024-49975, CVE-2024-49948, CVE-2024-50099, CVE-2024-50175, CVE-2024-50028,     CVE-2024-49947, CVE-2024-47741, CVE-2024-49888, CVE-2024-50055, CVE-2024-47749, CVE-2024-49992,     CVE-2024-47715, CVE-2024-49922, CVE-2024-47756, CVE-2024-50023, CVE-2024-47720, CVE-2024-50194,     CVE-2024-47688, CVE-2024-49991, CVE-2024-47705, CVE-2024-49942, CVE-2024-50047, CVE-2024-49981,     CVE-2024-49950, CVE-2024-47684, CVE-2024-50065, CVE-2024-49939, CVE-2024-47726, CVE-2024-47697,     CVE-2024-49959, CVE-2024-47690, CVE-2024-50040, CVE-2024-50002, CVE-2024-50029, CVE-2024-47752,     CVE-2024-49924, CVE-2024-50073, CVE-2024-47733, CVE-2024-50075, CVE-2024-49937, CVE-2024-47707,     CVE-2024-47692, CVE-2024-47703, CVE-2024-49988, CVE-2024-50060, CVE-2024-50039, CVE-2024-49961,     CVE-2024-50042, CVE-2024-50148, CVE-2024-47678, CVE-2024-49923, CVE-2024-49901, CVE-2024-47706,     CVE-2024-49882, CVE-2024-47693, CVE-2024-49876, CVE-2024-47747, CVE-2024-49871, CVE-2024-50076,     CVE-2024-50183, CVE-2024-50007, CVE-2024-49958, CVE-2024-50134)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7384-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - TPM device driver;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DAX dirext access to differentiated memory framework;

    - ARM SCMI message protocol;

    - EFI core;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Media drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Powercap sysfs driver;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - Direct Digital Synthesis drivers;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - TI TPS6598x USB Power Delivery controller driver;

    - vDPA drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - SMB network file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - User-space API (UAPI);

    - io_uring subsystem;

    - Perf events;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Static call mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Maple Tree data structure library;

    - Memory management;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - Wireless networking;

    - eXpress Data Path;

    - AudioScience HPI driver;

