It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1111 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (CVE-2024-36913)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: don't walk off the end of a directory data block (CVE-2024-41013)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: hugetlb: independent PMD page table shared count (CVE-2024-57883)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix kmemleak warning for percpu hashmap (CVE-2025-37807)

    In the Linux kernel, the following vulnerability has been resolved:

    net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (CVE-2025-37945)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: prio: fix a race in prio_tune() (CVE-2025-38083)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)

    In the Linux kernel, the following vulnerability has been resolved:

    VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (CVE-2025-38102)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (CVE-2025-38103)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: red: fix a race in __red_change() (CVE-2025-38108)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mdiobus: Fix potential out-of-bounds read/write access (CVE-2025-38111)

    In the Linux kernel, the following vulnerability has been resolved:

    net: Fix TOCTOU issue in sk_is_readable() (CVE-2025-38112)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (CVE-2025-38113)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: sch_sfq: fix a potential crash on gso_skb handling (CVE-2025-38115)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_set_pipapo_avx2: fix initial map fill (CVE-2025-38120)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: Fix the dead loop of MPLS parse (CVE-2025-38146)

    In the Linux kernel, the following vulnerability has been resolved:

    calipso: Don't call calipso functions for AF_INET sk. (CVE-2025-38147)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (CVE-2025-38151)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Avoid using sk_socket after free when sending (CVE-2025-38154)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (CVE-2025-38161)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Fix panic when calling skb_linearize (CVE-2025-38165)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: fix ktls panic with sockmap (CVE-2025-38166)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: handle hdr_first_de() return value (CVE-2025-38167)

    In the Linux kernel, the following vulnerability has been resolved:

    calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (CVE-2025-38181)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: sch_sfq: reject invalid perturb period (CVE-2025-38193)

    In the Linux kernel, the following vulnerability has been resolved:

    fbcon: Make sure modelist not set on unregistered console (CVE-2025-38198)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)

    In the Linux kernel, the following vulnerability has been resolved:

    ipc: fix to protect IPCS lookups using RCU (CVE-2025-38212)

    In the Linux kernel, the following vulnerability has been resolved:

    vgacon: Add check for vc_origin address range in vgacon_scroll() (CVE-2025-38213)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (CVE-2025-38214)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (CVE-2025-38215)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: inline: fix len overflow in ext4_prepare_inline_data (CVE-2025-38222)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (CVE-2025-38231)

    In the Linux kernel, the following vulnerability has been resolved:

    af_unix: Don't leave consecutive consumed OOB skbs. (CVE-2025-38236)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: handle csum tree error with rescue=ibadroots correctly (CVE-2025-38260)

    In the Linux kernel, the following vulnerability has been resolved:

    tty: serial: uartlite: register uart driver in init (CVE-2025-38262)

    In the Linux kernel, the following vulnerability has been resolved:

    bcache: fix NULL pointer in cache_set_flush() (CVE-2025-38263)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Avoid __bpf_prog_ret0_warn when jit fails (CVE-2025-38280)

    In the Linux kernel, the following vulnerability has been resolved:

    kernfs: Relax constraint in draining guard (CVE-2025-38282)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix WARN() in get_bpf_raw_tp_regs (CVE-2025-38285)

    In the Linux kernel, the following vulnerability has been resolved:

    EDAC/skx_common: Fix general protection fault (CVE-2025-38298)

    In the Linux kernel, the following vulnerability has been resolved:

    ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (CVE-2025-38305)

    In the Linux kernel, the following vulnerability has been resolved:

    seg6: Fix validation of nexthop addresses (CVE-2025-38310)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (CVE-2025-38312)

    In the Linux kernel, the following vulnerability has been resolved:

    mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (CVE-2025-38324)

    In the Linux kernel, the following vulnerability has been resolved:

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (CVE-2025-38337)

    In the Linux kernel, the following vulnerability has been resolved:

    software node: Correct a OOB check in software_node_get_reference_args() (CVE-2025-38342)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPICA: fix acpi parse and parseext cache leaks (CVE-2025-38344)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

    In the Linux kernel, the following vulnerability has been resolved:

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix a race between renames and directory logging (CVE-2025-38365)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio-net: ensure the received length does not exceed allocated size (CVE-2025-38375)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix iteration of extrefs during log replay (CVE-2025-38382)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPICA: Refuse to evaluate a method if arguments are missing (CVE-2025-38386)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (CVE-2025-38387)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/gt: Fix timeline left held on VMA alloc error (CVE-2025-38389)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (CVE-2025-38393)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (CVE-2025-38399)

    In the Linux kernel, the following vulnerability has been resolved:

    nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (CVE-2025-38400)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check return result of sb_min_blocksize (CVE-2025-38415)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix sample vs do_exit() (CVE-2025-38424)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (CVE-2025-38430)

    In the Linux kernel, the following vulnerability has been resolved:

    do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7771-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Bluetooth drivers;

    - Bus devices;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - FPGA Framework;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - HW tracing;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Amlogic Meson DDR PMU;

    - NI-700 PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - SPI subsystem;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - USB core drivers;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - Virtio drivers;

    - BTRFS file system;

    - EROFS file system;

    - F2FS file system;

    - File systems infrastructure;

    - Network file systems library;

    - NTFS3 file system;

    - SMB network file system;

    - Codetag library;

    - BPF subsystem;

    - LZO compression library;

    - Mellanox drivers;

    - IPv4 networking;

    - Bluetooth subsystem;

    - Network sockets;

    - XFRM subsystem;

    - Digital Audio (PCM) driver;

    - Tracing infrastructure;

    - io_uring subsystem;

    - Padata parallel execution mechanism;

    - DVFS energy model driver;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Memory management;

    - KASAN memory debugging framework;

    - CAN network layer;

    - Networking core;

    - IPv6 networking;

    - Netfilter;

    - NetLabel subsystem;

    - Open vSwitch;

    - Network traffic control;

    - TIPC protocol;

    - TLS protocol;

    - ALSA framework;

