The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0565-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing (bsc#1224857).
    - CVE-2021-47223: net: bridge: fix vlan tunnel dst null pointer dereference (bsc#1224856).
    - CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume     (bsc#1222072).
    - CVE-2024-47809: dlm: fix possible lkb_resource null dereference (bsc#1235714).
    - CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
    - CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
    - CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset     (bsc#1233028).
    - CVE-2024-52332: igb: Fix potential invalid memory access in igb_init_module() (bsc#1235700).
    - CVE-2024-53155: ocfs2: fix uninitialized value in ocfs2_file_read_iter() (bsc#1234855).
    - CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
    - CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices     (bsc#1235464).
    - CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
    - CVE-2024-55916: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (bsc#1235747).
    - CVE-2024-56369: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (bsc#1235750).
    - CVE-2024-56532: ALSA: us122l: Use snd_card_free_when_closed() at disconnection (bsc#1235059).
    - CVE-2024-56533: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (bsc#1235053).
    - CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()     (bsc#1234963).
    - CVE-2024-56574: media: ts2020: fix null-ptr-deref in ts2020_probe() (bsc#1235040).
    - CVE-2024-56593: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()     (bsc#1235252).
    - CVE-2024-56594: drm/amdgpu: set the right AMDGPU sg segment limitation (bsc#1235413).
    - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
    - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
    - CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
    - CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
    - CVE-2024-56630: ocfs2: free inode when ocfs2_get_init_inode() fails (bsc#1235479).
    - CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
    - CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
    - CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
    - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
    - CVE-2024-56662: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (bsc#1235533).
    - CVE-2024-56681: crypto: bcm - add error check in the ahash_hmac_init function (bsc#1235557).
    - CVE-2024-56700: media: wl128x: Fix atomicity violation in fmc_send_cmd() (bsc#1235500).
    - CVE-2024-56722: RDMA/hns: Fix cpu stuck caused by printings during reset (bsc#1235570).
    - CVE-2024-56739: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (bsc#1235611).
    - CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
    - CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
    - CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
    - CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
    - CVE-2024-56769: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (bsc#1235155).
    - CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()     (bsc#1235948).
    - CVE-2024-57890: RDMA/uverbs: Prevent integer overflow issue (bsc#1235919).
    - CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount     (bsc#1235965).
    - CVE-2024-57899: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (bsc#1235924).
    - CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
    - CVE-2024-57922: drm/amd/display: Add check for granularity in dml ceil/floor helpers (bsc#1236080).
    - CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
    - CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
    - CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
    - CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
    - CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
    - CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
    - CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
    - CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4076 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4076-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.6.1.128-1~deb11u1     CVE ID         : CVE-2022-49034 CVE-2023-52916 CVE-2023-52926 CVE-2024-26595                      CVE-2024-27407 CVE-2024-35870 CVE-2024-35956 CVE-2024-36476                      CVE-2024-36479 CVE-2024-36899 CVE-2024-37021 CVE-2024-39282                      CVE-2024-41014 CVE-2024-42252 CVE-2024-42315 CVE-2024-42319                      CVE-2024-43098 CVE-2024-44950 CVE-2024-45828 CVE-2024-46809                      CVE-2024-46841 CVE-2024-46896 CVE-2024-47143 CVE-2024-47408                      CVE-2024-47745 CVE-2024-48881 CVE-2024-49571 CVE-2024-49861                      CVE-2024-49891 CVE-2024-49897 CVE-2024-49898 CVE-2024-49899                      CVE-2024-49909 CVE-2024-49911 CVE-2024-49915 CVE-2024-49917                      CVE-2024-49925 CVE-2024-49929 CVE-2024-49934 CVE-2024-49939                      CVE-2024-49951 CVE-2024-49994 CVE-2024-49996 CVE-2024-50014                      CVE-2024-50047 CVE-2024-50051 CVE-2024-50055 CVE-2024-50121                      CVE-2024-50146 CVE-2024-50164 CVE-2024-50248 CVE-2024-50258                      CVE-2024-50275 CVE-2024-50304 CVE-2024-52332 CVE-2024-53099                      CVE-2024-53105 