The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9368 advisory.

    - net: sched: fix use-after-free in tc_new_tfilter() (Eric Dumazet)  [Orabug: 34027161]  {CVE-2022-1055}
    - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini)  [Orabug: 34034594]     {CVE-2022-1158}
    - phonet: refcount leak in pep_sock_accep (Hangyu Hua)  [Orabug: 33962760]  {CVE-2021-45095}
    - ice: create scheduler aggregator node config and move VSIs (Kiran Patil)  [Orabug: 33993157]     {CVE-2020-24502} {CVE-2020-245024} {CVE-2020-24503}
    - esp: Fix possible buffer overflow in ESP transformation (Steffen Klassert)  [Orabug: 33997299]     {CVE-2022-27666}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0056-1 advisory.

  - Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version     1.0.4 may allow an authenticated user to potentially enable denial of service via local access.
    (CVE-2020-24504)

  - A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could     happen if removing device (that is not common to remove video card physically without power-off, but same     happens if unbind the driver). (CVE-2020-27820)

  - Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to     multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the     ability to run PV backends in regular unprivileged guests, typically referred to as driver domains.
    Running PV backends in driver domains has one primary security advantage: if a driver domain gets     compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain     could try to attack other guests via sending events at a high frequency leading to a Denial of Service in     the guest due to trying to service interrupts for elongated amounts of time. There are three affected     backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch     3, CVE-2021-28713 (CVE-2021-28711, CVE-2021-28712, CVE-2021-28713)

  - Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record     relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]     Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is     ready to process them. There are some measures taken for avoiding to pile up too much data, but those can     be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming     new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default).
    Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time.
    (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in     its RX queue ring page and the next package would require more than one free slot, which may be the case     when using GSO, XDP, or software hashing. (CVE-2021-28714) (CVE-2021-28714, CVE-2021-28715)

  - Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow     an authenticated user to potentially enable denial of service via local access. (CVE-2021-33098)

  - A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the     way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del()     together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A     privileged local user could use this flaw to crash the system or escalate their privileges on the system.
    (CVE-2021-3640) (CVE-2021-4002)

  - In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in     drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a     crafted device) to trigger an out-of-bounds write via a crafted length value. (CVE-2021-43975)

  - In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows     an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).
    (CVE-2021-43976)

  - In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information     leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based     attackers can typically choose among many IPv6 source addresses. (CVE-2021-45485)

  - In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak     because the hash table is very small. (CVE-2021-45486)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0131-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated

    - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have     happened in the past (jsc#SLE-22573)       You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0.
    (kernel.unprivileged_bpf_disabled = 0)

    The following security bugs were fixed:

    - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source     addresses. (bsc#1194094)
    - CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c.
    (bnc#1194087).
    - CVE-2021-4001: Fixed a race condition when the EBPF map is frozen. (bsc#1192990)
    - CVE-2021-28715: Fixed an issue where a guest could force Linux netback driver to hog large amounts of     kernel memory by do not queueing unlimited number of packages.  (bsc#1193442)
    - CVE-2021-28714: Fixed an issue where a guest could force Linux netback driver to hog large amounts of     kernel memory by fixing rx queue stall detection. (bsc#1193442)
    - CVE-2021-28713: Fixed a rogue backends that could cause DoS of guests via high frequency events by     hardening hvc_xen against event channel storms. (bsc#1193440)
    - CVE-2021-28712: Fixed a rogue backends that could cause DoS of guests via high frequency events by     hardening netfront against event channel storms. (bsc#1193440)
    - CVE-2021-28711: Fixed a rogue backends that could cause DoS of guests via high frequency events by     hardening blkfront against event channel storms. (bsc#1193440)
    - CVE-2020-24504: Fixed an uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter     drivers that may have allowed an authenticated user to potentially enable denial of service via local     access. (bnc#1182404)
    - CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce     a crafted device) to trigger an out-of-bounds write via a crafted length value. (bnc#1192845)
    - CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to     cause a denial of service. (bnc#1192847)
    - CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in hugetlbfs.
    (bsc#1192946)
    - CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could     happen if removing device. (bnc#1179599)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0009 advisory.

    This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 8.6. It addresses 214 CVEs:
    CVE-2019-0154, CVE-2022-3640, CVE-2020-29661, CVE-2019-11091, CVE-2021-3609, and 209 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
160917	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9368)	Nessus	Oracle Linux Local Security Checks	2022/5/10	2026/2/9	high
156648	openSUSE 15 Security Update : kernel (openSUSE-SU-2022:0056-1)	Nessus	SuSE Local Security Checks	2022/1/12	2023/11/21	high
156883	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2022:0131-1)	Nessus	SuSE Local Security Checks	2022/1/20	2026/6/26	high
358696	Rocky Linux 8.6 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0009)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high

検出

プラグインの検索

high

high

high

high