    - sma1307 audio codecs;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - USB sound devices; (CVE-2025-38141, CVE-2025-38039, CVE-2025-38283, CVE-2025-38272, CVE-2025-38290,     CVE-2025-38168, CVE-2025-38134, CVE-2025-38158, CVE-2025-38097, CVE-2025-38078, CVE-2025-38161,     CVE-2025-38116, CVE-2025-38312, CVE-2025-38067, CVE-2025-38129, CVE-2025-38119, CVE-2025-38061,     CVE-2025-38352, CVE-2025-38269, CVE-2025-38163, CVE-2025-38315, CVE-2025-38301, CVE-2025-38115,     CVE-2025-38032, CVE-2025-38127, CVE-2025-38029, CVE-2025-38277, CVE-2025-38075, CVE-2025-38300,     CVE-2025-38059, CVE-2025-38047, CVE-2025-38118, CVE-2025-38038, CVE-2025-38278, CVE-2025-38169,     CVE-2025-38074, CVE-2025-38292, CVE-2025-38295, CVE-2025-38294, CVE-2025-38154, CVE-2025-38165,     CVE-2025-38069, CVE-2025-38120, CVE-2025-38098, CVE-2025-38050, CVE-2025-38068, CVE-2025-38063,     CVE-2025-38034, CVE-2025-38123, CVE-2025-38092, CVE-2025-38103, CVE-2025-38170, CVE-2025-38313,     CVE-2025-38062, CVE-2025-38159, CVE-2025-38147, CVE-2025-38415, CVE-2025-38045, CVE-2025-38279,     CVE-2025-38302, CVE-2025-38162, CVE-2025-38414, CVE-2025-38146, CVE-2025-38035, CVE-2025-38040,     CVE-2025-38073, CVE-2025-38054, CVE-2025-38099, CVE-2025-38291, CVE-2025-38126, CVE-2025-38088,     CVE-2025-38310, CVE-2025-38176, CVE-2025-38102, CVE-2025-38149, CVE-2025-38124, CVE-2025-38003,     CVE-2025-38140, CVE-2025-38100, CVE-2025-38081, CVE-2025-38319, CVE-2025-38142, CVE-2025-38303,     CVE-2025-38155, CVE-2025-38044, CVE-2025-38316, CVE-2025-38052, CVE-2025-38317, CVE-2025-38151,     CVE-2025-38164, CVE-2025-38148, CVE-2025-38082, CVE-2025-38267, CVE-2025-38031, CVE-2025-38132,     CVE-2025-38138, CVE-2025-38125, CVE-2025-38111, CVE-2025-38106, CVE-2025-38287, CVE-2025-38137,     CVE-2025-38117, CVE-2025-38130, CVE-2025-38122, CVE-2025-38058, CVE-2025-38110, CVE-2025-38101,     CVE-2025-38048, CVE-2025-38080, CVE-2025-38304, CVE-2025-38128, CVE-2025-38072, CVE-2025-38265,     CVE-2025-38166, CVE-2025-38131, CVE-2025-38105, CVE-2025-38096, CVE-2025-38275, CVE-2025-38305,     CVE-2025-38156, CVE-2025-38139, CVE-2025-38318, CVE-2025-38136, CVE-2025-38107, CVE-2025-38041,     CVE-2025-38288, CVE-2025-38055, CVE-2025-38033, CVE-2025-38064, CVE-2025-38036, CVE-2025-38077,     CVE-2025-38053, CVE-2025-38112, CVE-2025-38070, CVE-2025-38109, CVE-2025-38143, CVE-2025-38299,     CVE-2025-38051, CVE-2025-38167, CVE-2025-38172, CVE-2025-38057, CVE-2025-38311, CVE-2025-38285,     CVE-2025-38076, CVE-2025-38280, CVE-2025-38157, CVE-2025-38043, CVE-2025-38065, CVE-2025-38289,     CVE-2025-38060, CVE-2025-38274, CVE-2025-38004, CVE-2025-38037, CVE-2025-38282, CVE-2025-38298,     CVE-2025-38293, CVE-2025-38499, CVE-2025-38135, CVE-2025-38173, CVE-2025-38079, CVE-2025-38296,     CVE-2025-38108, CVE-2025-38175, CVE-2025-38066, CVE-2025-38286, CVE-2025-38160, CVE-2025-38498,     CVE-2025-38281, CVE-2025-38268, CVE-2025-38270, CVE-2025-38153, CVE-2025-38042, CVE-2025-38114,     CVE-2025-38284, CVE-2025-38297, CVE-2025-38306, CVE-2025-38071, CVE-2025-38307, CVE-2025-38091,     CVE-2025-38314, CVE-2025-38145, CVE-2025-38113)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    tracing: Add down_write(trace_event_sem) when adding trace event(CVE-2025-38539)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    pinmux: fix race causing mux_owner NULL with active mux_usecount(CVE-2025-38632)

    openvswitch: Fix unsafe attribute parsing in output_userspace()(CVE-2025-37998)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38214)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    padata: do not leak refcount in reorder_work(CVE-2025-38031)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow(CVE-2025-22086)

    HID: core: ensure the allocated report buffer can contain the reserved report ID(CVE-2025-38495)

    net_sched: sch_sfq: fix a potential crash on gso_skb handling(CVE-2025-38115)

    pinctrl: qcom: msm: mark certain pins as invalid for interrupts(CVE-2025-38516)

    fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass(CVE-2025-38396)

    ata: libata-sff: Ensure that we cannot write outside the allocated buffer(CVE-2025-21738)

    HID: intel-ish-hid: ipc: Fix potential use-after-free in work function(CVE-2023-53039)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation(CVE-2025-38162)

    fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()(CVE-2025-38312)

    clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns(CVE-2025-38499)

    crypto: algif_hash - fix double free in hash_accept(CVE-2025-38079)

    pptp: ensure minimal skb length in pptp_xmit()(CVE-2025-38574)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    net: openvswitch: Fix the dead loop of MPLS parse(CVE-2025-38146)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()(CVE-2025-38399)

    i2c: qup: jump out of the loop in case of timeout(CVE-2025-38671)

    x86/sgx: Prevent attempts to reclaim poisoned pages(CVE-2025-38334)

    nvmet-tcp: don't restore null(CVE-2025-38035)

    net: fix udp gso skb_segment after pull from frag_list(CVE-2025-38124)

    net/mlx5e: Fix cleanup null-ptr deref on encap lock(CVE-2023-53105)

    net: fix NULL pointer dereference in l3mdev_l3_rcv(CVE-2025-22103)

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    bpf: check changes_pkt_data property for extension programs(CVE-2024-58100)

    bpf: fix ktls panic with sockmap(CVE-2025-38166)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported(CVE-2025-22075)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace(CVE-2022-49932)

    net/mdiobus: Fix potential out-of-bounds read/write access(CVE-2025-38111)

    dmaengine: idxd: fix memory leak in error handling path of idxd_alloc(CVE-2025-38015)

    tcp: add accessors to read/set tp-snd_cwnd(CVE-2022-49325)

    perf: Fix sample vs do_exit()(CVE-2025-38424)

    regulator: core: fix NULL dereference on unbind due to stale coupling data(CVE-2025-38668)

    calipso: Don't call calipso functions for AF_INET sk.(CVE-2025-38147)

    Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If     fb_add_videomode()(CVE-2025-38215)

    usb: typec: altmodes/displayport: do not index invalid pin_assignments(CVE-2025-38391)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    netdevsim: Fix memory leak of nsim_dev-fa_cookie(CVE-2022-49803)

    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()(CVE-2025-38103)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    netlink: Fix wraparounds of sk-sk_rmem_alloc(CVE-2025-38465)

    EDAC/skx_common: Fix general protection fault(CVE-2025-38298)

    drm/nouveau: prime: fix ttm_bo_delayed_delete oops(CVE-2025-37765)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    netfilter: nf_set_pipapo_avx2: fix initial map fill(CVE-2025-38120)

    bpf, sockmap: Fix panic when calling skb_linearize(CVE-2025-38165)

    nvme-tcp: sanitize request list handling(CVE-2025-38264)

    bpf, sockmap: Avoid using sk_socket after free when sending(CVE-2025-38154)

    bpf: consider that tail calls invalidate packet pointers(CVE-2024-58237)

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction(CVE-2025-38211)

    NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN(CVE-2025-38393)

    ipc: fix to protect IPCS lookups using(CVE-2025-38212)

    net_sched: Flush gso_skb list too during -change()(CVE-2025-37992)

    netfilter: socket: Lookup orig tuple for IPv6 SNAT(CVE-2025-22021)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    net: tls: explicitly disallow disconnect(CVE-2025-37756)

    bpf: Scrub packet on bpf_redirect_peer(CVE-2025-37959)

    netfilter: allow exp not to be removed in nf_ct_find_expectation(CVE-2023-52927)

    net: ppp: Add bound checking for skb data on ppp_sync_txmung(CVE-2025-37749)

    net: decrease cached dst counters in dst_release(CVE-2025-22057)

    net: openvswitch: fix nested key length validation in the set() action(CVE-2025-37789)

    netfilter: conntrack: revisit gc autotuning(CVE-2022-49110)

    bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()(CVE-2023-53133)

    blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()(CVE-2023-53421)

    writeback: fix use-after-free in __mark_inode_dirty()(CVE-2025-39866)

    scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure(CVE-2025-38695)

    serial: mctrl_gpio: split disable_ms into sync and no_sync APIs(CVE-2025-38040)