CVE-2024-53124 CVE-2024-53125 CVE-2024-53128                      CVE-2024-53141 CVE-2024-53142 CVE-2024-53145 CVE-2024-53146                      CVE-2024-53148 CVE-2024-53150 CVE-2024-53151 CVE-2024-53154                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53165 CVE-2024-53170                      CVE-2024-53171 CVE-2024-53172 CVE-2024-53173 CVE-2024-53174                      CVE-2024-53175 CVE-2024-53180 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53190 CVE-2024-53194 CVE-2024-53196                      CVE-2024-53197 CVE-2024-53198 CVE-2024-53206 CVE-2024-53207                      CVE-2024-53208 CVE-2024-53210 CVE-2024-53213 CVE-2024-53214                      CVE-2024-53215 CVE-2024-53217 CVE-2024-53220 CVE-2024-53226                      CVE-2024-53227 CVE-2024-53229 CVE-2024-53230 CVE-2024-53231                      CVE-2024-53233 CVE-2024-53234 CVE-2024-53237 CVE-2024-53239                      CVE-2024-53240 CVE-2024-53241 CVE-2024-53680 CVE-2024-53685                      CVE-2024-53690 CVE-2024-54031 CVE-2024-55881 CVE-2024-55916                      CVE-2024-56369 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56546 CVE-2024-56548 CVE-2024-56551                      CVE-2024-56557 CVE-2024-56558 CVE-2024-56562 CVE-2024-56567                      CVE-2024-56568 CVE-2024-56569 CVE-2024-56570 CVE-2024-56572                      CVE-2024-56574 CVE-2024-56575 CVE-2024-56576 CVE-2024-56578                      CVE-2024-56579 CVE-2024-56581 CVE-2024-56582 CVE-2024-56584                      CVE-2024-56585 CVE-2024-56586 CVE-2024-56587 CVE-2024-56589                      CVE-2024-56590 CVE-2024-56593 CVE-2024-56594 CVE-2024-56595                      CVE-2024-56596 CVE-2024-56597 CVE-2024-56598 CVE-2024-56599                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56604 CVE-2024-56605 CVE-2024-56606 CVE-2024-56608                      CVE-2024-56610 CVE-2024-56614 CVE-2024-56615 CVE-2024-56616                      CVE-2024-56619 CVE-2024-56622 CVE-2024-56623 CVE-2024-56625                      CVE-2024-56626 CVE-2024-56627 CVE-2024-56628 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56640 CVE-2024-56642                      CVE-2024-56643 CVE-2024-56644 CVE-2024-56645 CVE-2024-56648                      CVE-2024-56650 CVE-2024-56651 CVE-2024-56658 CVE-2024-56659                      CVE-2024-56660 CVE-2024-56661 CVE-2024-56662 CVE-2024-56663                      CVE-2024-56664 CVE-2024-56665 CVE-2024-56670 CVE-2024-56672                      CVE-2024-56675 CVE-2024-56677 CVE-2024-56678 CVE-2024-56679                      CVE-2024-56681 CVE-2024-56683 CVE-2024-56687 CVE-2024-56688                      CVE-2024-56690 CVE-2024-56691 CVE-2024-56693 CVE-2024-56694                      CVE-2024-56698 CVE-2024-56700 CVE-2024-56701 CVE-2024-56703                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56707 CVE-2024-56708                      CVE-2024-56709 CVE-2024-56715 CVE-2024-56716 CVE-2024-56717                      CVE-2024-56718 CVE-2024-56720 CVE-2024-56722 CVE-2024-56723                      CVE-2024-56724 CVE-2024-56725 CVE-2024-56726 CVE-2024-56727                      CVE-2024-56728 CVE-2024-56739 CVE-2024-56741 CVE-2024-56745                      CVE-2024-56746 CVE-2024-56747 CVE-2024-56748 CVE-2024-56751                      CVE-2024-56754 CVE-2024-56755 CVE-2024-56756 CVE-2024-56759                      CVE-2024-56763 CVE-2024-56765 CVE-2024-56766 CVE-2024-56767                      CVE-2024-56769 CVE-2024-56770 CVE-2024-56774 CVE-2024-56776                      CVE-2024-56777 CVE-2024-56778 CVE-2024-56779 CVE-2024-56780                      CVE-2024-56781 CVE-2024-56783 CVE-2024-56785 CVE-2024-56787                      CVE-2024-57791 CVE-2024-57792 CVE-2024-57798 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57838 CVE-2024-57841 CVE-2024-57849                      CVE-2024-57850 CVE-2024-57874 CVE-2024-57876 CVE-2024-57882                      CVE-2024-57884 CVE-2024-57887 CVE-2024-57889 CVE-2024-57890                      CVE-2024-57892 CVE-2024-57893 CVE-2024-57894 CVE-2024-57896                      CVE-2024-57897 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57903 CVE-2024-57904 CVE-2024-57906 CVE-2024-57907                      CVE-2024-57908 CVE-2024-57910 CVE-2024-57911 CVE-2024-57912                      CVE-2024-57913 CVE-2024-57916 CVE-2024-57917 CVE-2024-57922                      CVE-2024-57925 CVE-2024-57929 CVE-2024-57930 CVE-2024-57931                      CVE-2024-57938 CVE-2024-57939 CVE-2024-57940 CVE-2024-57946                      CVE-2024-57948 CVE-2024-57949 CVE-2024-57951 CVE-2025-21629                      CVE-2025-21631 CVE-2025-21636 CVE-2025-21637 CVE-2025-21638                      CVE-2025-21639 CVE-2025-21640 CVE-2025-21646 CVE-2025-21647                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21655 CVE-2025-21660                      CVE-2025-21662 CVE-2025-21664 CVE-2025-21665 CVE-2025-21666                      CVE-2025-21667 CVE-2025-21668 CVE-2025-21669 CVE-2025-21671                      CVE-2025-21675 CVE-2025-21678 CVE-2025-21680 CVE-2025-21681                      CVE-2025-21683 CVE-2025-21687 CVE-2025-21688 CVE-2025-21689                      CVE-2025-21690 CVE-2025-21692 CVE-2025-21694 CVE-2025-21697                      CVE-2025-21699

