The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2185-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
    - CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
    - CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
    - CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
    - CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
    - CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
    - CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
    - CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
    - CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
    - CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
    - CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
    - CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
    - CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
    - CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
    - CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
    - CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
    - CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
    - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve     local privilege escalation (bsc#1215420).
    - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve     local privilege escalation (bsc#1215420).
    - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
    - CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986811 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    drm/amd/display: Fix potential memory leak in DMUB hw_init

    [Why]     On resume we perform DMUB hw_init which allocates memory:
    dm_resume->dm_dmub_hw_init->dc_dmub_srv_create->kzalloc     That results in memory leak in suspend/resume scenarios.

    [How]     Allocate memory for the DC wrapper to DMUB only if it was not     allocated before.
    No need to reallocate it on suspend/resume.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989504 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    drm/amd/display: Fix potential memory leak in DMUB hw_init

    [Why]     On resume we perform DMUB hw_init which allocates memory:
    dm_resume->dm_dmub_hw_init->dc_dmub_srv_create->kzalloc     That results in memory leak in suspend/resume scenarios.

    [How]     Allocate memory for the DC wrapper to DMUB only if it was not     allocated before.
    No need to reallocate it on suspend/resume.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/amd/display: Fix potential memory leak in DMUB hw_init [Why] On resume we perform DMUB hw_init which     allocates memory: dm_resume->dm_dmub_hw_init->dc_dmub_srv_create->kzalloc That results in memory leak in     suspend/resume scenarios. [How] Allocate memory for the DC wrapper to DMUB only if it was not allocated     before. No need to reallocate it on suspend/resume. (CVE-2021-47253)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
200930	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2024:2185-1)	Nessus	SuSE Local Security Checks	6/25/2024	6/26/2026	critical
268306	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986811)	Nessus	Unity Linux Local Security Checks	10/7/2025	10/15/2025	medium
273856	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989504)	Nessus	Unity Linux Local Security Checks	11/5/2025	11/5/2025	medium
224386	Linux Distros Unpatched Vulnerability : CVE-2021-47253	Nessus	Misc.	3/5/2025	7/17/2026	medium

Detections

Analytics

Plugins Search

critical

medium

medium

medium