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including     the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.(CVE-2024-2201)

    perf/core: Prevent VMA split of buffer mappings(CVE-2025-38563)

    ipvs: fix uninit-value for saddr in do_output_route4(CVE-2025-37961)

    net: phy: leds: fix memory leak(CVE-2025-37989)

    seg6: Fix validation of nexthop addresses(CVE-2025-38310)

    page_pool: avoid infinite loop to schedule delayed worker(CVE-2025-37859)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    perf/core: Exit early on perf_mmap() fail(CVE-2025-38565)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7789-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Bluetooth drivers;

    - Bus devices;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - Arm Firmware Framework for ARMv8-A(FFA);

    - FPGA Framework;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - HW tracing;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - VMware VMCI Driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVDIMM (Non-Volatile Memory Device) drivers;

    - NVME drivers;

    - NVMEM (Non Volatile Memory) drivers;

    - PCI subsystem;

    - Amlogic Meson DDR PMU;

    - NI-700 PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - PTP clock framework;

    - SCSI subsystem;

    - ASPEED SoC drivers;

    - SPI subsystem;

    - TCM subsystem;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB core drivers;

    - USB Gadget drivers;

    - Renesas USBHS Controller drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Backlight driver;

    - Framebuffer layer;

    - Virtio drivers;

    - BTRFS file system;

    - EROFS file system;

    - F2FS file system;

    - File systems infrastructure;

    - Network file systems library;

    - NTFS3 file system;

    - SMB network file system;

    - Codetag library;

    - BPF subsystem;

    - LZO compression library;

    - Mellanox drivers;

    - IPv4 networking;

    - Bluetooth subsystem;

    - Network sockets;

    - XFRM subsystem;

    - Digital Audio (PCM) driver;

    - Tracing infrastructure;

    - io_uring subsystem;

    - Padata parallel execution mechanism;

    - DVFS energy model driver;

    - Restartable seuqences system call mechanism;

    - Timer subsystem;

    - Memory management;

    - KASAN memory debugging framework;

    - CAN network layer;

    - Networking core;

    - IPv6 networking;

    - Netfilter;

    - NetLabel subsystem;

    - Open vSwitch;

    - Network traffic control;

    - TIPC protocol;

    - TLS protocol;

    - ALSA framework;

    - sma1307 audio codecs;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - USB sound devices; (CVE-2025-38137, CVE-2025-38141, CVE-2025-38035, CVE-2025-38298, CVE-2025-38042,     CVE-2025-38140, CVE-2025-38138, CVE-2025-38316, CVE-2025-38304, CVE-2025-38165, CVE-2025-38306,     CVE-2025-38082, CVE-2025-38132, CVE-2025-38498, CVE-2025-38158, CVE-2025-38154, CVE-2025-38064,     CVE-2025-38129, CVE-2025-38096, CVE-2025-38352, CVE-2025-38303, CVE-2025-38122, CVE-2025-38048,     CVE-2025-38296, CVE-2025-38149, CVE-2025-38319, CVE-2025-38078, CVE-2025-38066, CVE-2025-38099,     CVE-2025-38291, CVE-2025-38267, CVE-2025-38268, CVE-2025-38126, CVE-2025-38076, CVE-2025-38077,     CVE-2025-38101, CVE-2025-38071, CVE-2025-38163, CVE-2025-38285, CVE-2025-38265, CVE-2025-38125,     CVE-2025-38302, CVE-2025-38172, CVE-2025-38292, CVE-2025-38279, CVE-2025-38170, CVE-2025-38062,     CVE-2025-38074, CVE-2025-38050, CVE-2025-38116, CVE-2025-38414, CVE-2025-38173, CVE-2025-38033,     CVE-2025-38112, CVE-2025-38091, CVE-2025-38290, CVE-2025-39890, CVE-2025-38156, CVE-2025-38289,     CVE-2025-38275, CVE-2025-38295, CVE-2025-38123, CVE-2025-38300, CVE-2025-38067, CVE-2025-38131,     CVE-2025-38294, CVE-2025-38105, CVE-2025-38107, CVE-2025-38106, CVE-2025-38069, CVE-2025-38041,     CVE-2025-38111, CVE-2025-38312, CVE-2025-38092, CVE-2025-38054, CVE-2025-38166, CVE-2025-38044,     CVE-2025-38159, CVE-2025-38061, CVE-2025-38115, CVE-2025-38058, CVE-2025-38036, CVE-2025-38100,     CVE-2025-38075, CVE-2025-38160, CVE-2025-38102, CVE-2025-38269, CVE-2025-38108, CVE-2025-38119,     CVE-2025-38052, CVE-2025-38175, CVE-2025-38103, CVE-2025-38286, CVE-2025-38051, CVE-2025-38004,     CVE-2025-38283, CVE-2025-38118, CVE-2025-38139, CVE-2025-38079, CVE-2025-38315, CVE-2025-38145,     CVE-2025-38072, CVE-2025-38045, CVE-2025-38117, CVE-2025-38143, CVE-2025-38068, CVE-2025-38053,     CVE-2025-38081, CVE-2025-38032, CVE-2025-38134, CVE-2025-38063, CVE-2025-38128, CVE-2025-38278,     CVE-2025-38270, CVE-2025-38060, CVE-2025-38161, CVE-2025-38073, CVE-2025-38065, CVE-2025-38313,     CVE-2025-38148, CVE-2025-38124, CVE-2025-38305, CVE-2025-38146, CVE-2025-38047, CVE-2025-38055,     CVE-2025-38169, CVE-2025-38120, CVE-2025-38164, CVE-2025-38070, CVE-2025-38176, CVE-2025-38282,     CVE-2025-38288, CVE-2025-38274, CVE-2025-38113, CVE-2025-38174, CVE-2025-38301, CVE-2025-38293,     CVE-2025-38136, CVE-2025-38311, CVE-2025-38039, CVE-2025-38297, CVE-2025-38155, CVE-2025-38307,     CVE-2025-38147, CVE-2025-38043, CVE-2025-38109, CVE-2025-38281, CVE-2025-38280, CVE-2025-38127,     CVE-2025-38057, CVE-2025-38029, CVE-2025-38038, CVE-2025-38167, CVE-2025-38151, CVE-2025-38415,     CVE-2025-38317, CVE-2025-38031, CVE-2025-38162, CVE-2025-38098, CVE-2025-38130, CVE-2025-38114,     CVE-2025-38142, CVE-2025-38135, CVE-2025-38299, CVE-2025-38272, CVE-2025-38277, CVE-2025-38037,     CVE-2025-38088, CVE-2025-38287, CVE-2025-38168, CVE-2025-38003, CVE-2025-38284, CVE-2025-38499,     CVE-2025-38097, CVE-2025-38318, CVE-2025-38059, CVE-2025-38040, CVE-2025-38314, CVE-2025-38110,     CVE-2025-38157, CVE-2025-38153, CVE-2025-38080, CVE-2025-38034, CVE-2025-38310)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    HID: core: ensure the allocated report buffer can contain the reserved report ID(CVE-2025-38495)

    perf: Revert to requiring CAP_SYS_ADMIN for uprobes(CVE-2025-38466)

    tipc: Fix use-after-free in tipc_conn_close().(CVE-2025-38464)

    net/sched: Abort __tc_modify_qdisc if parent class does not exist(CVE-2025-38457)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()(CVE-2025-38399)

    usb: typec: altmodes/displayport: do not index invalid pin_assignments(CVE-2025-38391)

