The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-39735 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in     ea_get() During the size_check label in ea_get(), the code checks if the extended attribute list (xattr)     size matches ea_size. If not, it logs ea_get: invalid extended attribute and calls print_hex_dump().
    Here, EALIST_SIZE(ea_buf->xattr) returns 4110417968, which exceeds INT_MAX (2,147,483,647). Then ea_size     is clamped: int size = clamp_t(int, ea_size, 0, EALIST_SIZE(ea_buf->xattr)); Although clamp_t aims to     bound ea_size between 0 and 4110417968, the upper limit is treated as an int, causing an overflow above     2^31 - 1. This leads size to wrap around and become negative (-184549328). The size is then passed to     print_hex_dump() (called len in print_hex_dump()), it is passed as type size_t (an unsigned type), this     is then stored inside a variable called int remaining, which is then assigned to int linelen which is     then passed to hex_dump_to_buffer(). In print_hex_dump() the for loop, iterates through 0 to len-1, where     len is 18446744073525002176, calling hex_dump_to_buffer() on each iteration: for (i = 0; i < len; i +=     rowsize) { linelen = min(remaining, rowsize); remaining -= rowsize; hex_dump_to_buffer(ptr + i, linelen,     rowsize, groupsize, linebuf, sizeof(linebuf), ascii); ... } The expected stopping condition (i < len) is     effectively broken since len is corrupted and very large. This eventually leads to the ptr+i being     passed to hex_dump_to_buffer() to get closer to the end of the actual bounds of ptr, eventually an out     of bounds access is done in hex_dump_to_buffer() in the following for loop: for (j = 0; j < len; j++) { if     (linebuflen < lx + 2) goto overflow2; ch = ptr[j]; ... } To fix this we should validate     EALIST_SIZE(ea_buf->xattr) before it is utilised. (CVE-2025-39735)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5907 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5907-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     April 27, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2023-53034 CVE-2024-36908 CVE-2024-46733 CVE-2024-46742                      CVE-2024-46753 CVE-2024-46774 CVE-2024-46816 CVE-2024-46823                      CVE-2024-50063 CVE-2025-21853 CVE-2025-22025 CVE-2025-22027                      CVE-2025-22033 CVE-2025-22035 CVE-2025-22038 CVE-2025-22040                      CVE-2025-22041 CVE-2025-22042 CVE-2025-22044 CVE-2025-22045                      CVE-2025-22049 CVE-2025-22050 CVE-2025-22054 CVE-2025-22055                      CVE-2025-22056 CVE-2025-22058 CVE-2025-22060 CVE-2025-22063                      CVE-2025-22066 CVE-2025-22071 CVE-2025-22072 CVE-2025-22073                      CVE-2025-22075 CVE-2025-22079 CVE-2025-22081 CVE-2025-22086                      CVE-2025-22088 CVE-2025-22089 CVE-2025-22093 CVE-2025-22095                      CVE-2025-22097 CVE-2025-22126 CVE-2025-23136 CVE-2025-23138                      CVE-2025-37785 CVE-2025-37838 CVE-2025-38152 CVE-2025-38575                      CVE-2025-38637 CVE-2025-39728 CVE-2025-39735     Debian Bug     : 1086175 1102914

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.135-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
235297	CBL Mariner 2.0 Security Update: kernel (CVE-2025-39735)	Nessus	MarinerOS Local Security Checks	5/6/2025	5/6/2025	high
234884	Debian dsa-5907 : affs-modules-6.1.0-33-4kc-malta-di - security update	Nessus	Debian Local Security Checks	4/27/2025	4/27/2025	high

Detections

Analytics

Plugins Search

high

high