The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in     tcp_conn_request() If inet_csk_reqsk_queue_hash_add() return false, tcp_conn_request() will return without     free the dst memory, which allocated in af_ops->route_req. Here is the kmemleak stack: unreferenced object     0xffff8881198631c0 (size 240): comm softirq, pid 0, jiffies 4299266571 (age 1802.392s) hex dump (first     32 bytes): 00 10 9b 03 81 88 ff ff 80 98 da bc ff ff ff ff ................ 81 55 18 bb ff ff ff ff 00 00     00 00 00 00 00 00 .U.............. backtrace: [<ffffffffb93e8d4c>] kmem_cache_alloc+0x60c/0xa80     [<ffffffffba11b4c5>] dst_alloc+0x55/0x250 [<ffffffffba227bf6>] rt_dst_alloc+0x46/0x1d0     [<ffffffffba23050a>] __mkroute_output+0x29a/0xa50 [<ffffffffba23456b>]     ip_route_output_key_hash+0x10b/0x240 [<ffffffffba2346bd>] ip_route_output_flow+0x1d/0x90     [<ffffffffba254855>] inet_csk_route_req+0x2c5/0x500 [<ffffffffba26b331>] tcp_conn_request+0x691/0x12c0     [<ffffffffba27bd08>] tcp_rcv_state_process+0x3c8/0x11b0 [<ffffffffba2965c6>] tcp_v4_do_rcv+0x156/0x3b0     [<ffffffffba299c98>] tcp_v4_rcv+0x1cf8/0x1d80 [<ffffffffba239656>] ip_protocol_deliver_rcu+0xf6/0x360     [<ffffffffba2399a6>] ip_local_deliver_finish+0xe6/0x1e0 [<ffffffffba239b8e>] ip_local_deliver+0xee/0x360     [<ffffffffba239ead>] ip_rcv+0xad/0x2f0 [<ffffffffba110943>] __netif_receive_skb_one_core+0x123/0x140 Call     dst_release() to free the dst memory when inet_csk_reqsk_queue_hash_add() return false in     tcp_conn_request(). (CVE-2024-57841)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    RDMA/core: Silence oversized kvmalloc() warning(CVE-2025-37867)

    igb: revert rtnl_lock() that causes deadlock(CVE-2023-53060)

    bnxt_en: Avoid order-5 memory allocation for TPA data(CVE-2023-53134)

    net_sched: sch_sfq: move the limit validation(CVE-2025-37752)

    ftrace: Add cond_resched() to ftrace_graph_set_hash().(CVE-2025-37940)

    net: annotate races around sk-sk_bound_dev_if(CVE-2022-49420)

    ext4: fix off-by-one error in do_split(CVE-2025-23150)

    jbd2: remove wrong sb-s_sequence check(CVE-2025-37839)

    ext4: update s_journal_inum if it changes after journal replay(CVE-2023-53091)

    udp: Fix memory accounting leak.(CVE-2025-22058)

    netem: Update sch-q.qlen before qdisc_tree_reduce_backlog().(CVE-2025-21703)

    net: fix memory leak in tcp_conn_request().(CVE-2024-57841)

    xfrm: state: fix out-of-bounds read during lookup(CVE-2024-57982)

    Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an     authenticated user to potentially enable denial of service via local access.(CVE-2021-33061)

    udf: Fix a slab-out-of-bounds write bug in udf_find_entry().(CVE-2022-49846)

    nvmet: avoid potential UAF in nvmet_req_complete().(CVE-2023-53116)

    ata: libata-transport: fix error handling in ata_tport_add().(CVE-2022-49825)

    ata: libata-transport: fix double ata_host_put() in ata_tport_add().(CVE-2022-49826)

    bpf: track changes_pkt_data property for global functions(CVE-2024-58098)

    pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map(CVE-2022-49832)

    scsi: core: Fix a procfs host directory removal regression(CVE-2023-53118)

    bpf, verifier: Fix memory leak in array reallocation for stack state(CVE-2022-49878)

    kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case(CVE-2022-49779)

    i2c: piix4: Fix adapter not be removed in piix4_remove().(CVE-2022-49900)

    bpf: Fix kmemleak warning for percpu hashmap(CVE-2025-37807)

    drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker().(CVE-2022-49827)

    RDMA/core: Fix null-ptr-deref in ib_core_cleanup().(CVE-2022-49925)

    net: tun: Fix memory leaks of napi_get_frags(CVE-2022-49871)

    net: sched: Fix use after free in red_enqueue().(CVE-2022-49921)

    bnxt_en: Fix possible crash in bnxt_hwrm_set_coal().(CVE-2022-49869)

    tipc: fix the msg-req tlv len check in tipc_nl_compat_name_table_dump_header(CVE-2022-49862)

    bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb().(CVE-2022-49840)

    net: macvlan: fix memory leaks of macvlan_common_newlink(CVE-2022-49853)

    HID: hyperv: fix possible memory leak in mousevsc_probe().(CVE-2022-49874)

    bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE(CVE-2022-49875)

    ftrace: Fix null pointer dereference in ftrace_add_mod().(CVE-2022-49802)

    tracing: Do not let histogram values have some modifiers(CVE-2023-53093)

    ftrace: Fix invalid address access in lookup_rec() when index is 0(CVE-2023-53075)

    iavf: Fix handling of dummy receive descriptors(CVE-2022-49583)

    ftrace: Fix use-after-free for dynamic ftrace_ops(CVE-2022-49892)

    fscrypt: stop using keyrings subsystem for fscrypt_master_key(CVE-2022-49899)

    bpf: Fix wrong reg type conversion in release_reference().(CVE-2022-49873)

    capabilities: fix potential memleak on error path from vfs_getxattr_alloc().(CVE-2022-49890)

    nfs4: Fix kmemleak when allocate slot failed(CVE-2022-49927)

    scsi: scsi_transport_sas: Fix error handling in sas_phy_add().(CVE-2022-49839)

    ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init().(CVE-2022-49885)

    blk-mq: Fix kmemleak in blk_mq_init_allocated_queue(CVE-2022-49901)

    bpf: Fix memory leaks in __check_func_call(CVE-2022-49837)

    ext4: ignore xattrs past end(CVE-2025-37738)

    ext4: fix another off-by-one fsmap error on 1k block filesystems(CVE-2023-53143)

    ext4: fix WARNING in ext4_update_inline_data(CVE-2023-53100)

    ext4: Fix possible corruption when moving a directory(CVE-2023-53137)

    ext4: zero i_disksize when initializing the bootloader inode(CVE-2023-53101)

    ata: libata-transport: fix error handling in ata_tdev_add().(CVE-2022-49823)

    ext4: fix BUG_ON() when directory entry has invalid rec_len(CVE-2022-49879)

    ext4: fix task hung in ext4_xattr_delete_inode(CVE-2023-53089)

    scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus().(CVE-2022-49780)

    ext4: fix warning in 'ext4_da_release_space'(CVE-2022-49880)

    ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters().(CVE-2022-49889)

    netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets.(CVE-2025-22063)

    clk: samsung: Fix UBSAN panic in samsung_clk_init().(CVE-2025-39728)

    x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range().(CVE-2025-22090)

    misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram().(CVE-2022-49788)

    scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add().(CVE-2023-53124)

    tracing: Fix wild-memory-access in register_synth_event().(CVE-2022-49799)

    hrtimers: Handle CPU state correctly on hotplug(CVE-2024-57951)

    block, bfq: fix uaf for bfqq in bic_set_bfqq().(CVE-2023-52983)

    tcp: Fix data-races around sysctl_tcp_max_reordering.(CVE-2022-49571)

    tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.(CVE-2022-49572)

    tcp: Fix a data-race around sysctl_tcp_early_retrans.(CVE-2022-49573)

    kthread: unpark only parked kthread(CVE-2024-50019)

    media: streamzap: fix race between device disconnection and urb callback(CVE-2025-22027)

    net: openvswitch: fix flow memory leak in ovs_flow_cmd_new(CVE-2023-52977)

    efi: Do not import certificates from UEFI Secure Boot for T2 Macs(CVE-2022-49357)

    Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout(CVE-2022-49474)

    mmc: core: use sysfs_emit() instead of sprintf().(CVE-2022-49267)

    ext4: fix OOB read when checking dotdot dir(CVE-2025-37785)

    tcp: Fix data-races around sysctl_tcp_fastopen.(CVE-2022-49586)

    tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.(CVE-2022-49575)

    ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg(CVE-2022-49727)

    tcp: Fix a data-race around sysctl_tcp_notsent_lowat.(CVE-2022-49587)

    dlm: prevent NPD when writing a positive value to event_done(CVE-2025-23131)

    thermal: int340x: Add NULL check for adev(CVE-2025-23136)

    nfsd: don't ignore the return code of svc_proc_register().(CVE-2025-22026)

    ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all().(CVE-2025-22121)

    ext4: avoid journaling sb update on error if journal is destroying(CVE-2025-22113)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7380-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - x86 architecture;

    - Block layer subsystem;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - Ublk userspace block driver;

    - Virtio block driver;

    - Bluetooth drivers;

    - Buffer Sharing and Synchronization framework;

    - DMA engine subsystem;

    - EFI core;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - Hardware monitoring drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Microchip PCI driver;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - PCI subsystem;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Power supply drivers;

    - Voltage and Current Regulator drivers;

    - SCSI subsystem;

    - i.MX SoC drivers;

    - SPI subsystem;

    - UFS subsystem;

    - USB Gadget drivers;

    - TDX Guest driver;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - Overlay file system;

    - Diskquota system;

    - SMB network file system;

    - DRM display driver;

    - BPF subsystem;

    - VLANs driver;

    - KASAN memory debugging framework;

    - Memory management;

    - StackDepot library;

    - Bluetooth subsystem;

    - LAPB network protocol;

    - Network namespace;

    - Netfilter;

    - io_uring subsystem;

    - Control group (cgroup);

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Scheduler infrastructure;

    - Seccomp subsystem;

    - Tracing infrastructure;

    - Workqueue subsystem;

    - KUnit library;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - TIPC protocol;

    - Wireless networking;

    - eXpress Data Path;

    - SELinux security module;

    - ALSA framework;

    - Intel ASoC drivers;

