According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the Linux kernel's implementation     of string matching within a packet. A privileged user     (with root or CAP_NET_ADMIN) when inserting iptables     rules could insert a rule which can panic the     system.(CVE-2021-20177)

  - rtw_wx_set_scan in     drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the     Linux kernel through 5.11.6 allows writing beyond the     end of the ->ssid[] array. NOTE: from the perspective     of kernel.org releases, CVE IDs are not normally used     for drivers/staging/* (unfinished work) however, system     integrators may have situations in which a     drivers/staging issue is relevant to their own customer     base.(CVE-2021-28660)

  - There is a flaw reported in     drivers/gpu/drm/nouveau/nouveau_sgdma.c in     nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The     issue results from the lack of validating the existence     of an object prior to performing operations on the     object. An attacker with a local account with a root     privilege, can leverage this vulnerability to escalate     privileges and execute code in the context of the     kernel.(CVE-2021-20292)

  - ntfs_read_locked_inode in the ntfs.ko filesystem driver     in the Linux kernel 4.15.0 allows attackers to trigger     a use-after-free read and possibly cause a denial of     service (kernel oops or panic) via a crafted ntfs     filesystem.(CVE-2018-12929)

  - In the Linux kernel 4.15.0, a NULL pointer dereference     was discovered in hfs_ext_read_extent in hfs.ko. This     can occur during a mount of a crafted hfs     filesystem.(CVE-2018-12928)

  - An issue was discovered in the Linux kernel through     5.11.3. A kernel pointer leak can be used to determine     the address of the iscsi_transport structure. When an     iSCSI transport is registered with the iSCSI subsystem,     the transport's handle is available to unprivileged     users via the sysfs file system, at     /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When     read, the show_transport_handle function (in     drivers/scsi/scsi_transport_iscsi.c) is called, which     leaks the handle. This handle is actually the pointer     to an iscsi_transport struct in the kernel module's     global variables.(CVE-2021-27363)

  - An issue was discovered in the Linux kernel through     5.11.3. drivers/scsi/scsi_transport_iscsi.c is     adversely affected by the ability of an unprivileged     user to craft Netlink messages.(CVE-2021-27364)

  - An issue was discovered in the Linux kernel through     5.11.3. Certain iSCSI data structures do not have     appropriate length constraints or checks, and can     exceed the PAGE_SIZE value. An unprivileged user can     send a Netlink message that is associated with iSCSI,     and has a length up to the maximum length of a Netlink     message.(CVE-2021-27365)

  - nbd_add_socket in drivers/block/nbd.c in the Linux     kernel through 5.10.12 has an ndb_queue_rq     use-after-free that could be triggered by local     attackers (with access to the nbd device) via an I/O     request at a certain point during device setup, aka     CID-b98e762e3d71.(CVE-2021-3348)

  - An issue was discovered in the Linux kernel through     5.10.11. PI futexes have a kernel stack use-after-free     during fault handling, allowing local users to execute     code in the kernel, aka     CID-34b1a1ce1458.(CVE-2021-3347)

  - fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8,     when there is an NFS export of a subdirectory of a     filesystem, allows remote attackers to traverse to     other parts of the filesystem via READDIRPLUS. NOTE:
    some parties argue that such a subdirectory export is     not intended to prevent this attack see also the     exports(5) no_subtree_check default     behavior.(CVE-2021-3178)

  - In tun_get_user of tun.c, there is possible memory     corruption due to a use after free. This could lead to     local escalation of privilege with System execution     privileges required. User interaction is not required     for exploitation.(CVE-2021-0342)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red     Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a denial of service (panic)     via a nonzero bInterfaceNumber value in a USB device descriptor. (CVE-2015-7833)

  - arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the 'strict page     permissions' protection mechanism and modify the system-call table, and consequently gain privileges, by     leveraging write access. (CVE-2015-8967)

  - In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in     drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the     userspace API. However, the code allows larger values such as 23. (CVE-2015-9289)

  - The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not     properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel     attack. (CVE-2016-2085)

  - The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not     initialize a certain data structure, which allows local users to obtain sensitive information from kernel     stack memory by reading a Netlink message. (CVE-2016-4486)

  - Race condition in the sclp_ctl_ioctl_sccb function in drivers/s390/char/sclp_ctl.c in the Linux kernel     before 4.6 allows local users to obtain sensitive information from kernel memory by changing a certain     length value, aka a 'double fetch' vulnerability. (CVE-2016-6130)

  - A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost     functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A     privileged guest user able to pass descriptors with invalid length to the host when migration is underway,     could use this flaw to increase their privileges on the host. (CVE-2019-14835)

  - In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic     error. This could lead to local escalation of privilege with no additional execution privileges needed.
    User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:
    A-147802478References: Upstream kernel (CVE-2020-0466)

