The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989604 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED

    If the callback 'start_streaming' fails, then all     queued buffers in the driver should be returned with     state 'VB2_BUF_STATE_QUEUED'. Currently, they are     returned with 'VB2_BUF_STATE_ERROR' which is wrong.
    Fix this. This also fixes the warning:

    [   65.583633] WARNING: CPU: 5 PID: 593 at drivers/media/common/videobuf2/videobuf2-core.c:1612     vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.585027] Modules linked in: snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_soc_hdmi_codec     dw_hdmi_i2s_audio saa7115 stk1160 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common     videodev mc crct10dif_ce panfrost snd_soc_simple_card snd_soc_audio_graph_card snd_soc_spdif_tx     snd_soc_simple_card_utils gpu_sched phy_rockchip_pcie snd_soc_rockchip_i2s rockchipdrm analogix_dp     dw_mipi_dsi dw_hdmi cec drm_kms_helper drm rtc_rk808 rockchip_saradc industrialio_triggered_buffer     kfifo_buf rockchip_thermal pcie_rockchip_host ip_tables x_tables ipv6     [   65.589383] CPU: 5 PID: 593 Comm: v4l2src0:src Tainted: G        W     5.16.0-rc4-62408-g32447129cb30-dirty #14     [   65.590293] Hardware name: Radxa ROCK Pi 4B (DT)     [   65.590696] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)     [   65.591304] pc : vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.591850] lr : vb2_start_streaming+0x6c/0x160 [videobuf2_common]     [   65.592395] sp : ffff800012bc3ad0     [   65.592685] x29: ffff800012bc3ad0 x28: 0000000000000000 x27: ffff800012bc3cd8     [   65.593312] x26: 0000000000000000 x25: ffff00000d8a7800 x24: 0000000040045612     [   65.593938] x23: ffff800011323000 x22: ffff800012bc3cd8 x21: ffff00000908a8b0     [   65.594562] x20: ffff00000908a8c8 x19: 00000000fffffff4 x18: ffffffffffffffff     [   65.595188] x17: 000000040044ffff x16: 00400034b5503510 x15: ffff800011323f78     [   65.595813] x14: ffff000013163886 x13: ffff000013163885 x12: 00000000000002ce     [   65.596439] x11: 0000000000000028 x10: 0000000000000001 x9 : 0000000000000228     [   65.597064] x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff726c5e78     [   65.597690] x5 : ffff800012bc3990 x4 : 0000000000000000 x3 : ffff000009a34880     [   65.598315] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000007cd99f0     [   65.598940] Call trace:
    [   65.599155]  vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.599672]  vb2_core_streamon+0x17c/0x1a8 [videobuf2_common]     [   65.600179]  vb2_streamon+0x54/0x88 [videobuf2_v4l2]     [   65.600619]  vb2_ioctl_streamon+0x54/0x60 [videobuf2_v4l2]     [   65.601103]  v4l_streamon+0x3c/0x50 [videodev]     [   65.601521]  __video_do_ioctl+0x1a4/0x428 [videodev]     [   65.601977]  video_usercopy+0x320/0x828 [videodev]     [   65.602419]  video_ioctl2+0x3c/0x58 [videodev]     [   65.602830]  v4l2_ioctl+0x60/0x90 [videodev]     [   65.603227]  __arm64_sys_ioctl+0xa8/0xe0     [   65.603576]  invoke_syscall+0x54/0x118     [   65.603911]  el0_svc_common.constprop.3+0x84/0x100     [   65.604332]  do_el0_svc+0x34/0xa0     [   65.604625]  el0_svc+0x1c/0x50     [   65.604897]  el0t_64_sync_handler+0x88/0xb0     [   65.605264]  el0t_64_sync+0x16c/0x170     [   65.605587] ---[ end trace 578e0ba07742170d ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0834-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM (bsc#1186482).
    - CVE-2021-47634: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (bsc#1237758).
    - CVE-2021-47644: media: staging: media: zoran: move videodev alloc (bsc#1237766).
    - CVE-2022-48953: rtc: cmos: fix build on non-ACPI platforms (bsc#1231941).