    - SOF drivers; (CVE-2024-57850, CVE-2024-57895, CVE-2024-57843, CVE-2024-56587, CVE-2024-56590,     CVE-2024-56584, CVE-2024-56673, CVE-2024-56552, CVE-2024-56644, CVE-2024-57940, CVE-2024-47809,     CVE-2024-56784, CVE-2024-57935, CVE-2024-56561, CVE-2025-21642, CVE-2024-56573, CVE-2024-53682,     CVE-2024-39282, CVE-2024-56653, CVE-2024-56606, CVE-2024-56651, CVE-2024-56608, CVE-2024-56649,     CVE-2024-56761, CVE-2024-57921, CVE-2024-57804, CVE-2024-57902, CVE-2024-56630, CVE-2024-56769,     CVE-2024-56782, CVE-2025-21652, CVE-2025-21634, CVE-2024-48881, CVE-2024-41935, CVE-2024-57912,     CVE-2024-56659, CVE-2025-21663, CVE-2024-57857, CVE-2024-56670, CVE-2024-56631, CVE-2024-52319,     CVE-2024-56637, CVE-2024-56643, CVE-2025-21643, CVE-2024-55881, CVE-2024-56619, CVE-2024-53687,     CVE-2025-21654, CVE-2025-21655, CVE-2024-56648, CVE-2024-57893, CVE-2025-21651, CVE-2024-57939,     CVE-2024-56622, CVE-2024-56763, CVE-2024-56591, CVE-2024-56559, CVE-2024-57883, CVE-2024-56592,     CVE-2024-57795, CVE-2024-56578, CVE-2024-56780, CVE-2024-57904, CVE-2024-57934, CVE-2024-56369,     CVE-2024-57931, CVE-2024-47408, CVE-2025-21644, CVE-2024-56625, CVE-2025-21659, CVE-2024-56640,     CVE-2024-56605, CVE-2024-56638, CVE-2024-56775, CVE-2024-47141, CVE-2024-56773, CVE-2024-53681,     CVE-2024-57802, CVE-2024-56550, CVE-2024-56717, CVE-2025-21662, CVE-2024-53685, CVE-2024-57890,     CVE-2024-56765, CVE-2025-21629, CVE-2024-57918, CVE-2024-57841, CVE-2024-57894, CVE-2025-21649,     CVE-2024-56613, CVE-2024-56611, CVE-2024-57946, CVE-2024-57908, CVE-2024-57900, CVE-2024-56665,     CVE-2024-56786, CVE-2024-56778, CVE-2024-56627, CVE-2024-56712, CVE-2024-52332, CVE-2025-21834,     CVE-2024-56616, CVE-2024-56595, CVE-2024-56623, CVE-2024-57807, CVE-2024-41932, CVE-2024-57809,     CVE-2024-54193, CVE-2025-21637, CVE-2024-54455, CVE-2024-56565, CVE-2024-57849, CVE-2024-56647,     CVE-2024-57896, CVE-2024-57924, CVE-2024-57944, CVE-2024-56711, CVE-2024-57881, CVE-2024-56614,     CVE-2024-54460, CVE-2024-56563, CVE-2024-58087, CVE-2024-57798, CVE-2024-56615, CVE-2024-53179,     CVE-2024-57919, CVE-2024-56580, CVE-2024-56771, CVE-2024-56572, CVE-2024-56581, CVE-2024-56586,     CVE-2024-56654, CVE-2024-57916, CVE-2024-56645, CVE-2024-56672, CVE-2024-56597, CVE-2024-56671,     CVE-2024-56658, CVE-2024-56634, CVE-2024-49568, CVE-2024-56588, CVE-2024-56655, CVE-2024-48876,     CVE-2024-57889, CVE-2025-21647, CVE-2024-47794, CVE-2024-57938, CVE-2024-56767, CVE-2025-21664,     CVE-2024-56656, CVE-2024-56787, CVE-2024-57925, CVE-2024-57876, CVE-2024-57874, CVE-2024-56766,     CVE-2024-57878, CVE-2024-57898, CVE-2024-56617, CVE-2024-56604, CVE-2025-21645, CVE-2024-56551,     CVE-2024-57892, CVE-2024-49571, CVE-2024-45828, CVE-2024-57911, CVE-2025-21660, CVE-2024-56558,     CVE-2024-57805, CVE-2024-53680, CVE-2024-57839, CVE-2024-56626, CVE-2024-57901, CVE-2024-56636,     CVE-2024-56646, CVE-2024-56667, CVE-2025-21648, CVE-2024-56660, CVE-2024-56368, CVE-2024-56600,     CVE-2024-57793, CVE-2024-36476, CVE-2024-56610, CVE-2024-57888, CVE-2024-57886, CVE-2024-57885,     CVE-2024-56776, CVE-2025-21635, CVE-2025-21661, CVE-2024-56576, CVE-2024-56662, CVE-2024-56589,     CVE-2024-57806, CVE-2024-57887, CVE-2025-21650, CVE-2024-56582, CVE-2024-56709, CVE-2024-57913,     CVE-2024-56633, CVE-2024-56639, CVE-2024-56768, CVE-2024-57799, CVE-2024-56715, CVE-2025-21653,     CVE-2024-57929, CVE-2024-54680, CVE-2024-56635, CVE-2024-57801, CVE-2024-50051, CVE-2024-56609,     CVE-2024-56624, CVE-2024-51729, CVE-2024-56772, CVE-2024-56785, CVE-2024-56568, CVE-2024-56577,     CVE-2025-21646, CVE-2024-56713, CVE-2024-56567, CVE-2024-56777, CVE-2024-56760, CVE-2024-57899,     CVE-2024-56664, CVE-2024-57879, CVE-2024-56579, CVE-2024-56758, CVE-2024-56710, CVE-2024-48875,     CVE-2024-56574, CVE-2024-55641, CVE-2024-56663, CVE-2024-55639, CVE-2024-57875, CVE-2024-57910,     CVE-2024-56621, CVE-2024-57791, CVE-2024-56557, CVE-2024-56774, CVE-2024-56641, CVE-2024-56601,     CVE-2024-56603, CVE-2024-57897, CVE-2024-56594, CVE-2024-57882, CVE-2024-56583, CVE-2025-21639,     CVE-2025-21658, CVE-2024-56575, CVE-2024-57945, CVE-2024-57907, CVE-2024-56632, CVE-2024-56629,     CVE-2025-21632, CVE-2024-56596, CVE-2024-56602, CVE-2024-54683, CVE-2024-56607, CVE-2024-56764,     CVE-2024-53690, CVE-2024-56719, CVE-2024-56783, CVE-2024-57905, CVE-2024-57872, CVE-2024-56598,     CVE-2024-55916, CVE-2024-54191, CVE-2024-56779, CVE-2024-57917, CVE-2024-56562, CVE-2024-56599,     CVE-2024-56620, CVE-2024-56650, CVE-2024-57926, CVE-2024-56757, CVE-2024-56669, CVE-2025-21638,     CVE-2024-56675, CVE-2024-56618, CVE-2024-56593, CVE-2025-21631, CVE-2024-57933, CVE-2024-55642,     CVE-2024-57884, CVE-2024-56652, CVE-2024-57903, CVE-2024-56657, CVE-2024-56642, CVE-2024-43098,     CVE-2024-57838, CVE-2024-56714, CVE-2024-56716, CVE-2024-56566, CVE-2024-56781, CVE-2025-21656,     CVE-2024-56372, CVE-2024-56718, CVE-2024-57932, CVE-2024-57906, CVE-2024-56759, CVE-2024-48873,     CVE-2024-49569, CVE-2024-56564, CVE-2024-56770, CVE-2025-21640, CVE-2024-57792, CVE-2024-56569,     CVE-2025-21633, CVE-2025-21636, CVE-2024-47143, CVE-2024-56570, CVE-2024-57880)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7458-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - IP tunnels definitions;

    - LAPB network protocol;

