An update of the linux package has been released.

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20521 advisory.

    - perf: Fix perf_event_validate_size() lockdep splat (Mark Rutland)  [Orabug: 36261486]  {CVE-2023-6931}
    - perf: Fix perf_event_validate_size() (Peter Zijlstra)  [Orabug: 36261486]  {CVE-2023-6931}
    - Add Zen34 clients (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
    - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38172250]     {CVE-2024-36350,CVE-2024-36357}
    - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov) [Orabug: 38172250]     {CVE-2024-36350,CVE-2024-36357}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov) [Orabug: 38172250]     {CVE-2024-36350,CVE-2024-36357}
    - KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini) [Orabug: 38172250]     {CVE-2024-36350,CVE-2024-36357}
    - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov) [Orabug: 38172250]     {CVE-2024-36350,CVE-2024-36357}
    - x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov) [Orabug: 38172250]     {CVE-2024-36350,CVE-2024-36357}
    - x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky) [Orabug: 38172250]     {CVE-2024-36350,CVE-2024-36357}
    - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [Orabug:
    38049365] {CVE-2025-38001}
    - smb: client: Fix use-after-free in cifs_fill_dirent (Zhaolong Wang) [Orabug: 38094972] {CVE-2025-38051}
    - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [Orabug: 38186911]     {CVE-2024-56655}
    - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [Orabug: 38095147] {CVE-2025-38078}
    - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [Orabug: 38049371]     {CVE-2025-38003}
    - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 38049376] {CVE-2025-38004}
    - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [Orabug: 38095156] {CVE-2025-38079}
    - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [Orabug: 38049359]     {CVE-2025-38000}
    - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [Orabug: 38095002]     {CVE-2025-38058}
    - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [Orabug:
    38094858] {CVE-2025-38034}
    - nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [Orabug: 38094865] {CVE-2025-38035}
    - vxlan: Annotate FDB data races (Ido Schimmel) [Orabug: 38094881] {CVE-2025-38037}
    - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [Orabug:
    38095027] {CVE-2025-38061}
    - media: cx231xx: set device_caps for 417 (Hans Verkuil) [Orabug: 38094937] {CVE-2025-38044}
    - orangefs: Do not truncate file size (Matthew Wilcox) [Orabug: 38095058] {CVE-2025-38065}
    - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [Orabug:
    38095065] {CVE-2025-38066}
    - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [Orabug: 38095111]     {CVE-2025-38072}
    - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [Orabug: 38095136]     {CVE-2025-38075}
    - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug: 38015150]     {CVE-2025-37998}
    - nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094820]     {CVE-2025-38023}
    - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094829]     {CVE-2025-38024}
    - usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015128]     {CVE-2025-37994}
    - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug: 38015133]     {CVE-2025-37995}
    - xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976936] {CVE-2025-37949}
    - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug:
    37977033] {CVE-2025-37969}
    - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug: 37977039]     {CVE-2025-37970}
    - netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015143]     {CVE-2025-37997}
    - sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 38186817] {CVE-2025-37953}
    - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [Orabug: 37976839]     {CVE-2025-37927}
    - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose) [Orabug: 37930014]     {CVE-2025-37819}
    - sch_htb: make htb_qlen_notify() idempotent (Cong Wang) [Orabug: 37976860] {CVE-2025-37932}
    - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [Orabug: 36753382]     {CVE-2024-38541}
