The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7468-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    It was discovered that the CIFS network file system implementation in the Linux kernel did not properly     verify the target namespace when handling upcalls. An attacker could use this to expose sensitive     information. (CVE-2025-2312)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - RAM backed block device driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - EDAC drivers;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - iSCSI Boot Firmware Table Attributes driver;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Voltage and Current Regulator drivers;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - DRM display driver;

    - BPF subsystem;

    - Kernel Samepage Merging mechanism;

    - Network file system (NFS) superblock;

    - Kernel stack handling interfaces;

    - StackDepot library;

    - Task handling mechanism;

    - userfaultfd() syscall;

    - Bluetooth subsystem;

    - IP tunnels definitions;

    - Network namespace;

    - Netfilter;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - DMA mapping infrastructure;

    - Perf events;

    - Kernel fork() syscall;

    - KCSAN framework;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Static call mechanism;

    - Timer subsystem;

    - Vector I/O iterator library;

    - KUnit library;

    - Maple Tree data structure library;

    - Memory management;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - Ethtool driver;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - MAC80211 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netlink;

    - Packet sockets;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - ALSA framework;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - HD-audio driver;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices; (CVE-2024-49996, CVE-2024-56693, CVE-2024-49928, CVE-2024-47728, CVE-2024-50218,     CVE-2024-50197, CVE-2024-50084, CVE-2024-56698, CVE-2024-56623, CVE-2024-50203, CVE-2024-56786,     CVE-2024-53198, CVE-2024-49939, CVE-2024-49852, CVE-2024-49920, CVE-2024-53117, CVE-2024-50023,     CVE-2024-56581, CVE-2024-49954, CVE-2024-56658, CVE-2024-56688, CVE-2024-56574, CVE-2024-56690,     CVE-2024-53158, CVE-2024-56777, CVE-2024-56582, CVE-2024-56629, CVE-2024-49997, CVE-2024-50041,     CVE-2024-53052, CVE-2024-50126, CVE-2024-56726, CVE-2024-50007, CVE-2024-47712, CVE-2024-50225,     CVE-2024-50269, CVE-2024-50200, CVE-2024-53099, CVE-2024-50083, CVE-2024-53162, CVE-2024-57876,     CVE-2024-50180, CVE-2024-56678, CVE-2024-50179, CVE-2024-56776, CVE-2024-53151, CVE-2024-56631,     CVE-2024-50160, CVE-2024-50302, CVE-2024-53126, CVE-2024-50151, CVE-2024-49917, CVE-2024-49899,     CVE-2024-49927, CVE-2024-48875, CVE-2024-50298, CVE-2024-53148, CVE-2024-53160, CVE-2024-50187,     CVE-2024-50072, CVE-2024-56756, CVE-2024-56625, CVE-2024-44955, CVE-2024-47671, CVE-2024-47141,     CVE-2024-50047, CVE-2024-50048, CVE-2024-50245, CVE-2024-50096, CVE-2024-56602, CVE-2024-53232,     CVE-2024-50284, CVE-2024-53129, CVE-2024-56724, CVE-2024-56632, CVE-2024-49924, CVE-2024-47756,     CVE-2024-53226, CVE-2024-50189, CVE-2024-56573, CVE-2024-50257, CVE-2024-50300, CVE-2024-47673,     CVE-2024-50152, CVE-2024-53215, CVE-2024-50295, CVE-2024-50111, CVE-2024-49865, CVE-2024-47691,     CVE-2024-56649, CVE-2024-56567, CVE-2024-53061, CVE-2024-50153, CVE-2024-53091, CVE-2024-56692,     CVE-2024-41932, CVE-2024-56650, CVE-2024-56645, CVE-2024-47670, CVE-2024-53130, CVE-2024-50066,     CVE-2024-50020, CVE-2024-50154, CVE-2024-49998, CVE-2024-50290, CVE-2024-56594, CVE-2024-56627,     CVE-2024-49882, CVE-2024-50220, CVE-2024-49914, CVE-2024-50019, CVE-2024-53213, CVE-2024-50015,     CVE-2024-53172, CVE-2024-50198, CVE-2024-53051, CVE-2024-50280, CVE-2024-53187, CVE-2024-50136,     CVE-2024-47672, CVE-2024-56606, CVE-2024-47699, CVE-2024-56780, CVE-2024-56672, CVE-2024-56637,     CVE-2024-49946, CVE-2024-56752, CVE-2024-50199, CVE-2024-53119, CVE-2024-53084, CVE-2024-50076,     CVE-2024-49938, CVE-2024-50237, CVE-2024-56779, CVE-2024-50108, CVE-2024-50162, CVE-2024-49936,     CVE-2024-41935, CVE-2024-53046, CVE-2024-56572, CVE-2024-53107, CVE-2024-53150, CVE-2024-56539,     CVE-2024-49949, CVE-2024-41014, CVE-2024-53217, CVE-2024-49977, CVE-2025-21702, CVE-2024-50267,     CVE-2024-50138, CVE-2024-50229, CVE-2024-56586, CVE-2024-50057, CVE-2024-50070, CVE-2024-49898,     CVE-2024-50085, CVE-2024-56746, CVE-2024-53106, CVE-2024-47695, CVE-2024-50009, CVE-2024-50103,     CVE-2024-47693, CVE-2024-53135, CVE-2024-53127, CVE-2024-50067, CVE-2024-57850, CVE-2024-56615,     CVE-2024-50167, CVE-2024-50042, CVE-2024-56546, CVE-2024-47749, CVE-2024-47705, CVE-2024-47747,     CVE-2024-56570, CVE-2024-56604, CVE-2024-53112, CVE-2024-49988, CVE-2024-56597, CVE-2024-50268,     CVE-2024-53121, CVE-2024-56635, CVE-2024-50002, CVE-2024-50127, CVE-2024-56603, CVE-2024-56531,     CVE-2024-49890, CVE-2024-53157, CVE-2024-50246, CVE-2024-56562, CVE-2024-56722, CVE-2024-49912,     CVE-2024-56774, CVE-2024-49893, CVE-2024-56593, CVE-2024-53131, CVE-2024-57798, CVE-2024-50275,     CVE-2024-50075, CVE-2024-53174, CVE-2024-53087, CVE-2024-50155, CVE-2024-47696, CVE-2024-53155,     CVE-2024-50201, CVE-2024-53134, CVE-2024-49922, CVE-2024-53138, CVE-2024-47711, CVE-2024-47742,     CVE-2024-53043, CVE-2024-48881, CVE-2024-53203, CVE-2024-53053, CVE-2024-56589, CVE-2024-56679,     CVE-2024-49892, CVE-2024-56677, CVE-2024-53144, CVE-2024-50107, CVE-2024-56583, CVE-2025-21701,     CVE-2024-49911, CVE-2024-50244, CVE-2024-49969, CVE-2024-50098, CVE-2024-50166, CVE-2024-47809,     CVE-2024-56781, CVE-2024-49894, CVE-2025-21700, CVE-2024-49930, CVE-2024-56548, CVE-2024-50134,     CVE-2024-53194, CVE-2024-50285, CVE-2024-42122, CVE-2024-53171, CVE-2024-53120, CVE-2024-50279,     CVE-2024-57838, CVE-2024-50082, CVE-2024-50168, CVE-2024-53175, CVE-2024-47710, CVE-2024-49972,     CVE-2024-56727, CVE-2024-49919, CVE-2024-53066, CVE-2024-56708, CVE-2024-53142, CVE-2024-49896,     CVE-2024-49950, CVE-2024-53114, CVE-2024-47737, CVE-2024-56721, CVE-2024-50030, CVE-2024-50063,     CVE-2024-56704, CVE-2024-56694, CVE-2024-49937, CVE-2024-56596, CVE-2024-49855, CVE-2024-53231,     CVE-2024-50259, CVE-2024-50163, CVE-2024-50263, CVE-2024-56579, CVE-2024-50148, CVE-2024-50252,     CVE-2024-56775, CVE-2024-53195, CVE-2024-56771, CVE-2024-56765, CVE-2024-50192, CVE-2024-56705,     CVE-2024-56566, CVE-2024-49851, CVE-2024-56575, CVE-2024-53222, CVE-2024-50014, CVE-2024-49891,     CVE-2024-53128, CVE-2024-49921, CVE-2024-50024, CVE-2024-56703, CVE-2024-56787, CVE-2024-56723,     CVE-2024-56687, CVE-2024-47718, CVE-2024-49902, CVE-2024-49963, CVE-2024-56691, CVE-2024-53173,     CVE-2024-56599, CVE-2024-50080, CVE-2024-47704, CVE-2024-49934, CVE-2024-56707, CVE-2024-49958,     CVE-2024-49888, CVE-2024-53095, CVE-2024-53089, CVE-2024-49935, CVE-2024-50022, CVE-2024-47748,     CVE-2024-56634, CVE-2024-53090, CVE-2024-50242, CVE-2024-53085, CVE-2024-50073, CVE-2024-50068,     CVE-2024-49877, CVE-2024-56642, CVE-2024-53067, CVE-2024-50118, CVE-2024-50061, CVE-2024-49948,     CVE-2024-53100, CVE-2024-50194, CVE-2024-50116, CVE-2024-48873, CVE-2024-53180, CVE-2024-56663,     CVE-2024-50303, CVE-2024-50250, CVE-2024-50045, CVE-2024-50296, CVE-2024-49961, CVE-2024-56549,     CVE-2024-50027, CVE-2024-53227, CVE-2024-50292, CVE-2024-49900, CVE-2024-50074, CVE-2024-53115,     CVE-2024-56747, CVE-2024-50078, CVE-2024-56772, CVE-2024-53141, CVE-2024-50301, CVE-2024-53079,     CVE-2024-50255, CVE-2024-56565, CVE-2024-53165, CVE-2024-52332, CVE-2024-53140, CVE-2024-50286,     CVE-2024-53088, CVE-2024-53139, CVE-2024-49881, CVE-2024-49859, CVE-2024-50247, CVE-2024-50278,     CVE-2024-50124, CVE-2024-47709, CVE-2024-50128, CVE-2024-49962, CVE-2024-50258, CVE-2024-56532,     CVE-2024-47684, CVE-2024-56633, CVE-2024-53210, CVE-2024-49867, CVE-2024-50056, CVE-2024-50137,     CVE-2024-47730, CVE-2024-49960, CVE-2024-50060, CVE-2024-49925, CVE-2024-50195, CVE-2024-50031,     CVE-2024-50099, CVE-2024-49863, CVE-2024-49992, CVE-2024-53083, CVE-2024-56751, CVE-2024-50141,     