The version of kernel installed on the remote host is prior to 5.15.182-123.190. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-079 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: streamzap: fix race between device disconnection and urb callback (CVE-2025-22027)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix NULL pointer in can_accept_new_subflow (CVE-2025-23145)

    In the Linux kernel, the following vulnerability has been resolved:

    i3c: Add NULL pointer check in i3c_master_queue_ibi() (CVE-2025-23147)

    In the Linux kernel, the following vulnerability has been resolved:

    net: vlan: don't propagate flags on open (CVE-2025-23163)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: ignore xattrs past end (CVE-2025-37738)

    In the Linux kernel, the following vulnerability has been resolved:

    net: tls: explicitly disallow disconnect (CVE-2025-37756)

    In the Linux kernel, the following vulnerability has been resolved:

    virtiofs: add filesystem context source name check (CVE-2025-37773)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: Prevent the use of too small fid (CVE-2025-37780)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: qfq: Fix double list add in class with netem as child qdisc (CVE-2025-37913)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: drr: Fix double list add in class with netem as child qdisc (CVE-2025-37915)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Fix oob write in trace_seq_to_buffer() (CVE-2025-37923)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Add cond_resched() to ftrace_graph_set_hash() (CVE-2025-37940)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11298 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: cifs: potential buffer overflow in handling symlinks (CVE-2022-49058)

    * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)

    * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)

    * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)

    * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)

    * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)

    * kernel: ext4: ignore xattrs past end (CVE-2025-37738)

    * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11299 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: cifs: potential buffer overflow in handling symlinks (CVE-2022-49058)

    * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)

    * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)

    * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)

    * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)

    * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)

    * kernel: ext4: ignore xattrs past end (CVE-2025-37738)

    * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7654-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PA-RISC architecture;

    - PowerPC architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Serial ATA and Parallel ATA drivers;

    - Bluetooth drivers;

    - Bus devices;

    - CPU frequency scaling framework;

    - Buffer Sharing and Synchronization framework;

    - DMA engine subsystem;

    - ARM SCMI message protocol;

    - GPU drivers;

    - HID subsystem;

    - HSI subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - MCB driver;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - PCI Endpoint Test driver;

    - MTD block device drivers;

    - Network drivers;

    - Device tree and open firmware driver;

    - PCI subsystem;

    - TI SCI PM domains driver;

    - PWM drivers;

    - S/390 drivers;

    - SCSI subsystem;

    - Samsung SoC drivers;

    - TCM subsystem;

    - UFS subsystem;

    - Cadence USB3 driver;

    - ChipIdea USB driver;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Type-C support driver;

    - USB Type-C Connector System Software Interface driver;

    - Backlight driver;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - File systems infrastructure;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - Proc file system;

    - SMB network file system;

    - Kernel stack handling interfaces;

    - Bluetooth subsystem;

    - Network traffic control;

    - SCTP protocol;

    - BPF subsystem;

    - Kernel command line parsing driver;

    - Tracing infrastructure;

    - Memory management;

    - 802.1Q VLAN protocol;

    - Networking core;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Management Component Transport Protocol (MCTP);

    - Multipath TCP;

    - Netfilter;

    - Open vSwitch;

    - Phonet protocol;

    - TIPC protocol;

    - TLS protocol;

    - Virtio sound driver;

