In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If the caller supplies an iocb->ki_pos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemap_read() enters an infinite loop. This behaviour was discovered when testing xfstests generic/525 with the "localio" optimisation for loopback NFS mounts.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    bpf: sync_linked_regs() must preserve subreg_def(CVE-2024-53125)

    nvme-multipath: defer partition scanning(CVE-2024-53093)

    dm cache: fix flushing uninitialized delayed_work on cache_ctr error(CVE-2024-50280)

    net: fix data-races around sk-sk_forward_alloc(CVE-2024-53124)

    NFSD: Never decrement pending_async_copies on error(CVE-2024-53073)

    smb: client: Fix use-after-free of network namespace.(CVE-2024-53095)

    mm: resolve faulty mmap_region() error path behaviour(CVE-2024-53096)

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format(CVE-2024-53104)

    arm64: probes: Fix uprobes for big-endian kernels(CVE-2024-50194)

    HID: core: zero-initialize the report buffer(CVE-2024-50302)

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find().(CVE-2024-50304)

    i40e: fix race condition by adding filter's intermediate sync state(CVE-2024-53088)

    media: dvbdev: prevent the risk of out of memory access(CVE-2024-53063)

    dm cache: fix potential out-of-bounds access on the first resume(CVE-2024-50278)

    dm cache: fix out-of-bounds access to the dirty bitset when resizing(CVE-2024-50279)

    net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT(CVE-2024-53057)

    usb: typec: altmode should keep reference to parent(CVE-2024-50150)

    vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans(CVE-2024-50264)

    USB: serial: io_edgeport: fix use after free in debug printk(CVE-2024-50267)

    filemap: Fix bounds checking in filemap_read().(CVE-2024-50272)

    sctp: properly validate chunk size in sctp_sf_ootb().(CVE-2024-50299)

    bpf: Check validity of link-type in bpf_link_show_fdinfo().(CVE-2024-53099)

    media: av7110: fix a spectre vulnerability(CVE-2024-50289)

    RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages(CVE-2024-50208)

    security/keys: fix slab-out-of-bounds in key_task_permission(CVE-2024-50301)

    KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory(CVE-2024-50115)

    nfs: Fix KMSAN warning in decode_getfattr_attrs().(CVE-2024-53066)

    net: missing check virtio(CVE-2024-43817)

    io_uring/rw: fix missing NOWAIT check for O_DIRECT start write(CVE-2024-53052)

    An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider     that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF),     which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or     check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245.(CVE-2021-29648)

    sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start(CVE-2024-49944)

    be2net: fix potential memory leak in be_xmit().(CVE-2024-50167)

    netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6().(CVE-2024-50256)

    netfilter: nft_payload: sanitize offset and length before calling skb_checksum().(CVE-2024-50251)

    net: hns3: fix kernel crash when uninstalling driver(CVE-2024-50296)

    tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().(CVE-2024-50154)

    net: fix crash when config small gso_max_size/gso_ipv4_max_size(CVE-2024-50258)

    RDMA/bnxt_re: Add a check for memory allocation(CVE-2024-50209)

    netfilter: nf_tables: prevent nf_skb_duplicated corruption(CVE-2024-49952)

    udf: fix uninit-value use in udf_get_fileshortad(CVE-2024-50143)

    bpf: Fix out-of-bounds write in trie_get_next_key().(CVE-2024-50262)

    tpm: Lock TPM chip in tpm_pm_suspend() first(CVE-2024-53085)

    bpf: support non-r10 register spill/fill to/from stack in precision tracking(CVE-2023-52920)

    bpf, arm64: Fix address emission with tag-based KASAN enabled(CVE-2024-50203)

    mm/swapfile: skip HugeTLB pages for unuse_vma(CVE-2024-50199)

    secretmem: disable memfd_secret() if arch cannot set direct map(CVE-2024-50182)

    NFSD: Initialize struct nfsd4_copy earlier(CVE-2024-50241)

    nvme-pci: fix race condition between reset and nvme_dev_disable().(CVE-2024-50135)

    irqchip/gic-v4: Don't allow a VMOVP on a dying VPE(CVE-2024-50192)

    bpf: Use raw_spinlock_t in ringbuf(CVE-2024-50138)

    x86/sgx: Fix deadlock in SGX NUMA node search(CVE-2024-49856)

    KVM: x86: Acquire kvm-srcu when handling KVM_SET_VCPU_EVENTS(CVE-2024-46830)

    RDMA/mad: Improve handling of timed out WRs of mad agent(CVE-2024-50095)

    ceph: remove the incorrect Fw reference check when dirtying pages(CVE-2024-50179)

    kernel: Fix page corruption caused by racy check in __free_pages(CVE-2023-52739)

    xfrm: validate new SA's prefixlen using SA family when sel.family is unset(CVE-2024-50142)

    posix-clock: Fix missing timespec64 check in pc_clock_settime().(CVE-2024-50195)

    iommu/vt-d: Fix double list_add when enabling VMD in scalable mode(CVE-2022-48916)

    static_call: Replace pointless WARN_ON() in static_call_module_notify().(CVE-2024-49954)

    tracing: Consider the NULL character when validating the event length(CVE-2024-50131)

    tty: n_gsm: Fix use-after-free in gsm_cleanup_mux(CVE-2024-50073)

    arm64: probes: Remove broken LDR (literal) uprobe support(CVE-2024-50099)

    net: add more sanity checks to qdisc_pkt_len_init().(CVE-2024-49948)

    net: avoid potential underflow in qdisc_pkt_len_init() with UFO(CVE-2024-49949)

    l2tp: prevent possible tunnel refcount underflow(CVE-2024-49940)

    RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency(CVE-2024-47696)

    smb: client: fix OOBs when building SMB2_IOCTL request(CVE-2024-50151)

    platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug(CVE-2024-49886)

    resource: fix region_intersects() vs add_memory_driver_managed().(CVE-2024-49878)

    sched: Fix yet more sched_fork() races(CVE-2022-48944)

    sched/fair: Fix fault in reweight_entity(CVE-2022-48921)

    fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name(CVE-2024-49934)

    usb: xhci: Check endpoint is valid before dereferencing it(CVE-2023-52901)

    gso: fix udp gso fraglist segmentation after pull from frag_list(CVE-2024-49978)

    NFSD: Limit the number of concurrent async COPY operations(CVE-2024-49974)

    drm/amd/display: Initialize denominators' default to 1(CVE-2024-49899)

    igb: Initialize mailbox message for VF reset(CVE-2022-48949)

    tipc: guard against string buffer overrun(CVE-2024-49995)

    net/mlx5: Fix error path in multi-packet WQE transmit(CVE-2024-50001)

    static_call: Handle module init failure correctly in static_call_del_module().(CVE-2024-50002)

    blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race(CVE-2024-50082)

    iommu/vt-d: Fix PCI device refcount leak in has_external_pci()(CVE-2022-49000)

    drm/amd/display: Skip wbscl_set_scaler_filter if filter is null(CVE-2024-46714)

    memcg: fix possible use-after-free in memcg_write_event_control().(CVE-2022-48988)

    ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference(CVE-2022-48999)

    drm/amd/display: Avoid overflow assignment in link_dp_cts(CVE-2024-50016)

    x86/bugs: Use code segment selector for VERW operand(CVE-2024-50072)

    parport: Proper fix for array out-of-bounds access(CVE-2024-50074)

    net: phy: fix null-ptr-deref while probe() failed(CVE-2022-49021)

    ext4: fix timer use-after-free on failed mount(CVE-2024-49960)

    ext4: fix i_data_sem unlock order in ext4_ind_migrate().(CVE-2024-50006)

    ext4: fix access to uninitialised lock in fc replay path(CVE-2024-50014)

    bpf: Prevent tail call between progs attached to different hooks(CVE-2024-50063)

    RDMA/cxgb4: Added NULL check for lookup_atid(CVE-2024-47749)

    nfsd: map the EBADMSG to nfserr_io to avoid warning(CVE-2024-49875)

    iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()(CVE-2022-49002)

    nbd: fix race between timeout and normal completion(CVE-2024-49855)

    io_uring: check if we need to reschedule during overflow flush(CVE-2024-50060)

    ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free(CVE-2024-49983)

    net: Fix an unsafe loop on the list(CVE-2024-50024)

    rtc: cmos: Fix event handler registration ordering issue(CVE-2022-48953)

    gpiolib: fix memory leak in gpiochip_setup_dev().(CVE-2022-48975)

    thermal: core: Reference count the zone in thermal_zone_get_by_id().(CVE-2024-50028)

    nfsd: return -EINVAL when namelen is 0(CVE-2024-47692)

    IB/core: Fix ib_cache_setup_one error flow cleanup(CVE-2024-47693)

    efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption(CVE-2024-49858)

    Bluetooth: Fix not cleanup led when bt_init fails(CVE-2022-48971)

    igb: Do not bring the device up after non-fatal error(CVE-2024-50040)

    uprobes: fix kernel info leak via '[uprobes]' vma(CVE-2024-49975)

    serial: protect uart_port_dtr_rts() in uart_shutdown() too(CVE-2024-50058)

    bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error(CVE-2024-47728)

    NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies().(CVE-2024-50046)

    lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc().(CVE-2024-47668)

    iavf: Fix error handling in iavf_init_module().(CVE-2022-49027)

    netfilter: xtables: avoid NFPROTO_UNSPEC where needed(CVE-2024-50038)

    net: mdio: fix unbalanced fwnode reference count in mdio_device_release().(CVE-2022-48961)

    bpf, lsm: Add check for BPF LSM return value(CVE-2024-47703)

    net/sched: accept TCA_STAB only for root qdisc(CVE-2024-50039)

    block: fix potential invalid pointer dereference in blk_add_partition(CVE-2024-47705)

    drm/amd/display: Check null pointers before using dc-clk_mgr(CVE-2024-49907)

    scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths(CVE-2024-49891)

    nfsd: call cache_put if xdr_reserve_space returns NULL(CVE-2024-47737)

    padata: use integer wrap around to prevent deadlock on seq_nr overflow(CVE-2024-47739)

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev().(CVE-2024-47707)

    HID: core: fix shift-out-of-bounds in hid_report_raw_event(CVE-2022-48978)

    af_unix: Get user_ns from in_skb in unix_diag_get_exact().(CVE-2022-48970)

    icmp: change the order of rate limits(CVE-2024-47678)

    vfs: fix race between evice_inodes() and find_inode()iput().(CVE-2024-47679)

    ixgbevf: Fix resource leak in ixgbevf_init_module().(CVE-2022-49028)

    tipc: re-fetch skb cb after tipc_msg_validate(CVE-2022-49017)

    net: tun: Fix use-after-free in tun_detach()(CVE-2022-49014)

    net/mlx5e: Fix use-after-free when reverting termination table(CVE-2022-49025)

    drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error(CVE-2024-47697)

    smb: client: fix UAF in async decryption(CVE-2024-50047)

    drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error(CVE-2024-47698)

    crypto: hisilicon/qm - inject error before stopping queue(CVE-2024-47730)

    bpf: Fix helper writes to read-only maps(CVE-2024-49861)

    ppp: fix ppp_async_encode() illegal access(CVE-2024-50035)

    cifs: Fix buffer overflow when parsing NFS reparse points(CVE-2024-49996)

    libbpf: Handle size overflow for ringbuf mmap(CVE-2022-49030)

    slip: make slhc_remember() more robust against malicious packets(CVE-2024-50033)

    netfilter: br_netfilter: fix panic with metadata_dst skb(CVE-2024-50045)

    ACPI: sysfs: validate return type of _STR method(CVE-2024-49860)

    firmware_loader: Block path traversal(CVE-2024-47742)

    drm/amd/display: Fix index out of bounds in degamma hardware format translation(CVE-2024-49894)

    vhost/scsi: null-ptr-dereference in vhost_scsi_get_req().(CVE-2024-49863)

    uprobe: avoid out-of-bounds memory access of fetching args(CVE-2024-50067)

    ACPI: battery: Fix possible crash when unregistering a battery hook(CVE-2024-49955)

    jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error(CVE-2024-49959)

    ext4: dax: fix overflowing extents beyond inode size when partially writing(CVE-2024-50015)

    udf: Fix preallocation discarding at indirect extent boundary(CVE-2022-48946)

    ext4: avoid OOB when system.data xattr changes underneath the filesystem(CVE-2024-47701)

    fbdev: efifb: Register sysfs groups through driver core(CVE-2024-49925)

    net: do not delay dst_entries_add() in dst_release()(CVE-2024-50036)

    ext4: avoid use-after-free in ext4_ext_show_leaf().(CVE-2024-49889)

    ext4: fix slab-use-after-free in ext4_split_extent_at().(CVE-2024-49884)

    ext4: aovid use-after-free in ext4_ext_insert_extent().(CVE-2024-49883)

    ext4: fix double brelse() the buffer of the extents path(CVE-2024-49882)

    ext4: update orig_path in ext4_find_extent().(CVE-2024-49881)

    ACPI: PAD: fix crash in exit_round_robin().(CVE-2024-49935)

    netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()(CVE-2024-47685)

    scsi: fnic: Move flush_work initialization out of if block(CVE-2024-50025)

    tpm: Clean up TPM space after command failure(CVE-2024-49851)

    tcp: check skb is non-NULL in tcp_rto_delta_us().(CVE-2024-47684)

    sock_map: Add a cond_resched() in sock_hash_free().(CVE-2024-47710)

    vhost_vdpa: assign irq bypass producer token correctly(CVE-2024-47748)

    mm: call the security_mmap_file() LSM hook in remap_file_pages().(CVE-2024-47745)

    x86/ioapic: Handle allocation failures gracefully(CVE-2024-49927)

    mm: avoid leaving partial pfn mappings around in error case(CVE-2024-47674)

    blk_iocost: fix more out of bound shifts(CVE-2024-49933)

    ice: protect XDP configuration with a mutex(CVE-2024-46765)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    bonding: change ipsec_lock from spin lock to mutex(CVE-2024-46678)

    ice: protect XDP configuration with a mutex(CVE-2024-46765)

    sched/smt: Fix unbalance sched_smt_present dec/inc(CVE-2024-44958)

    mm: avoid leaving partial pfn mappings around in error case(CVE-2024-47674)

    blk_iocost: fix more out of bound shifts(CVE-2024-49933)

    x86/ioapic: Handle allocation failures gracefully(CVE-2024-49927)

    In the Linux kernel, the following vulnerability has been resolved:ntb: intel: Fix the NULL vs IS_ERR()     bug for debugfs_create_dir()  The debugfs_create_dir() function returns error pointers. It never returns     NULL. So use IS_ERR() to check it.(CVE-2023-52917)

    mm: call the security_mmap_file() LSM hook in remap_file_pages().(CVE-2024-47745)

    ext4: avoid use-after-free in ext4_ext_show_leaf().(CVE-2024-49889)

    tpm: Clean up TPM space after command failure(CVE-2024-49851)

    sock_map: Add a cond_resched() in sock_hash_free().(CVE-2024-47710)

    tcp: check skb is non-NULL in tcp_rto_delta_us().(CVE-2024-47684)

    ext4: avoid OOB when system.data xattr changes underneath the filesystem(CVE-2024-47701)

    ext4: fix double brelse() the buffer of the extents path(CVE-2024-49882)

    fbdev: efifb: Register sysfs groups through driver core(CVE-2024-49925)

    ext4: fix slab-use-after-free in ext4_split_extent_at().(CVE-2024-49884)

    ext4: aovid use-after-free in ext4_ext_insert_extent().(CVE-2024-49883)

    ACPI: PAD: fix crash in exit_round_robin().(CVE-2024-49935)

    ext4: update orig_path in ext4_find_extent().(CVE-2024-49881)

    padata: use integer wrap around to prevent deadlock on seq_nr overflow(CVE-2024-47739)

    drm/amd/display: Check null pointer before try to access it(CVE-2024-49906)

    netfilter: xtables: avoid NFPROTO_UNSPEC where needed(CVE-2024-50038)

    drm/amd/display: Check null pointers before using dc-clk_mgr(CVE-2024-49907)

    drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error(CVE-2024-47697)

    uprobes: fix kernel info leak via '[uprobes]' vma(CVE-2024-49975)

    ext4: dax: fix overflowing extents beyond inode size when partially writing(CVE-2024-50015)

    net/sched: accept TCA_STAB only for root qdisc(CVE-2024-50039)

    block: fix potential invalid pointer dereference in blk_add_partition(CVE-2024-47705)

    nfsd: map the EBADMSG to nfserr_io to avoid warning(CVE-2024-49875)

    vhost/scsi: null-ptr-dereference in vhost_scsi_get_req().(CVE-2024-49863)

    thermal: core: Reference count the zone in thermal_zone_get_by_id().(CVE-2024-50028)

    bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error(CVE-2024-47728)

    net: mdio: fix unbalanced fwnode reference count in mdio_device_release().(CVE-2022-48961)

    IB/core: Fix ib_cache_setup_one error flow cleanup(CVE-2024-47693)

    bpf: Fix helper writes to read-only maps(CVE-2024-49861)

    nfsd: return -EINVAL when namelen is 0(CVE-2024-47692)

    gpiolib: fix memory leak in gpiochip_setup_dev().(CVE-2022-48975)

    RDMA/cxgb4: Added NULL check for lookup_atid(CVE-2024-47749)

    nfsd: call cache_put if xdr_reserve_space returns NULL(CVE-2024-47737)

    igb: Do not bring the device up after non-fatal error(CVE-2024-50040)

    jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error(CVE-2024-49959)

    crypto: hisilicon/qm - inject error before stopping queue(CVE-2024-47730)

    firmware_loader: Block path traversal(CVE-2024-47742)

    uprobe: avoid out-of-bounds memory access of fetching args(CVE-2024-50067)

    scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths(CVE-2024-49891)

    netfilter: br_netfilter: fix panic with metadata_dst skb(CVE-2024-50045)

    slip: make slhc_remember() more robust against malicious packets(CVE-2024-50033)

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev().(CVE-2024-47707)

    icmp: change the order of rate limits(CVE-2024-47678)

    serial: protect uart_port_dtr_rts() in uart_shutdown() too(CVE-2024-50058)

    NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies().(CVE-2024-50046)

    ACPI: battery: Fix possible crash when unregistering a battery hook(CVE-2024-49955)

    efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption(CVE-2024-49858)

    smb: client: fix UAF in async decryption(CVE-2024-50047)

    lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc().(CVE-2024-47668)

    net: Fix an unsafe loop on the list(CVE-2024-50024)

    vfs: fix race between evice_inodes() and find_inode()iput().(CVE-2024-47679)

    io_uring: check if we need to reschedule during overflow flush(CVE-2024-50060)

    ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free(CVE-2024-49983)

    ext4: fix access to uninitialised lock in fc replay path(CVE-2024-50014)

    ext4: fix timer use-after-free on failed mount(CVE-2024-49960)

    ext4: fix i_data_sem unlock order in ext4_ind_migrate().(CVE-2024-50006)

    bpf: Prevent tail call between progs attached to different hooks(CVE-2024-50063)

    NFSD: Limit the number of concurrent async COPY operations(CVE-2024-49974)

    static_call: Handle module init failure correctly in static_call_del_module().(CVE-2024-50002)

    blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race(CVE-2024-50082)

    drm/amd/display: Initialize denominators' default to 1(CVE-2024-49899)

    drm/amd/display: Avoid overflow assignment in link_dp_cts(CVE-2024-50016)

    x86/bugs: Use code segment selector for VERW operand(CVE-2024-50072)

    parport: Proper fix for array out-of-bounds access(CVE-2024-50074)

    tipc: guard against string buffer overrun(CVE-2024-49995)

    gso: fix udp gso fraglist segmentation after pull from frag_list(CVE-2024-49978)

    drm/amd/display: Skip wbscl_set_scaler_filter if filter is null(CVE-2024-46714)

    net/mlx5: Fix error path in multi-packet WQE transmit(CVE-2024-50001)

    fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name(CVE-2024-49934)

    resource: fix region_intersects() vs add_memory_driver_managed().(CVE-2024-49878)

    platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug(CVE-2024-49886)

    net: add more sanity checks to qdisc_pkt_len_init().(CVE-2024-49948)

    RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency(CVE-2024-47696)

    net: avoid potential underflow in qdisc_pkt_len_init() with UFO(CVE-2024-49949)

    smb: client: fix OOBs when building SMB2_IOCTL request(CVE-2024-50151)

    l2tp: prevent possible tunnel refcount underflow(CVE-2024-49940)

    iommu/vt-d: Fix double list_add when enabling VMD in scalable mode(CVE-2022-48916)

    tty: n_gsm: Fix use-after-free in gsm_cleanup_mux(CVE-2024-50073)

    arm64: probes: Remove broken LDR (literal) uprobe support(CVE-2024-50099)

    static_call: Replace pointless WARN_ON() in static_call_module_notify().(CVE-2024-49954)

    tracing: Consider the NULL character when validating the event length(CVE-2024-50131)

    posix-clock: Fix missing timespec64 check in pc_clock_settime().(CVE-2024-50195)

    xfrm: validate new SA's prefixlen using SA family when sel.family is unset(CVE-2024-50142)

    ceph: remove the incorrect Fw reference check when dirtying pages(CVE-2024-50179)

    RDMA/mad: Improve handling of timed out WRs of mad agent(CVE-2024-50095)

    irqchip/gic-v4: Don't allow a VMOVP on a dying VPE(CVE-2024-50192)

    bpf: Use raw_spinlock_t in ringbuf(CVE-2024-50138)

    KVM: x86: Acquire kvm-srcu when handling KVM_SET_VCPU_EVENTS(CVE-2024-46830)

    x86/sgx: Fix deadlock in SGX NUMA node search(CVE-2024-49856)

    nvme-pci: fix race condition between reset and nvme_dev_disable().(CVE-2024-50135)

    NFSD: Initialize struct nfsd4_copy earlier(CVE-2024-50241)

    mm/swapfile: skip HugeTLB pages for unuse_vma(CVE-2024-50199)

    netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6().(CVE-2024-50256)

    net: hns3: fix kernel crash when uninstalling driver(CVE-2024-50296)

    sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start(CVE-2024-49944)

    net: fix crash when config small gso_max_size/gso_ipv4_max_size(CVE-2024-50258)

    bpf: Fix out-of-bounds write in trie_get_next_key().(CVE-2024-50262)

    tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().(CVE-2024-50154)

    netfilter: nft_payload: sanitize offset and length before calling skb_checksum().(CVE-2024-50251)

    be2net: fix potential memory leak in be_xmit().(CVE-2024-50167)

    bpf: support non-r10 register spill/fill to/from stack in precision tracking(CVE-2023-52920)

    udf: fix uninit-value use in udf_get_fileshortad(CVE-2024-50143)

    RDMA/bnxt_re: Add a check for memory allocation(CVE-2024-50209)

    netfilter: nf_tables: prevent nf_skb_duplicated corruption(CVE-2024-49952)

    tpm: Lock TPM chip in tpm_pm_suspend() first(CVE-2024-53085)

    io_uring/rw: fix missing NOWAIT check for O_DIRECT start write(CVE-2024-53052)

    net: missing check virtio(CVE-2024-43817)

    nfs: Fix KMSAN warning in decode_getfattr_attrs().(CVE-2024-53066)

    KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory(CVE-2024-50115)

    security/keys: fix slab-out-of-bounds in key_task_permission(CVE-2024-50301)

    RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages(CVE-2024-50208)

    media: av7110: fix a spectre vulnerability(CVE-2024-50289)

    bpf: Check validity of link-type in bpf_link_show_fdinfo().(CVE-2024-53099)

    filemap: Fix bounds checking in filemap_read().(CVE-2024-50272)

    sctp: properly validate chunk size in sctp_sf_ootb().(CVE-2024-50299)

    arm64: probes: Fix uprobes for big-endian kernels(CVE-2024-50194)

    usb: typec: altmode should keep reference to parent(CVE-2024-50150)

    media: dvbdev: prevent the risk of out of memory access(CVE-2024-53063)

    HID: core: zero-initialize the report buffer(CVE-2024-50302)

    i40e: fix race condition by adding filter's intermediate sync state(CVE-2024-53088)

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find().(CVE-2024-50304)

    mm/thp: fix deferred split unqueue naming and locking(CVE-2024-53079)

    vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans(CVE-2024-50264)

    dm cache: fix potential out-of-bounds access on the first resume(CVE-2024-50278)

    net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT(CVE-2024-53057)

    dm cache: fix out-of-bounds access to the dirty bitset when resizing(CVE-2024-50279)

    USB: serial: io_edgeport: fix use after free in debug printk(CVE-2024-50267)

    mm: resolve faulty mmap_region() error path behaviour(CVE-2024-53096)

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format(CVE-2024-53104)

    dm cache: fix flushing uninitialized delayed_work on cache_ctr error(CVE-2024-50280)

    smb: client: Fix use-after-free of network namespace.(CVE-2024-53095)

    NFSD: Never decrement pending_async_copies on error(CVE-2024-53073)

    initramfs: avoid filename buffer overrun(CVE-2024-53142)

    netfilter: ipset: add missing range check in bitmap_ip_uadt(CVE-2024-53141)

    net/mlx5: fs, lock FTE when checking if active(CVE-2024-53121)

    virtio/vsock: Fix accept_queue memory leak(CVE-2024-53119)

    dmaengine: idxd: Let probe fail when workqueue cannot be enabled(CVE-2022-48868)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0289-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security     bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
    - CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events     (bsc#1220355).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
    - CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
    - CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
    - CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
    - CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
    - CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
    - CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
    - CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
    - CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
    - CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
    - CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
    - CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
    - CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
    - CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
    - CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
    - CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
    - CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
    - CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
    - CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
    - CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
    - CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe()     (bsc#1234923).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
    - CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
    - CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
    - CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
    - CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
    - CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
    - CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
    - CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()     (bsc#1235521).
    - CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()     (bsc#1235061).
    - CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM     (bsc#1235391).
    - CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
    - CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
    - CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU     (bsc#1235429).
    - CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
    - CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
    - CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
    - CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
    - CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
    - CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
    - CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
    - CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
    - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
    - CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
    - CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
    - CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
    - CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
    - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
    - CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
    - CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
    - CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
    - CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
    - CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
    - CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
    - CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
    - CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
    - CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).
    - CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
    - CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
    - CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
    - CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
    - CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
    - CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
    - CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
    - CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
    - CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
    - CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
    - CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
    - CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
    - CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount     (bsc#1235965).
    - CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
    - CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
    - CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
    - CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
    - CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
    - CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
    - CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue     (bsc#1236144).
    - CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
    - CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0153-1 advisory.

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0154-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (XSA-465 bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0117-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (bsc#1234282).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5818 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5818-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     November 24, 2024                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2022-45888 CVE-2023-52812 CVE-2024-26952 CVE-2024-26954                      CVE-2024-35964 CVE-2024-36244 CVE-2024-36478 CVE-2024-36914                      CVE-2024-36915 CVE-2024-36923 CVE-2024-38540 CVE-2024-38553                      CVE-2024-41080 CVE-2024-42322 CVE-2024-43868 CVE-2024-43904                      CVE-2024-43911 CVE-2024-44949 CVE-2024-49950 CVE-2024-49960                      CVE-2024-49974 CVE-2024-49986 CVE-2024-49991 CVE-2024-50012                      CVE-2024-50036 CVE-2024-50067 CVE-2024-50072 CVE-2024-50126                      CVE-2024-50215 CVE-2024-50218 CVE-2024-50228 CVE-2024-50229                      CVE-2024-50230 CVE-2024-50232 CVE-2024-50233 CVE-2024-50234                      CVE-2024-50235 CVE-2024-50236 CVE-2024-50237 CVE-2024-50242                      CVE-2024-50243 CVE-2024-50244 CVE-2024-50245 CVE-2024-50247                      CVE-2024-50249 CVE-2024-50250 CVE-2024-50251 CVE-2024-50252                      CVE-2024-50255 CVE-2024-50256 CVE-2024-50257 CVE-2024-50259                      CVE-2024-50261 CVE-2024-50262 CVE-2024-50264 CVE-2024-50265                      CVE-2024-50267 CVE-2024-50268 CVE-2024-50269 CVE-2024-50271                      CVE-2024-50272 CVE-2024-50273 CVE-2024-50276 CVE-2024-50278                      CVE-2024-50279 CVE-2024-50280 CVE-2024-50282 CVE-2024-50283                      CVE-2024-50284 CVE-2024-50286 CVE-2024-50287 CVE-2024-50290                      CVE-2024-50292 CVE-2024-50295 CVE-2024-50296 CVE-2024-50299                      CVE-2024-50301 CVE-2024-50302 CVE-2024-53042 CVE-2024-53043                      CVE-2024-53052 CVE-2024-53054 CVE-2024-53055 CVE-2024-53057                      CVE-2024-53058 CVE-2024-53059 CVE-2024-53060 CVE-2024-53061                      CVE-2024-53063 CVE-2024-53066 CVE-2024-53070 CVE-2024-53072                      CVE-2024-53081 CVE-2024-53082 CVE-2024-53088 CVE-2024-53093

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.119-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
216030	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1176)	Nessus	Huawei Local Security Checks	critical
216020	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1140)	Nessus	Huawei Local Security Checks	high
216018	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1159)	Nessus	Huawei Local Security Checks	high
216006	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1192)	Nessus	Huawei Local Security Checks	critical
214901	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:0289-1)	Nessus	SuSE Local Security Checks	high
214356	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:0153-1)	Nessus	SuSE Local Security Checks	high
214353	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:0154-1)	Nessus	SuSE Local Security Checks	high
214250	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:0117-1)	Nessus	SuSE Local Security Checks	high
213470	Debian dla-4008 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	critical
211777	Debian dsa-5818 : affs-modules-6.1.0-21-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2024-50272

medium

Tenable Plugins

critical

high

high

critical

high

high

high

high

critical

high