    - Network namespace;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-56747, CVE-2024-56575, CVE-2024-56781, CVE-2024-53173, CVE-2024-56662,     CVE-2024-56778, CVE-2024-56615, CVE-2024-56693, CVE-2024-57906, CVE-2024-53194, CVE-2024-56779,     CVE-2024-56619, CVE-2024-53059, CVE-2024-57938, CVE-2024-56643, CVE-2024-53055, CVE-2024-50198,     CVE-2024-57841, CVE-2024-56616, CVE-2024-57908, CVE-2024-50249, CVE-2024-57838, CVE-2024-56558,     CVE-2024-53113, CVE-2024-56630, CVE-2025-21638, CVE-2024-56637, CVE-2024-56776, CVE-2024-56625,     CVE-2024-46841, CVE-2024-53122, CVE-2024-53145, CVE-2024-56780, CVE-2024-56629, CVE-2024-56650,     CVE-2024-50101, CVE-2024-56576, CVE-2024-53129, CVE-2024-56587, CVE-2024-53127, CVE-2024-53121,     CVE-2024-56567, CVE-2024-50162, CVE-2024-56605, CVE-2024-53135, CVE-2024-53172, CVE-2025-21692,     CVE-2024-50110, CVE-2024-56698, CVE-2024-56623, CVE-2025-21678, CVE-2024-53112, CVE-2024-57874,     CVE-2025-21669, CVE-2024-50086, CVE-2024-50143, CVE-2024-49974, CVE-2025-21664, CVE-2024-42291,     CVE-2024-56701, CVE-2024-50072, CVE-2024-57903, CVE-2024-41080, CVE-2024-53131, CVE-2024-50301,     CVE-2024-56670, CVE-2024-57902, CVE-2024-57925, CVE-2024-57889, CVE-2024-57897, CVE-2024-50150,     CVE-2024-56601, CVE-2024-45828, CVE-2025-21690, CVE-2024-50230, CVE-2024-50115, CVE-2024-57951,     CVE-2025-21631, CVE-2024-56606, CVE-2024-52332, CVE-2024-50282, CVE-2024-36476, CVE-2024-50192,     CVE-2024-50156, CVE-2024-49571, CVE-2024-57946, CVE-2024-46809, CVE-2024-56634, CVE-2024-47707,     CVE-2024-49996, CVE-2024-57849, CVE-2024-56645, CVE-2024-50074, CVE-2024-49925, CVE-2024-56658,     CVE-2024-56562, CVE-2024-50141, CVE-2024-53171, CVE-2024-56593, CVE-2024-53150, CVE-2024-53214,     CVE-2024-50296, CVE-2025-21683, CVE-2024-50195, CVE-2024-53239, CVE-2024-49950, CVE-2025-21636,     CVE-2024-50265, CVE-2024-57850, CVE-2024-57917, CVE-2024-50148, CVE-2024-50036, CVE-2024-50259,     CVE-2024-53052, CVE-2024-56598, CVE-2024-56597, CVE-2024-53217, CVE-2024-53061, CVE-2024-53063,     CVE-2024-50127, CVE-2024-50273, CVE-2024-57901, CVE-2024-50202, CVE-2024-50232, CVE-2024-50229,     CVE-2025-21687, CVE-2024-53174, CVE-2024-50193, CVE-2024-50151, CVE-2024-50218, CVE-2024-56679,     CVE-2024-53181, CVE-2024-53099, CVE-2024-56572, CVE-2024-50185, CVE-2024-56578, CVE-2024-56532,     CVE-2025-21639, CVE-2024-57922, CVE-2024-50171, CVE-2024-53066, CVE-2024-50287, CVE-2025-21697,     CVE-2024-53180, CVE-2024-44938, CVE-2024-56636, CVE-2024-56739, CVE-2024-57807, CVE-2024-56569,     CVE-2024-56531, CVE-2024-57913, CVE-2024-56681, CVE-2024-56694, CVE-2022-49034, CVE-2024-56756,     CVE-2024-50168, CVE-2024-50131, CVE-2024-47143, CVE-2024-50292, CVE-2024-56533, CVE-2024-42315,     CVE-2024-50283, CVE-2024-50142, CVE-2024-57802, CVE-2024-57929, CVE-2025-21699, CVE-2024-35864,     CVE-2024-50209, CVE-2024-53197, CVE-2024-50278, CVE-2024-50299, CVE-2025-21694, CVE-2024-58087,     CVE-2024-57904, CVE-2024-56726, CVE-2024-56678, CVE-2024-50167, CVE-2024-50236, CVE-2024-50083,     CVE-2025-21646, CVE-2024-56633, CVE-2024-50051, CVE-2024-56785, CVE-2024-56767, CVE-2024-50085,     CVE-2024-50117, CVE-2024-50268, CVE-2024-56672, CVE-2025-21653, CVE-2024-57900, CVE-2024-50196,     CVE-2024-57911, CVE-2024-50233, CVE-2024-50290, CVE-2024-56754, CVE-2024-53680, CVE-2024-56724,     CVE-2024-56596, CVE-2024-50275, CVE-2024-56539, CVE-2024-57884, CVE-2024-53226, CVE-2024-56659,     CVE-2025-21689, CVE-2024-57912, CVE-2024-56626, CVE-2024-50099, CVE-2024-50058, CVE-2025-21665,     CVE-2024-56610, CVE-2024-50262, CVE-2024-57882, CVE-2024-53138, CVE-2024-35887, CVE-2024-36899,     CVE-2024-53237, CVE-2024-56644, CVE-2024-50153, CVE-2024-50154, CVE-2024-57792, CVE-2024-53142,     CVE-2024-56720, CVE-2024-57931, CVE-2024-53058, CVE-2024-56745, CVE-2024-50304, CVE-2024-56648,     CVE-2024-46871, CVE-2024-50055, CVE-2024-50182, CVE-2025-21666, CVE-2024-50208, CVE-2024-57910,     CVE-2024-50194, CVE-2024-53685, CVE-2024-50010, CVE-2024-57948, CVE-2024-48881, CVE-2024-50160,     CVE-2024-50269, CVE-2024-56748, CVE-2024-53183, CVE-2024-56777, CVE-2024-56769, CVE-2024-56594,     CVE-2024-53140, CVE-2024-53151, CVE-2024-56723, CVE-2024-50245, CVE-2024-50128, CVE-2024-56581,     CVE-2024-56770, CVE-2024-50121, CVE-2024-56589, CVE-2024-50234, CVE-2024-56700, CVE-2024-53158,     CVE-2024-40953, CVE-2024-50257, CVE-2024-57892, CVE-2024-53165, CVE-2024-53042, CVE-2024-53097,     CVE-2024-50279, CVE-2024-42252, CVE-2024-56642, CVE-2024-56622, CVE-2024-50295, CVE-2024-50199,     CVE-2024-40965, CVE-2024-53161, CVE-2024-56586, CVE-2024-53088, CVE-2024-50134, CVE-2024-41066,     CVE-2024-50237, CVE-2024-56688, CVE-2024-53096, CVE-2024-50116, CVE-2024-56705, CVE-2024-43098,     CVE-2024-53184, CVE-2024-56774, CVE-2024-53215, CVE-2024-53156, CVE-2024-53146, CVE-2024-56600,     CVE-2024-50302, CVE-2024-50247, CVE-2024-56690, CVE-2024-26928, CVE-2024-53198, CVE-2024-56691,     CVE-2024-53120, CVE-2024-50103, CVE-2023-52913, CVE-2024-56602, CVE-2024-56728, CVE-2025-21648,     CVE-2024-47730, CVE-2024-53227, CVE-2024-50205, CVE-2024-57940, CVE-2024-53119, CVE-2024-50267,     CVE-2024-53125, CVE-2024-56716, CVE-2024-56627, CVE-2024-53101, CVE-2024-56640, CVE-2024-56369,     CVE-2024-50244, CVE-2024-53157, CVE-2024-56746, CVE-2024-50251, CVE-2024-57907, CVE-2025-21680,     CVE-2024-47408, CVE-2024-56548, CVE-2024-56715, CVE-2024-57939, CVE-2024-46784, CVE-2024-50201,     CVE-2024-53130, CVE-2024-50163, CVE-2024-56595, CVE-2024-49998, CVE-2024-53104, CVE-2024-53690,     CVE-2024-56704, CVE-2024-56570, CVE-2024-57798, CVE-2024-56763, CVE-2024-56603, CVE-2024-56568,     CVE-2025-21640, CVE-2024-53155, CVE-2024-56590, CVE-2024-56708, CVE-2024-39497, CVE-2024-50082,     CVE-2024-53148, CVE-2024-56787, CVE-2024-57890, CVE-2024-53124, CVE-2024-43900, CVE-2024-56614,     CVE-2025-21637, CVE-2024-26718, CVE-2024-55881, CVE-2024-56759, CVE-2024-57791, CVE-2024-50242,     CVE-2024-57896, CVE-2024-56631, CVE-2024-56574, CVE-2024-55916)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4076 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4076-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.6.1.128-1~deb11u1     CVE ID         : CVE-2022-49034 CVE-2023-52916 CVE-2023-52926 CVE-2024-26595                      CVE-2024-27407 CVE-2024-35870 CVE-2024-35956 CVE-2024-36476                      CVE-2024-36479 CVE-2024-36899 CVE-2024-37021 CVE-2024-39282                      CVE-2024-41014 CVE-2024-42252 CVE-2024-42315 CVE-2024-42319                      CVE-2024-43098 CVE-2024-44950 CVE-2024-45828 CVE-2024-46809                      CVE-2024-46841 CVE-2024-46896 CVE-2024-47143 CVE-2024-47408                      CVE-2024-47745 CVE-2024-48881 CVE-2024-49571 CVE-2024-49861                      CVE-2024-49891 CVE-2024-49897 CVE-2024-49898 CVE-2024-49899                      CVE-2024-49909 CVE-2024-49911 CVE-2024-49915 CVE-2024-49917                      CVE-2024-49925 CVE-2024-49929 CVE-2024-49934 CVE-2024-49939                      CVE-2024-49951 CVE-2024-49994 CVE-2024-49996 CVE-2024-50014                      CVE-2024-50047 CVE-2024-50051 CVE-2024-50055 CVE-2024-50121                      CVE-2024-50146 CVE-2024-50164 CVE-2024-50248 CVE-2024-50258                      CVE-2024-50275 CVE-2024-50304 CVE-2024-52332 CVE-2024-53099                      CVE-2024-53105 CVE-2024-53124 CVE-2024-53125 CVE-2024-53128                      CVE-2024-53141 CVE-2024-53142 CVE-2024-53145 CVE-2024-53146                      CVE-2024-53148 CVE-2024-53150 CVE-2024-53151 CVE-2024-53154                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53165 CVE-2024-53170                      CVE-2024-53171 CVE-2024-53172 CVE-2024-53173 CVE-2024-53174                      CVE-2024-53175 CVE-2024-53180 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53190 CVE-2024-53194 CVE-2024-53196                      CVE-2024-53197 CVE-2024-53198 CVE-2024-53206 CVE-2024-53207                      CVE-2024-53208 CVE-2024-53210 CVE-2024-53213 CVE-2024-53214                      CVE-2024-53215 CVE-2024-53217 CVE-2024-53220 CVE-2024-53226                      CVE-2024-53227 CVE-2024-53229 CVE-2024-53230 CVE-2024-53231                      CVE-2024-53233 CVE-2024-53234 CVE-2024-53237 CVE-2024-53239                      CVE-2024-53240 CVE-2024-53241 CVE-2024-53680 CVE-2024-53685                      CVE-2024-53690 CVE-2024-54031 CVE-2024-55881 CVE-2024-55916                      CVE-2024-56369 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56546 CVE-2024-56548 CVE-2024-56551                      CVE-2024-56557 CVE-2024-56558 CVE-2024-56562 CVE-2024-56567                      CVE-2024-56568 CVE-2024-56569 CVE-2024-56570 CVE-2024-56572                      CVE-2024-56574 CVE-2024-56575 CVE-2024-56576 CVE-2024-56578                      CVE-2024-56579 CVE-2024-56581 CVE-2024-56582 CVE-2024-56584                      CVE-2024-56585 CVE-2024-56586 CVE-2024-56587 CVE-2024-56589                      CVE-2024-56590 CVE-2024-56593 CVE-2024-56594 CVE-2024-56595                      CVE-2024-56596 CVE-2024-56597 CVE-2024-56598 CVE-2024-56599                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56604 CVE-2024-56605 CVE-2024-56606 CVE-2024-56608                      CVE-2024-56610 CVE-2024-56614 CVE-2024-56615 CVE-2024-56616                      CVE-2024-56619 CVE-2024-56622 CVE-2024-56623 CVE-2024-56625                      CVE-2024-56626 CVE-2024-56627 CVE-2024-56628 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56640 CVE-2024-56642                      CVE-2024-56643 CVE-2024-56644 CVE-2024-56645 CVE-2024-56648                      CVE-2024-56650 CVE-2024-56651 CVE-2024-56658 CVE-2024-56659                      CVE-2024-56660 CVE-2024-56661 CVE-2024-56662 CVE-2024-56663                      CVE-2024-56664 CVE-2024-56665 CVE-2024-56670 CVE-2024-56672                      CVE-2024-56675 CVE-2024-56677 CVE-2024-56678 CVE-2024-56679                      CVE-2024-56681 CVE-2024-56683 CVE-2024-56687 CVE-2024-56688                      CVE-2024-56690 CVE-2024-56691 CVE-2024-56693 CVE-2024-56694                      CVE-2024-56698 CVE-2024-56700 CVE-2024-56701 CVE-2024-56703                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56707 CVE-2024-56708                      CVE-2024-56709 CVE-2024-56715 CVE-2024-56716 CVE-2024-56717                      CVE-2024-56718 CVE-2024-56720 CVE-2024-56722 CVE-2024-56723                      CVE-2024-56724 CVE-2024-56725 CVE-2024-56726 CVE-2024-56727                      CVE-2024-56728 CVE-2024-56739 CVE-2024-56741 CVE-2024-56745                      CVE-2024-56746 CVE-2024-56747 CVE-2024-56748 CVE-2024-56751                      CVE-2024-56754 CVE-2024-56755 CVE-2024-56756 CVE-2024-56759                      CVE-2024-56763 CVE-2024-56765 CVE-2024-56766 CVE-2024-56767                      CVE-2024-56769 CVE-2024-56770 CVE-2024-56774 CVE-2024-56776                      CVE-2024-56777 CVE-2024-56778 CVE-2024-56779 CVE-2024-56780                      CVE-2024-56781 CVE-2024-56783 CVE-2024-56785 CVE-2024-56787                      CVE-2024-57791 CVE-2024-57792 CVE-2024-57798 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57838 CVE-2024-57841 CVE-2024-57849                      CVE-2024-57850 CVE-2024-57874 CVE-2024-57876 CVE-2024-57882                      CVE-2024-57884 CVE-2024-57887 CVE-2024-57889 CVE-2024-57890                      CVE-2024-57892 CVE-2024-57893 CVE-2024-57894 CVE-2024-57896                      CVE-2024-57897 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57903 CVE-2024-57904 CVE-2024-57906 CVE-2024-57907                      CVE-2024-57908 CVE-2024-57910 CVE-2024-57911 CVE-2024-57912                      CVE-2024-57913 CVE-2024-57916 CVE-2024-57917 CVE-2024-57922                      CVE-2024-57925 CVE-2024-57929 CVE-2024-57930 CVE-2024-57931                      CVE-2024-57938 CVE-2024-57939 CVE-2024-57940 CVE-2024-57946                      CVE-2024-57948 CVE-2024-57949 CVE-2024-57951 CVE-2025-21629                      CVE-2025-21631 CVE-2025-21636 CVE-2025-21637 CVE-2025-21638                      CVE-2025-21639 CVE-2025-21640 CVE-2025-21646 CVE-2025-21647                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21655 CVE-2025-21660                      CVE-2025-21662 CVE-2025-21664 CVE-2025-21665 CVE-2025-21666                      CVE-2025-21667 CVE-2025-21668 CVE-2025-21669 CVE-2025-21671                      CVE-2025-21675 CVE-2025-21678 CVE-2025-21680 CVE-2025-21681                      CVE-2025-21683 CVE-2025-21687 CVE-2025-21688 CVE-2025-21689                      CVE-2025-21690 CVE-2025-21692 CVE-2025-21694 CVE-2025-21697                      CVE-2025-21699