    ACPICA: Refuse to evaluate a method if arguments are missing(CVE-2025-38386)

    virtio-net: ensure the received length does not exceed allocated size(CVE-2025-38375)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    ftrace: Fix UAF when lookup kallsym after ftrace disabled(CVE-2025-38346)

    jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()(CVE-2025-38337)

    mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().(CVE-2025-38324)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    bpf: Fix WARN() in get_bpf_raw_tp_regs(CVE-2025-38285)

    net: tipc: fix refcount warning in tipc_aead_encrypt(CVE-2025-38273)

    media: cxusb: no longer judge rbuf when the write fails(CVE-2025-38229)

    ext4: inline: fix len overflow in ext4_prepare_inline_data(CVE-2025-38222)

    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38215)

    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var(CVE-2025-38214)

    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction(CVE-2025-38211)

    net: clear the dst when changing skb protocol(CVE-2025-38192)

    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer(CVE-2025-38184)

    bpf: fix ktls panic with sockmap(CVE-2025-38166)

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation(CVE-2025-38162)

    ice: fix Tx scheduler error handling in XDP callback(CVE-2025-38127)

    net: fix udp gso skb_segment after pull from frag_list(CVE-2025-38124)

    netfilter: nf_set_pipapo_avx2: fix initial map fill(CVE-2025-38120)

    net_sched: sch_sfq: fix a potential crash on gso_skb handling(CVE-2025-38115)

    net/mdiobus: Fix potential out-of-bounds read/write access(CVE-2025-38111)

    net_sched: red: fix a race in __red_change()(CVE-2025-38108)

    VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify(CVE-2025-38102)

    x86/iopl: Cure TIF_IO_BITMAP inconsistencies(CVE-2025-38100)

    net: ch9200: fix uninitialised access during mii_nway_restart(CVE-2025-38086)

    mm/hugetlb: unshare page tables during VMA split, not before(CVE-2025-38084)

    net_sched: prio: fix a race in prio_tune()(CVE-2025-38083)

    scsi: target: iscsi: Fix timeout on deleted connection(CVE-2025-38075)

    vhost-scsi: protect vq-log_used with vq-mutex(CVE-2025-38074)

    libnvdimm/labels: Fix divide error in nd_label_data_init()(CVE-2025-38072)

    crypto: lzo - Fix compression buffer overrun(CVE-2025-38068)

    rseq: Fix segfault on registration when rseq_cs is non-zero(CVE-2025-38067)

    dm cache: prevent BUG_ON by blocking retries on failed device resumes(CVE-2025-38066)

    dm: fix unconditional IO throttle caused by REQ_PREFLUSH(CVE-2025-38063)

    net: pktgen: fix access outside of user given buffer in pktgen_thread_write()(CVE-2025-38061)

    net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done(CVE-2025-38052)

    media: cx231xx: set device_caps for 417(CVE-2025-38044)

    dmaengine: idxd: Refactor remove call with idxd_cleanup() helper(CVE-2025-38014)

    net_sched: hfsc: Address reentrant enqueue adding class to eltree twice(CVE-2025-38001)

    sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()(CVE-2025-38000)

    openvswitch: Fix unsafe attribute parsing in output_userspace()(CVE-2025-37998)

    netfilter: ipset: fix region locking in hash types(CVE-2025-37997)

    net_sched: Flush gso_skb list too during -change()(CVE-2025-37992)

    net: phy: leds: fix memory leak(CVE-2025-37989)

    ipvs: fix uninit-value for saddr in do_output_route4(CVE-2025-37961)

    bpf: Scrub packet on bpf_redirect_peer(CVE-2025-37959)

    arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs(CVE-2025-37948)

    sch_htb: make htb_qlen_notify() idempotent(CVE-2025-37932)

    xsk: Fix race condition in AF_XDP generic RX path(CVE-2025-37920)

    net_sched: drr: Fix double list add in class with netem as child qdisc(CVE-2025-37915)

    net_sched: qfq: Fix double list add in class with netem as child qdisc(CVE-2025-37913)

    net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc(CVE-2025-37890)

    HID: pidff: Fix null pointer dereference in pidff_find_fields(CVE-2025-37862)

    page_pool: avoid infinite loop to schedule delayed worker(CVE-2025-37859)

    tipc: fix NULL pointer dereference in tipc_mon_reinit_self()(CVE-2025-37824)

    net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too(CVE-2025-37823)

    codel: remove sch-q.qlen check before qdisc_tree_reduce_backlog()(CVE-2025-37798)

    net_sched: hfsc: Fix a UAF vulnerability in class handling(CVE-2025-37797)

    net: openvswitch: fix nested key length validation in the set() action(CVE-2025-37789)

    cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path(CVE-2025-37788)

    tipc: fix memory leak in tipc_link_xmit(CVE-2025-37757)

    net: tls: explicitly disallow disconnect(CVE-2025-37756)

    net: ppp: Add bound checking for skb data on ppp_sync_txmung(CVE-2025-37749)

    sctp: detect and prevent references to a freed transport in sendmsg(CVE-2025-23142)

    net: fix NULL pointer dereference in l3mdev_l3_rcv(CVE-2025-22103)

    RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow(CVE-2025-22086)

    rtnetlink: Allocate vfinfo size for VF GUIDs when supported(CVE-2025-22075)

    net: decrease cached dst counters in dst_release(CVE-2025-22057)

    net: fix geneve_opt length integer overflow(CVE-2025-22055)

    netfilter: socket: Lookup orig tuple for IPv6 SNAT(CVE-2025-22021)

    regulator: check that dummy regulator has been probed before using it(CVE-2025-22008)

    block: mark GFP_NOIO around sysfs -store()(CVE-2025-21817)

    ata: libata-sff: Ensure that we cannot write outside the allocated buffer(CVE-2025-21738)

    net: avoid race between device unregistration and ethnl ops(CVE-2025-21701)

    bpf: check changes_pkt_data property for extension programs(CVE-2024-58100)

    bpf: track changes_pkt_data property for global functions(CVE-2024-58098)

    net: fix memory leak in tcp_conn_request()(CVE-2024-57841)

    A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including     the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.(CVE-2024-2201)

    net/mlx5e: Fix cleanup null-ptr deref on encap lock(CVE-2023-53105)

    net: usb: lan78xx: Limit packet length to skb-len(CVE-2023-53068)

    HID: intel-ish-hid: ipc: Fix potential use-after-free in work function(CVE-2023-53039)

    netfilter: allow exp not to be removed in nf_ct_find_expectation(CVE-2023-52927)

    arm64: set UXN on swapper page tables(CVE-2022-50232)

    arm64: set UXN on swapper page tables(CVE-2022-50230)

    bpf: fix potential 32-bit overflow when accessing ARRAY map element(CVE-2022-50167)

    sched/core: Do not requeue task on CPU excluded from cpus_mask(CVE-2022-50100)

    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts(CVE-2022-50098)

    bpf: Fix a data-race around bpf_jit_limit.(CVE-2022-49967)

    netdevsim: Fix memory leak of nsim_dev-fa_cookie(CVE-2022-49803)

    x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)(CVE-2022-49557)

    block: fix rq-qos breakage from skipping rq_qos_done_bio()(CVE-2022-49266)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02853-1 advisory.