    - KVM core; (CVE-2024-49994, CVE-2024-47740, CVE-2024-49936, CVE-2024-47716, CVE-2024-47733,     CVE-2024-50075, CVE-2024-49870, CVE-2024-50007, CVE-2024-49897, CVE-2024-49915, CVE-2024-47756,     CVE-2024-47700, CVE-2024-49946, CVE-2024-50012, CVE-2024-47750, CVE-2024-49863, CVE-2024-50059,     CVE-2024-50026, CVE-2024-49995, CVE-2024-50035, CVE-2024-47751, CVE-2024-50096, CVE-2024-50082,     CVE-2024-50090, CVE-2024-50000, CVE-2024-47690, CVE-2024-47741, CVE-2024-49898, CVE-2024-47685,     CVE-2024-50038, CVE-2024-49957, CVE-2024-47682, CVE-2024-50002, CVE-2024-47709, CVE-2024-50201,     CVE-2024-49927, CVE-2024-50076, CVE-2024-56582, CVE-2024-47742, CVE-2024-47734, CVE-2024-50040,     CVE-2024-49862, CVE-2024-49942, CVE-2024-50193, CVE-2024-49880, CVE-2024-50008, CVE-2024-49949,     CVE-2024-50056, CVE-2024-50099, CVE-2024-50180, CVE-2024-50045, CVE-2024-49923, CVE-2024-49987,     CVE-2024-49884, CVE-2024-50031, CVE-2024-47705, CVE-2024-47728, CVE-2024-49969, CVE-2024-50077,     CVE-2024-50188, CVE-2024-49852, CVE-2024-49890, CVE-2024-47745, CVE-2024-50058, CVE-2024-50186,     CVE-2024-47749, CVE-2024-56614, CVE-2024-50021, CVE-2024-50055, CVE-2024-47727, CVE-2024-47677,     CVE-2024-49922, CVE-2024-50015, CVE-2024-50084, CVE-2024-47689, CVE-2024-50101, CVE-2024-47699,     CVE-2024-49947, CVE-2024-49999, CVE-2024-49868, CVE-2024-50184, CVE-2024-50187, CVE-2024-47757,     CVE-2024-49900, CVE-2024-47703, CVE-2024-49975, CVE-2024-47692, CVE-2024-49980, CVE-2024-49951,     CVE-2024-49930, CVE-2024-49867, CVE-2024-49860, CVE-2024-50009, CVE-2024-50072, CVE-2024-50229,     CVE-2024-49954, CVE-2024-50183, CVE-2024-49858, CVE-2024-49909, CVE-2024-49926, CVE-2024-47754,     CVE-2024-50027, CVE-2024-50200, CVE-2024-50196, CVE-2024-50086, CVE-2024-47739, CVE-2024-49978,     CVE-2024-49983, CVE-2024-49894, CVE-2024-49973, CVE-2024-49888, CVE-2024-49974, CVE-2024-47672,     CVE-2024-49977, CVE-2024-47738, CVE-2024-49893, CVE-2024-49876, CVE-2024-49960, CVE-2024-49955,     CVE-2024-47670, CVE-2024-47706, CVE-2024-49931, CVE-2024-47686, CVE-2024-49855, CVE-2024-49901,     CVE-2024-47752, CVE-2024-47675, CVE-2024-47704, CVE-2024-47735, CVE-2024-47744, CVE-2024-50088,     CVE-2024-50070, CVE-2024-47707, CVE-2024-50176, CVE-2024-50080, CVE-2024-50175, CVE-2024-47731,     CVE-2024-49853, CVE-2024-49929, CVE-2024-49989, CVE-2024-49921, CVE-2024-49965, CVE-2024-49891,     CVE-2024-50005, CVE-2024-47715, CVE-2024-50085, CVE-2024-50189, CVE-2024-47723, CVE-2024-50020,     CVE-2024-49902, CVE-2024-47730, CVE-2024-53156, CVE-2024-49895, CVE-2024-49997, CVE-2024-50192,     CVE-2024-49850, CVE-2024-50062, CVE-2024-50033, CVE-2024-49972, CVE-2024-49945, CVE-2024-50036,     CVE-2024-50202, CVE-2024-50095, CVE-2024-49913, CVE-2024-50049, CVE-2024-50148, CVE-2024-49948,     