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.6.1.128-1~deb11u1.  This additionally includes many more bug fixes     from stable updates 6.1.120-6.1.128 inclusive.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7388-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168,     CVE-2024-53214, CVE-2024-56670, CVE-2024-53146, CVE-2024-50302, CVE-2024-56629, CVE-2024-53680,     CVE-2024-53124, CVE-2024-56610, CVE-2024-50259, CVE-2024-47408, CVE-2024-53217, CVE-2025-21683,     CVE-2024-50196, CVE-2025-21694, CVE-2024-56596, CVE-2024-53161, CVE-2024-53061, CVE-2024-57940,     CVE-2024-41066, CVE-2024-53122, CVE-2024-56776, CVE-2024-50268, CVE-2024-53184, CVE-2024-53088,     CVE-2024-56590, CVE-2024-50182, CVE-2024-56705, CVE-2024-50103, CVE-2024-57938, CVE-2024-53155,     CVE-2024-50282, CVE-2024-50209, CVE-2024-53150, CVE-2024-56532, CVE-2024-57910, CVE-2024-56678,     CVE-2024-53181, CVE-2024-50230, CVE-2024-42291, CVE-2024-50233, CVE-2024-53130, CVE-2024-56756,     CVE-2024-53113, CVE-2024-56623, CVE-2024-41080, CVE-2024-53197, CVE-2024-53142, CVE-2024-50251,     CVE-2024-50237, CVE-2024-47143, CVE-2024-56633, CVE-2024-57889, CVE-2024-53127, CVE-2024-46871,     CVE-2024-56640, CVE-2024-50193, CVE-2024-53148, CVE-2025-21669, CVE-2024-53690, CVE-2024-50279,     CVE-2024-56780, CVE-2024-56769, CVE-2024-53125, CVE-2024-53052, CVE-2024-56601, CVE-2024-56778,     CVE-2024-50198, CVE-2025-21665, CVE-2024-53227, CVE-2024-40953, CVE-2024-50295, CVE-2024-53194,     CVE-2024-56777, CVE-2024-56770, CVE-2025-21697, CVE-2024-57904, CVE-2024-56691, CVE-2024-56787,     CVE-2024-57948, CVE-2024-53140, CVE-2024-50051, CVE-2025-21648, CVE-2024-56754, CVE-2024-50156,     CVE-2024-50205, CVE-2024-57911, CVE-2024-50290, CVE-2024-56715, CVE-2024-56643, CVE-2024-49974,     CVE-2024-50287, CVE-2024-50162, CVE-2024-57849, CVE-2024-50142, CVE-2024-53198, CVE-2024-56568,     CVE-2024-56704, CVE-2024-35887, CVE-2024-57908, CVE-2024-56767, CVE-2024-56701, CVE-2025-21680,     CVE-2024-57913, CVE-2024-50171, CVE-2024-56558, CVE-2024-50121, CVE-2024-50036, CVE-2024-53180,     CVE-2024-53096, CVE-2024-57897, CVE-2024-56746, CVE-2024-55881, CVE-2024-57874, CVE-2024-56774,     CVE-2024-57946, CVE-2024-56531, CVE-2024-56698, CVE-2024-56650, CVE-2025-21637, CVE-2024-50242,     CVE-2024-49996, CVE-2024-53136, CVE-2024-56575, CVE-2024-56642, CVE-2024-56763, CVE-2024-57802,     CVE-2024-57929, CVE-2024-56726, CVE-2024-56615, CVE-2024-56619, CVE-2024-50234, CVE-2024-50299,     CVE-2024-56569, CVE-2024-57792, CVE-2024-50150, CVE-2024-56728, CVE-2024-53173, CVE-2024-56630,     CVE-2025-21639, CVE-2024-53183, CVE-2024-56681, CVE-2024-46809, CVE-2024-53165, CVE-2024-53215,     CVE-2024-50296, CVE-2024-50267, CVE-2024-53097, CVE-2024-56369, CVE-2024-56578, CVE-2024-56562,     CVE-2025-21699, CVE-2024-50134, CVE-2024-56589, CVE-2024-50232, CVE-2024-53685, CVE-2024-50265,     CVE-2024-53206, CVE-2024-50257, CVE-2024-57925, CVE-2024-50269, CVE-2024-56570, CVE-2024-50278,     CVE-2024-56595, CVE-2024-56720, CVE-2024-50085, CVE-2024-50201, CVE-2024-56693, CVE-2023-52913,     CVE-2025-21666, CVE-2024-50249, CVE-2024-50247, CVE-2024-47730, CVE-2024-49925, CVE-2025-21690,     CVE-2024-56606, CVE-2024-53172, CVE-2024-53119, CVE-2024-56602, CVE-2024-50262, CVE-2024-50127,     CVE-2024-50115, CVE-2024-57901, CVE-2024-50185, CVE-2024-53058, CVE-2025-21631, CVE-2024-56574,     CVE-2024-56539, CVE-2025-21678, CVE-2024-56659, CVE-2024-56594, CVE-2024-56708, CVE-2024-56662,     CVE-2024-55916, CVE-2024-53042, CVE-2024-50229, CVE-2024-56616, CVE-2024-50074, CVE-2024-57838,     CVE-2024-50160, CVE-2024-50218, CVE-2024-56597, CVE-2024-36476, CVE-2024-49571, CVE-2024-53112,     CVE-2024-50128, CVE-2024-53157, CVE-2024-56747, CVE-2024-56779, CVE-2024-50143, CVE-2024-42315,     CVE-2024-56688, CVE-2024-57903, CVE-2024-50283, CVE-2025-21640, CVE-2024-53099, CVE-2024-57902,     CVE-2024-57912, CVE-2024-56567, CVE-2024-56637, CVE-2024-50086, CVE-2024-56679, CVE-2024-56598,     CVE-2024-50236, CVE-2024-56593, CVE-2024-50058, CVE-2024-53239, CVE-2024-57906, CVE-2024-43098,     CVE-2024-53138, CVE-2024-50208, CVE-2024-49950, CVE-2024-53174, CVE-2024-50072, CVE-2024-45828,     CVE-2024-56759, CVE-2024-56533, CVE-2024-50117, CVE-2024-53131, CVE-2024-47707, CVE-2025-21689,     CVE-2025-21636, CVE-2024-56605, CVE-2024-57807, CVE-2024-56724, CVE-2024-57841, CVE-2024-53120,     CVE-2024-50304, CVE-2024-56748, CVE-2024-58087, CVE-2024-57917, CVE-2024-44938, CVE-2024-57896,     CVE-2024-56600, CVE-2024-57922, CVE-2024-53066, CVE-2024-56634, CVE-2024-53171, CVE-2024-56700,     CVE-2024-57939, CVE-2024-53151, CVE-2024-50202, CVE-2024-56572, CVE-2024-40965, CVE-2024-56716,     CVE-2024-46841, CVE-2024-50292, CVE-2024-57907, CVE-2024-53145, CVE-2024-50192, CVE-2024-53055,     CVE-2025-21646, CVE-2024-56690, CVE-2024-57882, CVE-2024-56576, CVE-2024-50301, CVE-2024-53059,     CVE-2024-56745, CVE-2024-57890, CVE-2024-50055, CVE-2024-56739, CVE-2024-50099, CVE-2024-50131,     CVE-2024-50194, CVE-2024-57884, CVE-2024-43900, CVE-2024-52332, CVE-2024-57931, CVE-2024-50163,     CVE-2024-53063, CVE-2024-53104, CVE-2024-57951, CVE-2025-21638, CVE-2024-53129, CVE-2024-56781,     CVE-2024-50195, CVE-2024-56548, CVE-2024-56603, CVE-2024-56586, CVE-2024-50167, CVE-2024-56648,     CVE-2024-56581, CVE-2024-53158, CVE-2024-56587, CVE-2024-49998, CVE-2024-50148, CVE-2024-56694,     CVE-2024-50110, CVE-2024-50244, CVE-2024-46784, CVE-2024-50273, CVE-2024-50116, CVE-2024-56614,     CVE-2024-50154, CVE-2024-56672, CVE-2025-21692, CVE-2024-56636, CVE-2024-56626, CVE-2024-50010,     CVE-2024-39497, CVE-2024-50101, CVE-2024-50141, CVE-2024-57791, CVE-2024-50082, CVE-2024-53226,     CVE-2024-53135, CVE-2024-50275, CVE-2024-56723, CVE-2024-53121, CVE-2024-50199, CVE-2024-56631,     CVE-2024-50083, CVE-2024-50245, CVE-2025-21687, CVE-2024-50151, CVE-2022-49034, CVE-2024-57900,     CVE-2024-53156, CVE-2024-36899, CVE-2024-50153, CVE-2024-53237, CVE-2024-56645, CVE-2024-26718,     CVE-2024-57892, CVE-2025-21653, CVE-2024-56627, CVE-2024-48881, CVE-2024-56625, CVE-2024-57850,     CVE-2024-56644, CVE-2024-56785)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has kernel packages installed that are affected by multiple vulnerabilities:

  - In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect     labeling Currently, Smack mirrors the label of incoming tcp/ipv4 connections: when a label 'foo' connects     to a label 'bar' with tcp/ipv4, 'foo' always gets 'foo' in returned ipv4 packets. So, 1) returned packets     are incorrectly labeled ('foo' instead of 'bar') 2) 'bar' can write to 'foo' without being authorized to     write. Here is a scenario how to see this: * Take two machines, let's call them C and S, with active Smack     in the default state (no settings, no rules, no labeled hosts, only builtin labels) * At S, add Smack rule     'foo bar w' (labels 'foo' and 'bar' are instantiated at S at this moment) * At S, at label 'bar', launch a     program that listens for incoming tcp/ipv4 connections * From C, at label 'foo', connect to the listener     at S. (label 'foo' is instantiated at C at this moment) Connection succeedes and works. * Send some data     in both directions. * Collect network traffic of this connection. All packets in both directions are     labeled with the CIPSO of the label 'foo'. Hence, label 'bar' writes to 'foo' without being authorized,     and even without ever being known at C. If anybody cares: exactly the same happens with DCCP. This     behavior 1st manifested in release 2.6.29.4 (see Fixes below) and it looks unintentional. At least, no     explanation was provided. I changed returned packes label into the 'bar', to bring it into line with the     Smack documentation claims. (CVE-2024-47659)