    - CVE-2022-48975: gpiolib: fix memory leak in gpiochip_setup_dev() (bsc#1231885).
    - CVE-2022-49006: tracing: Free buffers when a used dynamic event is removed (bsc#1232163).
    - CVE-2022-49076: RDMA/hfi1: Fix use-after-free bug for mm struct (bsc#1237738).
    - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
    - CVE-2022-49089: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (bsc#1238041).
    - CVE-2022-49124: x86/mce: Work around an erratum on fast string copy instructions (bsc#1238148).
    - CVE-2022-49134: mlxsw: spectrum: Guard against invalid local ports (bsc#1237982).
    - CVE-2022-49135: drm/amd/display: Fix memory leak (bsc#1238006).
    - CVE-2022-49151: can: mcba_usb: properly check endpoint type (bsc#1237778).
    - CVE-2022-49178: memstick/mspro_block: fix handling of read-only devices (bsc#1238107).
    - CVE-2022-49182: net: hns3: add vlan list lock to protect vlan list (bsc#1238260).
    - CVE-2022-49201: ibmvnic: fix race between xmit and reset (bsc#1238256).
    - CVE-2022-49247: media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED     (bsc#1237783).
    - CVE-2022-49490: drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is (bsc#1238275).
    - CVE-2022-49626: sfc: fix use after free when disabling sriov (bsc#1238270).
    - CVE-2022-49661: can: gs_usb: gs_usb_open/close(): fix memory leak (bsc#1237788).
    - CVE-2023-52572: Fixed UAF in cifs_demultiplex_thread() in cifs (bsc#1220946).
    - CVE-2023-52853: hid: cp2112: Fix duplicate workqueue initialization (bsc#1224988).
    - CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
    - CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a     server (bsc#1217947).
    - CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5     modules (bsc#1219169).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-49963: mailbox: bcm2835: Fix timeout during suspend mode (bsc#1232147).
    - CVE-2024-49975: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1232104).
    - CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
    - CVE-2024-50067: uprobe: avoid out-of-bounds memory access of fetching args (bsc#1232416).
    - CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum()     (bsc#1233248).
    - CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
    - CVE-2024-53217: nfsd: restore callback functionality for NFSv4.0 (bsc#1234999).
    - CVE-2024-56633: bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (bsc#1235485).
    - CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
    - CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
    - CVE-2024-56688: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (bsc#1235538).
    - CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
    - CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
    - CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
    - CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
    - CVE-2025-21689: USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (bsc#1237017).
    - CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
    - CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
    - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1027-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
    - CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (bsc#1228483).
    - CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
    - CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
    - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
    - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED If the callback     'start_streaming' fails, then all queued buffers in the driver should be returned with state     'VB2_BUF_STATE_QUEUED'. Currently, they are returned with 'VB2_BUF_STATE_ERROR' which is wrong. Fix this.
    This also fixes the warning: [ 65.583633] WARNING: CPU: 5 PID: 593 at     drivers/media/common/videobuf2/videobuf2-core.c:1612 vb2_start_streaming+0xd4/0x160 [videobuf2_common] [     65.585027] Modules linked in: snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_soc_hdmi_codec     dw_hdmi_i2s_audio saa7115 stk1160 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common     videodev mc crct10dif_ce panfrost snd_soc_simple_card snd_soc_audio_graph_card snd_soc_spdif_tx     snd_soc_simple_card_utils gpu_sched phy_rockchip_pcie snd_soc_rockchip_i2s rockchipdrm analogix_dp     dw_mipi_dsi dw_hdmi cec drm_kms_helper drm rtc_rk808 rockchip_saradc industrialio_triggered_buffer     kfifo_buf rockchip_thermal pcie_rockchip_host ip_tables x_tables ipv6 [ 65.589383] CPU: 5 PID: 593 Comm:
    v4l2src0:src Tainted: G W 5.16.0-rc4-62408-g32447129cb30-dirty #14 [ 65.590293] Hardware name: Radxa ROCK     Pi 4B (DT) [ 65.590696] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 65.591304] pc :
    vb2_start_streaming+0xd4/0x160 [videobuf2_common] [ 65.591850] lr : vb2_start_streaming+0x6c/0x160     [videobuf2_common] [ 65.592395] sp : ffff800012bc3ad0 [ 65.592685] x29: ffff800012bc3ad0 x28:
    0000000000000000 x27: ffff800012bc3cd8 [ 65.593312] x26: 0000000000000000 x25: ffff00000d8a7800 x24:
    0000000040045612 [ 65.593938] x23: ffff800011323000 x22: ffff800012bc3cd8 x21: ffff00000908a8b0 [     65.594562] x20: ffff00000908a8c8 x19: 00000000fffffff4 x18: ffffffffffffffff [ 65.595188] x17:
    000000040044ffff x16: 00400034b5503510 x15: ffff800011323f78 [ 65.595813] x14: ffff000013163886 x13:
    ffff000013163885 x12: 00000000000002ce [ 65.596439] x11: 0000000000000028 x10: 0000000000000001 x9 :
    0000000000000228 [ 65.597064] x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff726c5e78 [     65.597690] x5 : ffff800012bc3990 x4 : 0000000000000000 x3 : ffff000009a34880 [ 65.598315] x2 :
    0000000000000000 x1 : 0000000000000000 x0 : ffff000007cd99f0 [ 65.598940] Call trace: [ 65.599155]     vb2_start_streaming+0xd4/0x160 [videobuf2_common] [ 65.599672] vb2_core_streamon+0x17c/0x1a8     [videobuf2_common] [ 65.600179] vb2_streamon+0x54/0x88 [videobuf2_v4l2] [ 65.600619]     vb2_ioctl_streamon+0x54/0x60 [videobuf2_v4l2] [ 65.601103] v4l_streamon+0x3c/0x50 [videodev] [ 65.601521]
    __video_do_ioctl+0x1a4/0x428 [videodev] [ 65.601977] video_usercopy+0x320/0x828 [videodev] [ 65.602419]     video_ioctl2+0x3c/0x58 [videodev] [ 65.602830] v4l2_ioctl+0x60/0x90 [videodev] [ 65.603227]
    __arm64_sys_ioctl+0xa8/0xe0 [ 65.603576] invoke_syscall+0x54/0x118 [ 65.603911]     el0_svc_common.constprop.3+0x84/0x100 [ 65.604332] do_el0_svc+0x34/0xa0 [ 65.604625] el0_svc+0x1c/0x50 [     65.604897] el0t_64_sync_handler+0x88/0xb0 [ 65.605264] el0t_64_sync+0x16c/0x170 [ 65.605587] ---[ end     trace 578e0ba07742170d ]--- (CVE-2022-49247)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1241-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
    - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
    - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
    - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
    - CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
    - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync     (bsc#1239095).
    - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
    - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
    - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990465 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED

    If the callback 'start_streaming' fails, then all     queued buffers in the driver should be returned with     state 'VB2_BUF_STATE_QUEUED'. Currently, they are     returned with 'VB2_BUF_STATE_ERROR' which is wrong.
    Fix this. This also fixes the warning:

    [   65.583633] WARNING: CPU: 5 PID: 593 at drivers/media/common/videobuf2/videobuf2-core.c:1612     vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.585027] Modules linked in: snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_soc_hdmi_codec     dw_hdmi_i2s_audio saa7115 stk1160 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common     videodev mc crct10dif_ce panfrost snd_soc_simple_card snd_soc_audio_graph_card snd_soc_spdif_tx     snd_soc_simple_card_utils gpu_sched phy_rockchip_pcie snd_soc_rockchip_i2s rockchipdrm analogix_dp     dw_mipi_dsi dw_hdmi cec drm_kms_helper drm rtc_rk808 rockchip_saradc industrialio_triggered_buffer     kfifo_buf rockchip_thermal pcie_rockchip_host ip_tables x_tables ipv6     [   65.589383] CPU: 5 PID: 593 Comm: v4l2src0:src Tainted: G        W     5.16.0-rc4-62408-g32447129cb30-dirty #14     [   65.590293] Hardware name: Radxa ROCK Pi 4B (DT)     [   65.590696] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)     [   65.591304] pc : vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.591850] lr : vb2_start_streaming+0x6c/0x160 [videobuf2_common]     [   65.592395] sp : ffff800012bc3ad0     [   65.592685] x29: ffff800012bc3ad0 x28: 0000000000000000 x27: ffff800012bc3cd8     [   65.593312] x26: 0000000000000000 x25: ffff00000d8a7800 x24: 0000000040045612     [   65.593938] x23: ffff800011323000 x22: ffff800012bc3cd8 x21: ffff00000908a8b0     [   65.594562] x20: ffff00000908a8c8 x19: 00000000fffffff4 x18: ffffffffffffffff     [   65.595188] x17: 000000040044ffff x16: 00400034b5503510 x15: ffff800011323f78     [   65.595813] x14: ffff000013163886 x13: ffff000013163885 x12: 00000000000002ce     [   65.596439] x11: 0000000000000028 x10: 0000000000000001 x9 : 0000000000000228     [   65.597064] x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff726c5e78     [   65.597690] x5 : ffff800012bc3990 x4 : 0000000000000000 x3 : ffff000009a34880     [   65.598315] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000007cd99f0     [   65.598940] Call trace:
    [   65.599155]  vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.599672]  vb2_core_streamon+0x17c/0x1a8 [videobuf2_common]     [   65.600179]  vb2_streamon+0x54/0x88 [videobuf2_v4l2]     [   65.600619]  vb2_ioctl_streamon+0x54/0x60 [videobuf2_v4l2]     [   65.601103]  v4l_streamon+0x3c/0x50 [videodev]     [   65.601521]  __video_do_ioctl+0x1a4/0x428 [videodev]     [   65.601977]  video_usercopy+0x320/0x828 [videodev]     [   65.602419]  video_ioctl2+0x3c/0x58 [videodev]     [   65.602830]  v4l2_ioctl+0x60/0x90 [videodev]     [   65.603227]  __arm64_sys_ioctl+0xa8/0xe0     [   65.603576]  invoke_syscall+0x54/0x118     [   65.603911]  el0_svc_common.constprop.3+0x84/0x100     [   65.604332]  do_el0_svc+0x34/0xa0     [   65.604625]  el0_svc+0x1c/0x50     [   65.604897]  el0t_64_sync_handler+0x88/0xb0     [   65.605264]  el0t_64_sync+0x16c/0x170     [   65.605587] ---[ end trace 578e0ba07742170d ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1263-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2021-47248: udp: fix race between close() and udp_abort() (bsc#1224867).
    - CVE-2022-49051: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (bsc#1237903).
    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
    - CVE-2022-49275: can: m_can: m_can_tx_handler(): fix use after free of skb (bsc#1238719).
    - CVE-2022-49413: bfq: Update cgroup information before merging bio (bsc#1238710).
    - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
    - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729).
    - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238787).
    - CVE-2022-49564: crypto: qat - add param check for DH (bsc#1238789).
    - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
    - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
    - CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
    - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
    - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
    - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989517 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED

    If the callback 'start_streaming' fails, then all     queued buffers in the driver should be returned with     state 'VB2_BUF_STATE_QUEUED'. Currently, they are     returned with 'VB2_BUF_STATE_ERROR' which is wrong.
    Fix this. This also fixes the warning:

    [   65.583633] WARNING: CPU: 5 PID: 593 at drivers/media/common/videobuf2/videobuf2-core.c:1612     vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.585027] Modules linked in: snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_soc_hdmi_codec     dw_hdmi_i2s_audio saa7115 stk1160 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common     videodev mc crct10dif_ce panfrost snd_soc_simple_card snd_soc_audio_graph_card snd_soc_spdif_tx     snd_soc_simple_card_utils gpu_sched phy_rockchip_pcie snd_soc_rockchip_i2s rockchipdrm analogix_dp     dw_mipi_dsi dw_hdmi cec drm_kms_helper drm rtc_rk808 rockchip_saradc industrialio_triggered_buffer     kfifo_buf rockchip_thermal pcie_rockchip_host ip_tables x_tables ipv6     [   65.589383] CPU: 5 PID: 593 Comm: v4l2src0:src Tainted: G        W     5.16.0-rc4-62408-g32447129cb30-dirty #14     [   65.590293] Hardware name: Radxa ROCK Pi 4B (DT)     [   65.590696] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)     [   65.591304] pc : vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.591850] lr : vb2_start_streaming+0x6c/0x160 [videobuf2_common]     [   65.592395] sp : ffff800012bc3ad0     [   65.592685] x29: ffff800012bc3ad0 x28: 0000000000000000 x27: ffff800012bc3cd8     [   65.593312] x26: 0000000000000000 x25: ffff00000d8a7800 x24: 0000000040045612     [   65.593938] x23: ffff800011323000 x22: ffff800012bc3cd8 x21: ffff00000908a8b0     [   65.594562] x20: ffff00000908a8c8 x19: 00000000fffffff4 x18: ffffffffffffffff     [   65.595188] x17: 000000040044ffff x16: 00400034b5503510 x15: ffff800011323f78     [   65.595813] x14: ffff000013163886 x13: ffff000013163885 x12: 00000000000002ce     [   65.596439] x11: 0000000000000028 x10: 0000000000000001 x9 : 0000000000000228     [   65.597064] x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff726c5e78     [   65.597690] x5 : ffff800012bc3990 x4 : 0000000000000000 x3 : ffff000009a34880     [   65.598315] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000007cd99f0     [   65.598940] Call trace:
    [   65.599155]  vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.599672]  vb2_core_streamon+0x17c/0x1a8 [videobuf2_common]     [   65.600179]  vb2_streamon+0x54/0x88 [videobuf2_v4l2]     [   65.600619]  vb2_ioctl_streamon+0x54/0x60 [videobuf2_v4l2]     [   65.601103]  v4l_streamon+0x3c/0x50 [videodev]     [   65.601521]  __video_do_ioctl+0x1a4/0x428 [videodev]     [   65.601977]  video_usercopy+0x320/0x828 [videodev]     [   65.602419]  video_ioctl2+0x3c/0x58 [videodev]     [   65.602830]  v4l2_ioctl+0x60/0x90 [videodev]     [   65.603227]  __arm64_sys_ioctl+0xa8/0xe0     [   65.603576]  invoke_syscall+0x54/0x118     [   65.603911]  el0_svc_common.constprop.3+0x84/0x100     [   65.604332]  do_el0_svc+0x34/0xa0     [   65.604625]  el0_svc+0x1c/0x50     [   65.604897]  el0t_64_sync_handler+0x88/0xb0     [   65.605264]  el0t_64_sync+0x16c/0x170     [   65.605587] ---[ end trace 578e0ba07742170d ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991210 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED

    If the callback 'start_streaming' fails, then all     queued buffers in the driver should be returned with     state 'VB2_BUF_STATE_QUEUED'. Currently, they are     returned with 'VB2_BUF_STATE_ERROR' which is wrong.
    Fix this. This also fixes the warning:

    [   65.583633] WARNING: CPU: 5 PID: 593 at drivers/media/common/videobuf2/videobuf2-core.c:1612     vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.585027] Modules linked in: snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_soc_hdmi_codec     dw_hdmi_i2s_audio saa7115 stk1160 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common     videodev mc crct10dif_ce panfrost snd_soc_simple_card snd_soc_audio_graph_card snd_soc_spdif_tx     snd_soc_simple_card_utils gpu_sched phy_rockchip_pcie snd_soc_rockchip_i2s rockchipdrm analogix_dp     dw_mipi_dsi dw_hdmi cec drm_kms_helper drm rtc_rk808 rockchip_saradc industrialio_triggered_buffer     kfifo_buf rockchip_thermal pcie_rockchip_host ip_tables x_tables ipv6     [   65.589383] CPU: 5 PID: 593 Comm: v4l2src0:src Tainted: G        W     5.16.0-rc4-62408-g32447129cb30-dirty #14     [   65.590293] Hardware name: Radxa ROCK Pi 4B (DT)     [   65.590696] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)     [   65.591304] pc : vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.591850] lr : vb2_start_streaming+0x6c/0x160 [videobuf2_common]     [   65.592395] sp : ffff800012bc3ad0     [   65.592685] x29: ffff800012bc3ad0 x28: 0000000000000000 x27: ffff800012bc3cd8     [   65.593312] x26: 0000000000000000 x25: ffff00000d8a7800 x24: 0000000040045612     [   65.593938] x23: ffff800011323000 x22: ffff800012bc3cd8 x21: ffff00000908a8b0     [   65.594562] x20: ffff00000908a8c8 x19: 00000000fffffff4 x18: ffffffffffffffff     [   65.595188] x17: 000000040044ffff x16: 00400034b5503510 x15: ffff800011323f78     [   65.595813] x14: ffff000013163886 x13: ffff000013163885 x12: 00000000000002ce     [   65.596439] x11: 0000000000000028 x10: 0000000000000001 x9 : 0000000000000228     [   65.597064] x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff726c5e78     [   65.597690] x5 : ffff800012bc3990 x4 : 0000000000000000 x3 : ffff000009a34880     [   65.598315] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000007cd99f0     [   65.598940] Call trace:
    [   65.599155]  vb2_start_streaming+0xd4/0x160 [videobuf2_common]     [   65.599672]  vb2_core_streamon+0x17c/0x1a8 [videobuf2_common]     [   65.600179]  vb2_streamon+0x54/0x88 [videobuf2_v4l2]     [   65.600619]  vb2_ioctl_streamon+0x54/0x60 [videobuf2_v4l2]     [   65.601103]  v4l_streamon+0x3c/0x50 [videodev]     [   65.601521]  __video_do_ioctl+0x1a4/0x428 [videodev]     [   65.601977]  video_usercopy+0x320/0x828 [videodev]     [   65.602419]  video_ioctl2+0x3c/0x58 [videodev]     [   65.602830]  v4l2_ioctl+0x60/0x90 [videodev]     [   65.603227]  __arm64_sys_ioctl+0xa8/0xe0     [   65.603576]  invoke_syscall+0x54/0x118     [   65.603911]  el0_svc_common.constprop.3+0x84/0x100     [   65.604332]  do_el0_svc+0x34/0xa0     [   65.604625]  el0_svc+0x1c/0x50     [   65.604897]  el0t_64_sync_handler+0x88/0xb0     [   65.605264]  el0t_64_sync+0x16c/0x170     [   65.605587] ---[ end trace 578e0ba07742170d ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
273892	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989604)	Nessus	Unity Linux Local Security Checks	11/5/2025	11/5/2025	medium
232643	SUSE SLES12 Security Update : kernel (SUSE-SU-2025:0834-1)	Nessus	SuSE Local Security Checks	3/12/2025	9/24/2025	high
233410	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:1027-1)	Nessus	SuSE Local Security Checks	3/27/2025	12/30/2025	high
225550	Linux Distros Unpatched Vulnerability : CVE-2022-49247	Nessus	Misc.	3/5/2025	10/28/2025	medium
234407	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:1241-1)	Nessus	SuSE Local Security Checks	4/15/2025	12/30/2025	high
274271	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990465)	Nessus	Unity Linux Local Security Checks	11/6/2025	11/6/2025	medium
234484	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:1263-1)	Nessus	SuSE Local Security Checks	4/16/2025	12/30/2025	high
273443	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989517)	Nessus	Unity Linux Local Security Checks	11/5/2025	11/5/2025	medium
278244	Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991210)	Nessus	Unity Linux Local Security Checks	12/11/2025	12/11/2025	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	3/23/2026	high

Detections

Analytics

Plugins Search

medium

high

high

medium

high

medium

high

medium

medium

high