  - A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver     software. The impact of this issue is lessened by the fact that the default permissions on the floppy     device (/dev/fd0) are restricted to root. If the permissions on the device have changed the impact changes     greatly. In the default configuration root (or equivalent) permissions are required to attack this flaw.
    (CVE-2021-20261)

  - There is a flaw reported in the Linux kernel in versions before 5.9 in     drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue     results from the lack of validating the existence of an object prior to performing operations on the     object. An attacker with a local account with a root privilege, can leverage this vulnerability to     escalate privileges and execute code in the context of the kernel. (CVE-2021-20292)

  - A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.
    This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name     space (CVE-2021-22555)

  - An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine     the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI     subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at     /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in     drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the     pointer to an iscsi_transport struct in the kernel module's global variables. (CVE-2021-27363)

  - An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is     adversely affected by the ability of an unprivileged user to craft Netlink messages. (CVE-2021-27364)

  - An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have     appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can     send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a     Netlink message. (CVE-2021-27365)

  - An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in     drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b.
    (CVE-2021-30002)

  - ** DISPUTED ** fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a     subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via     READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this     attack; see also the exports(5) no_subtree_check default behavior. (CVE-2021-3178)

  - An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-     device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with     special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or     a leak of internal kernel information. The highest threat from this vulnerability is to system     availability. (CVE-2021-31916)

  - The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because     the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads     to writing an arbitrary value. (CVE-2021-33033)

  - An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free     during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
    (CVE-2021-3347)

  - fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer     allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an     unprivileged user, aka CID-8cae8cd89f05. (CVE-2021-33909)

  - A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice     into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest     threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions     before kernel 5.12-rc6 are affected (CVE-2021-3483)

  - kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka     CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via     init_module, does not occur for a module.sig_enforce=1 command-line argument. (CVE-2021-35039)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of kernel installed on the remote host is prior to 4.14.219-119.340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1480 advisory.

    2024-05-23: CVE-2023-1390 was added to this advisory.

    A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel. There was a race problem in     trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service     problem (DOS). This flaw could even allow a local attacker with special user  privilege to a kernel     information leak threat. (CVE-2020-27825)

    A flaw was found in the Linux kernel's implementation of the Linux SCSI target host, where an     authenticated attacker could write to any block on the exported SCSI device backing store. This flaw     allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on the     backing store. The highest threat from this vulnerability is to integrity. In addition, this flaw affects     the tcmu-runner package, where the affected SCSI command is called. (CVE-2020-28374)

    A flaw leak of the file handle for parent directory in the Linux kernel's NFS3 functionality was found in     the way user calls READDIRPLUS. A local user could use this flaw to traverse to other parts of the file-     system than mounted sub-folder. (CVE-2021-3178)

    A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes     functionality allowing a local user to crash the system or escalate their privileges on the system. The     highest threat from this vulnerability is to data confidentiality and integrity as well as system     availability. (CVE-2021-3347)

    A use after free flaw in the Linux kernel network block device (NBD) subsystem was found in the way user     calls an ioctl NBD_SET_SOCK at a certain point during device setup. (CVE-2021-3348)

    In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a     race condition. This could lead to local information disclosure with System execution privileges needed.
    User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:
    A-160822094References: Upstream kernel (CVE-2021-39648)