    - CPU Power monitoring subsystem; (CVE-2025-37790, CVE-2025-37871, CVE-2025-23147, CVE-2025-37803,     CVE-2025-37909, CVE-2025-37840, CVE-2025-37989, CVE-2025-37927, CVE-2024-50280, CVE-2024-50272,     CVE-2025-37850, CVE-2024-35866, CVE-2025-22027, CVE-2025-37812, CVE-2025-21853, CVE-2025-37810,     CVE-2025-37766, CVE-2024-54458, CVE-2022-21546, CVE-2025-37757, CVE-2025-37839, CVE-2024-38540,     CVE-2025-37990, CVE-2025-37794, CVE-2024-53203, CVE-2025-37964, CVE-2025-37819, CVE-2024-50125,     CVE-2024-53128, CVE-2022-48893, CVE-2023-52572, CVE-2024-42322, CVE-2024-35943, CVE-2025-37740,     CVE-2025-37739, CVE-2025-37838, CVE-2025-37995, CVE-2025-37789, CVE-2024-50258, CVE-2025-37970,     CVE-2025-38024, CVE-2025-23146, CVE-2025-37780, CVE-2022-49168, CVE-2025-23145, CVE-2024-46774,     CVE-2022-49063, CVE-2025-37742, CVE-2025-37940, CVE-2025-37781, CVE-2025-37796, CVE-2025-23159,     CVE-2025-23144, CVE-2025-37875, CVE-2024-49989, CVE-2025-37867, CVE-2025-37892, CVE-2025-37913,     CVE-2024-38541, CVE-2025-37983, CVE-2025-37923, CVE-2025-37836, CVE-2025-23151, CVE-2025-37765,     CVE-2025-37817, CVE-2025-37991, CVE-2025-38009, CVE-2025-37858, CVE-2025-37841, CVE-2025-37771,     CVE-2025-22062, CVE-2025-37912, CVE-2025-23156, CVE-2022-49535, CVE-2025-37829, CVE-2025-37851,     CVE-2024-46816, CVE-2025-37998, CVE-2025-38023, CVE-2024-56751, CVE-2025-37844, CVE-2025-37967,     CVE-2025-37930, CVE-2025-37994, CVE-2025-37805, CVE-2024-46742, CVE-2025-37883, CVE-2025-21839,     CVE-2025-37823, CVE-2025-23157, CVE-2025-37787, CVE-2025-38094, CVE-2024-26686, CVE-2024-26739,     CVE-2025-23142, CVE-2025-23163, CVE-2025-37915, CVE-2025-37885, CVE-2024-27402, CVE-2025-37749,     CVE-2025-37738, CVE-2025-37905, CVE-2025-37773, CVE-2025-23140, CVE-2025-37792, CVE-2025-37808,     CVE-2024-49960, CVE-2025-37857, CVE-2025-23158, CVE-2025-37824, CVE-2023-52757, CVE-2025-37767,     CVE-2025-37758, CVE-2025-37914, CVE-2025-23161, CVE-2025-37741, CVE-2024-35867, CVE-2025-37911,     CVE-2025-37859, CVE-2025-37830, CVE-2025-37982, CVE-2024-46751, CVE-2025-37985, CVE-2025-37756,     CVE-2025-37768, CVE-2025-37811, CVE-2025-37992, CVE-2025-37862, CVE-2025-38005, CVE-2024-36908,     CVE-2025-23150, CVE-2025-37949, CVE-2025-37788, CVE-2025-37881, CVE-2025-37770, CVE-2025-37797,     CVE-2025-23148, CVE-2024-35790, CVE-2025-37969)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:12525 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)

    * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)

    * kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)

    * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)

    * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)

    * kernel: writeback: avoid use-after-free after removing device (CVE-2022-49995)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:13805 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)

    * kernel: ext4: avoid resizing to a partial cluster size (CVE-2022-50020)

    * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20530 advisory.

    - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug: 38137447]     {CVE-2025-38089}
    - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
    - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38172252]     {CVE-2024-36350} {CVE-2024-36357}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:9348 advisory.

    * kernel: proc: fix UAF in proc_get_inode() (CVE-2025-21999)

    * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)

    * kernel: ext4: ignore xattrs past end (CVE-2025-37738)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
241770	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-079)	Nessus	Amazon Linux Local Security Checks	2025/7/10	2025/7/14	medium
242187	RHEL 8 : kernel (RHSA-2025:11298)	Nessus	Red Hat Local Security Checks	2025/7/16	2025/7/16	high
242190	RHEL 8 : kernel-rt (RHSA-2025:11299)	Nessus	Red Hat Local Security Checks	2025/7/16	2025/7/16	high
242343	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7654-1)	Nessus	Ubuntu Local Security Checks	2025/7/18	2025/7/18	high
243459	RHEL 9 : kernel-rt (RHSA-2025:12525)	Nessus	Red Hat Local Security Checks	2025/8/4	2025/8/4	high
249342	RHEL 8 : kernel (RHSA-2025:13805)	Nessus	Red Hat Local Security Checks	2025/8/14	2025/8/14	high
252244	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20530)	Nessus	Oracle Linux Local Security Checks	2025/8/19	2025/8/19	medium
266675	RockyLinux 10 : kernel (RLSA-2025:9348)	Nessus	Rocky Linux Local Security Checks	2025/10/6	2025/10/6	high

検出

プラグインの検索

medium

high

high

high

high

high

medium

high