According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    cifs: Fix UAF in cifs_demultiplex_thread().(CVE-2023-52572)

    xsk: fix OOB map writes when deleting elements(CVE-2024-56614)

    net: defer final 'struct net' free in netns dismantle(CVE-2024-56658)

    af_packet: avoid erroring out after sock_init_data() in packet_create().(CVE-2024-56606)

    quota: flush quota_release_work upon quota writeback(CVE-2024-56780)

    mm: hugetlb: independent PMD page table shared count(CVE-2024-57883)

    selinux: ignore unknown extended permissions(CVE-2024-57931)

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX(CVE-2025-21648)

    net: sched: Disallow replacing of child qdisc from one parent to another(CVE-2025-21700)

    net: sched: Disallow replacing of child qdisc from one parent to another(CVE-2025-21702)

    ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl(CVE-2021-47634)

    crypto: qat - add param check for DH(CVE-2022-49564)

    nfsd: clear acl_access/acl_default after releasing them(CVE-2025-21796)

    media: uvcvideo: Fix double free in error path(CVE-2024-57980)

    ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo().(CVE-2022-49731)

    dm raid: fix accesses beyond end of raid member array(CVE-2022-49674)

    scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI(CVE-2022-49535)

    md/bitmap: don't set sb values if can't pass sanity check(CVE-2022-49526)

    drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes(CVE-2022-49532)

    ext4: fix race condition between ext4_write and ext4_convert_inline_data(CVE-2022-49414)

    media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init(CVE-2022-49478)

    dlm: fix plock invalid read(CVE-2022-49407)

    NFSD: prevent underflow in nfssvc_decode_writeargs().(CVE-2022-49280)

    NFSv4: Don't hold the layoutget locks across multiple RPC calls(CVE-2022-49316)

    firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle(CVE-2022-49370)

    ARM: hisi: Add missing of_node_put after of_find_compatible_node(CVE-2022-49447)

    scsi: target: tcmu: Fix possible page UAF(CVE-2022-49053)

    drm/plane: Move range check for format_count earlier(CVE-2021-47659)

    tty: fix deadlock caused by calling printk() under tty_port-lock(CVE-2022-49441)

    bpf, arm64: Clear prog-jited_len along prog-jited(CVE-2022-49341)

    RDMA/hfi1: Fix potential integer multiplication overflow errors(CVE-2022-49404)

    scsi: libfc: Fix use after free in fc_exch_abts_resp().(CVE-2022-49114)

    scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair().(CVE-2022-49155)

    mm: fix unexpected zeroed page mapping with zram swap(CVE-2022-49052)

    net: tipc: fix possible refcount leak in tipc_sk_create()(CVE-2022-49620)

    RDMA/hfi1: Prevent use of lock before it is initialized(CVE-2022-49433)

    memcg: fix soft lockup in the OOM process(CVE-2024-57977)

    block: don't delete queue kobject before its children(CVE-2022-49259)

    exec: Force single empty string when argv is empty(CVE-2022-49264)

    um: Fix out-of-bounds read in LDT setup(CVE-2022-49395)

    cgroup: Use separate src/dst nodes when preloading css_sets for migration(CVE-2022-49647)

    driver: base: fix UAF when driver_attach failed(CVE-2022-49385)

    nbd: don't allow reconnect after disconnect(CVE-2025-21731)

    vrf: use RCU protection in l3mdev_l3_out().(CVE-2025-21791)

    net_sched: sch_sfq: don't allow 1 packet limit(CVE-2024-57996)

    net: let net.core.dev_weight always be non-zero(CVE-2025-21806)

    tty: synclink_gt: Fix null-pointer-dereference in slgt_clean().(CVE-2022-49307)

    virtio_net: fix xdp_rxq_info bug after suspend/resume(CVE-2022-49687)

    be2net: Fix buffer overflow in be_get_module_eeprom(CVE-2022-49581)

    ubi: ubi_create_volume: Fix use-after-free when volume creation failed(CVE-2022-49388)

    ipmr: do not call mr_mfc_uses_dev() for unres entries(CVE-2025-21719)

    ALSA: jack: Access input_dev under mutex(CVE-2022-49538)

    geneve: Fix use-after-free in geneve_find_dev().(CVE-2025-21858)

    rxrpc: Fix listen() setting the bar too high for the prealloc rings(CVE-2022-49450)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1241-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
    - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
    - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
    - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
    - CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
    - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync     (bsc#1239095).
    - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
    - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
    - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    cifs: Fix UAF in cifs_demultiplex_thread().(CVE-2023-52572)

    net: fix data-races around sk-sk_forward_alloc(CVE-2024-53124)

    quota: flush quota_release_work upon quota writeback(CVE-2024-56780)

    af_packet: avoid erroring out after sock_init_data() in packet_create().(CVE-2024-56606)

    net: defer final 'struct net' free in netns dismantle(CVE-2024-56658)

    netfilter: x_tables: fix LED ID check in led_tg_check().(CVE-2024-56650)

    mm: hugetlb: independent PMD page table shared count(CVE-2024-57883)

    NFSv4.0: Fix a use-after-free problem in the asynchronous open()(CVE-2024-53173)

    NFSD: Prevent NULL dereference in nfsd4_process_cb_update()(CVE-2024-53217)