    A remote denial of service vulnerability was found in the Linux kernel's TIPC kernel module. The while     loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue.
    Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system     to instantly spike to 100%, causing a denial of service condition. (CVE-2023-1390)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The kernel package contains the Linux kernel (vmlinuz),     the core of any Linux operating system. The kernel     handles the basic functions of the operating system:
    memory allocation, process allocation, device input and     output, etc. Security Fix(es):A vulnerability was found     in the Linux Kernel where the function sunkbd_reinit     having been scheduled by sunkbd_interrupt before sunkbd     being freed. Though the dangling pointer is set to NULL     in sunkbd_disconnect, there is still an alias in     sunkbd_reinit causing Use After Free.(CVE-2020-25669)An     issue was discovered in the Linux kernel through 5.9.1,     as used with Xen through 4.14.x.
    drivers/xen/events/events_base.c allows event-channel     removal during the event-handling loop (a race     condition). This can cause a use-after-free or NULL     pointer dereference, as demonstrated by a dom0 crash     via events for an in-reconfiguration paravirtualized     device, aka CID-073d0552ead5.(CVE-2020-27675)An issue     was discovered in the Linux kernel through 5.9.1, as     used with Xen through 4.14.x. Guest OS users can cause     a denial of service (host OS hang) via a high rate of     events to dom0, aka CID-e99502f76271.(CVE-2020-27673)An     issue was discovered in __split_huge_pmd in     mm/huge_memory.c in the Linux kernel before 5.7.5. The     copy-on-write implementation can grant unintended write     access because of a race condition in a THP mapcount     check, aka CID-c444eb564fb1.(CVE-2020-29368)An issue     was discovered in     drivers/accessibility/speakup/spk_ttyio.c in the Linux     kernel through 5.9.9. Local attackers on systems with     the speakup driver could cause a local denial of     service attack, aka CID-d41227544427. This occurs     because of an invalid free when the line discipline is     used more than once.(CVE-2020-28941)** DISPUTED **     fsfsd fs3xdr.c in the Linux kernel through 5.10.8, when     there is an NFS export of a subdirectory of a     filesystem, allows remote attackers to traverse to     other parts of the filesystem via READDIRPLUS. NOTE:
    some parties argue that such a subdirectory export is     not intended to prevent this attack see also the     exports(5) no_subtree_check default     behavior.(CVE-2021-3178)An issue was discovered in the     Linux kernel through 5.11.3.
    drivers/scsi/scsi_transport_iscsi.c is adversely     affected by the ability of an unprivileged user to     craft Netlink messages.(CVE-2021-27364)An issue was     discovered in the Linux kernel through 5.11.3. A kernel     pointer leak can be used to determine the address of     the iscsi_transport structure. When an iSCSI transport     is registered with the iSCSI subsystem, the transport's     handle is available to unprivileged users via the sysfs     file system, at     /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When     read, the show_transport_handle function (in     drivers/scsi/scsi_transport_iscsi.c) is called, which     leaks the handle. This handle is actually the pointer     to an iscsi_transport struct in the kernel module's     global variables.(CVE-2021-27363)ntfs_read_locked_inode     in the ntfs.ko filesystem driver in the Linux kernel     4.15.0 allows attackers to trigger a use-after-free     read and possibly cause a denial of service (kernel     oops or panic) via a crafted ntfs     filesystem.(CVE-2018-12929)In the Linux kernel 4.15.0,     a NULL pointer dereference was discovered in     hfs_ext_read_extent in hfs.ko. This can occur during a     mount of a crafted hfs     filesystem.(CVE-2018-12928)rtw_wx_set_scan in     drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the     Linux kernel through 5.11.6 allows writing beyond the     end of the ->ssid[] array. NOTE: from the perspective     of kernel.org releases, CVE IDs are not normally used     for drivers/staging/* (unfinished work) however, system     integrators may have situations in which a     drivers/staging issue is relevant to their own customer     base.(CVE-2021-28660)There is a flaw reported in the     Linux kernel in versions before 5.9 in drivers/gpu/drm     ouveau ouveau_sgdma.c in nouveau_sgdma_create_ttm in     Nouveau DRM subsystem. The issue results from the lack     of validating the existence of an object prior to     performing operations on the object. An attacker with a     local account with a root privilege, can leverage this     vulnerability to escalate privileges and execute code     in the context of the kernel.(CVE-2021-20292)A flaw was     found in the Nosy driver in the Linux kernel. This     issue allows a device to be inserted twice into a     doubly-linked list, leading to a use-after-free when     one of these devices is removed. The highest threat     from this vulnerability is to confidentiality,     integrity, as well as system availability. Versions     before kernel 5.12-rc6 are affected(CVE-2021-3483)In     drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux     kernel through 5.11.8, the RPA PCI Hotplug driver has a     user-tolerable buffer overflow when writing a new     device name to the driver from userspace, allowing     userspace to write data to the kernel stack frame     directly. This occurs because add_slot_store and     remove_slot_store mishandle drc_name '\0' termination,     aka CID-cc7a0bb058b8.(CVE-2021-28972)A race condition     was discovered in get_old_root in fs/btrfs/ctree.c in     the Linux kernel through 5.11.8. It allows attackers to     cause a denial of service (BUG) because of a lack of     locking on an extent buffer before a cloning operation,     aka CID-dbcc7d57bffc.(CVE-2021-28964)An issue was     discovered in the Linux kernel before 5.11.7.
    usbip_sockfd_store in drivers/usb/usbip/stub_dev.c     allows attackers to cause a denial of service (GPF)     because the stub-up sequence has race conditions during     an update of the local and shared status, aka     CID-9380afd6df70.(CVE-2021-29265)The fix for XSA-365     includes initialization of pointers such that     subsequent cleanup code wouldn't use uninitialized or     stale values. This initialization went too far and may     under certain conditions also overwrite pointers which     are in need of cleaning up. The lack of cleanup would     result in leaking persistent grants. The leak in turn     would prevent fully cleaning up after a respective     guest has died, leaving around zombie domains. All     Linux versions having the fix for XSA-365 applied are     vulnerable. XSA-365 was classified to affect versions     back to at least 3.11.(CVE-2021-28688)An issue was     discovered in the Linux kernel before 5.11.3 when a     webcam device exists. video_usercopy in     drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak     for large arguments, aka     CID-fb18802a338b.(CVE-2021-30002)An issue was     discovered in the Linux kernel before 5.8.10.
    virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev     memory leak upon a kmalloc failure, aka     CID-f65886606c2d.(CVE-2020-36312)An issue was     discovered in the Linux kernel before 5.9.
    arch/x86/kvm/svm/sev.c allows attackers to cause a     denial of service (soft lockup) by triggering     destruction of a large SEV VM (which requires     unregistering many encrypted regions), aka     CID-7be74942f184.(CVE-2020-36311)An issue was     discovered in the Linux kernel before 5.11.11.
    qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to     obtain sensitive information from kernel memory because     of a partially uninitialized data structure, aka     CID-50535249f624.(CVE-2021-29647)An issue was     discovered in the Linux kernel through 5.11.10.
    driverset/ethernet/freescale/gianfar.c in the Freescale     Gianfar Ethernet driver allows attackers to cause a     system crash because a negative fragment size is     calculated in situations involving an rx queue overrun     when jumbo packets are used and NAPI is enabled, aka     CID-d8861bab48b6.(CVE-2021-29264)An out-of-bounds (OOB)     memory access flaw was found in x25_bind in     net/x25/af_x25.c in the Linux kernel version v5.12-rc5.
    A bounds check failure allows a local attacker with a     user account on the system to gain access to     out-of-bounds memory, leading to a system crash or a     leak of internal kernel information. The highest threat     from this vulnerability is to confidentiality,     integrity, as well as system     availability.(CVE-2020-35519)An issue was discovered in     the Linux kernel before 5.11.8. kernel/bpf/verifier.c     has an off-by-one error (with a resultant integer     underflow) affecting out-of-bounds speculation on     pointer arithmetic, leading to side-channel attacks     that defeat Spectre mitigations and obtain sensitive     information from kernel memory, aka     CID-10d2bb2e6b1d.(CVE-2020-27171)An issue was     discovered in the Linux kernel before 5.11.8.
    kernel/bpf/verifier.c performs undesirable     out-of-bounds speculation on pointer arithmetic,     leading to side-channel attacks that defeat Spectre     mitigations and obtain sensitive information from     kernel memory, aka CID-f232326f6966. This affects     pointer types that do not define a     ptr_limit.(CVE-2020-27170)BPF JIT compilers in the     Linux kernel through 5.11.12 have incorrect computation     of branch displacements, allowing them to execute     arbitrary code within the kernel context. This affects     arch/x86 et/bpf_jit_comp.c and arch/x86     et/bpf_jit_comp32.c.(CVE-2021-29154)A race condition in     Linux kernel SCTP sockets (net/sctp/socket.c) before     5.12-rc8 can lead to kernel privilege escalation from     the context of a network service or an unprivileged     process. If sctp_destroy_sock is called without     sock_net(sk)->sctp.addr_wq_lock then an element is     removed from the auto_asconf_splist list without any     proper locking. This can be exploited by an attacker     with network service privileges to escalate to root or     from the context of an unprivileged user directly if a     BPF_CGROUP_INET_SOCK_CREATE is attached which denies     creation of some SCTP socket.(CVE-2021-23133)An issue     was discovered in the FUSE filesystem implementation in     the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf.
    fuse_do_getattr() calls make_bad_inode() in     inappropriate situations, causing a system crash. NOTE:
    the original fix for this vulnerability was incomplete,     and its incompleteness is tracked as     CVE-2021-28950.(CVE-2020-36322)An out-of-bounds (OOB)     memory write flaw was found in list_devices in     drivers/md/dm-ioctl.c in the Multi-device driver module     in the Linux kernel before 5.12. A bound check failure     allows an attacker with special user (CAP_SYS_ADMIN)     privilege to gain access to out-of-bounds memory     leading to a system crash or a leak of internal kernel     information. The highest threat from this vulnerability     is to system availability.(CVE-2021-31916)An issue was     discovered in the Linux kernel through 5.11.x.
    kernel/bpf/verifier.c performs undesirable     out-of-bounds speculation on pointer arithmetic,     leading to side-channel attacks that defeat Spectre     mitigations and obtain sensitive information from     kernel memory. Specifically, for sequences of pointer     arithmetic operations, the pointer modification     performed by the first operation is not correctly     accounted for when restricting subsequent     operations.(CVE-2021-29155)kernel/bpf/verifier.c in the     Linux kernel through 5.12.1 performs undesirable     speculative loads, leading to disclosure of stack     content via side-channel attacks, aka CID-801c6058d14a.
    The specific concern is not protecting the BPF stack     area against speculative loads. Also, the BPF stack can     contain uninitialized data that might represent     sensitive information previously operated on by the     kernel.(CVE-2021-31829)The Linux kernel before 5.11.14     has a use-after-free in cipso_v4_genopt in     net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO     refcounting for the DOI definitions is mishandled, aka     CID-ad5d07f4a9cd. This leads to writing an arbitrary     value.(CVE-2021-33033)kernel/bpf/verifier.c in the     Linux kernel through 5.12.7 enforces incorrect limits     for pointer arithmetic operations, aka     CID-bb01a1bba579. This can be abused to perform     out-of-bounds reads and writes in kernel memory,     leading to local privilege escalation to root. In     particular, there is a corner case where the off reg     causes a masking direction change, which then results     in an incorrect final aux->alu_limit.(CVE-2021-33200)An     issue was discovered in the Linux kernel through     5.11.3. Certain iSCSI data structures do not have     appropriate length constraints or checks, and can     exceed the PAGE_SIZE value. An unprivileged user can     send a Netlink message that is associated with iSCSI,     and has a length up to the maximum length of a Netlink     message.(CVE-2021-27365)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414611 advisory.

    fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a     filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE:
    some parties argue that such a subdirectory export is not intended to prevent this attack; see also the     exports(5) no_subtree_check default behavior

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 4.14.219-161.340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1600 advisory.

    2024-05-23: CVE-2023-1390 was added to this advisory.

    A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel. There was a race problem in     trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service     problem (DOS). This flaw could even allow a local attacker with special user  privilege to a kernel     information leak threat. (CVE-2020-27825)

    A flaw was found in the Linux kernel's implementation of the Linux SCSI target host, where an     authenticated attacker could write to any block on the exported SCSI device backing store. This flaw     allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on the     backing store. The highest threat from this vulnerability is to integrity. In addition, this flaw affects     the tcmu-runner package, where the affected SCSI command is called. (CVE-2020-28374)

    A flaw leak of the file handle for parent directory in the Linux kernel's NFS3 functionality was found in     the way user calls READDIRPLUS. A local user could use this flaw to traverse to other parts of the file-     system than mounted sub-folder. (CVE-2021-3178)

    A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes     functionality allowing a local user to crash the system or escalate their privileges on the system. The     highest threat from this vulnerability is to data confidentiality and integrity as well as system     availability. (CVE-2021-3347)

    A use after free flaw in the Linux kernel network block device (NBD) subsystem was found in the way user     calls an ioctl NBD_SET_SOCK at a certain point during device setup. (CVE-2021-3348)

    In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a     race condition. This could lead to local information disclosure with System execution privileges needed.
    User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:
    A-160822094References: Upstream kernel (CVE-2021-39648)

    A remote denial of service vulnerability was found in the Linux kernel's TIPC kernel module. The while     loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue.
    Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system     to instantly spike to 100%, causing a denial of service condition. (CVE-2023-1390)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4910-1 advisory.

    Ryota Shiga discovered that the sockopt BPF hooks in the Linux kernel could allow a user space program to     probe for valid kernel addresses. A local attacker could use this to ease exploitation of another kernel     vulnerability. (CVE-2021-20239)

    It was discovered that the BPF verifier in the Linux kernel did not properly handle signed add32 and sub     integer overflows. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2021-20268)

    It was discovered that the priority inheritance futex implementation in the Linux kernel contained a race     condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2021-3347)

    It was discovered that the network block device (nbd) driver in the Linux kernel contained a use-after-     free vulnerability during device setup. A local attacker with access to the nbd device could use this to     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3348)

     discovered that the NFS implementation in the Linux kernel did not properly prevent access outside     of an NFS export that is a subdirectory of a file system. An attacker could possibly use this to bypass     NFS access restrictions. (CVE-2021-3178)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4912-1 advisory.

    Piotr Krysiuk discovered that the BPF JIT compiler for x86 in the Linux kernel did not properly validate     computation of branch displacements in some situations. A local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2021-29154)

    It was discovered that a race condition existed in the binder IPC implementation in the Linux kernel,     leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2020-0423)

    It was discovered that the HID multitouch implementation within the Linux kernel did not properly validate     input events in some situations. A physically proximate attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2020-0465)

    It was discovered that the eventpoll (aka epoll) implementation in the Linux kernel contained a logic     error that could lead to a use after free vulnerability. A local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2020-0466)

    It was discovered that a race condition existed in the perf subsystem of the Linux kernel, leading to a     use-after-free vulnerability. An attacker with access to the perf subsystem could use this to cause a     denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-14351)

    It was discovered that the frame buffer implementation in the Linux kernel did not properly handle some     edge cases in software scrollback. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2020-14390)

    It was discovered that a race condition existed in the hugetlb sysctl implementation in the Linux kernel.
    A privileged attacker could use this to cause a denial of service (system crash). (CVE-2020-25285)

    It was discovered that the GENEVE tunnel implementation in the Linux kernel when combined with IPSec did     not properly select IP routes in some situations. An attacker could use this to expose sensitive     information (unencrypted network traffic). (CVE-2020-25645)

    Bodong Zhao discovered a use-after-free in the Sun keyboard driver implementation in the Linux kernel. A     local attacker could use this to cause a denial of service or possibly execute arbitrary code.
    (CVE-2020-25669)