CVE-2024-49866, CVE-2024-49963, CVE-2024-49907, CVE-2024-50117, CVE-2024-49885, CVE-2024-49874,     CVE-2024-50198, CVE-2024-49856, CVE-2024-49986, CVE-2024-49871, CVE-2024-50028, CVE-2024-49889,     CVE-2024-50024, CVE-2024-47687, CVE-2024-50065, CVE-2024-49953, CVE-2024-47748, CVE-2024-47747,     CVE-2024-47673, CVE-2024-49928, CVE-2024-50191, CVE-2024-50016, CVE-2024-53170, CVE-2024-49933,     CVE-2024-50029, CVE-2024-50098, CVE-2024-49988, CVE-2024-49985, CVE-2024-50042, CVE-2024-50171,     CVE-2024-50233, CVE-2024-49976, CVE-2024-49996, CVE-2024-49950, CVE-2024-49968, CVE-2024-50083,     CVE-2024-49966, CVE-2024-49851, CVE-2024-50066, CVE-2024-49864, CVE-2024-50048, CVE-2024-50069,     CVE-2024-50001, CVE-2024-50194, CVE-2024-47693, CVE-2024-49905, CVE-2024-50134, CVE-2024-49944,     CVE-2024-50060, CVE-2024-49892, CVE-2024-49982, CVE-2024-49883, CVE-2024-49875, CVE-2024-47691,     CVE-2024-47714, CVE-2024-47712, CVE-2024-50025, CVE-2024-50023, CVE-2024-47726, CVE-2024-50041,     CVE-2024-49896, CVE-2024-50195, CVE-2024-47679, CVE-2024-47678, CVE-2024-49877, CVE-2024-47684,     CVE-2024-47719, CVE-2024-49937, CVE-2024-53144, CVE-2024-47737, CVE-2024-49998, CVE-2024-49879,     CVE-2024-50019, CVE-2024-50093, CVE-2024-50073, CVE-2024-50064, CVE-2024-50006, CVE-2024-47695,     CVE-2024-49882, CVE-2024-50179, CVE-2024-49865, CVE-2024-47702, CVE-2024-50046, CVE-2024-49919,     CVE-2024-47697, CVE-2024-50017, CVE-2024-50014, CVE-2024-49861, CVE-2024-50197, CVE-2024-49886,     CVE-2024-49938, CVE-2024-49991, CVE-2024-49981, CVE-2024-56663, CVE-2024-49914, CVE-2024-49920,     CVE-2024-47671, CVE-2024-49961, CVE-2024-47698, CVE-2024-49952, CVE-2024-47688, CVE-2024-50078,     CVE-2024-50199, CVE-2024-49918, CVE-2024-50044, CVE-2024-50013, CVE-2024-47711, CVE-2024-49917,     CVE-2024-50057, CVE-2024-47718, CVE-2024-49911, CVE-2024-49912, CVE-2024-53165, CVE-2024-50068,     CVE-2024-50087, CVE-2024-47720, CVE-2024-49958, CVE-2024-49934, CVE-2024-49859, CVE-2024-47710,     CVE-2024-49903, CVE-2024-49925, CVE-2024-50061, CVE-2024-41016, CVE-2024-47696, CVE-2024-47701,     CVE-2024-49939, CVE-2024-49924, CVE-2024-49935, CVE-2024-50030, CVE-2024-50074, CVE-2024-47681,     CVE-2024-47743, CVE-2024-49992, CVE-2024-49881, CVE-2024-50063, CVE-2024-47713, CVE-2024-50039,     CVE-2024-50185, CVE-2024-49962, CVE-2024-50182, CVE-2024-50022, CVE-2024-49959, CVE-2024-50047,     CVE-2024-53104, CVE-2024-49878, CVE-2024-47732, CVE-2024-47753)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7403-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - TPM device driver;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DAX dirext access to differentiated memory framework;