CVE-2024-47701, CVE-2024-53122, CVE-2024-56576, CVE-2024-47689, CVE-2024-50121, CVE-2024-50147,     CVE-2024-50226, CVE-2024-50239, CVE-2024-56578, CVE-2024-50062, CVE-2024-50033, CVE-2024-49982,     CVE-2024-56545, CVE-2024-53118, CVE-2024-50231, CVE-2024-50125, CVE-2024-50191, CVE-2024-49875,     CVE-2024-47794, CVE-2024-49983, CVE-2024-56595, CVE-2024-50224, CVE-2024-47690, CVE-2024-50272,     CVE-2024-49901, CVE-2024-56538, CVE-2024-50010, CVE-2024-49959, CVE-2024-53154, CVE-2024-53221,     CVE-2024-49886, CVE-2024-50145, CVE-2024-49884, CVE-2024-50028, CVE-2024-50232, CVE-2024-53208,     CVE-2024-50000, CVE-2024-56728, CVE-2024-50304, CVE-2024-49989, CVE-2024-47739, CVE-2024-56550,     CVE-2024-50055, CVE-2024-56590, CVE-2024-53055, CVE-2024-50270, CVE-2024-53164, CVE-2024-49856,     CVE-2024-57849, CVE-2024-47697, CVE-2024-43098, CVE-2024-50170, CVE-2024-53196, CVE-2024-50251,     CVE-2024-56533, CVE-2024-41016, CVE-2024-53105, CVE-2024-53230, CVE-2024-50164, CVE-2024-50101,     CVE-2024-56607, CVE-2024-50186, CVE-2024-50105, CVE-2024-47679, CVE-2024-48876, CVE-2024-50243,     CVE-2024-47720, CVE-2024-53239, CVE-2024-53062, CVE-2024-50021, CVE-2024-56614, CVE-2024-53224,     CVE-2024-56619, CVE-2024-53072, CVE-2024-53223, CVE-2024-50039, CVE-2024-49981, CVE-2024-50230,     CVE-2024-47143, CVE-2024-53082, CVE-2024-50216, CVE-2024-47713, CVE-2024-56720, CVE-2024-56543,     CVE-2024-53094, CVE-2024-53111, CVE-2024-50036, CVE-2024-50065, CVE-2024-57874, CVE-2024-56689,     CVE-2024-53183, CVE-2024-53108, CVE-2024-56643, CVE-2024-49868, CVE-2024-56611, CVE-2024-50185,     CVE-2024-50223, CVE-2024-50193, CVE-2024-56616, CVE-2024-50265, CVE-2024-56701, CVE-2024-50112,     CVE-2024-50297, CVE-2024-50207, CVE-2024-56558, CVE-2024-56782, CVE-2024-53081, CVE-2024-50044,     CVE-2024-50040, CVE-2024-49991, CVE-2024-50013, CVE-2024-53170, CVE-2024-56540, CVE-2024-47723,     CVE-2024-49913, CVE-2024-53169, CVE-2024-49974, CVE-2024-50256, CVE-2024-49858, CVE-2024-56609,     CVE-2024-50282, CVE-2024-53168, CVE-2024-50182, CVE-2024-49973, CVE-2024-56638, CVE-2024-56683,     CVE-2024-50059, CVE-2024-56648, CVE-2024-45828, CVE-2024-56610, CVE-2024-47740, CVE-2024-47692,     CVE-2024-50026, CVE-2024-50117, CVE-2024-50221, CVE-2024-49931, CVE-2024-49994, CVE-2024-50184,     CVE-2024-50171, CVE-2024-50261, CVE-2024-50283, CVE-2024-50233, CVE-2024-53184, CVE-2024-53220,     CVE-2024-53191, CVE-2024-53190, CVE-2024-56592, CVE-2024-47703, CVE-2024-53048, CVE-2024-49955,     CVE-2024-50150, CVE-2024-50208, CVE-2024-56577, CVE-2024-50159, CVE-2024-50131, CVE-2024-56755,     CVE-2024-50172, CVE-2024-53146, CVE-2024-53161, CVE-2024-50222, CVE-2024-49879, CVE-2024-50146,     CVE-2024-53063, CVE-2024-49889, CVE-2024-50287, CVE-2024-56647, CVE-2024-56613, CVE-2024-50017,     CVE-2024-56551, CVE-2024-53145, CVE-2024-53166, CVE-2024-56622, CVE-2025-21993, CVE-2024-50133,     CVE-2024-53234, CVE-2024-53133, CVE-2024-47735, CVE-2024-49861, CVE-2024-50143, CVE-2024-50169,     CVE-2024-50046, CVE-2024-50069, CVE-2024-56742, CVE-2024-50104, CVE-2024-56636, CVE-2024-56745,     CVE-2024-56630, CVE-2024-50276, CVE-2024-53228, CVE-2024-49945, CVE-2025-21756, CVE-2024-50142,     CVE-2024-56729, CVE-2024-49569, CVE-2024-49952, CVE-2024-50006, CVE-2024-50273, CVE-2024-49906,     CVE-2024-53058, CVE-2024-49895, CVE-2024-50240, CVE-2024-49987, CVE-2024-53233, CVE-2024-53086,     CVE-2024-50110, CVE-2024-50064, CVE-2024-49878, CVE-2024-56644, CVE-2024-56605, CVE-2024-47698,     CVE-2024-53147, CVE-2024-47745, CVE-2024-56685, CVE-2024-50016, CVE-2024-49871, CVE-2024-47757,     CVE-2024-53103, CVE-2024-56580, CVE-2024-49883, CVE-2024-53163, CVE-2024-53110, CVE-2024-50058,     CVE-2024-56640, CVE-2024-53101, CVE-2024-53156, CVE-2022-49034, CVE-2024-53109, CVE-2024-49978,     CVE-2024-50235, CVE-2024-53680, CVE-2024-50299, CVE-2024-53177, CVE-2024-50008, CVE-2024-56744,     CVE-2025-21831, CVE-2024-50038, CVE-2024-50271, CVE-2024-53178, CVE-2024-50012, CVE-2024-53188,     CVE-2024-49860, CVE-2024-53237, CVE-2024-50188, CVE-2024-49880, CVE-2024-50077, CVE-2024-49968,     CVE-2024-50236, CVE-2024-50206, CVE-2024-53197, CVE-2024-56587, CVE-2024-53236, CVE-2024-50139,     CVE-2024-50120, CVE-2024-56681, CVE-2024-53059, CVE-2024-53113, CVE-2024-50209, CVE-2024-49957,     CVE-2024-49944, CVE-2024-50087, CVE-2024-56754, CVE-2024-49903, CVE-2024-56600, CVE-2024-47706,     CVE-2024-49907, CVE-2024-53202, CVE-2024-50215, CVE-2024-47734, CVE-2024-56785, CVE-2024-53229,     CVE-2024-53050, CVE-2024-50051, CVE-2024-53209, CVE-2024-56739, CVE-2024-50262, CVE-2024-50088,     CVE-2024-56621, CVE-2024-49929, CVE-2024-57843, CVE-2024-56569, CVE-2024-50140, CVE-2024-50135,     CVE-2024-57872, CVE-2024-49866, CVE-2024-53214, CVE-2024-50090, CVE-2024-49985, CVE-2024-56608,     CVE-2024-56598, CVE-2024-49915, CVE-2024-53104, CVE-2024-50035, CVE-2024-53047, CVE-2024-53176,     CVE-2024-56700, CVE-2024-49975, CVE-2024-53200, CVE-2024-50274, CVE-2024-56748, CVE-2024-56601,     CVE-2024-50289, CVE-2024-50086, CVE-2024-53044, CVE-2024-50029, CVE-2024-49909, CVE-2024-47738,     CVE-2024-47726, CVE-2024-56568, CVE-2024-53181, CVE-2024-53218, CVE-2024-56725, CVE-2024-56778,     CVE-2024-50115, CVE-2024-50288, CVE-2024-50291, CVE-2024-50049, CVE-2024-56773, CVE-2024-50001,     CVE-2024-49933, CVE-2024-50211, CVE-2024-50095, CVE-2024-56651, CVE-2024-50238, CVE-2024-47707,     CVE-2024-50205, CVE-2024-50093, CVE-2024-50183, CVE-2024-56588, CVE-2024-49965, CVE-2024-56584,     CVE-2024-53096, CVE-2024-50248, CVE-2024-50234, CVE-2024-49926, CVE-2024-49923, CVE-2024-49918,     CVE-2024-50130, CVE-2024-53093, CVE-2024-56626, CVE-2024-50156, CVE-2024-56557, CVE-2024-50196,     CVE-2024-56620, CVE-2024-49870, CVE-2024-50294, CVE-2024-53042, CVE-2024-53076, CVE-2024-49905,     CVE-2024-53045, CVE-2024-50202, CVE-2024-56641, CVE-2024-53219, CVE-2024-50158, CVE-2024-50025,     CVE-2024-47685, CVE-2024-49966, CVE-2024-53123, CVE-2024-53068, CVE-2024-47678)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5818 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5818-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     November 24, 2024                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2022-45888 CVE-2023-52812 CVE-2024-26952 CVE-2024-26954                      CVE-2024-35964 CVE-2024-36244 CVE-2024-36478 CVE-2024-36914                      CVE-2024-36915 CVE-2024-36923 CVE-2024-38540 CVE-2024-38553                      CVE-2024-41080 CVE-2024-42322 CVE-2024-43868 CVE-2024-43904                      CVE-2024-43911 CVE-2024-44949 CVE-2024-49950 CVE-2024-49960                      CVE-2024-49974 CVE-2024-49986 CVE-2024-49991 CVE-2024-50012                      CVE-2024-50036 CVE-2024-50067 CVE-2024-50072 CVE-2024-50126                      CVE-2024-50215 CVE-2024-50218 CVE-2024-50228 CVE-2024-50229                      CVE-2024-50230 CVE-2024-50232 CVE-2024-50233 CVE-2024-50234                      CVE-2024-50235 CVE-2024-50236 CVE-2024-50237 CVE-2024-50242                      CVE-2024-50243 CVE-2024-50244 CVE-2024-50245 CVE-2024-50247                      CVE-2024-50249 CVE-2024-50250 CVE-2024-50251 CVE-2024-50252                      CVE-2024-50255 CVE-2024-50256 CVE-2024-50257 CVE-2024-50259                      CVE-2024-50261 CVE-2024-50262 CVE-2024-50264 CVE-2024-50265                      CVE-2024-50267 CVE-2024-50268 CVE-2024-50269 CVE-2024-50271                      CVE-2024-50272 CVE-2024-50273 CVE-2024-50276 CVE-2024-50278                      CVE-2024-50279 CVE-2024-50280 CVE-2024-50282 CVE-2024-50283                      CVE-2024-50284 CVE-2024-50286 CVE-2024-50287 CVE-2024-50290                      CVE-2024-50292 CVE-2024-50295 CVE-2024-50296 CVE-2024-50299                      CVE-2024-50301 CVE-2024-50302 CVE-2024-53042 CVE-2024-53043                      CVE-2024-53052 CVE-2024-53054 CVE-2024-53055 CVE-2024-53057                      CVE-2024-53058 CVE-2024-53059 CVE-2024-53060 CVE-2024-53061                      CVE-2024-53063 CVE-2024-53066 CVE-2024-53070 CVE-2024-53072                      CVE-2024-53081 CVE-2024-53082 CVE-2024-53088 CVE-2024-53093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.119-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3985-1 advisory.