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:
    - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
    - CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing     before MONITOR (bsc#1238896).
    - CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
    - CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
    - CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
    - CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
    - CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
    - CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
    - CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
    - CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
    - CVE-2025-37885: KVM: x86: Reset IRTE to host control if *new* route isn't postable (bsc#1242960).
    - CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
    - CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
    - CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
    - CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
    - CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
    - CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
    - CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
    - CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write()     (bsc#1245440).
    - CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
    - CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
    - CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
    - CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
    - CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
    - CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
    - CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
    - CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers     (bsc#1245671).
    - CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
    - CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
    - CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
    - CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
    - CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
    - CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping     (bsc#1245708).
    - CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
    - CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
    - CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
    - CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
    - CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
    - CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
    - CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
    - CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
    - CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()     (bsc#1246006).
    - CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
    - CVE-2025-38188: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (bsc#1246098).
    - CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
    - CVE-2025-38202: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (bsc#1245980).
    - CVE-2025-38203: jfs: Fix null-ptr-deref in jfs_ioc_trim (bsc#1246044).
    - CVE-2025-38204: jfs: fix array-index-out-of-bounds read in add_missing_indices (bsc#1245983).
    - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
    - CVE-2025-38210: configfs-tsm-report: Fix NULL dereference of tsm_ops (bsc#1246020).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
    - CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
    - CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
    - CVE-2025-38236: af_unix: Disable MSG_OOB for unprivileged users (bsc#1246093).
    - CVE-2025-38239: scsi: megaraid_sas: Fix invalid node index (bsc#1246178).
    - CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
    - CVE-2025-38248: bridge: mcast: Fix use-after-free during router port configuration (bsc#1246173).
    - CVE-2025-38250: kABI workaround for bluetooth hci_dev changes (bsc#1246182).
    - CVE-2025-38256: io_uring/rsrc: fix folio unpinning (bsc#1246188).
    - CVE-2025-38264: llist: add interface to check if a node is on a list (bsc#1246387).
    - CVE-2025-38272: net: dsa: b53: do not enable EEE on bcm63xx (bsc#1246268).
    - CVE-2025-38279: selftests/bpf: Add tests with stack ptr register in conditional jmp (bsc#1246264).
    - CVE-2025-38283: hisi_acc_vfio_pci: bugfix live migration function without VF device driver     (bsc#1246273).
    - CVE-2025-38303: Bluetooth: eir: Fix possible crashes on eir_create_adv_data (bsc#1246354).
    - CVE-2025-38310: seg6: Fix validation of nexthop addresses (bsc#1246361).
    - CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
    - CVE-2025-38334: x86/sgx: Prevent attempts to reclaim poisoned pages (bsc#1246384).
    - CVE-2025-38335: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (bsc#1246250).
    - CVE-2025-38337: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (bsc#1246253).
    - CVE-2025-38349: eventpoll: do not decrement ep refcount while still holding the ep mutex (bsc#1246777).
    - CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
    - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()     (bsc#1246911).
    - CVE-2025-38364: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (bsc#1247091).
    - CVE-2025-38365: btrfs: fix a race between renames and directory logging (bsc#1247023).
    - CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
    - CVE-2025-38382: btrfs: fix iteration of extrefs during log replay (bsc#1247031).
    - CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
    - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247156).
    - CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()     (bsc#1247097).
    - CVE-2025-38403: vsock/vmci: Clear the vmci transport packet properly when initializing it (bsc#1247141).
    - CVE-2025-38414: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (bsc#1247145).
    - CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
    - CVE-2025-38429: bus: mhi: ep: Update read pointer only after buffer is written (bsc#1247253).
    - CVE-2025-38453: kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred (bsc#1247234).
    - CVE-2025-38455: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight     (bsc#1247101).
    - CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
    - CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
    - CVE-2025-38461: vsock: Fix transport_* TOCTOU (bsc#1247103).
    - CVE-2025-38462: vsock: Fix transport_{g2h,h2g} TOCTOU (bsc#1247104).
    - CVE-2025-38463: tcp: Correct signedness in skb remaining space calculation (bsc#1247113).
    - CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
    - CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
    - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
    - CVE-2025-38475: smc: Fix various oops due to inet_sock type confusion (bsc#1247308).
    - CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02846-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
    - CVE-2021-46987: btrfs: fix deadlock when cloning inline extents and using qgroups (bsc#1220704).
    - CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when     clearing sk_user_data can lead to a race condition and NULL pointer dereference (bsc#1205711).
    - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
    - CVE-2022-49319: iommu/arm-smmu-v3: check return value after calling platform_get_resource()     (bsc#1238374).
    - CVE-2022-49323: iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (bsc#1238400).
    - CVE-2022-49768: 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (bsc#1242446).
    - CVE-2022-49825: ata: libata-transport: fix error handling in ata_tport_add() (bsc#1242548).
    - CVE-2022-49934: wifi: mac80211: Fix UAF in ieee80211_scan_rx() (bsc#1245051).
    - CVE-2022-49948: vt: Clear selection before changing the font (bsc#1245058).
    - CVE-2022-49969: drm/amd/display: clear optc underflow before turn off odm clock (bsc#1245060).
    - CVE-2022-49993: loop: Check for overflow while configuring loop (bsc#1245121).
    - CVE-2022-50025: cxl: Fix a memory leak in an error handling path (bsc#1245132).
    - CVE-2022-50027: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1245073).
    - CVE-2022-50030: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input     (bsc#1245265).
    - CVE-2022-50033: usb: host: ohci-ppc-of: Fix refcount leak bug (bsc#1245139).
    - CVE-2022-50103: sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (bsc#1244840).
    - CVE-2022-50149: driver core: fix potential deadlock in __driver_attach (bsc#1244883).
    - CVE-2022-50226: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak     (bsc#1244860).
    - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c     in RDMA (bsc#1210629).
    - CVE-2023-52878: can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out     of bounds (bsc#1225000).
    - CVE-2023-53020: l2tp: close all race conditions in l2tp_tunnel_register() (bsc#1240224).
    - CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor     (bsc#1242780).
    - CVE-2023-53118: scsi: core: Fix a procfs host directory removal regression (bsc#1242365).
    - CVE-2024-26974: crypto: qat - resolve race condition during AER recovery (bsc#1223638).
    - CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
    - CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
    - CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
    - CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
    - CVE-2025-21731: nbd: do not allow reconnect after disconnect (bsc#1237881).
    - CVE-2025-21928: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (bsc#1240722).
    - CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
    - CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
    - CVE-2025-37885: KVM: x86: Reset IRTE to host control if *new* route isn't postable (bsc#1242960).
    - CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
    - CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
    - CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