    - ARM SCMI message protocol;

    - EFI core;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Media drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Powercap sysfs driver;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - Direct Digital Synthesis drivers;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - TI TPS6598x USB Power Delivery controller driver;

    - vDPA drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - SMB network file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Network namespace;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - User-space API (UAPI);

    - io_uring subsystem;

    - Perf events;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Static call mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Maple Tree data structure library;

    - Memory management;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - Wireless networking;

    - eXpress Data Path;

    - AudioScience HPI driver;

    - KVM core; (CVE-2024-49950, CVE-2024-49955, CVE-2024-50077, CVE-2024-57798, CVE-2024-47671,     CVE-2024-49987, CVE-2024-50078, CVE-2024-49985, CVE-2024-49981, CVE-2024-49852, CVE-2024-49882,     CVE-2024-49925, CVE-2024-50047, CVE-2024-47752, CVE-2024-49851, CVE-2024-50229, CVE-2024-47675,     CVE-2024-50017, CVE-2024-47726, CVE-2024-50008, CVE-2024-49889, CVE-2024-50059, CVE-2024-53144,     CVE-2024-49959, CVE-2024-49886, CVE-2024-50035, CVE-2024-50036, CVE-2024-47713, CVE-2024-47720,     CVE-2024-47756, CVE-2024-49974, CVE-2024-49864, CVE-2024-47688, CVE-2024-47735, CVE-2024-50060,     CVE-2024-50182, CVE-2024-49894, CVE-2024-50002, CVE-2024-47748, CVE-2024-49949, CVE-2024-47757,     CVE-2024-47678, CVE-2024-47737, CVE-2024-49880, CVE-2024-50093, CVE-2024-49914, CVE-2024-50048,     CVE-2024-56658, CVE-2024-50058, CVE-2024-49995, CVE-2024-50096, CVE-2024-49877, CVE-2024-47715,     CVE-2024-50007, CVE-2024-56614, CVE-2024-49948, CVE-2024-49935, CVE-2024-50009, CVE-2024-50200,     CVE-2024-50070, CVE-2024-49856, CVE-2024-50005, CVE-2024-49865, CVE-2024-50085, CVE-2024-49892,     CVE-2024-53063, CVE-2024-47695, CVE-2024-49991, CVE-2024-47687, CVE-2024-53140, CVE-2024-50179,     CVE-2024-47682, CVE-2024-50080, CVE-2024-50056, CVE-2024-47690, CVE-2024-49939, CVE-2024-56663,     CVE-2024-49913, CVE-2024-47745, CVE-2024-47739, CVE-2024-49920, CVE-2024-47704, CVE-2024-50068,     CVE-2024-49876, CVE-2024-49992, CVE-2024-49980, CVE-2024-49907, CVE-2024-50019, CVE-2024-47747,     CVE-2024-50022, CVE-2024-49946, CVE-2024-56595, CVE-2024-49875, CVE-2024-49968, CVE-2024-47706,     CVE-2024-56672, CVE-2024-47744, CVE-2024-49866, CVE-2024-47677, CVE-2024-49999, CVE-2024-47684,     CVE-2024-49952, CVE-2024-47702, CVE-2024-50084, CVE-2024-49884, CVE-2024-53165, CVE-2024-49997,     CVE-2024-50082, CVE-2024-47705, CVE-2024-49958, CVE-2024-50031, CVE-2024-49927, CVE-2024-50171,     CVE-2024-50193, CVE-2024-49965, CVE-2024-49919, CVE-2024-49915, CVE-2024-47712, CVE-2024-47692,     CVE-2024-47686, CVE-2024-47727, CVE-2024-50000, CVE-2024-50006, CVE-2024-47714, CVE-2024-49878,     CVE-2024-49911, CVE-2024-49936, CVE-2024-50028, CVE-2024-50046, CVE-2024-49975, CVE-2024-47709,     CVE-2024-47718, CVE-2024-50192, CVE-2024-49928, CVE-2024-50030, CVE-2024-49874, CVE-2024-49903,     