    Shisong Qin and Bodong Zhao discovered that Speakup screen reader driver in the Linux kernel did not     correctly handle setting line discipline in some situations. A local attacker could use this to cause a     denial of service (system crash). (CVE-2020-27830)

    It was discovered that the Marvell WiFi-Ex device driver in the Linux kernel did not properly validate ad-     hoc SSIDs. A local attacker could use this to cause a denial of service (system crash) or possibly execute     arbitrary code. (CVE-2020-36158)

    Loris Reiff discovered that the BPF implementation in the Linux kernel did not properly validate     attributes in the getsockopt BPF hook. A local attacker could possibly use this to cause a denial of     service (system crash). (CVE-2021-20194)

    Adam Zabrocki discovered that the kprobes subsystem in the Linux kernel did not properly detect linker     padding in some situations. A privileged attacker could use this to cause a denial of service (system     crash) or possibly expose sensitive information. (CVE-2021-3411)

     discovered that the NFS implementation in the Linux kernel did not properly prevent access outside     of an NFS export that is a subdirectory of a file system. An attacker could possibly use this to bypass     NFS access restrictions. (CVE-2021-3178)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in the Linux kernel through     5.11.3. A kernel pointer leak can be used to determine     the address of the iscsi_transport structure. When an     iSCSI transport is registered with the iSCSI subsystem,     the transport's handle is available to unprivileged     users via the sysfs file system, at     /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When     read, the show_transport_handle function (in     drivers/scsi/scsi_transport_iscsi.c) is called, which     leaks the handle. This handle is actually the pointer     to an iscsi_transport struct in the kernel module's     global variables.(CVE-2021-27363)

  - An issue was discovered in the Linux kernel through     5.11.3. Certain iSCSI data structures do not have     appropriate length constraints or checks, and can     exceed the PAGE_SIZE value. An unprivileged user can     send a Netlink message that is associated with iSCSI,     and has a length up to the maximum length of a Netlink     message.(CVE-2021-27365)

  - An issue was discovered in the Linux kernel through     5.11.3. drivers/scsi/scsi_transport_iscsi.c is     adversely affected by the ability of an unprivileged     user to craft Netlink messages.(CVE-2021-27364)

  - Overlayfs did not properly perform permission checking     when copying up files in an overlayfs and could be     exploited from within a user namespace, if, for     example, unprivileged user namespaces were allowed. It     was possible to have a file not readable by an     unprivileged user to be copied to a mountpoint     controlled by the user, like a removable device. This     was introduced in kernel version 4.19 by commit d1d04ef     ('ovl: stack file ops'). This was fixed in kernel     version 5.8 by commits 56230d9 ('ovl: verify     permissions in ovl_path_open()'), 48bd024 ('ovl: switch     to mounter creds in readdir') and 05acefb ('ovl: check     permission to open real file'). Additionally, commits     130fdbc ('ovl: pass correct flags for opening real     directory') and 292f902 ('ovl: call secutiry hook in     ovl_real_ioctl()') in kernel 5.8 might also be desired     or necessary. These additional commits introduced a     regression in overlay mounts within user namespaces     which prevented access to files with ownership outside     of the user namespace. This regression was mitigated by     subsequent commit b6650da ('ovl: do not fail because of     O_NOATIMEi') in kernel 5.11.(CVE-2020-16120)

  - A flaw was found in the Linux kernel's implementation     of string matching within a packet. A privileged user     (with root or CAP_NET_ADMIN) when inserting iptables     rules could insert a rule which can panic the     system.(CVE-2021-20177)

  - fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8,     when there is an NFS export of a subdirectory of a     filesystem, allows remote attackers to traverse to     other parts of the filesystem via READDIRPLUS. NOTE:
    some parties argue that such a subdirectory export is     not intended to prevent this attack see also the     exports(5) no_subtree_check default     behavior.(CVE-2021-3178)

  - nbd_add_socket in drivers/block/nbd.c in the Linux     kernel through 5.10.12 has an ndb_queue_rq     use-after-free that could be triggered by local     attackers (with access to the nbd device) via an I/O     request at a certain point during device setup, aka     CID-b98e762e3d71.(CVE-2021-3348)

  - An issue was discovered in the Linux kernel through     5.10.11. PI futexes have a kernel stack use-after-free     during fault handling, allowing local users to execute     code in the kernel, aka     CID-34b1a1ce1458.(CVE-2021-3347)

  - A flaw use after free in the Linux kernel TUN/TAP     device driver functionality was found in the way user     create and use tun/tap device. A local user could use     this flaw to crash the system or possibly escalate     their privileges on the system.(CVE-2021-0342)

  - A flaw was found in the Linux kernel. A use-after-free     memory flaw was found in the perf subsystem allowing a     local attacker with permission to monitor perf events     to corrupt memory and possibly escalate privileges. The     highest threat from this vulnerability is to data     confidentiality and integrity as well as system     availability.(CVE-2020-14351)

  - A flaw was found in the Linux kernel's multi-touch     input system. An out-of-bounds write triggered by a     use-after-free issue could lead to memory corruption or     possible privilege escalation. The highest threat from     this vulnerability is to confidentiality, integrity, as     well as system availability.(CVE-2020-0465)

  - A NULL pointer dereference flaw was found in the Linux     kernel's GPU Nouveau driver functionality in the way     the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC.
    This flaw allows a local user to crash the     system.(CVE-2020-25639)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001474 advisory.

    fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a     filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE:
    some parties argue that such a subdirectory export is not intended to prevent this attack; see also the     exports(5) no_subtree_check default behavior

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In drivers/target/target_core_xcopy.c in the Linux     kernel before 5.10.7, insufficient identifier checking     in the LIO SCSI target code can be used by remote     attackers to read or write files via directory     traversal in an XCOPY request, aka CID-2896c93811e3.
    For example, an attack can occur over a network if the     attacker has access to one iSCSI LUN. The attacker     gains control over file access because I/O operations     are proxied via an attacker-selected     backstore.(CVE-2020-28374)

  - mwifiex_cmd_802_11_ad_hoc_start in     drivers/net/wireless/marvell/mwifiex/join.c in the     Linux kernel through 5.10.4 might allow remote     attackers to execute arbitrary code via a long SSID     value, aka CID-5c455c5ab332.(CVE-2020-36158)

  - In tun_get_user of tun.c, there is possible memory     corruption due to a use after free. This could lead to     local escalation of privilege with System execution     privileges required. User interaction is not required     for exploitation. (CVE-2021-0342)

  - A flaw was found in the Linux kernel. A use-after-free     memory flaw was found in the perf subsystem allowing a     local attacker with permission to monitor perf events     to corrupt memory and possibly escalate privileges. The     highest threat from this vulnerability is to data     confidentiality and integrity as well as system     availability. (CVE-2020-14351)

  - fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8,     when there is an NFS export of a subdirectory of a     filesystem, allows remote attackers to traverse to     other parts of the filesystem via READDIRPLUS. NOTE:
    some parties argue that such a subdirectory export is     not intended to prevent this attack see also the     exports(5) no_subtree_check default     behavior.(CVE-2021-3178)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4877-1 advisory.

    It was discovered that the Marvell WiFi-Ex device driver in the Linux kernel did not properly validate ad-     hoc SSIDs. A local attacker could use this to cause a denial of service (system crash) or possibly execute     arbitrary code. (CVE-2020-36158)

     discovered that the NFS implementation in the Linux kernel did not properly prevent access outside     of an NFS export that is a subdirectory of a file system. An attacker could possibly use this to bypass     NFS access restrictions. (CVE-2021-3178)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the Linux kernel's implementation     of string matching within a packet. A privileged user     (with root or CAP_NET_ADMIN) when inserting iptables     rules could insert a rule which can panic the     system.(CVE-2021-20177)

  - rtw_wx_set_scan in     drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the     Linux kernel through 5.11.6 allows writing beyond the     end of the ->ssid[] array. NOTE: from the perspective     of kernel.org releases, CVE IDs are not normally used     for drivers/staging/* (unfinished work) however, system     integrators may have situations in which a     drivers/staging issue is relevant to their own customer     base.(CVE-2021-28660)

  - There is a flaw reported in     drivers/gpu/drm/nouveau/nouveau_sgdma.c in     nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The     issue results from the lack of validating the existence     of an object prior to performing operations on the     object. An attacker with a local account with a root     privilege, can leverage this vulnerability to escalate     privileges and execute code in the context of the     kernel.(CVE-2021-20292)

  - ntfs_read_locked_inode in the ntfs.ko filesystem driver     in the Linux kernel 4.15.0 allows attackers to trigger     a use-after-free read and possibly cause a denial of     service (kernel oops or panic) via a crafted ntfs     filesystem.(CVE-2018-12929)

  - In the Linux kernel 4.15.0, a NULL pointer dereference     was discovered in hfs_ext_read_extent in hfs.ko. This     can occur during a mount of a crafted hfs     filesystem.(CVE-2018-12928)

  - An issue was discovered in the Linux kernel through     5.11.3. A kernel pointer leak can be used to determine     the address of the iscsi_transport structure. When an     iSCSI transport is registered with the iSCSI subsystem,     the transport's handle is available to unprivileged     users via the sysfs file system, at     /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When     read, the show_transport_handle function (in     drivers/scsi/scsi_transport_iscsi.c) is called, which     leaks the handle. This handle is actually the pointer     to an iscsi_transport struct in the kernel module's     global variables.(CVE-2021-27363)

  - An issue was discovered in the Linux kernel through     5.11.3. drivers/scsi/scsi_transport_iscsi.c is     adversely affected by the ability of an unprivileged     user to craft Netlink messages.(CVE-2021-27364)

  - An issue was discovered in the Linux kernel through     5.11.3. Certain iSCSI data structures do not have     appropriate length constraints or checks, and can     exceed the PAGE_SIZE value. An unprivileged user can     send a Netlink message that is associated with iSCSI,     and has a length up to the maximum length of a Netlink     message.(CVE-2021-27365)

  - nbd_add_socket in drivers/block/nbd.c in the Linux     kernel through 5.10.12 has an ndb_queue_rq     use-after-free that could be triggered by local     attackers (with access to the nbd device) via an I/O     request at a certain point during device setup, aka     CID-b98e762e3d71.(CVE-2021-3348)

  - An issue was discovered in the Linux kernel through     5.10.11. PI futexes have a kernel stack use-after-free     during fault handling, allowing local users to execute     code in the kernel, aka     CID-34b1a1ce1458.(CVE-2021-3347)

  - fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8,     when there is an NFS export of a subdirectory of a     filesystem, allows remote attackers to traverse to     other parts of the filesystem via READDIRPLUS. NOTE:
    some parties argue that such a subdirectory export is     not intended to prevent this attack see also the     exports(5) no_subtree_check default     behavior.(CVE-2021-3178)

  - In tun_get_user of tun.c, there is possible memory     corruption due to a use after free. This could lead to     local escalation of privilege with System execution     privileges required. User interaction is not required     for exploitation.(CVE-2021-0342)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of kernel installed on the remote host is prior to 5.4.95-42.163. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-020 advisory.

    A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel. There was a race problem in     trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service     problem (DOS). This flaw could even allow a local attacker with special user  privilege to a kernel     information leak threat. (CVE-2020-27825)

    A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an     attacker with a local account to leak information about kernel internal addresses. The highest threat from     this vulnerability is to confidentiality. (CVE-2021-20239)

    A flaw leak of the file handle for parent directory in the Linux kernel's NFS3 functionality was found in     the way user calls READDIRPLUS. A local user could use this flaw to traverse to other parts of the file-     system than mounted sub-folder. (CVE-2021-3178)

    A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes     functionality allowing a local user to crash the system or escalate their privileges on the system. The     highest threat from this vulnerability is to data confidentiality and integrity as well as system     availability. (CVE-2021-3347)

    A use after free flaw in the Linux kernel network block device (NBD) subsystem was found in the way user     calls an ioctl NBD_SET_SOCK at a certain point during device setup. (CVE-2021-3348)

    A remote denial of service vulnerability was found in the Linux kernel's TIPC kernel module. The while     loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue.
    Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system     to instantly spike to 100%, causing a denial of service condition. (CVE-2023-1390)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
151167	EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2021-2002)	Nessus	Huawei Local Security Checks	2021/6/30	2023/12/12	high
156534	EulerOS Virtualization 3.0.2.6 : kernel (EulerOS-SA-2021-2857)	Nessus	Huawei Local Security Checks	2022/1/6	2025/10/6	high
146569	Amazon Linux AMI : kernel (ALAS-2021-1480)	Nessus	Amazon Linux Local Security Checks	2021/2/18	2026/1/26	high
151307	EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2021-2075)	Nessus	Huawei Local Security Checks	2021/7/2	2023/12/11	high
267167	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414611)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/15	medium
146631	Amazon Linux 2 : kernel (ALAS-2021-1600)	Nessus	Amazon Linux Local Security Checks	2021/2/19	2026/2/24	high
148492	Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4910-1)	Nessus	Ubuntu Local Security Checks	2021/4/14	2024/8/27	high
148494	Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-4912-1)	Nessus	Ubuntu Local Security Checks	2021/4/14	2024/8/27	high
148604	EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2021-1751)	Nessus	Huawei Local Security Checks	2021/4/15	2024/1/4	high
290502	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001474)	Nessus	Unity Linux Local Security Checks	2026/1/16	2026/1/16	medium
148350	Photon OS 4.0: Linux PHSA-2021-4.0-0007	Nessus	PhotonOS Local Security Checks	2021/4/7	2026/11/2	high
146261	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-1265)	Nessus	Huawei Local Security Checks	2021/2/5	2022/5/10	high
202821	Photon OS 3.0: Linux PHSA-2021-3.0-0193	Nessus	PhotonOS Local Security Checks	2024/7/22	2024/7/22	high
147992	Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4877-1)	Nessus	Ubuntu Local Security Checks	2021/3/23	2024/8/27	medium
149607	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2021-1879)	Nessus	Huawei Local Security Checks	2021/5/18	2024/1/1	high
160427	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-020 (ALASKERNEL-5.4-2022-020)	Nessus	Amazon Linux Local Security Checks	2022/5/2	2026/6/11	high

偵測

搜尋 Plugin

high

high

high

high

medium

high

high

high

high

medium

high

high

high

medium

high

high