    - CVE-2025-38040: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (bsc#1245078).
    - CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
    - CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
    - CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
    - CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
    - CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
    - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
    - CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
    - CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
    - CVE-2025-38108: net_sched: red: fix a race in __red_change() (bsc#1245675).
    - CVE-2025-38112: net: Fix TOCTOU issue in sk_is_readable() (bsc#1245668).
    - CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
    - CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping     (bsc#1245708).
    - CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
    - CVE-2025-38157: wifi: ath9k_htc: Abort software beacon handling if disabled (bsc#1245747).
    - CVE-2025-38161: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (bsc#1245777).
    - CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
    - CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
    - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
    - CVE-2025-38193: net_sched: sch_sfq: reject invalid perturb period (bsc#1245945).
    - CVE-2025-38198: fbcon: Make sure modelist not set on unregistered console (bsc#1245952).
    - CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
    - CVE-2025-38211: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (bsc#1246008).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
    - CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
    - CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
    - CVE-2025-38249: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (bsc#1246171).
    - CVE-2025-38250: kABI workaround for bluetooth hci_dev changes (bsc#1246182).
    - CVE-2025-38264: llist: add interface to check if a node is on a list (bsc#1246387).
    - CVE-2025-38312: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (bsc#1246386).
    - CVE-2025-38319: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table     (bsc#1246243).
    - CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
    - CVE-2025-38337: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (bsc#1246253).
    - CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
    - CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
    - CVE-2025-38391: usb: typec: altmodes/displayport: do not index invalid pin_assignments (bsc#1247181).
    - CVE-2025-38403: vsock/vmci: Clear the vmci transport packet properly when initializing it (bsc#1247141).
    - CVE-2025-38415: Squashfs: check return result of sb_min_blocksize (bsc#1247147).
    - CVE-2025-38420: wifi: carl9170: do not ping device which has failed to load firmware (bsc#1247279).
    - CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
    - CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class     (bsc#1247314).
    - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
    - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID     (bsc#1247348).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02996-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
    - CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing     before MONITOR (bsc#1238896).
    - CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (1230216).
    - CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
    - CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
    - CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
    - CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
    - CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
    - CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
    - CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
    - CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
    - CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
    - CVE-2025-37885: KVM: x86: Reset IRTE to host control if *new* route isn't postable (bsc#1242960).
    - CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
    - CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
    - CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
    - CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
    - CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
    - CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
    - CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write()     (bsc#1245440).
    - CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
    - CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
    - CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
    - CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
    - CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
    - CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
    - CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
    - CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers     (bsc#1245671).
    - CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
    - CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
    - CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
    - CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
    - CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping     (bsc#1245708).
    - CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
    - CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
    - CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
    - CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
    - CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
    - CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
    - CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
    - CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
    - CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()     (bsc#1246006).
    - CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
    - CVE-2025-38188: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (bsc#1246098).
    - CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
    - CVE-2025-38202: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (bsc#1245980).
    - CVE-2025-38203: jfs: Fix null-ptr-deref in jfs_ioc_trim (bsc#1246044).
    - CVE-2025-38204: jfs: fix array-index-out-of-bounds read in add_missing_indices (bsc#1245983).
    - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
    - CVE-2025-38210: configfs-tsm-report: Fix NULL dereference of tsm_ops (bsc#1246020).
    - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
    - CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
    - CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
    - CVE-2025-38236: af_unix: Disable MSG_OOB for unprivileged users (bsc#1246093).
    - CVE-2025-38239: scsi: megaraid_sas: Fix invalid node index (bsc#1246178).
    - CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
    - CVE-2025-38248: bridge: mcast: Fix use-after-free during router port configuration (bsc#1246173).
    - CVE-2025-38250: kABI workaround for bluetooth hci_dev changes (bsc#1246182).
    - CVE-2025-38264: llist: add interface to check if a node is on a list (bsc#1246387).
    - CVE-2025-38272: net: dsa: b53: do not enable EEE on bcm63xx (bsc#1246268).
    - CVE-2025-38279: selftests/bpf: Add tests with stack ptr register in conditional jmp (bsc#1246264).
    - CVE-2025-38283: hisi_acc_vfio_pci: bugfix live migration function without VF device driver     (bsc#1246273).
    - CVE-2025-38303: Bluetooth: eir: Fix possible crashes on eir_create_adv_data (bsc#1246354).
    - CVE-2025-38310: seg6: Fix validation of nexthop addresses (bsc#1246361).
    - CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
    - CVE-2025-38334: x86/sgx: Prevent attempts to reclaim poisoned pages (bsc#1246384).
    - CVE-2025-38335: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (bsc#1246250).
    - CVE-2025-38337: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (bsc#1246253).
    - CVE-2025-38349: eventpoll: do not decrement ep refcount while still holding the ep mutex (bsc#1246777).
    - CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
    - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()     (bsc#1246911).
    - CVE-2025-38364: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (bsc#1247091).
    - CVE-2025-38365: btrfs: fix a race between renames and directory logging (bsc#1247023).
    - CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
    - CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
    - CVE-2025-38382: btrfs: fix iteration of extrefs during log replay (bsc#1247031).
    - CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
    - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247156).
    - CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()     (bsc#1247097).
    - CVE-2025-38403: vsock/vmci: Clear the vmci transport packet properly when initializing it (bsc#1247141).
    - CVE-2025-38414: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (bsc#1247145).
    - CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
    - CVE-2025-38429: bus: mhi: ep: Update read pointer only after buffer is written (bsc#1247253).
    - CVE-2025-38455: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight     (bsc#1247101).
    - CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
    - CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
    - CVE-2025-38461: vsock: Fix transport_* TOCTOU (bsc#1247103).
    - CVE-2025-38462: vsock: Fix transport_{g2h,h2g} TOCTOU (bsc#1247104).
    - CVE-2025-38463: tcp: Correct signedness in skb remaining space calculation (bsc#1247113).
    - CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
    - CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
    - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
    - CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
    - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20551 advisory.

    - scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (Karan Tilak Kumar) [Orabug:
    38175020,38226429] {CVE-2025-38238}
    - KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls (Manuel Andreas) [Orabug:
    38254220] {CVE-2025-38469}
    - btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Boris Burkov) [Orabug:
    37844509] {CVE-2025-22115}
    - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug:
    38310005] {CVE-2025-38499}
    - efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (Breno Leitao) [Orabug:
    38324320] {CVE-2025-38549}
    - rxrpc: Fix recv-recv race of completed call (David Howells) [Orabug: 38324205] {CVE-2025-38524}
    - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [Orabug: 38254212]     {CVE-2025-38468}
    - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Dong Chenchen) [Orabug:
    38254223] {CVE-2025-38470}
    - tls: always refresh the queue when reading sock (Jakub Kicinski) [Orabug: 38254232] {CVE-2025-38471}
    - virtio-net: fix recursived rtnl_lock() during probe() (Zigit Zo) [Orabug: 38324329] {CVE-2025-38551}
    - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [Orabug:
    38254235] {CVE-2025-38472}
    - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Yue Haibing) [Orabug: 38324325] {CVE-2025-38550}
    - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [Orabug: 38254239]     {CVE-2025-38473}
    - usb: net: sierra: check for no status endpoint (Oliver Neukum) [Orabug: 38254247] {CVE-2025-38474}
    - ice: add NULL check in eswitch lag check (Dave Ertman) [Orabug: 38324213] {CVE-2025-38526}
    - hwmon: (corsair-cpro) Validate the size of the received input buffer (Marius Zachmann) [Orabug:
    38324317] {CVE-2025-38548}
    - net: phy: Don't register LEDs for genphy (Sean Anderson) [Orabug: 38324260] {CVE-2025-38537}
    - smc: Fix various oops due to inet_sock type confusion. (Kuniyuki Iwashima) [Orabug: 38254256]     {CVE-2025-38475}
    - smb: client: fix use-after-free in cifs_oplock_break (Wang Zhaolong) [Orabug: 38324216] {CVE-2025-38527}
    - rpl: Fix use-after-free in rpl_do_srh_inline(). (Kuniyuki Iwashima) [Orabug: 38254259] {CVE-2025-38476}
    - net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [Orabug: 38254264] {CVE-2025-38477}
    - bpf: Reject %p% format string in bprintf-like helpers (Paul Chaignon) [Orabug: 38324225]     {CVE-2025-38528}
    - comedi: Fix initialization of data for instructions that write to subdevice (Ian Abbott) [Orabug:
    38254270] {CVE-2025-38478}
    - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() (Ian Abbott) [Orabug: 38254276]     {CVE-2025-38480}
    - comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large (Ian Abbott) [Orabug: 38254283]     {CVE-2025-38481}
    - comedi: das6402: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38254291] {CVE-2025-38482}
    - comedi: das16m1: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38254299] {CVE-2025-38483}
    - comedi: aio_iiro_16: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38324229] {CVE-2025-38529}
    - comedi: pcl812: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38324236] {CVE-2025-38530}
    - iio: common: st_sensors: Fix use of uninitialize device structs (Maud Spierings) [Orabug: 38324242]     {CVE-2025-38531}
    - iio: backend: fix out-of-bound write (Markus Burri) [Orabug: 38254383] {CVE-2025-38484}
    - iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps (Chen-Yu Tsai) [Orabug: 38324314]     {CVE-2025-38547}
    - iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush (Sean Nyekjaer) [Orabug: 38254306]     {CVE-2025-38485}
    - smb: client: fix use-after-free in crypt_message when using async crypto (Wang Zhaolong) [Orabug:
    38254322] {CVE-2025-38488}
    - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again (Ilya Leoshkevich) [Orabug: 38254325]     {CVE-2025-38489}
    - net: libwx: properly reset Rx ring descriptor (Jiawen Wu) [Orabug: 38324251] {CVE-2025-38532}
    - net: libwx: fix the using of Rx buffer DMA (Jiawen Wu) [Orabug: 38324253] {CVE-2025-38533}
    - net: libwx: remove duplicate page_pool_put_full_page() (Jiawen Wu) [Orabug: 38254327] {CVE-2025-38490}
    - dmaengine: nbpfaxi: Fix memory corruption in probe() (Dan Carpenter) [Orabug: 38324262] {CVE-2025-38538}
    - mptcp: plug races between subflow fail and subflow creation (Paolo Abeni) [Orabug: 38324332]     {CVE-2025-38552}
    - mptcp: make fallback action and fallback decision atomic (Paolo Abeni) [Orabug: 38254329]     {CVE-2025-38491}
    - tracing/osnoise: Fix crash in timerlat_dump_stack() (Tomas Glozar) [Orabug: 38254335] {CVE-2025-38493}
    - tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [Orabug: 38324268]     {CVE-2025-38539}
    - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38254338] {CVE-2025-38494}
    - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires)     [Orabug: 38254346] {CVE-2025-38495}
    - dm-bufio: fix sched in atomic context (Sheng Yong) [Orabug: 38254353] {CVE-2025-38496}
    - usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [Orabug: 38254356]     {CVE-2025-38497}
    - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Wayne Chang) [Orabug: 38324256]     {CVE-2025-38535}
    - rseq: Fix segfault on registration when rseq_cs is non-zero (Michael Jeanson) [Orabug: 38095070]     {CVE-2025-38067}
    - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (Lukas Wunner) [Orabug: 37977089]     {CVE-2025-37984}
    - ksmbd: fix potential use-after-free in oplock/lease break ack (Namjae Jeon) [Orabug: 38254080]     {CVE-2025-38437}
    - kasan: remove kasan_find_vm_area() to prevent possible deadlock (Levi Yun) [Orabug: 38324146]     {CVE-2025-38510}
    - HID: nintendo: avoid bluetooth suspend/resume stalls (Daniel J. Ogorchock) [Orabug: 38324137]     {CVE-2025-38507}
    - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao) [Orabug: 38324277]     {CVE-2025-38540}
    - btrfs: fix assertion when building free space tree (Filipe Manana) [Orabug: 38324119] {CVE-2025-38503}
    - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Tamura Dai) [Orabug: 38254084]     {CVE-2025-38438}
    - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Somnath Kotur) [Orabug: 38254088]     {CVE-2025-38439}
    - net/mlx5e: Fix race between DIM disable and net_dim() (Carolina Jubran) [Orabug: 38254092]     {CVE-2025-38440}
    - net: appletalk: Fix device refcount leak in atrtr_create() (Kito Xu) [Orabug: 38324288] {CVE-2025-38542}
    - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (Eric Dumazet) [Orabug:
    38254094] {CVE-2025-38441}
    - drm/xe/pf: Clear all LMTT pages on alloc (Michal Wajdeczko) [Orabug: 38324148] {CVE-2025-38511}
    - nbd: fix uaf in nbd_genl_connect() error path (Zheng Qixing) [Orabug: 38254100] {CVE-2025-38443}
    - wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() (Henry Martin) [Orabug: 38324286]     {CVE-2025-38541}
    - raid10: cleanup memleak at raid10_make_request (Nigel Croxon) [Orabug: 38254103] {CVE-2025-38444}
    - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [Orabug: 38254107]     {CVE-2025-38445}
    - drm/tegra: nvdec: Fix dma_alloc_coherent error check (Mikko Perttunen) [Orabug: 38324294]     {CVE-2025-38543}
    - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [Orabug:
    38324159] {CVE-2025-38513}
    - clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data (Xiaolei Wang) [Orabug: 38254112]     {CVE-2025-38446}
    - lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users() (Harry Yoo) [Orabug: 38324192]     {CVE-2025-38517}
    - usb: gadget: u_serial: Fix race condition in TTY wakeup (Kuen-Han Tsai) [Orabug: 38254116]     {CVE-2025-38448}
    - drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [Orabug: 38324178]     {CVE-2025-38515}
    - drm/gem: Acquire references on GEM handles for framebuffers (Thomas Zimmermann) [Orabug: 38254122]     {CVE-2025-38449}
    - drm/amdkfd: Don't call mmput from MMU notifier callback (Philip Yang) [Orabug: 38324196]     {CVE-2025-38520}
    - drm/imagination: Fix kernel crash when hard resetting the GPU (Alessio Belle) [Orabug: 38324199]     {CVE-2025-38521}
    - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload() (Deren Wu)     [Orabug: 38254130] {CVE-2025-38450}
    - wifi: mwifiex: discard erroneous disassoc frames on STA interface (Vitor Soares) [Orabug: 38324132]     {CVE-2025-38505}
    - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [Orabug: 38324151] {CVE-2025-38512}
    - pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Bartosz Golaszewski) [Orabug: 38324184]     {CVE-2025-38516}
    - net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe() (Haoxiang Li) [Orabug: 38254133]     {CVE-2025-38452}
    - ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Thorsten Blum) [Orabug:
    38254137] {CVE-2025-38454}
    - KVM: Allow CPU to reschedule while setting per-page memory attributes (Liam Merwick) [Orabug: 38324134]     {CVE-2025-38506}
    - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (Sean Christopherson)     [Orabug: 38254139] {CVE-2025-38455}
    - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Dan Carpenter) [Orabug:
    38254142] {CVE-2025-38456}
    - rxrpc: Fix oops due to non-existence of prealloc backlog struct (David Howells) [Orabug: 38324168]     {CVE-2025-38514}
    - rxrpc: Fix bug due to prealloc collision (David Howells) [Orabug: 38324296] {CVE-2025-38544}
    - net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [Orabug: 38254145]     {CVE-2025-38457}
    - net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info (Chintan Vankar)     [Orabug: 38324304] {CVE-2025-38545}
    - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [Orabug: 38254151]     {CVE-2025-38458}
    - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [Orabug: 38254159]     {CVE-2025-38459}
    - atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [Orabug: 38324307] {CVE-2025-38546}
    - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [Orabug: 38254165]     {CVE-2025-38460}
    - vsock: Fix transport_* TOCTOU (Michal Luczaj) [Orabug: 38254171] {CVE-2025-38461}
    - vsock: Fix transport_{g2h,h2g} TOCTOU (Michal Luczaj) [Orabug: 38254174] {CVE-2025-38462}
    - tcp: Correct signedness in skb remaining space calculation (Jiayuan Chen) [Orabug: 38254177]     {CVE-2025-38463}
    - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [Orabug: 38254179] {CVE-2025-38464}
    - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima) [Orabug: 38254186] {CVE-2025-38465}
    - perf: Revert to requiring CAP_SYS_ADMIN for uprobes (Peter Zijlstra) [Orabug: 38254195] {CVE-2025-38466}
    - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV     (Srinivasan Shanmugam) [Orabug: 37855415] {CVE-2025-38104}
    - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling (Kaustabh Chakraborty) [Orabug:
    38254201] {CVE-2025-38467}
    - eventpoll: don't decrement ep refcount while still holding the ep mutex (Linus Torvalds) [Orabug:
    38209551] {CVE-2025-38349}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov) [Orabug: 38023239,38129827]     {CVE-2024-36350,CVE-2024-36357}
    - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov) [Orabug: 38023239,38129827]     {CVE-2024-36350,CVE-2024-36357}
    - mm: userfaultfd: fix race of userfaultfd_move and swap cache (Kairui Song) [Orabug: 38175034]     {CVE-2025-38242}
    - mm/vmalloc: fix data race in show_numa_info() (Jeongjun Park) [Orabug: 38253860] {CVE-2025-38383}
    - usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38254393] {CVE-2025-38404}
    - riscv: cpu_ops_sbi: Use static array for boot_data (Vivian Wang) [Orabug: 38253953] {CVE-2025-38407}
    - optee: ffa: fix sleep in atomic context (Jens Wiklander) [Orabug: 38253830] {CVE-2025-38374}
    - i2c/designware: Fix an initialization issue (Michael J. Ruhl) [Orabug: 38253849] {CVE-2025-38380}
    - usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume (Xu Yang) [Orabug: 38253838]     {CVE-2025-38376}
    - IB/mlx5: Fix potential deadlock in MR deregistration (Or Har-Toov) [Orabug: 38253826] {CVE-2025-38373}
    - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Shivank Garg) [Orabug: 38253909]     {CVE-2025-38396}
    - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [Orabug: 38253862]     {CVE-2025-38384}
    - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253873]     {CVE-2025-38386}
    - wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253944] {CVE-2025-38406}
    - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (Maurizio Lombardi)     [Orabug: 38253913] {CVE-2025-38399}
    - genirq/irq_sim: Initialize work context pointers properly (Gyeyoung Baek) [Orabug: 38253955]     {CVE-2025-38408}
    - drm/msm: Fix another leak in the submit error path (Rob Clark) [Orabug: 38253959] {CVE-2025-38409}
    - drm/msm: Fix a fence leak in submit error path (Rob Clark) [Orabug: 38253966] {CVE-2025-38410}
    - drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (Nicholas Kazlauskas) [Orabug: 38253787]     {CVE-2025-38360}
    - drm/xe/guc: Explicitly exit CT safe mode on unwind (Michal Wajdeczko) [Orabug: 38253775]     {CVE-2025-38356}
    - netfs: Fix oops in write-retry from mis-resetting the subreq iterator (David Howells) [Orabug: 38153033]     {CVE-2025-38139}
    - bpf: Do not include stack ptr register in precision backtracking bookkeeping (Yonghong Song) [Orabug:
    38180467] {CVE-2025-38279}
    - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Justin Tee) [Orabug: 38180503]     {CVE-2025-38289}
    - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [Orabug: 38217337]     {CVE-2025-38350}
    - rose: fix dangling neighbour pointers in rose_rt_device_down() (Kohei Enju) [Orabug: 38253840]     {CVE-2025-38377}
    - idpf: convert control queue mutex to a spinlock (Ahmed Zaki) [Orabug: 38253897] {CVE-2025-38392}
    - idpf: return 0 size for RSS key if not supported (Michal Swiatkowski) [Orabug: 38253932]     {CVE-2025-38402}
    - drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253885]     {CVE-2025-38389}
    - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect (Oleksij Rempel) [Orabug: 38253870]     {CVE-2025-38385}
    - smb: client: fix warning when reconnecting channel (Paulo Alcantara) [Orabug: 38254386] {CVE-2025-38379}
    - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (Kurt Borja) [Orabug:
    38253975] {CVE-2025-38412}
    - nvmet: fix memory leak of bio integrity (Dmitry Bogdanov) [Orabug: 38253942] {CVE-2025-38405}
    - btrfs: fix invalid inode pointer dereferences during log replay (Filipe Manana) [Orabug: 38288149]     {CVE-2025-38243}
    - btrfs: fix iteration of extrefs during log replay (Filipe Manana) [Orabug: 38253858] {CVE-2025-38382}
    - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [Orabug: 38253899]     {CVE-2025-38393}
    - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug:
    38253921] {CVE-2025-38400}
    - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253879]     {CVE-2025-38387}
    - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Or Har-Toov) [Orabug: 38253824]     {CVE-2025-38372}
    - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context (Sudeep Holla) [Orabug:
    38253883] {CVE-2025-38388}
    - firmware: arm_ffa: Fix memory leak by freeing notifier callback node (Sudeep Holla) [Orabug: 38253890]     {CVE-2025-38390}
    - drm/v3d: Disable interrupts before resetting the GPU (Maira Canal) [Orabug: 38253819] {CVE-2025-38371}
    - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu) [Orabug: 38253926]     {CVE-2025-38401}
    - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253892]     {CVE-2025-38391}
    - Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() (Yunshui) [Orabug:
    38253852] {CVE-2025-38381}
    - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug:
    38253905] {CVE-2025-38395}
    - vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug:
    38253935] {CVE-2025-38403}
    - virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [Orabug:
    38253832] {CVE-2025-38375}
    - virtio-net: xsk: rx: fix the frame's length check (Bui Quang Minh) [Orabug: 38253978] {CVE-2025-38413}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
243500	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1111)	Nessus	Amazon Linux Local Security Checks	2025/8/4	2025/10/30	high
265926	Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7771-1)	Nessus	Ubuntu Local Security Checks	2025/9/25	2025/9/25	high
274905	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2330)	Nessus	Huawei Local Security Checks	2025/11/12	2025/11/12	high
266397	Ubuntu 24.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7789-1)	Nessus	Ubuntu Local Security Checks	2025/10/2	2025/10/2	high
270035	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-2198)	Nessus	Huawei Local Security Checks	2025/10/11	2025/10/11	medium
252248	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:02853-1)	Nessus	SuSE Local Security Checks	2025/8/19	2025/9/24	medium
252257	SUSE SLES12 Security Update : kernel (SUSE-SU-2025:02846-1)	Nessus	SuSE Local Security Checks	2025/8/19	2025/9/24	high
258054	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:02996-1)	Nessus	SuSE Local Security Checks	2025/8/28	2025/9/24	high
261833	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20551)	Nessus	Oracle Linux Local Security Checks	2025/9/9	2025/9/26	medium

検出

プラグインの検索

high

high

high

high

medium

medium

high

high

medium