CVE-2024-47711, CVE-2024-50069, CVE-2024-49923, CVE-2024-47723, CVE-2024-50233, CVE-2024-50088,     CVE-2024-49859, CVE-2024-49973, CVE-2024-47685, CVE-2024-47679, CVE-2024-49890, CVE-2024-53104,     CVE-2024-47670, CVE-2024-47730, CVE-2024-49861, CVE-2024-50086, CVE-2025-0927, CVE-2024-49893,     CVE-2024-56582, CVE-2024-47719, CVE-2024-49982, CVE-2024-47691, CVE-2024-50087, CVE-2024-50185,     CVE-2024-50045, CVE-2024-50064, CVE-2024-47689, CVE-2024-50020, CVE-2024-47672, CVE-2024-49966,     CVE-2024-50038, CVE-2024-49897, CVE-2024-49969, CVE-2024-50180, CVE-2024-49901, CVE-2024-47751,     CVE-2024-49850, CVE-2024-49951, CVE-2024-49905, CVE-2024-49953, CVE-2024-50001, CVE-2024-50062,     CVE-2024-49994, CVE-2024-47734, CVE-2024-50175, CVE-2024-50195, CVE-2024-50049, CVE-2024-47753,     CVE-2024-50074, CVE-2024-50202, CVE-2024-47728, CVE-2024-49902, CVE-2024-50187, CVE-2024-49954,     CVE-2024-50024, CVE-2024-49929, CVE-2024-53170, CVE-2024-49855, CVE-2024-50134, CVE-2024-50039,     CVE-2024-47754, CVE-2024-47743, CVE-2024-50198, CVE-2024-47698, CVE-2024-49989, CVE-2024-50191,     CVE-2024-50063, CVE-2024-49879, CVE-2024-49983, CVE-2024-50016, CVE-2024-47696, CVE-2024-50099,     CVE-2024-50025, CVE-2024-47731, CVE-2024-49853, CVE-2024-47697, CVE-2024-56598, CVE-2024-50196,     CVE-2024-49977, CVE-2024-49896, CVE-2024-50090, CVE-2024-49881, CVE-2024-50055, CVE-2024-50029,     CVE-2024-49978, CVE-2024-49917, CVE-2024-49868, CVE-2024-50201, CVE-2024-47707, CVE-2024-50188,     CVE-2024-49870, CVE-2024-49960, CVE-2024-50026, CVE-2024-50014, CVE-2024-50072, CVE-2024-49900,     CVE-2024-49895, CVE-2024-47732, CVE-2024-50044, CVE-2024-47703, CVE-2024-47700, CVE-2024-49986,     CVE-2024-49858, CVE-2024-49944, CVE-2024-49912, CVE-2024-50015, CVE-2024-50075, CVE-2024-47673,     CVE-2024-49926, CVE-2024-49933, CVE-2024-50095, CVE-2024-50027, CVE-2024-49957, CVE-2024-49996,     CVE-2024-49862, CVE-2024-49891, CVE-2024-49863, CVE-2024-49871, CVE-2024-50061, CVE-2024-53156,     CVE-2024-47716, CVE-2024-50184, CVE-2024-49918, CVE-2024-50013, CVE-2024-50073, CVE-2024-50042,     CVE-2024-50199, CVE-2024-49922, CVE-2024-50098, CVE-2024-50148, CVE-2024-49921, CVE-2024-50176,     CVE-2024-50194, CVE-2024-49961, CVE-2024-49931, CVE-2024-50101, CVE-2024-50021, CVE-2024-47701,     CVE-2024-50033, CVE-2024-47740, CVE-2024-50041, CVE-2024-49947, CVE-2024-49972, CVE-2024-47750,     CVE-2024-49934, CVE-2024-49924, CVE-2024-49860, CVE-2024-50012, CVE-2024-47681, CVE-2024-49930,     CVE-2024-49883, CVE-2024-47710, CVE-2024-50186, CVE-2024-49976, CVE-2024-47738, CVE-2024-47742,     CVE-2024-50197, CVE-2024-50302, CVE-2024-49938, CVE-2024-49888, CVE-2024-47693, CVE-2024-49937,     CVE-2024-41016, CVE-2024-49945, CVE-2024-50023, CVE-2024-47749, CVE-2024-50057, CVE-2024-49962,     CVE-2024-49998, CVE-2024-50076, CVE-2024-50083, CVE-2024-49909, CVE-2024-47733, CVE-2024-50117,     CVE-2024-47741, CVE-2024-50040, CVE-2024-50066, CVE-2024-49942, CVE-2024-50065, CVE-2024-49898,     CVE-2024-49867, CVE-2024-49988, CVE-2024-50183, CVE-2024-47699, CVE-2024-49885, CVE-2024-50189,     CVE-2024-49963)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7539-1 advisory.

    Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2024-23848)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - Virtio block driver;

    - Character device driver;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - LED subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PPS (Pulse Per Second) driver;

    - PTP clock framework;

    - RapidIO drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Trusted Execution Environment drivers;

    - USB DSL drivers;

    - USB Device Class drivers;

    - USB core drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - KVM subsystem;

    - L3 Master device support module;

    - LAPB network protocol;

    - Network namespace;

    - Netfilter;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Kernel init infrastructure;

    - Process Accounting mechanism;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - Perf events;

    - printk logging mechanism;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 802.1Q VLAN protocol;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Netlink;

    - NET/ROM layer;

    - NFC subsystem;

    - Open vSwitch;

    - Packet sockets;

    - Rose network layer;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - Tomoyo security module;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - Amlogic Meson SoC drivers;

    - USB sound devices; (CVE-2025-21814, CVE-2024-57938, CVE-2024-56605, CVE-2024-47747, CVE-2024-50251,     CVE-2021-47191, CVE-2024-49973, CVE-2024-53171, CVE-2024-50167, CVE-2024-53066, CVE-2024-57980,     CVE-2024-56558, CVE-2024-57906, CVE-2025-21846, CVE-2024-56576, CVE-2024-56593, CVE-2024-57850,     CVE-2024-56594, CVE-2024-50256, CVE-2024-49948, CVE-2024-38544, CVE-2024-58071, CVE-2024-58017,     CVE-2024-50282, CVE-2024-47737, CVE-2024-47740, CVE-2024-56548, CVE-2025-21925, CVE-2025-21689,     CVE-2024-46826, CVE-2024-26982, CVE-2024-53121, CVE-2024-50171, CVE-2024-50278, CVE-2024-50290,     CVE-2024-56597, CVE-2025-21708, CVE-2024-49867, CVE-2024-57849, CVE-2024-56769, CVE-2024-58010,     CVE-2025-21848, CVE-2024-50218, CVE-2024-53063, CVE-2025-21697, CVE-2023-52664, CVE-2024-50302,     CVE-2024-58014, CVE-2024-53112, CVE-2024-50099, CVE-2024-49884, CVE-2024-53138, CVE-2024-53183,     CVE-2024-56658, CVE-2024-57884, CVE-2024-50229, CVE-2024-53174, CVE-2024-47756, CVE-2024-49851,     CVE-2024-47699, CVE-2024-58072, CVE-2024-49878, CVE-2024-50148, CVE-2024-57904, CVE-2024-50045,     CVE-2024-53157, CVE-2024-53146, CVE-2024-50287, CVE-2024-49883, CVE-2024-56724, CVE-2024-58090,     CVE-2025-21722, CVE-2024-53061, CVE-2025-21664, CVE-2024-50265, CVE-2024-50168, CVE-2024-49894,     CVE-2024-50035, CVE-2024-57913, CVE-2024-57929, CVE-2024-48881, CVE-2024-58058, CVE-2024-56633,     CVE-2024-56756, CVE-2024-49925, CVE-2024-50233, CVE-2025-21639, CVE-2024-49944, CVE-2024-53194,     CVE-2025-21904, CVE-2024-56581, CVE-2025-21877, CVE-2025-21811, CVE-2024-53156, CVE-2024-57912,     CVE-2025-21653, CVE-2024-50024, CVE-2024-57931, CVE-2024-26928, CVE-2024-49949, CVE-2024-56688,     CVE-2024-47757, CVE-2024-56601, CVE-2024-56562, CVE-2025-21749, CVE-2024-47709, CVE-2025-21934,     CVE-2024-47674, CVE-2024-49879, CVE-2024-49924, CVE-2024-46731, CVE-2024-53214, CVE-2024-56659,     CVE-2024-50236, CVE-2025-21694, CVE-2024-47707, CVE-2024-53680, CVE-2024-41066, CVE-2024-56651,     CVE-2025-21718, CVE-2024-50279, CVE-2024-50040, CVE-2024-56598, CVE-2023-52927, CVE-2025-21862,     CVE-2024-49981, CVE-2024-50273, CVE-2024-50180, CVE-2025-21753, CVE-2024-49957, CVE-2024-56615,     CVE-2024-46854, CVE-2025-21721, CVE-2024-49962, CVE-2024-49974, CVE-2024-53217, CVE-2024-35887,     CVE-2024-53172, CVE-2024-58069, CVE-2024-53124, CVE-2024-50131, CVE-2024-53158, CVE-2024-57901,     CVE-2024-46849, CVE-2025-21917, CVE-2024-57892, CVE-2024-53131, CVE-2024-56587, CVE-2024-50151,     CVE-2024-49860, CVE-2024-53184, CVE-2025-21687, CVE-2024-56690, CVE-2025-21926, CVE-2024-47723,     CVE-2024-50195, CVE-2025-21760, CVE-2024-50142, CVE-2025-21910, CVE-2024-49997, CVE-2024-58083,     