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
    - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
    - CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and     dpaa2_switch_acl_entry_remove() (bsc#1231973).
    - CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
    - CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
    - CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
    - CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
    - CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
    - CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()     (bsc#1232233).
    - CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
    - CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
    - CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
    - CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
    - CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too     (bsc#1226797).
    - CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
    - CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING     (bsc#1227437).
    - CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
    - CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB     (bsc#1228709).
    - CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
    - CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
    - CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
    - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
    - CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
    - CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
    - CVE-2024-46716: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor     (bsc#1230715).
    - CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
    - CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
    - CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
    - CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
    - CVE-2024-46809: drm/amd/display: Check BIOS images before it is used (bsc#1231148).
    - CVE-2024-46811: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box     (bsc#1231179).
    - CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
    - CVE-2024-46814: drm/amd/display: Check msg_id before processing transcation (bsc#1231193).
    - CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231195).
    - CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links     (bsc#1231197).
    - CVE-2024-46817: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6     (bsc#1231200).
    - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231203).
    - CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
    - CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
    - CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables     (bsc#1231096).
    - CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
    - CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()     (bsc#1231094).
    - CVE-2024-46848: perf/x86/intel: Limit the period on Haswell (bsc#1231072).
    - CVE-2024-46849: ASoC: meson: axg-card: fix 'use-after-free' (bsc#1231073).
    - CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
    - CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).
    - CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).
    - CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
    - CVE-2024-47661: drm/amd/display: Avoid overflow from uint32_t to uint8_t (bsc#1231496).
    - CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware     (bsc#1231442).
    - CVE-2024-47668: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (bsc#1231502).
    - CVE-2024-47672: wifi: iwlwifi: mvm: do not wait for tx queues if firmware is dead (bsc#1231540).
    - CVE-2024-47673: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped (bsc#1231539).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
    - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).
    - CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).
    - CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).
    - CVE-2024-47704: drm/amd/display: Check link_res->hpo_dp_link_enc before using it (bsc#1231944).
    - CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
    - CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).
    - CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).
    - CVE-2024-47720: drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func     (bsc#1232043).
    - CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).
    - CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).
    - CVE-2024-47738: wifi: mac80211: do not use rate mask for offchannel TX either (bsc#1232114).
    - CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).
    - CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between     (bsc#1232135).
    - CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition     (bsc#1232145).
    - CVE-2024-47748: vhost_vdpa: assign irq bypass producer token correctly (bsc#1232174).
    - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231861).
    - CVE-2024-49866: tracing/timerlat: Fix a race during cpuhp processing (bsc#1232259).
    - CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).
    - CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).
    - CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).
    - CVE-2024-49886: platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (bsc#1232196).
    - CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).
    - CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).
    - CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation     (bsc#1232354).
    - CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).
    - CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).
    - CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).
    - CVE-2024-49901: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (bsc#1232305).
    - CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).
    - CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func     (bsc#1232337).
    - CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func     (bsc#1232366).
    - CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx->plane_state in (bsc#1232369).
    - CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw     (bsc#1231965).
    - CVE-2024-49918: drm/amd/display: Add null check for head_pipe in     dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).
    - CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer     (bsc#1231968).
    - CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).
    - CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).
    - CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).
    - CVE-2024-49929: wifi: iwlwifi: mvm: avoid NULL pointer dereference (bsc#1232253).
    - CVE-2024-49930: wifi: ath11k: fix array out-of-bound access in SoC stats (bsc#1232260).
    - CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).
    - CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).
    - CVE-2024-49939: wifi: rtw89: avoid to add interface to list twice when SER (bsc#1232381).
    - CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).
    - CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).
    - CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).
    - CVE-2024-49955: ACPI: battery: Fix possible crash when unregistering a battery hook (bsc#1232154).
    - CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).
    - CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error     (bsc#1232149).
    - CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).
    - CVE-2024-49962: ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()     (bsc#1232314).
    - CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).
    - CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).
    - CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).
    - CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).
    - CVE-2024-49975: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1232104).
    - CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).
    - CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).
    - CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).
    - CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
    - CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).
    - CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).
    - CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module()     (bsc#1232083).
    - CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442).
    - CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446).
    - CVE-2024-50019: kthread: unpark only parked kthread (bsc#1231990).
    - CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).
    - CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).
    - CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).
    - CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).
    - CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).
    - CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).
    - CVE-2024-50046: kabi fix for NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()     (bsc#1231902).
    - CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).
    - CVE-2024-50048: fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (bsc#1232310).
    - CVE-2024-50055: driver core: bus: Fix double free in driver API bus_register() (bsc#1232329).
    - CVE-2024-50058: serial: protect uart_port_dtr_rts() in uart_shutdown() too (bsc#1232285).
    - CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to     race condition (bsc#1232345).
    - CVE-2024-50061: i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to     Race Condition (bsc#1232263).
    - CVE-2024-50063: kABI: bpf: struct bpf_map kABI workaround (bsc#1232435).
    - CVE-2024-50081: blk-mq: setup queue ->tag_set before initializing hctx (bsc#1232501).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7277-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - RAM backed block device driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bluetooth drivers;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - Buffer Sharing and Synchronization framework;

    - EDAC drivers;

    - FireWire subsystem;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Powercap sysfs driver;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Virtio drivers;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - UBI file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Bluetooth subsystem;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Static call mechanism;

    - Task handling mechanism;

    - Timer substystem drivers;

    - Maple Tree data structure library;

    - Memory management;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - L2TP protocol;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - AppArmor security module;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - ALSA framework;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - HD-audio driver;