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX(CVE-2025-21648)

    vfio/platform: check the bounds of read/write syscalls(CVE-2025-21687)

    mm: fix unexpected zeroed page mapping with zram swap(CVE-2022-49052)

    ext4: fix race condition between ext4_write and ext4_convert_inline_data(CVE-2022-49414)

    block: Fix handling of offline queues in blk_mq_alloc_request_hctx().(CVE-2022-49720)

    scsi: libfc: Fix use after free in fc_exch_abts_resp().(CVE-2022-49114)

    nbd: don't allow reconnect after disconnect(CVE-2025-21731)

    md/bitmap: don't set sb values if can't pass sanity check(CVE-2022-49526)

    ARM: hisi: Add missing of_node_put after of_find_compatible_node(CVE-2022-49447)

    bpf, arm64: Clear prog-jited_len along prog-jited(CVE-2022-49341)

    extcon: Modify extcon device to be created after driver data is set(CVE-2022-49308)

    scsi: target: tcmu: Fix possible page UAF(CVE-2022-49053)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Clear prog->jited_len     along prog->jited syzbot reported an illegal copy_to_user() attempt from bpf_prog_get_info_by_fd() [1]     There was no repro yet on this bug, but I think that commit 0aef499f3172 (mm/usercopy: Detect vmalloc     overruns) is exposing a prior bug in bpf arm64. bpf_prog_get_info_by_fd() looks at prog->jited_len to     determine if the JIT image can be copied out to user space. My theory is that syzbot managed to get a prog     where prog->jited_len has been set to 43, while prog->bpf_func has ben cleared. It is not clear why     copy_to_user(uinsns, NULL, ulen) is triggering this particular warning. I thought find_vma_area(NULL)     would not find a vm_struct. As we do not hold vmap_area_lock spinlock, it might be possible that the found     vm_struct was garbage. [1] usercopy: Kernel memory exposure attempt detected from vmalloc (offset     792633534417210172, size 43)! kernel BUG at mm/usercopy.c:101! Internal error: Oops - BUG: 0 [#1] PREEMPT     SMP Modules linked in: CPU: 0 PID: 25002 Comm: syz-executor.1 Not tainted     5.18.0-syzkaller-10139-g8291eaafed36 #0 Hardware name: linux,dummy-virt (DT) pstate: 60400009 (nZCv daif     +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usercopy_abort+0x90/0x94 mm/usercopy.c:101 lr :
    usercopy_abort+0x90/0x94 mm/usercopy.c:89 sp : ffff80000b773a20 x29: ffff80000b773a30 x28:
    faff80000b745000 x27: ffff80000b773b48 x26: 0000000000000000 x25: 000000000000002b x24: 0000000000000000     x23: 00000000000000e0 x22: ffff80000b75db67 x21: 0000000000000001 x20: 000000000000002b x19:
    ffff80000b75db3c x18: 00000000fffffffd x17: 2820636f6c6c616d x16: 76206d6f72662064 x15: 6574636574656420     x14: 74706d6574746120 x13: 2129333420657a69 x12: 73202c3237313031 x11: 3237313434333533 x10:
    3336323937207465 x9 : 657275736f707865 x8 : ffff80000a30c550 x7 : ffff80000b773830 x6 : ffff80000b773830     x5 : 0000000000000000 x4 : ffff00007fbbaa10 x3 : 0000000000000000 x2 : 0000000000000000 x1 :
    f7ff000028fc0000 x0 : 0000000000000064 Call trace: usercopy_abort+0x90/0x94 mm/usercopy.c:89     check_heap_object mm/usercopy.c:186 [inline] __check_object_size mm/usercopy.c:252 [inline]
    __check_object_size+0x198/0x36c mm/usercopy.c:214 check_object_size include/linux/thread_info.h:199     [inline] check_copy_size include/linux/thread_info.h:235 [inline] copy_to_user include/linux/uaccess.h:159     [inline] bpf_prog_get_info_by_fd.isra.0+0xf14/0xfdc kernel/bpf/syscall.c:3993     bpf_obj_get_info_by_fd+0x12c/0x510 kernel/bpf/syscall.c:4253 __sys_bpf+0x900/0x2150     kernel/bpf/syscall.c:4956 __do_sys_bpf kernel/bpf/syscall.c:5021 [inline] __se_sys_bpf     kernel/bpf/syscall.c:5019 [inline] __arm64_sys_bpf+0x28/0x40 kernel/bpf/syscall.c:5019 __invoke_syscall     arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52     el0_svc_common.constprop.0+0x44/0xec arch/arm64/kernel/syscall.c:142 do_el0_svc+0xa0/0xc0     arch/arm64/kernel/syscall.c:206 el0_svc+0x44/0xb0 arch/arm64/kernel/entry-common.c:624     el0t_64_sync_handler+0x1ac/0x1b0 arch/arm64/kernel/entry-common.c:642 el0t_64_sync+0x198/0x19c     arch/arm64/kernel/entry.S:581 Code: aa0003e3 d00038c0 91248000 97fff65f (d4210000) (CVE-2022-49341)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1027-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
    - CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (bsc#1228483).
    - CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
    - CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
    - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
    - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
235744	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-1520)	Nessus	Huawei Local Security Checks	5/12/2025	5/12/2025	high
234407	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:1241-1)	Nessus	SuSE Local Security Checks	4/15/2025	4/15/2025	high
235756	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-1521)	Nessus	Huawei Local Security Checks	5/12/2025	5/12/2025	high
225182	Linux Distros Unpatched Vulnerability : CVE-2022-49341	Nessus	Misc.	3/5/2025	3/5/2025	high
233410	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:1027-1)	Nessus	SuSE Local Security Checks	3/27/2025	3/27/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high