CVE-2024-52332, CVE-2025-21806, CVE-2025-21640, CVE-2025-21922, CVE-2024-58051, CVE-2024-56606,     CVE-2024-47698, CVE-2024-50044, CVE-2024-56574, CVE-2025-21785, CVE-2024-56532, CVE-2024-53165,     CVE-2024-56779, CVE-2024-50269, CVE-2024-47684, CVE-2024-50006, CVE-2024-47749, CVE-2024-56595,     CVE-2025-21736, CVE-2024-53198, CVE-2024-49952, CVE-2024-53104, CVE-2025-21772, CVE-2025-21914,     CVE-2024-53127, CVE-2024-50301, CVE-2024-53239, CVE-2024-47670, CVE-2021-47119, CVE-2025-21702,     CVE-2024-50296, CVE-2024-50033, CVE-2024-49975, CVE-2024-57900, CVE-2024-56596, CVE-2024-56569,     CVE-2024-47692, CVE-2024-56567, CVE-2024-56746, CVE-2024-47672, CVE-2025-21866, CVE-2024-58001,     CVE-2024-50202, CVE-2024-49955, CVE-2024-38588, CVE-2024-47706, CVE-2025-21700, CVE-2025-21763,     CVE-2024-47696, CVE-2024-53150, CVE-2024-53237, CVE-2024-40953, CVE-2024-53197, CVE-2024-49892,     CVE-2024-40965, CVE-2024-49903, CVE-2024-42252, CVE-2024-56642, CVE-2024-56739, CVE-2024-43098,     CVE-2024-57973, CVE-2023-52741, CVE-2024-50096, CVE-2025-21835, CVE-2024-49882, CVE-2025-21765,     CVE-2024-57889, CVE-2022-49034, CVE-2024-57946, CVE-2025-21735, CVE-2024-56720, CVE-2024-57890,     CVE-2024-50267, CVE-2025-21920, CVE-2024-56634, CVE-2024-56599, CVE-2024-47701, CVE-2024-56780,     CVE-2024-49900, CVE-2024-26689, CVE-2025-21638, CVE-2024-50150, CVE-2024-47679, CVE-2025-21776,     CVE-2024-49996, CVE-2024-49896, CVE-2024-53140, CVE-2024-50127, CVE-2024-53148, CVE-2024-49963,     CVE-2024-56645, CVE-2025-21859, CVE-2024-53135, CVE-2024-56614, CVE-2024-49985, CVE-2024-57948,     CVE-2024-50230, CVE-2024-57986, CVE-2024-56767, CVE-2024-50199, CVE-2024-53181, CVE-2024-49936,     CVE-2024-58052, CVE-2024-57910, CVE-2024-47671, CVE-2024-50134, CVE-2024-55916, CVE-2024-50184,     CVE-2024-56691, CVE-2024-26915, CVE-2024-58085, CVE-2025-21909, CVE-2024-44938, CVE-2024-41016,     CVE-2025-21761, CVE-2024-35958, CVE-2024-49982, CVE-2024-57911, CVE-2025-21858, CVE-2024-57981,     CVE-2024-53059, CVE-2024-26996, CVE-2025-21916, CVE-2025-21871, CVE-2021-47219, CVE-2024-50059,     CVE-2024-58020, CVE-2025-21744, CVE-2024-47710, CVE-2025-21699, CVE-2024-49958, CVE-2024-53155,     CVE-2024-53161, CVE-2024-56572, CVE-2024-49938, CVE-2024-53142, CVE-2024-53145, CVE-2024-50205,     CVE-2024-47712, CVE-2024-56704, CVE-2024-56619, CVE-2024-56603, CVE-2024-56650, CVE-2024-50007,     CVE-2024-56586, CVE-2025-21898, CVE-2024-49877, CVE-2024-56723, CVE-2024-50237, CVE-2025-21781,     CVE-2025-21762, CVE-2024-53130, CVE-2024-57802, CVE-2024-56602, CVE-2024-53101, CVE-2024-57977,     CVE-2025-21948, CVE-2024-47685, CVE-2024-35896, CVE-2024-58002, CVE-2024-49902, CVE-2024-50116,     CVE-2024-56531, CVE-2024-56600, CVE-2025-21787, CVE-2024-56630, CVE-2024-50055, CVE-2024-47713,     CVE-2024-56570, CVE-2024-46853, CVE-2024-57807, CVE-2023-52458, CVE-2024-44931, CVE-2025-21728,     CVE-2024-43900, CVE-2024-57951, CVE-2025-21782, CVE-2024-43863, CVE-2024-56781, CVE-2025-21971,     CVE-2024-56539, CVE-2024-57979, CVE-2024-50179, CVE-2024-56643, CVE-2025-21647, CVE-2024-50262,     CVE-2024-56629, CVE-2024-50234, CVE-2024-57922, CVE-2024-58063, CVE-2024-53690, CVE-2024-50082,     CVE-2024-57908, CVE-2024-53227, CVE-2024-58009, CVE-2024-56644, CVE-2024-56681, CVE-2024-58007,     CVE-2024-56637, CVE-2024-50074, CVE-2025-21731, CVE-2024-49965, CVE-2025-21823, CVE-2024-56747,     CVE-2025-21935, CVE-2025-21905, CVE-2024-47742, CVE-2024-56670, CVE-2024-50143, CVE-2025-21715,     CVE-2024-35864, CVE-2024-50039, CVE-2024-56694, CVE-2025-21678, CVE-2024-58055, CVE-2024-50117,     CVE-2024-49868, CVE-2024-56748, CVE-2025-21764, CVE-2024-49959, CVE-2025-21704, CVE-2024-57902,     CVE-2025-21928, CVE-2024-50299, CVE-2025-21719, CVE-2025-21865, CVE-2024-50051, CVE-2024-47697,     CVE-2024-56631, CVE-2024-56770, CVE-2024-49966, CVE-2024-40911, CVE-2024-50194, CVE-2024-50008,     CVE-2024-53173, CVE-2025-21791, CVE-2024-56700)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0034-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