    - SoC Audio for Freescale CPUs drivers;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-50030, CVE-2024-47689, CVE-2024-50088, CVE-2024-50154, CVE-2024-49994,     CVE-2024-50243, CVE-2024-50284, CVE-2024-50207, CVE-2024-53200, CVE-2024-53155, CVE-2024-50179,     CVE-2024-50171, CVE-2024-53167, CVE-2024-49885, CVE-2024-49869, CVE-2024-49934, CVE-2024-53089,     CVE-2024-50196, CVE-2024-53090, CVE-2024-47675, CVE-2024-47690, CVE-2024-56674, CVE-2024-50082,     CVE-2024-47742, CVE-2024-53220, CVE-2024-50172, CVE-2024-50009, CVE-2024-49881, CVE-2024-50249,     CVE-2024-47752, CVE-2024-56707, CVE-2024-53105, CVE-2024-53048, CVE-2024-50148, CVE-2024-50036,     CVE-2024-53141, CVE-2024-50213, CVE-2024-49911, CVE-2024-50285, CVE-2024-56535, CVE-2024-49882,     CVE-2024-50225, CVE-2024-50090, CVE-2024-53063, CVE-2024-56703, CVE-2024-47687, CVE-2024-53079,     CVE-2024-47744, CVE-2024-50020, CVE-2024-53078, CVE-2024-53176, CVE-2024-53183, CVE-2024-50248,     CVE-2024-50283, CVE-2024-49907, CVE-2024-50084, CVE-2024-56541, CVE-2024-49979, CVE-2024-53175,     CVE-2024-49871, CVE-2024-47678, CVE-2024-47720, CVE-2024-53059, CVE-2024-56685, CVE-2024-56702,     CVE-2024-50071, CVE-2024-56534, CVE-2024-56745, CVE-2024-53154, CVE-2024-47736, CVE-2024-49965,     CVE-2024-47701, CVE-2024-50159, CVE-2024-50040, CVE-2024-50274, CVE-2024-49876, CVE-2024-49895,     CVE-2024-50189, CVE-2024-56704, CVE-2024-47681, CVE-2024-53106, CVE-2024-56744, CVE-2024-53197,     CVE-2024-50120, CVE-2024-50204, CVE-2024-50184, CVE-2024-53095, CVE-2024-50101, CVE-2024-53146,     CVE-2024-50256, CVE-2024-53226, CVE-2024-47712, CVE-2024-50137, CVE-2024-53131, CVE-2024-49888,     CVE-2024-50235, CVE-2024-50047, CVE-2024-50224, CVE-2024-50142, CVE-2024-50200, CVE-2024-53085,     CVE-2024-49892, CVE-2024-50263, CVE-2024-53150, CVE-2024-53121, CVE-2024-49977, CVE-2024-50144,     CVE-2024-50127, CVE-2024-53092, CVE-2024-50265, CVE-2024-56691, CVE-2024-53069, CVE-2024-49902,     CVE-2024-47715, CVE-2024-56720, CVE-2024-53127, CVE-2024-53142, CVE-2024-49862, CVE-2024-49918,     CVE-2024-56684, CVE-2024-50208, CVE-2024-53189, CVE-2024-50103, CVE-2024-56756, CVE-2024-50273,     CVE-2024-56536, CVE-2024-53068, CVE-2024-49878, CVE-2024-47705, CVE-2024-53113, CVE-2024-50129,     CVE-2024-49942, CVE-2024-50100, CVE-2024-49930, CVE-2024-50043, CVE-2024-53198, CVE-2024-49861,     CVE-2024-50124, CVE-2024-50209, CVE-2024-53187, CVE-2024-49864, CVE-2024-56689, CVE-2024-50294,     CVE-2024-47706, CVE-2024-50186, CVE-2024-53086, CVE-2024-49954, CVE-2024-56692, CVE-2024-47679,     CVE-2024-53109, CVE-2024-50001, CVE-2024-49983, CVE-2024-56679, CVE-2024-50034, CVE-2024-50276,     CVE-2024-56680, CVE-2024-49988, CVE-2024-53099, CVE-2024-50021, CVE-2024-50022, CVE-2024-50136,     CVE-2024-53193, CVE-2024-50220, CVE-2024-49858, CVE-2024-50229, CVE-2024-50074, CVE-2024-50002,     CVE-2024-53117, CVE-2024-50176, CVE-2024-50075, CVE-2024-50045, CVE-2024-49924, CVE-2024-47686,     CVE-2024-50104, CVE-2024-47714, CVE-2024-50291, CVE-2024-49929, CVE-2024-53215, CVE-2024-50157,     CVE-2024-50147, CVE-2024-49898, CVE-2024-50164, CVE-2024-47711, CVE-2024-53082, CVE-2024-50230,     CVE-2024-50152, CVE-2024-53218, CVE-2024-53199, CVE-2024-50253, CVE-2024-47754, CVE-2024-49910,     CVE-2024-53137, CVE-2024-50128, CVE-2024-50044, CVE-2024-47719, CVE-2024-53188, CVE-2024-53061,     CVE-2024-49944, CVE-2024-50091, CVE-2024-49945, CVE-2024-50119, CVE-2024-50133, CVE-2024-50033,     CVE-2024-53083, CVE-2024-50138, CVE-2024-49872, CVE-2024-50140, CVE-2024-56727, CVE-2024-50003,     CVE-2024-50015, CVE-2024-50303, CVE-2024-50258, CVE-2024-49867, CVE-2024-50116, CVE-2024-47716,     CVE-2024-50132, CVE-2024-50055, CVE-2024-49950, CVE-2024-50203, CVE-2024-47695, CVE-2024-50250,     CVE-2024-50165, CVE-2024-50156, CVE-2024-56700, CVE-2024-49913, CVE-2024-50281, CVE-2024-53045,     CVE-2024-49998, CVE-2024-53180, CVE-2024-50271, CVE-2024-50286, CVE-2024-49887, CVE-2024-53168,     CVE-2024-47676, CVE-2024-47726, CVE-2024-47732, CVE-2024-47704, CVE-2024-49980, CVE-2024-49931,     CVE-2024-53229, CVE-2024-50141, CVE-2024-50282, CVE-2024-50233, CVE-2024-56725, CVE-2024-50239,     CVE-2024-50299, CVE-2024-50218, CVE-2024-53072, CVE-2024-49903, CVE-2024-50163, CVE-2024-53100,     CVE-2024-50146, CVE-2024-49859, CVE-2024-50227, CVE-2024-50188, CVE-2024-56739, CVE-2024-53217,     CVE-2024-53118, CVE-2024-49946, CVE-2024-53212, CVE-2024-49926, CVE-2024-53177, CVE-2024-56741,     CVE-2024-53234, CVE-2024-49932, CVE-2024-50095, CVE-2024-50190, CVE-2024-49995, CVE-2024-49976,     CVE-2024-49906, CVE-2024-49996, CVE-2024-53049, CVE-2024-47751, CVE-2024-56677, CVE-2024-56724,     CVE-2024-47746, CVE-2024-50245, CVE-2024-53236, CVE-2024-53191, CVE-2024-50112, CVE-2024-49937,     CVE-2024-50234, CVE-2024-50067, CVE-2024-53112, CVE-2024-50017, CVE-2024-50008, CVE-2024-50194,     CVE-2024-50076, CVE-2024-47697, CVE-2024-56693, CVE-2024-50280, CVE-2024-50182, CVE-2024-53237,     CVE-2024-50011, CVE-2024-49912, CVE-2024-50217, CVE-2024-56532, CVE-2024-53221, CVE-2024-50206,     CVE-2024-47700, CVE-2024-56537, CVE-2024-49959, CVE-2024-56681, CVE-2024-49936, CVE-2024-49900,     CVE-2024-53077, CVE-2024-56705, CVE-2024-53125, CVE-2024-49968, CVE-2024-49969, CVE-2024-56545,     CVE-2024-50106, CVE-2024-53160, CVE-2024-50013, CVE-2024-49880, CVE-2024-53228, CVE-2024-50177,     CVE-2024-47684, CVE-2024-47739, CVE-2024-50029, CVE-2024-53194, CVE-2024-50237, CVE-2024-50035,     CVE-2024-49941, CVE-2024-49947, CVE-2024-50289, CVE-2024-49949, CVE-2024-50023, CVE-2024-50139,     CVE-2024-49886, CVE-2024-50026, CVE-2024-56748, CVE-2024-53080, CVE-2024-56754, CVE-2024-49999,     CVE-2024-49963, CVE-2024-49855, CVE-2024-50252, CVE-2024-49975, CVE-2024-50107, CVE-2024-56749,     CVE-2024-49928, CVE-2024-49865, CVE-2024-50125, CVE-2024-49899, CVE-2024-47750, CVE-2024-53152,     CVE-2024-50081, CVE-2024-49891, CVE-2024-49927, CVE-2024-49852, CVE-2024-50085, CVE-2024-50185,     CVE-2024-50205, CVE-2024-49896, CVE-2024-50278, CVE-2024-49866, CVE-2024-53190, CVE-2024-50251,     CVE-2024-50269, CVE-2024-49889, CVE-2024-50037, CVE-2024-53144, CVE-2024-53138, CVE-2024-50087,     CVE-2024-56678, CVE-2024-53087, CVE-2024-50180, CVE-2024-49940, CVE-2024-50019, CVE-2024-53149,     CVE-2024-50122, CVE-2024-50038, CVE-2024-53156, CVE-2024-49943, CVE-2024-50113, CVE-2024-47721,     CVE-2024-53076, CVE-2024-50115, CVE-2024-50178, CVE-2024-50268, CVE-2024-50279, CVE-2024-53134,     