The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1743193221 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in     asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be     uninitialized. Fail log: BUG: KMSAN: uninit-value in asix_check_host_enable     drivers/net/usb/asix_common.c:82 [inline] BUG: KMSAN: uninit-value in asix_check_host_enable     drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 BUG: KMSAN: uninit-value in     asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497     asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] asix_check_host_enable     drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 asix_mdio_read+0x3c1/0xb00     drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497 (CVE-2021-47101)

  - A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to     host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX)     file locks. (CVE-2022-0480)

  - A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this     vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The     manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to     apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.
    (CVE-2022-3594)

  - In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in     vt_setactivate array_index_nospec ensures that an out-of-bounds value is set to zero on the transient     path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be     decreased first and then sanitized with array_index_nospec. Kasper Acknowledgements: Jakob Koschel, Brian     Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.
    (CVE-2022-48804)

  - A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness,     potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field     that overlaps with rec->tx_ready. (CVE-2023-1075)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7313:32 advisory.

    * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
      * kernel: net/sched: multiple vulnerabilities (CVE-2023-3609, CVE-2023-3611, CVE-2023-4128,     CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)
      * kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436)
      * kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait (CVE-2021-43975)
      * kernel: Rate limit overflow messages in r8152 in intr_callback (CVE-2022-3594)
      * kernel: use after free flaw in l2cap_conn_del (CVE-2022-3640)
      * kernel: double free in usb_8dev_start_xmit (CVE-2022-28388)
      * kernel: vmwgfx: multiple vulnerabilities (CVE-2022-38457, CVE-2022-40133, CVE-2023-33951,     CVE-2023-33952)
      * hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)
      * kernel: Information leak in l2cap_parse_conf_req (CVE-2022-42895)
      * kernel: KVM: multiple vulnerabilities (CVE-2022-45869, CVE-2023-4155, CVE-2023-30456)
      * kernel: memory leak in ttusb_dec_exit_dvb (CVE-2022-45887)
      * kernel: speculative pointer dereference in do_prlimit (CVE-2023-0458)
      * kernel: use-after-free due to race condition in qdisc_graft (CVE-2023-0590)
      * kernel: x86/mm: Randomize per-cpu entry area (CVE-2023-0597)
      * kernel: HID: check empty report_list in hid_validate_values (CVE-2023-1073)
      * kernel: sctp: fail if no bound addresses can be used for a given scope (CVE-2023-1074)
      * kernel: hid: Use After Free in asus_remove (CVE-2023-1079)
      * kernel: use-after-free in drivers/media/rc/ene_ir.c (CVE-2023-1118)
      * kernel: hash collisions in the IPv6 connection lookup table (CVE-2023-1206)
      * kernel: ovl: fix use after free in struct ovl_aio_req (CVE-2023-1252)
      * kernel: denial of service in tipc_conn_close (CVE-2023-1382)
      * kernel: Use after free bug in btsdio_remove due to race condition (CVE-2023-1989)
      * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)
      * kernel: ext4: use-after-free in ext4_xattr_set_entry (CVE-2023-2513)
      * kernel: fbcon: shift-out-of-bounds in fbcon_set_font (CVE-2023-3161)
      * kernel: out-of-bounds access in relay_file_read (CVE-2023-3268)
      * kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params (CVE-2023-3772)
      * kernel: smsusb: use-after-free caused by do_submit_urb (CVE-2023-4132)
      * kernel: Race between task migrating pages and another task calling exit_mmap (CVE-2023-4732)
      * Kernel: denial of service in atm_tc_enqueue due to type confusion (CVE-2023-23455)
      * kernel: mpls: double free on sysctl allocation failure (CVE-2023-26545)
      * kernel: Denial of service issue in az6027 driver (CVE-2023-28328)
      * kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow (CVE-2023-28772)
      * kernel: blocking operation in dvb_frontend_get_event and wait_event_interruptible (CVE-2023-31084)
      * kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove (CVE-2023-33203)
      * kernel: saa7134: race condition leading to use-after-free in saa7134_finidev (CVE-2023-35823)
      * kernel: dm1105: race condition leading to use-after-free in dm1105_remove.c (CVE-2023-35824)
      * kernel: r592: race condition leading to use-after-free in r592_remove (CVE-2023-35825)
      * kernel: net/tls: tls_is_tx_ready() checked list_entry (CVE-2023-1075)
      * kernel: use-after-free bug in remove function xgene_hwmon_remove (CVE-2023-1855)
      * kernel: Use after free bug in r592_remove (CVE-2023-3141)
      * kernel: gfs2: NULL pointer dereference in gfs2_evict_inode (CVE-2023-3212)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2023:1683229770 advisory.

  - In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This     could lead to local escalation of privilege with System execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References:
    Upstream kernel (CVE-2021-0920)

  - A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the     way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del()     together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A     privileged local user could use this flaw to crash the system or escalate their privileges on the system.
    (CVE-2021-3640)

  - A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This     flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a     leak of internal kernel information. (CVE-2022-1353)

  - A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user     forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local     user to crash or potentially escalate their privileges on the system. (CVE-2022-1679)

  - A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged     user to gain root privileges. The bug allows to build several exploit primitives such as kernel address     information leak, arbitrary execution, etc. (CVE-2022-1729)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1719231016 advisory.

  - A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this     vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The     manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to     apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.
    (CVE-2022-3594)

  - An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU     component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local     attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
    (CVE-2022-36402)

  - There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req     function which can be used to leak kernel pointers remotely. We recommend upgrading past commit     https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e     https://www.google.com/url (CVE-2022-42895)

  - In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden accesses to     the reset domains Accessing reset domains descriptors by the index upon the SCMI drivers requests through     the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver     misbehave. Add an internal consistency check before any such domains descriptors accesses.
    (CVE-2022-48655)

  - A memory corruption flaw was found in the Linux kernel's human interface device (HID) subsystem in how a     user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their     privileges on the system. (CVE-2023-1073)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
361440	AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1743193221)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/2	medium
292841	MiracleLinux 8 : kernel-4.18.0-513.5.1.el8_9 (AXSA:2023-7313:32)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
366948	CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2023:1683229770)	Nessus	CentOS Local Security Checks	2026/10/18	2026/10/19	high
360379	AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1719231016)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/2	high

偵測

搜尋 Plugin

medium

high

high

high