  - In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash     on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races     when it races with itself. hidpp_connect_event() primarily runs from a workqueue but it also runs on     probe() and if a device-connected packet is received by the hw when the thread running     hidpp_connect_event() from probe() is waiting on the hw, then a second thread running     hidpp_connect_event() will be started from the workqueue. This opens the following races (note the below     code is simplified): 1. Retrieving + printing the protocol (harmless race): if (!hidpp->protocol_major) {     hidpp_root_get_protocol_version() hidpp->protocol_major = response.rap.params[0]; } We can actually see     this race hit in the dmesg in the abrt output attached to rhbz#2227968: [ 3064.624215] logitech-hidpp-     device 0003:046D:4071.0049: HID++ 4.5 device connected. [ 3064.658184] logitech-hidpp-device     0003:046D:4071.0049: HID++ 4.5 device connected. Testing with extra logging added has shown that after     this the 2 threads take turn grabbing the hw access mutex (send_mutex) so they ping-pong through all the     other TOCTOU cases managing to hit all of them: 2. Updating the name to the HIDPP name (harmless race): if     (hidpp->name == hdev->name) { ... hidpp->name = new_name; } 3. Initializing the power_supply class for the     battery (problematic!): hidpp_initialize_battery() { if (hidpp->battery.ps) return 0; probe_battery(); /*     Blocks, threads take turns executing this */ hidpp->battery.desc.properties = devm_kmemdup(dev,     hidpp_battery_props, cnt, GFP_KERNEL); hidpp->battery.ps =     devm_power_supply_register(&hidpp->hid_dev->dev, &hidpp->battery.desc, cfg); } 4. Creating delayed     input_device (potentially problematic): if (hidpp->delayed_input) return; hidpp->delayed_input =     hidpp_allocate_input(hdev); The really big problem here is 3. Hitting the race leads to the following     sequence: hidpp->battery.desc.properties = devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);
    hidpp->battery.ps = devm_power_supply_register(&hidpp->hid_dev->dev, &hidpp->battery.desc, cfg); ...
    hidpp->battery.desc.properties = devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);
    hidpp->battery.ps = devm_power_supply_register(&hidpp->hid_dev->dev, &hidpp->battery.desc, cfg); So now we     have registered 2 power supplies for the same battery, which looks a bit weird from userspace's pov but     this is not even the really big problem. Notice how: 1. This is all devm-maganaged 2. The     hidpp->battery.desc struct is shared between the 2 power supplies 3. hidpp->battery.desc.properties points     to the result from the second devm_kmemdup() This causes a use after free scenario on USB disconnect of     the receiver: 1. The last registered power supply class device gets unregistered 2. The memory from the     last devm_kmemdup() call gets freed, hidpp->battery.desc.properties now points to freed memory 3. The     first registered power supply class device gets unregistered, this involves sending a remove uevent to     userspace which invokes power_supply_uevent() to fill the uevent data 4. power_supply_uevent() uses     hidpp->battery.desc.properties which now points to freed memory leading to backtraces like this one: Sep     22 20:01:35 eric kernel: BUG: unable to handle page fault for address: ffffb2140e017f08 ... Sep 22     20:01:35 eric kernel: Workqueue: usb_hub_wq hub_event Sep 22 20:01:35 eric kernel: RIP:
    0010:power_supply_uevent+0xee/0x1d0 ... Sep 22 20:01:35 eric kernel: ? asm_exc_page_fault+0x26/0x30 Sep 22     20:01:35 eric kernel: ? power_supply_uevent+0xee/0x1d0 Sep 22 20:01:35 eric kernel: ?     power_supply_uevent+0x10d/0x1d0 Sep 22 20:01:35 eric kernel: dev_uevent+0x10f/0x2d0 Sep 22 20:01:35 eric     kernel: kobject_uevent_env+0x291/0x680 Sep 22 20:01:35 eric kernel: ---truncated--- (CVE-2023-52478)

  - In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX     during PLL CPUX rate change While PLL CPUX clock rate change when CPU is running from it works in vast     majority of cases, now and then it causes instability. This leads to system crashes and other undefined     behaviour. After a lot of testing (30+ hours) while also doing a lot of frequency switches, we can't     observe any instability issues anymore when doing reparenting to stable clock like 24 MHz oscillator.
    (CVE-2023-52882)

  - In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error     handling for tightly received RTS messages in xtp_rx_rts_session_new This patch enhances error handling in     scenarios with RTS (Request to Send) messages arriving closely. It replaces the less informative     WARN_ON_ONCE backtraces with a new error handling method. This provides clearer error messages and allows     for the early termination of problematic sessions. Previously, sessions were only released at the end of     j1939_xtp_rx_rts(). Potentially this could be reproduced with something like: testj1939 -r vcan0:0x80 &     while true; do # send first RTS cansend vcan0 18EC8090#1014000303002301; # send second RTS cansend vcan0     18EC8090#1014000303002301; # send abort cansend vcan0 18EC8090#ff00000000002301; done (CVE-2023-52887)

  - In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Only free     buffer VA that is not NULL In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called     only when the buffer to free exists, there are some instances that didn't do the check and triggered     warnings in practice. We believe those checks were forgotten unintentionally. Add the checks back to fix     the warnings. (CVE-2023-52888)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
231611	Linux Distros Unpatched Vulnerability : CVE-2024-57841	Nessus	Misc.	2025/3/6	2025/8/6	medium
265107	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2025-2169)	Nessus	Huawei Local Security Checks	2025/9/16	2025/9/16	high
249192	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1993)	Nessus	Huawei Local Security Checks	2025/8/13	2025/8/13	high
249320	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1979)	Nessus	Huawei Local Security Checks	2025/8/14	2025/8/14	high
233479	Ubuntu 24.10 : Linux kernel (Low Latency) vulnerabilities (USN-7380-1)	Nessus	Ubuntu Local Security Checks	2025/3/28	2025/3/28	high
234816	Ubuntu 20.04 LTS : Linux kernel (IBM) vulnerabilities (USN-7458-1)	Nessus	Ubuntu Local Security Checks	2025/4/24	2025/4/24	high
216985	Debian dla-4076 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	2025/3/1	2025/4/9	high
233467	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7388-1)	Nessus	Ubuntu Local Security Checks	2025/3/28	2025/4/10	high
242830	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	high

偵測

搜尋 Plugin

medium

high

high

high

high

high

high

high

high