CVE-2024-50199, CVE-2024-49989, CVE-2024-47671, CVE-2024-49909, CVE-2024-53173, CVE-2024-53053,     CVE-2024-53088, CVE-2024-50078, CVE-2024-50105, CVE-2024-50223, CVE-2024-50126, CVE-2024-47680,     CVE-2024-47724, CVE-2024-53047, CVE-2024-50060, CVE-2024-53056, CVE-2024-49987, CVE-2024-49879,     CVE-2024-53128, CVE-2024-53123, CVE-2024-49981, CVE-2024-50277, CVE-2024-50166, CVE-2024-53067,     CVE-2024-49964, CVE-2024-56728, CVE-2024-49853, CVE-2024-53064, CVE-2024-56531, CVE-2024-53213,     CVE-2024-50246, CVE-2024-50192, CVE-2024-53184, CVE-2024-56697, CVE-2024-47710, CVE-2024-53052,     CVE-2024-47718, CVE-2024-49938, CVE-2024-49893, CVE-2024-53133, CVE-2024-50096, CVE-2024-53129,     CVE-2024-49951, CVE-2024-53181, CVE-2024-50059, CVE-2024-50193, CVE-2024-53120, CVE-2024-50114,     CVE-2024-49962, CVE-2024-49921, CVE-2024-50298, CVE-2024-50255, CVE-2024-53219, CVE-2024-49905,     CVE-2024-50211, CVE-2024-49860, CVE-2024-47727, CVE-2024-50028, CVE-2024-47723, CVE-2024-53081,     CVE-2024-56683, CVE-2024-49897, CVE-2024-50065, CVE-2024-56708, CVE-2024-50151, CVE-2023-52917,     CVE-2024-56538, CVE-2024-47691, CVE-2024-53196, CVE-2024-50150, CVE-2024-50069, CVE-2024-50301,     CVE-2024-50131, CVE-2024-53110, CVE-2024-56701, CVE-2024-53115, CVE-2024-53062, CVE-2024-50058,     CVE-2024-53148, CVE-2024-53147, CVE-2024-50226, CVE-2024-56540, CVE-2024-53124, CVE-2024-50170,     CVE-2024-50266, CVE-2024-50296, CVE-2024-49953, CVE-2024-47692, CVE-2024-49916, CVE-2024-53239,     CVE-2024-50173, CVE-2024-49868, CVE-2024-47677, CVE-2024-49972, CVE-2024-50130, CVE-2024-56698,     CVE-2024-50231, CVE-2024-50272, CVE-2024-53153, CVE-2024-50158, CVE-2024-53046, CVE-2024-49908,     CVE-2024-47709, CVE-2024-53058, CVE-2024-50006, CVE-2024-49948, CVE-2024-47685, CVE-2024-47693,     CVE-2024-50260, CVE-2024-50079, CVE-2024-50149, CVE-2024-53151, CVE-2024-47757, CVE-2024-49917,     CVE-2024-50288, CVE-2024-50117, CVE-2024-50039, CVE-2024-56690, CVE-2024-50293, CVE-2024-50145,     CVE-2024-53166, CVE-2024-47713, CVE-2024-53158, CVE-2024-50068, CVE-2024-53074, CVE-2024-49914,     CVE-2024-49870, CVE-2024-50031, CVE-2024-47735, CVE-2024-50007, CVE-2024-49915, CVE-2024-47699,     CVE-2024-50244, CVE-2024-50216, CVE-2024-53114, CVE-2024-53043, CVE-2024-47688, CVE-2024-47734,     CVE-2024-53230, CVE-2024-53122, CVE-2024-50123, CVE-2024-53116, CVE-2024-56726, CVE-2024-56747,     CVE-2024-56548, CVE-2024-50174, CVE-2024-53042, CVE-2024-53135, CVE-2024-50080, CVE-2024-49997,     CVE-2024-49974, CVE-2024-53145, CVE-2024-53075, CVE-2024-47730, CVE-2024-50304, CVE-2024-50161,     CVE-2024-49883, CVE-2024-53111, CVE-2024-53233, CVE-2024-47698, CVE-2024-50012, CVE-2024-50240,     CVE-2024-53163, CVE-2024-53071, CVE-2024-50168, CVE-2024-47740, CVE-2024-50275, CVE-2024-49961,     CVE-2024-50183, CVE-2024-53203, CVE-2024-47738, CVE-2024-49856, CVE-2024-50014, CVE-2024-50191,     CVE-2024-46869, CVE-2024-56721, CVE-2024-50056, CVE-2024-53210, CVE-2024-49978, CVE-2024-53161,     CVE-2024-50155, CVE-2024-50270, CVE-2024-50169, CVE-2024-49952, CVE-2024-50236, CVE-2024-49863,     CVE-2024-49857, CVE-2024-53140, CVE-2024-53107, CVE-2024-50247, CVE-2024-53084, CVE-2024-50077,     CVE-2024-50121, CVE-2024-53091, CVE-2024-49925, CVE-2024-47745, CVE-2024-50086, CVE-2024-53101,     CVE-2024-56729, CVE-2024-56751, CVE-2024-50016, CVE-2024-49901, CVE-2024-47694, CVE-2024-53098,     CVE-2024-53232, CVE-2024-50108, CVE-2024-50197, CVE-2024-50242, CVE-2024-50222, CVE-2024-53132,     CVE-2024-50212, CVE-2024-49933, CVE-2024-53169, CVE-2024-49957, CVE-2024-56533, CVE-2024-47708,     CVE-2024-50267, CVE-2024-56723, CVE-2024-50110, CVE-2024-50064, CVE-2024-56722, CVE-2024-53130,     CVE-2024-53208, CVE-2024-50102, CVE-2024-50153, CVE-2024-49939, CVE-2024-53094, CVE-2024-50262,     CVE-2024-49850, CVE-2024-53195, CVE-2024-53170, CVE-2024-50093, CVE-2024-53223, CVE-2024-53093,     CVE-2024-56699, CVE-2024-50070, CVE-2024-49992, CVE-2024-50111, CVE-2024-47728, CVE-2024-53202,     CVE-2024-47741, CVE-2024-49920, CVE-2024-56694, CVE-2024-53126, CVE-2024-49851, CVE-2024-50099,     CVE-2024-50302, CVE-2024-50214, CVE-2024-49973, CVE-2024-50024, CVE-2024-50162, CVE-2024-53214,     CVE-2024-50073, CVE-2024-50061, CVE-2024-56549, CVE-2024-56688, CVE-2024-49960, CVE-2024-56543,     CVE-2024-53178, CVE-2024-50027, CVE-2024-50295, CVE-2024-53104, CVE-2024-53065, CVE-2024-47747,     CVE-2024-49991, CVE-2024-50202, CVE-2024-49935, CVE-2024-50062, CVE-2024-50094, CVE-2024-56544,     CVE-2024-50010, CVE-2024-49971, CVE-2024-50083, CVE-2024-56687, CVE-2024-47753, CVE-2024-50297,     CVE-2024-47733, CVE-2024-50135, CVE-2024-50066, CVE-2024-50118, CVE-2024-56746, CVE-2024-47682,     CVE-2024-53165, CVE-2024-50025, CVE-2024-49875, CVE-2024-47717, CVE-2024-49894, CVE-2024-50198,     CVE-2024-50167, CVE-2024-49958, CVE-2024-49966, CVE-2024-50254, CVE-2024-49904, CVE-2024-50041,     CVE-2024-50005, CVE-2024-53066, CVE-2024-50000, CVE-2024-50215, CVE-2024-47748, CVE-2024-56742,     CVE-2024-50259, CVE-2024-50092, CVE-2024-47737, CVE-2024-53238, CVE-2024-50300, CVE-2024-53192,     CVE-2024-47696, CVE-2024-50134, CVE-2024-50201, CVE-2024-50181, CVE-2024-49873, CVE-2024-50187,     CVE-2024-53171, CVE-2024-50160, CVE-2024-49923, CVE-2024-50063, CVE-2024-53174, CVE-2024-50143,     CVE-2024-49982, CVE-2024-56546, CVE-2024-50109, CVE-2024-53119, CVE-2024-47707, CVE-2024-56696,     CVE-2024-53108, CVE-2024-47731, CVE-2024-50261, CVE-2024-50042, CVE-2024-49884, CVE-2024-53162,     CVE-2024-56755, CVE-2024-49919, CVE-2024-53216, CVE-2024-50287, CVE-2024-53143, CVE-2024-50257,     CVE-2024-49890, CVE-2024-53172, CVE-2024-53209, CVE-2024-49956, CVE-2024-50238, CVE-2024-49955,     CVE-2024-50046, CVE-2024-50098, CVE-2024-50232, CVE-2024-50292, CVE-2024-56752, CVE-2024-50195,     CVE-2024-47743, CVE-2024-53044, CVE-2024-50049, CVE-2024-49986, CVE-2024-53055, CVE-2024-56539,     CVE-2024-50048, CVE-2024-49985, CVE-2024-53227, CVE-2024-49970, CVE-2024-47702, CVE-2024-49874,     CVE-2024-47703, CVE-2024-53139, CVE-2024-50072, CVE-2024-53224, CVE-2024-49877, CVE-2024-49922,     CVE-2024-50290, CVE-2024-47756, CVE-2024-50221, CVE-2024-50057, CVE-2022-49034, CVE-2024-53157,     CVE-2024-47749, CVE-2024-53231)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7276-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - RAM backed block device driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bluetooth drivers;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - Buffer Sharing and Synchronization framework;