    - net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan) [Orabug: 37976767]     {CVE-2025-37909}
    - net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug:
    37976785] {CVE-2025-37913}
    - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira) [Orabug:
    37967412] {CVE-2025-37890}
    - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug:
    37976794] {CVE-2025-37915}
    - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [Orabug: 37976823] {CVE-2025-37923}
    - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Xu Wang) [Orabug: 37977121]     {CVE-2025-37990}
    - parisc: Fix double SIGFPE crash (Helge Deller) [Orabug: 37977129] {CVE-2025-37991}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4327 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4327-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     October 13, 2025                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.244-1     CVE ID         : CVE-2021-46987 CVE-2021-47037 CVE-2021-47070 CVE-2021-47076                      CVE-2021-47183 CVE-2021-47193 CVE-2021-47412 CVE-2021-47421                      CVE-2021-47455 CVE-2021-47498 CVE-2022-21546 CVE-2022-49063                      CVE-2022-50327 CVE-2023-52935 CVE-2023-53259 CVE-2024-26739                      CVE-2024-28956 CVE-2024-35790 CVE-2024-36350 CVE-2024-36357                      CVE-2024-38541 CVE-2024-43863 CVE-2024-46751 CVE-2024-46855                      CVE-2024-49935 CVE-2024-53203 CVE-2024-57883 CVE-2024-57996                      CVE-2025-21912 CVE-2025-37798 CVE-2025-37819 CVE-2025-37890                      CVE-2025-37909 CVE-2025-37913 CVE-2025-37914 CVE-2025-37915                      CVE-2025-37923 CVE-2025-37927 CVE-2025-37930 CVE-2025-37932                      CVE-2025-37948 CVE-2025-37949 CVE-2025-37958 CVE-2025-37963                      CVE-2025-37968 CVE-2025-37969 CVE-2025-37970 CVE-2025-37990                      CVE-2025-37992 CVE-2025-37994 CVE-2025-37995 CVE-2025-37997                      CVE-2025-37998 CVE-2025-38000 CVE-2025-38001 CVE-2025-38003                      CVE-2025-38004 CVE-2025-38005 CVE-2025-38009 CVE-2025-38023                      CVE-2025-38024 CVE-2025-38031 CVE-2025-38034 CVE-2025-38035                      CVE-2025-38037 CVE-2025-38044 CVE-2025-38051 CVE-2025-38052                      CVE-2025-38058 CVE-2025-38061 CVE-2025-38065 CVE-2025-38066                      CVE-2025-38067 CVE-2025-38072 CVE-2025-38074 CVE-2025-38075                      CVE-2025-38078 CVE-2025-38079 CVE-2025-38083 CVE-2025-38084                      CVE-2025-38085 CVE-2025-38086 CVE-2025-38090 CVE-2025-38094                      CVE-2025-38095 CVE-2025-38100 CVE-2025-38102 CVE-2025-38103                      CVE-2025-38107 CVE-2025-38108 CVE-2025-38111 CVE-2025-38112                      CVE-2025-38115 CVE-2025-38135 CVE-2025-38136 CVE-2025-38138                      CVE-2025-38143 CVE-2025-38145 CVE-2025-38146 CVE-2025-38147                      CVE-2025-38153 CVE-2025-38157 CVE-2025-38160 CVE-2025-38161                      CVE-2025-38163 CVE-2025-38173 CVE-2025-38174 CVE-2025-38177                      CVE-2025-38180 CVE-2025-38181 CVE-2025-38184 CVE-2025-38185                      CVE-2025-38190 CVE-2025-38193 CVE-2025-38194 CVE-2025-38197                      CVE-2025-38200 CVE-2025-38203 CVE-2025-38204 CVE-2025-38206                      CVE-2025-38211 CVE-2025-38212 CVE-2025-38214 CVE-2025-38218                      CVE-2025-38219 CVE-2025-38222 CVE-2025-38226 CVE-2025-38227                      CVE-2025-38229 CVE-2025-38230 CVE-2025-38231 CVE-2025-38237                      CVE-2025-38245 CVE-2025-38249 CVE-2025-38251 CVE-2025-38263                      CVE-2025-38273 CVE-2025-38285 CVE-2025-38286 CVE-2025-38293                      CVE-2025-38298 CVE-2025-38312 CVE-2025-38313 CVE-2025-38320                      CVE-2025-38323 CVE-2025-38324 CVE-2025-38326 CVE-2025-38328                      CVE-2025-38332 CVE-2025-38336 CVE-2025-38337 CVE-2025-38342                      CVE-2025-38344 CVE-2025-38345 CVE-2025-38346 CVE-2025-38347                      CVE-2025-38348 CVE-2025-38350 CVE-2025-38352 CVE-2025-38363                      CVE-2025-38371 CVE-2025-38375 CVE-2025-38377 CVE-2025-38386                      CVE-2025-38387 CVE-2025-38389 CVE-2025-38391 CVE-2025-38393                      CVE-2025-38395 CVE-2025-38399 CVE-2025-38400 CVE-2025-38401                      CVE-2025-38403 CVE-2025-38404 CVE-2025-38406 CVE-2025-38415                      CVE-2025-38416 CVE-2025-38420 CVE-2025-38424 CVE-2025-38428                      CVE-2025-38430 CVE-2025-38439 CVE-2025-38445 CVE-2025-38448                      CVE-2025-38457 CVE-2025-38458 CVE-2025-38459 CVE-2025-38460                      CVE-2025-38461 CVE-2025-38462 CVE-2025-38464 CVE-2025-38465                      CVE-2025-38466 CVE-2025-38467 CVE-2025-38468 CVE-2025-38470                      CVE-2025-38473 CVE-2025-38474 CVE-2025-38476 CVE-2025-38477                      CVE-2025-38478 CVE-2025-38480 CVE-2025-38481 CVE-2025-38482                      CVE-2025-38483 CVE-2025-38487 CVE-2025-38488 CVE-2025-38494                      CVE-2025-38495 CVE-2025-38497 CVE-2025-38498 CVE-2025-38513                      CVE-2025-38514 CVE-2025-38515 CVE-2025-38516 CVE-2025-38529                      CVE-2025-38530 CVE-2025-38535 CVE-2025-38538 CVE-2025-38539                      CVE-2025-38540 CVE-2025-38542 CVE-2025-38546 CVE-2025-38548                      CVE-2025-38553 CVE-2025-38555 CVE-2025-38563 CVE-2025-38565                      CVE-2025-38569 CVE-2025-38572 CVE-2025-38574 CVE-2025-38577                      CVE-2025-38578 CVE-2025-38581 CVE-2025-38601 CVE-2025-38602                      CVE-2025-38604 CVE-2025-38608 CVE-2025-38612 CVE-2025-38617                      CVE-2025-38618 CVE-2025-38622 CVE-2025-38635 CVE-2025-38639                      CVE-2025-38650 CVE-2025-38652 CVE-2025-38663 CVE-2025-38664                      CVE-2025-38666 CVE-2025-38668 CVE-2025-38671 CVE-2025-38676                      CVE-2025-38677 CVE-2025-38680 CVE-2025-38681 CVE-2025-38683                      CVE-2025-38684 CVE-2025-38687 CVE-2025-38691 CVE-2025-38693                      CVE-2025-38694 CVE-2025-38695 CVE-2025-38697 CVE-2025-38698                      CVE-2025-38699 CVE-2025-38700 CVE-2025-38701 CVE-2025-38706                      CVE-2025-38708 CVE-2025-38712 CVE-2025-38713 CVE-2025-38714                      CVE-2025-38715 CVE-2025-38718 CVE-2025-38721 CVE-2025-38724                      CVE-2025-38727 CVE-2025-38729 CVE-2025-38732 CVE-2025-39676                      CVE-2025-39681 CVE-2025-39683 CVE-2025-39687 CVE-2025-39689                      CVE-2025-39691 CVE-2025-39697 CVE-2025-39703 CVE-2025-39709                      CVE-2025-39710 CVE-2025-39713 CVE-2025-39714 CVE-2025-39724                      CVE-2025-39730 CVE-2025-39736 CVE-2025-39737 CVE-2025-39742                      CVE-2025-39743 CVE-2025-39749 CVE-2025-39752 CVE-2025-39756                      CVE-2025-39757 CVE-2025-39760 CVE-2025-39766 CVE-2025-39782                      CVE-2025-39783 CVE-2025-39787 CVE-2025-39788 CVE-2025-39794                      CVE-2025-39795 CVE-2025-39798 CVE-2025-39808 CVE-2025-39812                      CVE-2025-39813 CVE-2025-39817 CVE-2025-39823 CVE-2025-39824                      CVE-2025-39828 CVE-2025-39835 CVE-2025-39839 CVE-2025-39841                      CVE-2025-39846 CVE-2025-39847 CVE-2025-39848 CVE-2025-39853                      CVE-2025-39860 CVE-2025-39864 CVE-2025-39865 CVE-2025-39891                      CVE-2025-39898 CVE-2025-39902 CVE-2025-39920 CVE-2025-40300     Debian Bug     : 1040901 1109891

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.244-1.  Starting with this version, the hyperv-daemons package is     also provided on arm64, and modules are signed with an ephemeral key     on all architectures.  This version additionally includes many more     bug fixes from stable updates 5.10.238-5.10.244.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	2026/7/24	2026/11/14	high
247835	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20521)	Nessus	Oracle Linux Local Security Checks	2025/8/11	2026/2/9	high
270133	Debian dla-4327 : ata-modules-5.10.0-35-armmp-di - security update	Nessus	Debian Local Security Checks	2025/10/13	2025/10/28	medium

偵測

搜尋 Plugin

high

high

medium