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.6.1.128-1~deb11u1.  This additionally includes many more bug fixes     from stable updates 6.1.120-6.1.128 inclusive.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778787063 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: can: m_can: pci: add missing     m_can_class_free_dev() in probe/remove methods In m_can_pci_remove() and error handling path of     m_can_pci_probe(), m_can_class_free_dev() should be called to free resource allocated by     m_can_class_allocate_dev(), otherwise there will be memleak. (CVE-2022-49024)

  - In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow     in ima_appraise_measurement When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be     negative, which may cause the integer overflow problem. (CVE-2022-49643)

  - In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case     usbnet_write_cmd_async() mixed up which buffers need to be freed in which error case. v2: add Fixes tag     v3: fix uninitialized buf pointer (CVE-2022-49657)

  - In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_send_one(): fix     missing CAN header initialization The read access to struct canxl_frame::len inside of a j1939 created     skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame. This     patch initializes the 8 byte CAN header with zero. (CVE-2022-49845)

  - In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak     in tifm_7xx1_switch_media() If device_register() returns error in tifm_7xx1_switch_media(), name of     kobject which is allocated in dev_set_name() called in device_add() is leaked. Never directly free @dev     after calling device_register(), even if it returned an error! Always use put_device() to give up the     reference initialized. (CVE-2022-50349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
216454	SUSE SLES12 Security Update : kernel (SUSE-SU-2025:0565-1)	Nessus	SuSE Local Security Checks	2025/2/19	2025/10/21	high
216985	Debian dla-4076 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	2025/3/1	2026/1/6	high
361904	AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778787063)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/21	high

検出

プラグインの検索

high

high

high