    - EDAC drivers;

    - FireWire subsystem;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Powercap sysfs driver;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Virtio drivers;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - UBI file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Bluetooth subsystem;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Static call mechanism;

    - Task handling mechanism;

    - Timer substystem drivers;

    - Maple Tree data structure library;

    - Memory management;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - L2TP protocol;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - AppArmor security module;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - ALSA framework;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - HD-audio driver;

    - SoC Audio for Freescale CPUs drivers;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-53192, CVE-2024-53130, CVE-2024-53234, CVE-2024-49986, CVE-2024-49948,     CVE-2024-49976, CVE-2024-53158, CVE-2024-50142, CVE-2024-53160, CVE-2024-50124, CVE-2024-50055,     CVE-2024-56744, CVE-2024-53128, CVE-2024-50204, CVE-2024-50176, CVE-2024-50294, CVE-2024-50166,     CVE-2024-49906, CVE-2024-50074, CVE-2024-47734, CVE-2024-50249, CVE-2024-53216, CVE-2024-53162,     CVE-2024-50189, CVE-2024-53196, CVE-2024-49969, CVE-2024-53210, CVE-2024-50300, CVE-2024-47714,     CVE-2024-50158, CVE-2024-49983, CVE-2024-49959, CVE-2024-49985, CVE-2024-53078, CVE-2024-53180,     CVE-2024-50099, CVE-2024-50009, CVE-2024-53059, CVE-2024-49962, CVE-2024-56755, CVE-2024-50106,     CVE-2024-53184, CVE-2024-53063, CVE-2024-50161, CVE-2024-50289, CVE-2024-56705, CVE-2024-56697,     CVE-2024-53135, CVE-2024-47676, CVE-2024-53084, CVE-2024-50270, CVE-2024-50078, CVE-2024-50247,     CVE-2024-50075, CVE-2024-49946, CVE-2024-50209, CVE-2024-53048, CVE-2024-53071, CVE-2024-49930,     CVE-2024-50174, CVE-2024-50039, CVE-2024-50115, CVE-2024-56680, CVE-2024-49901, CVE-2024-49971,     CVE-2024-50180, CVE-2024-50061, CVE-2024-47681, CVE-2024-50107, CVE-2024-49972, CVE-2024-49889,     CVE-2024-49872, CVE-2024-50067, CVE-2024-47718, CVE-2024-50246, CVE-2024-53090, CVE-2024-49961,     CVE-2024-56549, CVE-2024-47688, CVE-2024-50073, CVE-2024-47716, CVE-2024-49952, CVE-2024-56749,     CVE-2024-47737, CVE-2024-56739, CVE-2024-56752, CVE-2024-47700, CVE-2024-56741, CVE-2024-50196,     CVE-2024-49881, CVE-2024-50230, CVE-2024-50020, CVE-2024-49992, CVE-2024-56534, CVE-2024-49883,     CVE-2024-50233, CVE-2024-50057, CVE-2024-53091, CVE-2024-49886, CVE-2024-53144, CVE-2024-50029,     CVE-2024-50240, CVE-2024-56720, CVE-2024-50282, CVE-2024-50036, CVE-2024-53126, CVE-2024-56702,     CVE-2024-50101, CVE-2024-56696, CVE-2024-50193, CVE-2024-53089, CVE-2024-50263, CVE-2024-47707,     CVE-2024-49925, CVE-2024-50178, CVE-2024-47690, CVE-2024-53119, CVE-2024-49939, CVE-2024-50274,     CVE-2024-50168, CVE-2024-49963, CVE-2024-50220, CVE-2024-50250, CVE-2024-49966, CVE-2024-50104,     CVE-2024-49968, CVE-2024-47685, CVE-2024-50281, CVE-2024-50190, CVE-2024-50181, CVE-2024-50304,     CVE-2022-49034, CVE-2024-47726, CVE-2024-50159, CVE-2024-49851, CVE-2024-49933, CVE-2024-50277,     CVE-2024-56729, CVE-2024-49885, CVE-2024-53068, CVE-2024-50162, CVE-2024-50179, CVE-2024-53072,     CVE-2024-47742, CVE-2024-53083, CVE-2024-50025, CVE-2023-52917, CVE-2024-50269, CVE-2024-50302,     CVE-2024-50293, CVE-2024-50177, CVE-2024-53075, CVE-2024-50257, CVE-2024-49995, CVE-2024-53076,     CVE-2024-49940, CVE-2024-50114, CVE-2024-50043, CVE-2024-47713, CVE-2024-53081, CVE-2024-50151,     CVE-2024-50211, CVE-2024-53047, CVE-2024-50016, CVE-2024-56679, CVE-2024-56689, CVE-2024-50008,     CVE-2024-47723, CVE-2024-50285, CVE-2024-49899, CVE-2024-50098, CVE-2024-50000, CVE-2024-53098,     CVE-2024-53175, CVE-2024-49888, CVE-2024-50132, CVE-2024-49964, CVE-2024-53042, CVE-2024-50295,     CVE-2024-50038, CVE-2024-49905, CVE-2024-50012, CVE-2024-47754, CVE-2024-50017, CVE-2024-53095,     CVE-2024-49978, CVE-2024-56541, CVE-2024-49891, CVE-2024-50033, CVE-2024-50292, CVE-2024-50037,     CVE-2024-53145, CVE-2024-56747, CVE-2024-50260, CVE-2024-53177, CVE-2024-53229, CVE-2024-53221,     CVE-2024-56677, CVE-2024-53171, CVE-2024-50299, CVE-2024-50202, CVE-2024-53208, CVE-2024-53105,     CVE-2024-50006, CVE-2024-50149, CVE-2024-50275, CVE-2024-47753, CVE-2024-50212, CVE-2024-49855,     CVE-2024-50145, CVE-2024-53120, CVE-2024-53061, CVE-2024-53217, CVE-2024-53198, CVE-2024-50165,     CVE-2024-49866, CVE-2024-49994, CVE-2024-50109, CVE-2024-50137, CVE-2024-50245, CVE-2024-53154,     CVE-2024-56724, CVE-2024-53187, CVE-2024-53202, CVE-2024-49927, CVE-2024-50163, CVE-2024-50152,     CVE-2024-53220, CVE-2024-47741, CVE-2024-50102, CVE-2024-53188, CVE-2024-53116, CVE-2024-47695,     CVE-2024-47702, CVE-2024-49970, CVE-2024-50155, CVE-2024-53058, CVE-2024-49908, CVE-2024-50256,     CVE-2024-53161, CVE-2024-49893, CVE-2024-53074, CVE-2024-50144, CVE-2024-53219, CVE-2024-49869,     CVE-2024-53133, CVE-2024-50041, CVE-2024-49974, CVE-2024-50287, CVE-2024-50133, CVE-2024-53183,     CVE-2024-49997, CVE-2024-47749, CVE-2024-53153, CVE-2024-50063, CVE-2024-49852, CVE-2024-50259,     CVE-2024-50013, CVE-2024-56751, CVE-2024-53236, CVE-2024-49999, CVE-2024-50076, CVE-2024-49923,     CVE-2024-50288, CVE-2024-49867, CVE-2024-49887, CVE-2024-53101, CVE-2024-56725, CVE-2024-56745,     CVE-2024-49863, CVE-2024-49890, CVE-2024-50187, CVE-2024-50200, CVE-2024-47679, CVE-2024-50077,     CVE-2024-50069, CVE-2024-53114, CVE-2024-50071, CVE-2024-50072, CVE-2024-47705, CVE-2024-50205,     CVE-2024-49975, CVE-2024-50237, CVE-2024-53092, CVE-2024-49917, CVE-2024-49853, CVE-2024-50103,     CVE-2024-53190, CVE-2024-53215, CVE-2024-50280, CVE-2024-50014, CVE-2024-47756, CVE-2024-53231,     CVE-2024-49856, CVE-2024-50023, CVE-2024-53123, CVE-2024-56756, CVE-2024-50140, CVE-2024-56699,     CVE-2024-47703, CVE-2024-49958, CVE-2024-56692, CVE-2024-50082, CVE-2024-53181, CVE-2024-47699,     CVE-2024-50154, CVE-2024-49960, CVE-2024-53226, CVE-2024-56683, CVE-2024-53239, CVE-2024-53104,     CVE-2024-50044, CVE-2024-50255, CVE-2024-50021, CVE-2024-50070, CVE-2024-47740, CVE-2024-49882,     CVE-2024-50232, CVE-2024-47708, CVE-2024-47747, CVE-2024-49929, CVE-2024-56693, CVE-2024-53124,     CVE-2024-50223, CVE-2024-50265, CVE-2024-53172, CVE-2024-50197, CVE-2024-49915, CVE-2024-53224,     CVE-2024-47684, CVE-2024-50217, CVE-2024-50286, CVE-2024-47677, CVE-2024-49942, CVE-2024-50026,     CVE-2024-50236, CVE-2024-50086, CVE-2024-50153, CVE-2024-47675, CVE-2024-53112, CVE-2024-50138,     CVE-2024-53045, CVE-2024-53170, CVE-2024-50095, CVE-2024-50188, CVE-2024-50173, CVE-2024-50019,     CVE-2024-50117, CVE-2024-47746, CVE-2024-50172, CVE-2024-53166, CVE-2024-56721, CVE-2024-50266,     