    The Linux Enterprise 12 SP5 kernel turned LTSS (Extended Security)

    The following security bugs were fixed:

    - CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
    - CVE-2021-47163: kABI fix for tipc: wait and exit until all work queues are done (bsc#1221980).
    - CVE-2021-47612: nfc: fix segfault in nfc_genl_dump_devices_done (bsc#1226585).
    - CVE-2022-48809: net: fix a memleak when uncloning an skb dst and its metadata (bsc#1227947).
    - CVE-2022-48951: ASoC: ops: Correct bounds check for second channel on SX controls (bsc#1231929).
    - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
    - CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
    - CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
    - CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
    - CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
    - CVE-2022-48967: NFC: nci: Bounds check struct nfc_target arrays (bsc#1232304).
    - CVE-2022-48971: Bluetooth: Fix not cleanup led when bt_init fails (bsc#1232037).
    - CVE-2022-48972: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (bsc#1232025).
    - CVE-2022-48973: gpio: amd8111: Fix PCI device reference count leak (bsc#1232039).
    - CVE-2022-48978: HID: core: fix shift-out-of-bounds in hid_report_raw_event (bsc#1232038).
    - CVE-2022-48991: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (bsc#1232070).
    - CVE-2022-48992: ASoC: soc-pcm: Add NULL check in BE reparenting (bsc#1232071).
    - CVE-2022-49000: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (bsc#1232123).
    - CVE-2022-49002: iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (bsc#1232133).
    - CVE-2022-49010: hwmon: (coretemp) Check for null before removing sysfs attrs (bsc#1232172).
    - CVE-2022-49011: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (bsc#1232006).
    - CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1231890).
    - CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
    - CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
    - CVE-2022-49021: net: phy: fix null-ptr-deref while probe() failed (bsc#1231939).
    - CVE-2022-49026: e100: Fix possible use after free in e100_xmit_prepare (bsc#1231997).
    - CVE-2022-49027: iavf: Fix error handling in iavf_init_module() (bsc#1232007).
    - CVE-2022-49028: ixgbevf: Fix resource leak in ixgbevf_init_module() (bsc#1231996).
    - CVE-2022-49029: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (bsc#1231995).
    - CVE-2023-52898: xhci: Fix null pointer dereference when host dies (bsc#1229568).
    - CVE-2023-52918: media: pci: cx23885: check cx23885_vdev_init() return (bsc#1232047).
    - CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
    - CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
    - CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING     (bsc#1227437).
    - CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
    - CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).
    - CVE-2024-42114: netlink: extend policy range validation (bsc#1228564 prerequisite).
    - CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005 stable-fixes).
    - CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837 stable-     fixes).
    - CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
    - CVE-2024-46724: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (bsc#1230725).
    - CVE-2024-46755: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (bsc#1230802).
    - CVE-2024-46802: drm/amd/display: added NULL check at start of dc_validate_stream (bsc#1231111).
    - CVE-2024-46809: drm/amd/display: Check BIOS images before it is used (bsc#1231148).
    - CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
    - CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links     (bsc#1231197).
    - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231203).
    - CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
    - CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables     (bsc#1231096).
    - CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
    - CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()     (bsc#1231094).
    - CVE-2024-46848: perf/x86/intel: Limit the period on Haswell (bsc#1231072).
    - CVE-2024-47672: wifi: iwlwifi: mvm: do not wait for tx queues if firmware is dead (bsc#1231540).
    - CVE-2024-47673: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped (bsc#1231539).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
    - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).
    - CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).
    - CVE-2024-47697: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (bsc#1231858).
    - CVE-2024-47698: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (bsc#1231859).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
    - CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).
    - CVE-2024-47713: wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (bsc#1232016).
    - CVE-2024-47735: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (bsc#1232111).
    - CVE-2024-47737: nfsd: call cache_put if xdr_reserve_space returns NULL (bsc#1232056).
    - CVE-2024-47742: firmware_loader: Block path traversal (bsc#1232126).
    - CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between     (bsc#1232135).
    - CVE-2024-49851: tpm: Clean up TPM space after command failure (bsc#1232134).
    - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231861).
    - CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).
    - CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).
    - CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).
    - CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).
    - CVE-2024-49891: scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths     (bsc#1232218).
    - CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation     (bsc#1232354).
    - CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).
    - CVE-2024-49901: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (bsc#1232305).
    - CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).
    - CVE-2024-49929: wifi: iwlwifi: mvm: avoid NULL pointer dereference (bsc#1232253).
    - CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).
    - CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).
    - CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).
    - CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error     (bsc#1232149).
    - CVE-2024-49962: ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()     (bsc#1232314).
    - CVE-2024-49966: ocfs2: cancel dqi_sync_work before freeing oinfo (bsc#1232141).
    - CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).
    - CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).
    - CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).
    - CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
    - CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442).
    - CVE-2024-50007: ALSA: asihpi: Fix potential OOB array access (bsc#1232394).
    - CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).
    - CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).
    - CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).
    - CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).
    - CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).
    - CVE-2024-50058: serial: protect uart_port_dtr_rts() in uart_shutdown() too (bsc#1232285).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
216766	Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7295-1)	Nessus	Ubuntu Local Security Checks	2/25/2025	1/6/2026	critical
216944	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7311-1)	Nessus	Ubuntu Local Security Checks	2/28/2025	1/6/2026	critical
217186	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7303-3)	Nessus	Ubuntu Local Security Checks	3/3/2025	1/6/2026	critical
233480	Ubuntu 24.04 LTS : Linux kernel (IBM) vulnerabilities (USN-7385-1)	Nessus	Ubuntu Local Security Checks	3/28/2025	1/6/2026	critical
233677	Ubuntu 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7384-1)	Nessus	Ubuntu Local Security Checks	4/1/2025	1/6/2026	critical
233742	Ubuntu 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7403-1)	Nessus	Ubuntu Local Security Checks	4/1/2025	1/6/2026	critical
213056	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12884)	Nessus	Oracle Linux Local Security Checks	12/16/2024	2/9/2026	critical
237432	Ubuntu 20.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-7539-1)	Nessus	Ubuntu Local Security Checks	5/28/2025	1/6/2026	critical
213597	SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:0034-1)	Nessus	SuSE Local Security Checks	1/9/2025	6/26/2026	critical
237324	RHEL 9 : kernel (RHSA-2025:6966)	Nessus	Red Hat Local Security Checks	5/27/2025	10/28/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical