An update of the linux package has been released.

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7605-1 advisory.

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bus devices;

    - AMD CDX bus driver;

    - Clock framework and drivers;

    - DMA engine subsystem;

    - DPLL subsystem;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - VideoCore services drivers;

    - Thermal drivers;

    - USB DSL drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - W1 Dallas's 1-wire bus driver;

    - 9P distributed file system;

    - File systems infrastructure;

    - Ext4 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Key Management;

    - Memory management;

    - Scheduler infrastructure;

    - UProbes tracing;

    - RDMA verbs API;

    - SoC audio core drivers;

    - BPF subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path;

    - Key management;

    - ALSA framework;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916,     CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989,     CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962,     CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240,     CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075,     CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081,     CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000,     CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047,     CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935,     CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003,     CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016,     CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939,     CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979,     CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981,     CVE-2025-22014, CVE-2025-21947, CVE-2025-22007, CVE-2025-21925, CVE-2025-22089, CVE-2025-21923,     CVE-2025-38575, CVE-2025-22018, CVE-2025-22073, CVE-2025-21948, CVE-2025-22080, CVE-2025-22053,     CVE-2025-21903, CVE-2025-21969, CVE-2025-21926, CVE-2025-21941, CVE-2025-40114, CVE-2025-22066,     CVE-2025-22017, CVE-2025-21945, CVE-2025-22065, CVE-2025-22086, CVE-2025-22032, CVE-2025-22097,     CVE-2025-22083, CVE-2025-22044, CVE-2025-23136, CVE-2025-22046, CVE-2025-22041, CVE-2025-38479,     CVE-2025-21998, CVE-2025-22002, CVE-2025-39688, CVE-2025-22033, CVE-2025-21970, CVE-2025-22022,     CVE-2025-21936, CVE-2025-22050, CVE-2025-21984, CVE-2025-21928, CVE-2025-38637, CVE-2025-22030,     CVE-2025-21915, CVE-2025-22013, CVE-2025-21997, CVE-2025-22059, CVE-2025-21961, CVE-2025-21909,     CVE-2025-21955, CVE-2025-39778, CVE-2025-22055, CVE-2023-53034, CVE-2025-39728, CVE-2025-22020,     CVE-2025-22005, CVE-2025-22060, CVE-2025-21902, CVE-2025-22008, CVE-2025-23138, CVE-2025-21991,     CVE-2025-21999, CVE-2025-21982, CVE-2024-58092, CVE-2025-21992, CVE-2025-22028, CVE-2025-22042,     CVE-2025-22087, CVE-2025-21894, CVE-2025-21934, CVE-2025-21893, CVE-2025-22079, CVE-2025-22023,     CVE-2025-21977, CVE-2024-58093, CVE-2025-21904, CVE-2025-21910, CVE-2025-22024, CVE-2025-21964,     CVE-2025-21946, CVE-2025-21905, CVE-2025-22084, CVE-2025-21950, CVE-2025-22011, CVE-2025-21968,     CVE-2025-22035, CVE-2025-22004, CVE-2025-21919, CVE-2025-22039, CVE-2025-22063, CVE-2024-53222,     CVE-2025-21944, CVE-2025-21959, CVE-2025-21994, CVE-2025-21906)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7835-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - ACPI drivers;

    - Ublk userspace block driver;

    - Clock framework and drivers;

    - GPU drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - NTB driver;

    - PCI subsystem;

    - Remote Processor subsystem;

    - Thermal drivers;

    - Virtio Host (VHOST) subsystem;

    - 9P distributed file system;

    - File systems infrastructure;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - SMB network file system;

    - Memory management;

    - RDMA verbs API;

    - Kernel fork() syscall;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - TLS protocol;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-23136, CVE-2025-22062, CVE-2025-22035,     CVE-2025-22020, CVE-2025-22083, CVE-2025-22071, CVE-2025-22060, CVE-2025-22073, CVE-2025-22044,     CVE-2025-22063, CVE-2025-22079, CVE-2025-22057, CVE-2025-22095, CVE-2025-39735, CVE-2025-39682,     CVE-2025-22058, CVE-2025-22021, CVE-2025-22018, CVE-2025-22056, CVE-2025-22054, CVE-2025-22080,     CVE-2025-22039, CVE-2025-22019, CVE-2025-22038, CVE-2025-22028, CVE-2023-53034, CVE-2024-58092,     CVE-2025-38637, CVE-2025-22089, CVE-2025-40114, CVE-2025-22068, CVE-2025-37937, CVE-2025-22070,     CVE-2025-22072, CVE-2025-22086, CVE-2025-22050, CVE-2025-22040, CVE-2025-22065, CVE-2025-38575,     CVE-2025-22064, CVE-2025-22033, CVE-2025-22041, CVE-2025-22090, CVE-2025-22036, CVE-2025-23138,     CVE-2025-22047, CVE-2025-38240, CVE-2025-22066, CVE-2025-22042, CVE-2025-38152, CVE-2025-22055,     CVE-2025-22081, CVE-2025-22045, CVE-2025-22053, CVE-2025-22075, CVE-2025-22027, CVE-2025-22025,     CVE-2025-22097)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22040 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in     multichannel connection There is a race condition between session setup and ksmbd_sessions_deregister. The     session can be freed before the connection is added to channel list of session. This patch check reference     count of session before freeing it. (CVE-2025-22040)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7628-1 advisory.

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bus devices;

    - AMD CDX bus driver;

    - Clock framework and drivers;

    - DMA engine subsystem;

    - DPLL subsystem;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Multiple devices driver;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - RapidIO drivers;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SLIMbus drivers;

    - QCOM SoC drivers;

    - VideoCore services drivers;

    - Thermal drivers;

    - USB DSL drivers;

    - USB Host Controller drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Connector System Software Interface driver;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - ACRN Hypervisor Service Module driver;

    - W1 Dallas's 1-wire bus driver;

    - 9P distributed file system;

    - File systems infrastructure;

    - Ext4 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - Memory Management;

    - Key Management;

    - Memory management;

    - Scheduler infrastructure;

    - UProbes tracing;

    - RDMA verbs API;

    - SoC audio core drivers;

    - BPF subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - 802.1Q VLAN protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Bluetooth subsystem;

    - Networking core;

    - Devlink API;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Management Component Transport Protocol (MCTP);

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - Switch device API;

    - Wireless networking;

    - eXpress Data Path;

    - Key management;

    - ALSA framework;

    - SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-22059, CVE-2025-22008, CVE-2025-37932,     CVE-2025-22033, CVE-2025-21984, CVE-2025-22063, CVE-2025-22065, CVE-2025-21991, CVE-2025-38479,     CVE-2025-21948, CVE-2025-21936, CVE-2025-22038, CVE-2025-21951, CVE-2025-21906, CVE-2025-21924,     CVE-2025-21966, CVE-2025-22073, CVE-2025-22020, CVE-2025-21974, CVE-2025-22043, CVE-2025-22088,     CVE-2025-21959, CVE-2025-38575, CVE-2025-22035, CVE-2025-23134, CVE-2025-22009, CVE-2025-22010,     CVE-2025-21941, CVE-2025-21914, CVE-2025-22066, CVE-2025-22017, CVE-2025-21911, CVE-2025-21928,     CVE-2025-21998, CVE-2025-21920, CVE-2025-21961, CVE-2025-21992, CVE-2025-21995, CVE-2025-21997,     CVE-2025-22084, CVE-2025-22011, CVE-2025-22039, CVE-2025-21977, CVE-2025-21963, CVE-2025-21981,     CVE-2024-53222, CVE-2025-22037, CVE-2025-22070, CVE-2025-21950, CVE-2025-21980, CVE-2025-22023,     CVE-2025-38049, CVE-2025-22018, CVE-2025-22072, CVE-2025-22021, CVE-2025-21986, CVE-2025-22019,     CVE-2025-22045, CVE-2025-21990, CVE-2025-21926, CVE-2025-39989, CVE-2025-21902, CVE-2025-21946,     CVE-2025-21908, CVE-2025-22081, CVE-2025-22042, CVE-2024-58092, CVE-2025-21939, CVE-2025-22086,     CVE-2025-21996, CVE-2025-21929, CVE-2025-21947, CVE-2025-21919, CVE-2025-21922, CVE-2023-53034,     CVE-2025-22013, CVE-2025-21979, CVE-2025-21968, CVE-2025-22056, CVE-2025-37937, CVE-2025-22047,     CVE-2025-21956, CVE-2025-22064, CVE-2025-21903, CVE-2025-22062, CVE-2025-21934, CVE-2025-22050,     CVE-2025-21957, CVE-2025-39778, CVE-2025-21970, CVE-2025-21944, CVE-2025-37890, CVE-2025-21945,     CVE-2025-22046, CVE-2025-38152, CVE-2025-23138, CVE-2025-39735, CVE-2025-22041, CVE-2025-22083,     CVE-2025-21969, CVE-2025-37785, CVE-2025-21967, CVE-2025-21910, CVE-2025-22078, CVE-2025-21915,     CVE-2025-22089, CVE-2025-39688, CVE-2025-21923, CVE-2025-22002, CVE-2025-22014, CVE-2025-38240,     CVE-2025-21943, CVE-2025-21904, CVE-2025-21893, CVE-2025-21913, CVE-2025-22034, CVE-2025-22015,     CVE-2025-21925, CVE-2025-22087, CVE-2025-40114, CVE-2025-21917, CVE-2025-22040, CVE-2025-21989,     CVE-2025-21927, CVE-2025-22075, CVE-2025-21912, CVE-2025-38000, CVE-2025-22057, CVE-2025-22025,     CVE-2025-22058, CVE-2025-22016, CVE-2025-22027, CVE-2025-22097, CVE-2025-22095, CVE-2025-22007,     CVE-2025-22001, CVE-2025-23136, CVE-2025-21982, CVE-2025-21999, CVE-2025-22079, CVE-2025-22055,     CVE-2025-22000, CVE-2025-22004, CVE-2025-21964, CVE-2025-38001, CVE-2025-37889, CVE-2025-21909,     CVE-2025-38637, CVE-2025-22071, CVE-2025-22044, CVE-2025-22032, CVE-2025-21973, CVE-2025-22003,     CVE-2025-21894, CVE-2025-21994, CVE-2025-22080, CVE-2024-58093, CVE-2025-21975, CVE-2025-22054,     CVE-2025-37798, CVE-2025-22060, CVE-2025-21955, CVE-2025-22028, CVE-2025-21978, CVE-2025-22090,     CVE-2025-22053, CVE-2025-21918, CVE-2025-21962, CVE-2025-22024, CVE-2025-22005, CVE-2025-21935,     CVE-2025-21937, CVE-2025-21972, CVE-2025-21916, CVE-2025-37997, CVE-2025-22022, CVE-2025-21905,     CVE-2025-22068, CVE-2025-22030, CVE-2025-21930, CVE-2025-21960)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7940-1 advisory.

    Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel     contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain     processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose     sensitive information from the host OS. (CVE-2025-40300)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Cryptographic API;

    - ACPI drivers;

    - Ublk userspace block driver;

    - Clock framework and drivers;

    - EDAC drivers;

    - GPU drivers;

    - HSI subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Media drivers;

    - MemoryStick subsystem;

    - Network drivers;

    - NTB driver;

    - PCI subsystem;

    - Remote Processor subsystem;

    - Thermal drivers;

    - Virtio Host (VHOST) subsystem;

    - 9P distributed file system;

    - File systems infrastructure;

    - JFS file system;

    - Network file system (NFS) server daemon;

    - NTFS3 file system;

    - SMB network file system;

    - Memory management;

    - Bluetooth subsystem;

    - RDMA verbs API;

    - Kernel fork() syscall;

    - Timer subsystem;

    - Tracing infrastructure;

    - Watch queue notification mechanism;

    - Appletalk network protocol;

    - Asynchronous Transfer Mode (ATM) subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Netfilter;

    - Network traffic control;

    - SCTP protocol;

    - TLS protocol;

    - SoC Audio for Freescale CPUs drivers; (CVE-2023-53034, CVE-2024-58092, CVE-2025-21729, CVE-2025-22018,     CVE-2025-22019, CVE-2025-22020, CVE-2025-22021, CVE-2025-22025, CVE-2025-22027, CVE-2025-22028,     CVE-2025-22033, CVE-2025-22035, CVE-2025-22036, CVE-2025-22038, CVE-2025-22039, CVE-2025-22040,     CVE-2025-22041, CVE-2025-22042, CVE-2025-22044, CVE-2025-22045, CVE-2025-22047, CVE-2025-22050,     CVE-2025-22053, CVE-2025-22054, CVE-2025-22055, CVE-2025-22056, CVE-2025-22057, CVE-2025-22058,     CVE-2025-22060, CVE-2025-22062, CVE-2025-22063, CVE-2025-22064, CVE-2025-22065, CVE-2025-22066,     CVE-2025-22068, CVE-2025-22070, CVE-2025-22071, CVE-2025-22072, CVE-2025-22073, CVE-2025-22075,     CVE-2025-22079, CVE-2025-22080, CVE-2025-22081, CVE-2025-22083, CVE-2025-22086, CVE-2025-22089,     CVE-2025-22090, CVE-2025-22095, CVE-2025-22097, CVE-2025-23136, CVE-2025-23138, CVE-2025-37838,     CVE-2025-37937, CVE-2025-37958, CVE-2025-38118, CVE-2025-38152, CVE-2025-38227, CVE-2025-38240,     CVE-2025-38352, CVE-2025-38575, CVE-2025-38616, CVE-2025-38637, CVE-2025-38666, CVE-2025-38678,     CVE-2025-39682, CVE-2025-39728, CVE-2025-39735, CVE-2025-39964, CVE-2025-39993, CVE-2025-40018,     CVE-2025-40114, CVE-2025-40157)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
235340	Photon OS 5.0: Linux PHSA-2025-5.0-0517	Nessus	PhotonOS Local Security Checks	2025/5/6	2026/10/13	high
241069	Ubuntu 24.04 LTS / 24.10 : Linux kernel vulnerabilities (USN-7605-1)	Nessus	Ubuntu Local Security Checks	2025/7/1	2025/7/1	high
271259	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7835-1)	Nessus	Ubuntu Local Security Checks	2025/10/23	2026/9/18	high
276237	TencentOS Server 4: kernel (TSSA-2025:0430)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	high
295238	Azure Linux 3.0 Security Update: kernel (CVE-2025-22040)	Nessus	Azure Linux Local Security Checks	2026/1/22	2026/1/22	high
241640	Ubuntu 24.04 LTS / 24.10 : Linux kernel (Azure) vulnerabilities (USN-7628-1)	Nessus	Ubuntu Local Security Checks	2025/7/9	2025/7/9	high
279273	Ubuntu 24.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7940-1)	Nessus	Ubuntu Local Security Checks	2025/12/18	2026/9/19	high

検出

プラグインの検索

high

high

high

high

high

high

high