CVE-2024-47696, CVE-2024-47719, CVE-2024-49892, CVE-2024-56678, CVE-2024-47680, CVE-2024-50296,     CVE-2024-53152, CVE-2024-56536, CVE-2024-50042, CVE-2024-49894, CVE-2024-49897, CVE-2024-47671,     CVE-2024-53064, CVE-2024-53077, CVE-2024-49903, CVE-2024-53169, CVE-2024-50011, CVE-2024-47710,     CVE-2024-53046, CVE-2024-50046, CVE-2024-53131, CVE-2024-53237, CVE-2024-56707, CVE-2024-49950,     CVE-2024-53079, CVE-2024-56694, CVE-2024-53106, CVE-2024-49900, CVE-2024-47745, CVE-2024-50301,     CVE-2024-50040, CVE-2024-50183, CVE-2024-56532, CVE-2024-56698, CVE-2024-53139, CVE-2024-47721,     CVE-2024-50062, CVE-2024-50129, CVE-2024-50027, CVE-2024-49941, CVE-2024-53199, CVE-2024-50185,     CVE-2024-49858, CVE-2024-50024, CVE-2024-50146, CVE-2024-50088, CVE-2024-53111, CVE-2024-50244,     CVE-2024-47697, CVE-2024-53108, CVE-2024-49896, CVE-2024-49859, CVE-2024-56748, CVE-2024-50111,     CVE-2024-53056, CVE-2024-50283, CVE-2024-49955, CVE-2024-47706, CVE-2024-53214, CVE-2024-47712,     CVE-2024-47678, CVE-2024-53125, CVE-2024-53178, CVE-2024-53232, CVE-2024-49928, CVE-2024-47731,     CVE-2024-53121, CVE-2024-56540, CVE-2024-50271, CVE-2024-53044, CVE-2024-53132, CVE-2024-53052,     CVE-2024-50195, CVE-2024-50191, CVE-2024-47694, CVE-2024-49973, CVE-2024-49910, CVE-2024-56746,     CVE-2024-56674, CVE-2024-49871, CVE-2024-50258, CVE-2024-50049, CVE-2024-49951, CVE-2024-50182,     CVE-2024-53174, CVE-2024-50143, CVE-2024-53203, CVE-2024-53129, CVE-2024-50224, CVE-2024-49943,     CVE-2024-50131, CVE-2024-50221, CVE-2024-53143, CVE-2024-56531, CVE-2024-53055, CVE-2024-50135,     CVE-2024-50279, CVE-2024-50120, CVE-2024-53140, CVE-2024-50272, CVE-2024-47728, CVE-2024-53167,     CVE-2024-56691, CVE-2024-53223, CVE-2024-49919, CVE-2024-53082, CVE-2024-53213, CVE-2024-50298,     CVE-2024-56681, CVE-2024-53069, CVE-2024-50001, CVE-2024-50083, CVE-2024-50056, CVE-2024-56544,     CVE-2024-49989, CVE-2024-50251, CVE-2024-50121, CVE-2024-53228, CVE-2024-56700, CVE-2024-49862,     CVE-2024-49870, CVE-2024-50148, CVE-2024-53138, CVE-2024-50160, CVE-2024-50002, CVE-2024-56533,     CVE-2024-46869, CVE-2024-50118, CVE-2024-50276, CVE-2024-50226, CVE-2024-53146, CVE-2024-53134,     CVE-2024-53165, CVE-2024-56728, CVE-2024-49931, CVE-2024-50261, CVE-2024-50064, CVE-2024-47711,     CVE-2024-53157, CVE-2024-53113, CVE-2024-49898, CVE-2024-50214, CVE-2024-53085, CVE-2024-49924,     CVE-2024-49944, CVE-2024-47686, CVE-2024-53238, CVE-2024-56754, CVE-2024-50066, CVE-2024-53189,     CVE-2024-49864, CVE-2024-50093, CVE-2024-50060, CVE-2024-56684, CVE-2024-49861, CVE-2024-50243,     CVE-2024-50007, CVE-2024-50227, CVE-2024-50238, CVE-2024-49918, CVE-2024-53227, CVE-2024-50119,     CVE-2024-53088, CVE-2024-53100, CVE-2024-47693, CVE-2024-53197, CVE-2024-49932, CVE-2024-53163,     CVE-2024-53118, CVE-2024-47733, CVE-2024-49913, CVE-2024-56545, CVE-2024-47739, CVE-2024-47709,     CVE-2024-50015, CVE-2024-56690, CVE-2024-56535, CVE-2024-50167, CVE-2024-49965, CVE-2024-53043,     CVE-2024-50092, CVE-2024-50128, CVE-2024-53080, CVE-2024-56539, CVE-2024-50222, CVE-2024-47724,     CVE-2024-49980, CVE-2024-49860, CVE-2024-50034, CVE-2024-47682, CVE-2024-49949, CVE-2024-49935,     CVE-2024-49914, CVE-2024-47732, CVE-2024-47701, CVE-2024-53200, CVE-2024-50123, CVE-2024-50100,     CVE-2024-56704, CVE-2024-53115, CVE-2024-49879, CVE-2024-50096, CVE-2024-53062, CVE-2024-50094,     CVE-2024-50105, CVE-2024-49947, CVE-2024-50252, CVE-2024-56537, CVE-2024-49953, CVE-2024-53067,     CVE-2024-50091, CVE-2024-53148, CVE-2024-50164, CVE-2024-50231, CVE-2024-49874, CVE-2024-47750,     CVE-2024-50206, CVE-2024-50207, CVE-2024-56742, CVE-2024-50005, CVE-2024-56687, CVE-2024-50157,     CVE-2024-50201, CVE-2024-49921, CVE-2024-56727, CVE-2024-50136, CVE-2024-50126, CVE-2024-50239,     CVE-2024-50268, CVE-2024-50234, CVE-2024-50085, CVE-2024-47736, CVE-2024-49911, CVE-2024-50198,     CVE-2024-47704, CVE-2024-53233, CVE-2024-49981, CVE-2024-53053, CVE-2024-50139, CVE-2024-49895,     CVE-2024-56688, CVE-2024-50031, CVE-2024-49916, CVE-2024-53155, CVE-2024-50035, CVE-2024-53230,     CVE-2024-47738, CVE-2024-53099, CVE-2024-53212, CVE-2024-47743, CVE-2024-56701, CVE-2024-53151,     CVE-2024-49934, CVE-2024-53141, CVE-2024-50059, CVE-2024-49922, CVE-2024-50215, CVE-2024-50022,     CVE-2024-50229, CVE-2024-50184, CVE-2024-50065, CVE-2024-50242, CVE-2024-50003, CVE-2024-47715,     CVE-2024-53093, CVE-2024-49956, CVE-2024-49868, CVE-2024-49878, CVE-2024-56722, CVE-2024-53156,     CVE-2024-49857, CVE-2024-53110, CVE-2024-47735, CVE-2024-53168, CVE-2024-56543, CVE-2024-50080,     CVE-2024-50068, CVE-2024-49909, CVE-2024-56708, CVE-2024-50134, CVE-2024-50262, CVE-2024-50303,     CVE-2024-50203, CVE-2024-49957, CVE-2024-50087, CVE-2024-53065, CVE-2024-49920, CVE-2024-49880,     CVE-2024-50110, CVE-2024-49877, CVE-2024-47692, CVE-2024-50127, CVE-2024-49907, CVE-2024-49937,     CVE-2024-49987, CVE-2024-50141, CVE-2024-56538, CVE-2024-49865, CVE-2024-47689, CVE-2024-50218,     CVE-2024-47720, CVE-2024-53191, CVE-2024-53194, CVE-2024-50216, CVE-2024-50213, CVE-2024-49988,     CVE-2024-53094, CVE-2024-50186, CVE-2024-50010, CVE-2024-50169, CVE-2024-53107, CVE-2024-47698,     CVE-2024-53142, CVE-2024-49945, CVE-2024-49873, CVE-2024-53176, CVE-2024-49884, CVE-2024-50112,     CVE-2024-50199, CVE-2024-53122, CVE-2024-50284, CVE-2024-50208, CVE-2024-53218, CVE-2024-50045,     CVE-2024-50028, CVE-2024-50122, CVE-2024-50291, CVE-2024-50047, CVE-2024-50090, CVE-2024-49876,     CVE-2024-47730, CVE-2024-53195, CVE-2024-56703, CVE-2024-49996, CVE-2024-49954, CVE-2024-47757,     CVE-2024-47717, CVE-2024-49850, CVE-2024-50273, CVE-2024-47752, CVE-2024-53149, CVE-2024-53173,     CVE-2024-50235, CVE-2024-50150, CVE-2024-50030, CVE-2024-50079, CVE-2024-56546, CVE-2024-53086,     CVE-2024-53150, CVE-2024-49979, CVE-2024-50058, CVE-2024-50171, CVE-2024-56685, CVE-2024-50254,     CVE-2024-47751, CVE-2024-53193, CVE-2024-53209, CVE-2024-49926, CVE-2024-47748, CVE-2024-53109,     CVE-2024-53066, CVE-2024-50225, CVE-2024-53137, CVE-2024-50113, CVE-2024-49912, CVE-2024-49998,     CVE-2024-50116, CVE-2024-49977, CVE-2024-47687, CVE-2024-50084, CVE-2024-49982, CVE-2024-50253,     CVE-2024-50290, CVE-2024-47727, CVE-2024-50248, CVE-2024-50170, CVE-2024-47691, CVE-2024-53147,     CVE-2024-50192, CVE-2024-53117, CVE-2024-49938, CVE-2024-47744, CVE-2024-50147, CVE-2024-49991,     CVE-2024-50048, CVE-2024-53127, CVE-2024-49902, CVE-2024-50156, CVE-2024-53087, CVE-2024-56548,     CVE-2024-50125, CVE-2024-56723, CVE-2024-50108, CVE-2024-53049, CVE-2024-50081, CVE-2024-56726,     CVE-2024-49875, CVE-2024-50194, CVE-2024-50278, CVE-2024-49904, CVE-2024-50267, CVE-2024-50297,     CVE-2024-50130, CVE-2024-49936)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7386-1 advisory.

    Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper     access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly     execute arbitrary code. (CVE-2024-8805)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - TPM device driver;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - DAX dirext access to differentiated memory framework;

    - ARM SCMI message protocol;

    - EFI core;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Media drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Powercap sysfs driver;

    - Remote Processor subsystem;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - Direct Digital Synthesis drivers;

    - Thermal drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - TI TPS6598x USB Power Delivery controller driver;

    - vDPA drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - SMB network file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - User-space API (UAPI);

    - io_uring subsystem;

    - Perf events;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Static call mechanism;

    - Timer subsystem;

    - Tracing infrastructure;

    - Maple Tree data structure library;

    - Memory management;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - Wireless networking;

    - eXpress Data Path;

    - AudioScience HPI driver;

    - KVM core; (CVE-2024-49952, CVE-2024-49920, CVE-2024-49945, CVE-2024-50180, CVE-2024-49944,     CVE-2024-49987, CVE-2024-50148, CVE-2024-49959, CVE-2024-50063, CVE-2024-50083, CVE-2024-49878,     CVE-2024-49870, CVE-2024-49863, CVE-2024-49921, CVE-2024-49992, CVE-2024-47691, CVE-2024-49913,     CVE-2024-47712, CVE-2024-49948, CVE-2024-49976, CVE-2024-50085, CVE-2024-49891, CVE-2024-56614,     CVE-2024-47713, CVE-2024-47703, CVE-2024-50191, CVE-2024-50087, CVE-2024-49958, CVE-2024-49868,     CVE-2024-49922, CVE-2024-49960, CVE-2024-50019, CVE-2024-47749, CVE-2024-49996, CVE-2024-47677,     CVE-2024-50065, CVE-2024-47744, CVE-2024-49968, CVE-2024-49985, CVE-2024-47752, CVE-2024-50017,     CVE-2024-50183, CVE-2024-47709, CVE-2024-49938, CVE-2024-49876, CVE-2024-49893, CVE-2024-50134,     CVE-2024-49972, CVE-2024-49934, CVE-2024-50015, CVE-2024-49856, CVE-2024-49853, CVE-2024-47711,     CVE-2024-49949, CVE-2024-50026, CVE-2024-47681, CVE-2024-50000, CVE-2024-50189, CVE-2024-47716,     CVE-2024-47723, CVE-2024-50044, CVE-2024-50179, CVE-2024-49871, CVE-2024-50008, CVE-2024-49955,     CVE-2024-50007, CVE-2024-47695, CVE-2024-49889, CVE-2024-49954, CVE-2024-49894, CVE-2024-50014,     CVE-2024-47731, CVE-2024-50055, CVE-2024-50098, CVE-2024-49930, CVE-2024-47684, CVE-2024-47705,     CVE-2024-50029, CVE-2024-49901, CVE-2024-47689, CVE-2024-50022, CVE-2024-50009, CVE-2024-49937,     CVE-2024-50197, CVE-2024-49911, CVE-2024-50076, CVE-2024-50002, CVE-2024-50077, CVE-2024-47679,     CVE-2024-50025, CVE-2024-50069, CVE-2024-50101, CVE-2024-49942, CVE-2024-49986, CVE-2024-50012,     CVE-2024-49858, CVE-2024-49884, CVE-2024-50201, CVE-2024-47701, CVE-2024-49994, CVE-2024-49897,     CVE-2024-47687, CVE-2024-47751, CVE-2024-50001, CVE-2024-50117, CVE-2024-49909, CVE-2024-50086,     CVE-2024-50064, CVE-2024-50088, CVE-2024-50005, CVE-2024-50184, CVE-2024-49882, CVE-2024-49936,     CVE-2024-49933, CVE-2024-49995, CVE-2024-47704, CVE-2024-50066, CVE-2024-49898, CVE-2024-50068,     CVE-2024-50192, CVE-2024-53104, CVE-2024-49860, CVE-2024-47741, CVE-2024-50039, CVE-2024-47699,     CVE-2024-49861, CVE-2024-49969, CVE-2024-49950, CVE-2024-50194, CVE-2024-49929, CVE-2024-50006,     CVE-2024-49997, CVE-2024-49983, CVE-2024-47710, CVE-2024-50200, CVE-2024-47692, CVE-2024-47748,     CVE-2024-49855, CVE-2024-50182, CVE-2024-47706, CVE-2024-50188, CVE-2024-47732, CVE-2024-47707,     CVE-2024-50048, CVE-2024-50058, CVE-2024-49912, CVE-2024-49966, CVE-2024-49852, CVE-2024-47753,     CVE-2024-50202, CVE-2024-50062, CVE-2024-50056, CVE-2024-49946, CVE-2024-49902, CVE-2024-50033,     CVE-2024-47750, CVE-2024-50021, CVE-2024-49939, CVE-2024-50072, CVE-2024-49851, CVE-2024-49928,     CVE-2024-50061, CVE-2024-49885, CVE-2024-50047, CVE-2024-47672, CVE-2024-47734, CVE-2024-47714,     CVE-2024-49886, CVE-2024-47730, CVE-2024-47697, CVE-2024-49973, CVE-2024-47718, CVE-2024-49862,     CVE-2024-49963, CVE-2024-49881, CVE-2024-53165, CVE-2024-49998, CVE-2024-47757, CVE-2024-49982,     CVE-2024-50186, CVE-2024-50016, CVE-2024-47675, CVE-2024-50090, CVE-2024-49917, CVE-2024-50031,     CVE-2024-50093, CVE-2024-49859, CVE-2024-49890, CVE-2024-47670, CVE-2024-49919, CVE-2024-53156,     CVE-2024-49924, CVE-2024-50078, CVE-2024-49864, CVE-2024-49962, CVE-2024-47720, CVE-2024-49874,     CVE-2024-41016, CVE-2024-49991, CVE-2024-47726, CVE-2024-50171, CVE-2024-47682, CVE-2024-49865,     CVE-2024-49988, CVE-2024-49903, CVE-2024-50035, CVE-2024-50229, CVE-2024-50075, CVE-2024-50195,     CVE-2024-49947, CVE-2024-49900, CVE-2024-50040, CVE-2024-50176, CVE-2024-47686, CVE-2024-49978,     CVE-2024-49923, CVE-2024-50199, CVE-2024-49999, CVE-2024-50070, CVE-2024-49953, CVE-2024-47733,     CVE-2024-49888, CVE-2024-49977, CVE-2024-50080, CVE-2024-49905, CVE-2024-47737, CVE-2024-49961,     CVE-2024-50030, CVE-2024-49951, CVE-2024-49892, CVE-2024-50096, CVE-2024-47735, CVE-2024-47673,     CVE-2024-56663, CVE-2024-49981, CVE-2024-50049, CVE-2024-50193, CVE-2024-49957, CVE-2024-47742,     CVE-2024-49880, CVE-2024-49965, CVE-2024-49927, CVE-2024-47690, CVE-2024-50057, CVE-2024-50073,     CVE-2024-49931, CVE-2024-49875, CVE-2024-50041, CVE-2024-47700, CVE-2024-47719, CVE-2024-56582,     CVE-2024-47738, CVE-2024-47754, CVE-2024-49850, CVE-2024-47678, CVE-2024-49935, CVE-2024-47739,     CVE-2024-50028, CVE-2024-47727, CVE-2024-47728, CVE-2024-50084, CVE-2024-50095, CVE-2024-50175,     CVE-2024-50198, CVE-2024-47702, CVE-2024-50187, CVE-2024-50032, CVE-2024-50074, CVE-2024-50020,     CVE-2024-53144, CVE-2024-50233, CVE-2024-47698, CVE-2024-49879, CVE-2024-49896, CVE-2024-47747,     CVE-2024-49877, CVE-2024-50046, CVE-2024-49866, CVE-2024-47740, CVE-2024-50042, CVE-2024-50060,     CVE-2024-49925, CVE-2024-50013, CVE-2024-49867, CVE-2024-47685, CVE-2024-47743, CVE-2024-49883,     CVE-2024-53170, CVE-2024-50038, CVE-2024-47756, CVE-2024-47696, CVE-2024-49980, CVE-2024-50185,     CVE-2024-47693, CVE-2024-49915, CVE-2024-49914, CVE-2024-49907, CVE-2024-49989, CVE-2024-50196,     CVE-2024-50027, CVE-2024-47745, CVE-2024-50045, CVE-2024-50024, CVE-2024-49918, CVE-2024-49975,     CVE-2024-49974, CVE-2024-50082, CVE-2024-49895, CVE-2024-47671, CVE-2024-50059, CVE-2024-50099,     CVE-2024-50023, CVE-2024-47688, CVE-2024-49926, CVE-2024-50036)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4140-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-47589: igbvf: fix double free in `igbvf_probe` (bsc#1226557).
    - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
    - CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
    - CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
    - CVE-2022-48967: NFC: nci: Bounds check struct nfc_target arrays (bsc#1232304).
    - CVE-2022-48988: memcg: Fix possible use-after-free in memcg_write_event_control() (bsc#1232069).
    - CVE-2022-48991: khugepaged: retract_page_tables() remember to test exit (bsc#1232070 prerequisity).
    - CVE-2022-49003: nvme: fix SRCU protection of nvme_ns_head list (bsc#1232136).
    - CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1231890).
    - CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
    - CVE-2022-49023: wifi: cfg80211: fix buffer overflow in elem comparison (bsc#1231961).
    - CVE-2022-49025: net/mlx5e: Fix use-after-free when reverting termination table (bsc#1231960).
    - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
    - CVE-2024-45026: s390/dasd: fix error recovery leading to data corruption on ESE devices (bsc#1230454).
    - CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
    - CVE-2024-46814: drm/amd/display: Check msg_id before processing transcation (bsc#1231193).
    - CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links     (bsc#1231197).
    - CVE-2024-46817: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6     (bsc#1231200).
    - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231203).
    - CVE-2024-46849: ASoC: meson: axg-card: fix 'use-after-free' (bsc#1231073).
    - CVE-2024-47668: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (bsc#1231502).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
    - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
    - CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition     (bsc#1232145).
    - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231861).
    - CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).
    - CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).
    - CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).
    - CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).
    - CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).
    - CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-6966 advisory.

    - net: stmmac: dwmac-tegra: Read iommu stream id from device tree (Izabela Bakollari) [RHEL-75649]     {CVE-2025-21663}
    - net: stmmac: Fix zero-division error when disabling tc cbs (Izabela Bakollari) [RHEL-63931]     {CVE-2024-49977}
    - scsi: qla2xxx: Fix use after free on unload (Ewan D. Milne) [RHEL-75828] {CVE-2024-56623}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4131-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345)
    - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
    - CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
    - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233117).
    - CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
    - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
    - CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
    - CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
    - CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
    - CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
    - CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
    - CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
    - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
    - CVE-2024-45026: s390/dasd: fix error recovery leading to data corruption on ESE devices (bsc#1230454).
    - CVE-2024-46716: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor     (bsc#1230715).
    - CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
    - CVE-2024-46814: drm/amd/display: Check msg_id before processing transcation (bsc#1231193).
    - CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231195).
    - CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links     (bsc#1231197).
    - CVE-2024-46817: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6     (bsc#1231200).
    - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231203).
    - CVE-2024-46849: ASoC: meson: axg-card: fix 'use-after-free' (bsc#1231073).
    - CVE-2024-47668: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (bsc#1231502).
    - CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
    - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).
    - CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
    - CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition     (bsc#1232145).
    - CVE-2024-47748: vhost_vdpa: assign irq bypass producer token correctly (bsc#1232174).
    - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231861).
    - CVE-2024-49930: wifi: ath11k: fix array out-of-bound access in SoC stats (bsc#1232260).
    - CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).
    - CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).
    - CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).
    - CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).
    - CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).
    - CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).
    - CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
234911	Ubuntu 24.04 LTS : Linux kernel (Azure, N-Series) vulnerabilities (USN-7468-1)	Nessus	Ubuntu Local Security Checks	2025/4/28	2026/1/6	critical
282947	MiracleLinux 9 : kernel-5.14.0-570.12.1.el9_6 (AXSA:2025-10392:38)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	critical
211777	Debian dsa-5818 : affs-modules-6.1.0-21-4kc-malta-di - security update	Nessus	Debian Local Security Checks	2024/11/24	2026/1/6	high
210938	SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:3985-1)	Nessus	SuSE Local Security Checks	2024/11/14	2026/6/26	critical
234493	Photon OS 4.0: Linux PHSA-2025-4.0-0781	Nessus	PhotonOS Local Security Checks	2025/4/16	2025/4/16	high
216492	Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7277-1)	Nessus	Ubuntu Local Security Checks	2025/2/19	2026/6/3	critical
216493	Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7276-1)	Nessus	Ubuntu Local Security Checks	2025/2/19	2025/9/24	critical
233674	Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7386-1)	Nessus	Ubuntu Local Security Checks	2025/4/1	2026/1/6	critical
212547	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2024:4140-1)	Nessus	SuSE Local Security Checks	2024/12/12	2026/6/26	high
237030	Oracle Linux 9 : kernel (ELSA-2025-6966)	Nessus	Oracle Linux Local Security Checks	2025/5/22	2026/2/9	critical
212537	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2024:4131-1)	Nessus	SuSE Local Security Checks	2024/12/12	2026/6/26	high

偵測

搜尋 Plugin

critical

critical

high

critical

high

critical

critical

critical

high

critical

high