In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk->sk_forward_alloc Syzkaller reported this warning: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 16 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x1c5/0x1e0 Modules linked in: CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc5 #26 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:inet_sock_destruct+0x1c5/0x1e0 Code: 24 12 4c 89 e2 5b 48 c7 c7 98 ec bb 82 41 5c e9 d1 18 17 ff 4c 89 e6 5b 48 c7 c7 d0 ec bb 82 41 5c e9 bf 18 17 ff 0f 0b eb 83 <0f> 0b eb 97 0f 0b eb 87 0f 0b e9 68 ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0018:ffffc9000008bd90 EFLAGS: 00010206 RAX: 0000000000000300 RBX: ffff88810b172a90 RCX: 0000000000000007 RDX: 0000000000000002 RSI: 0000000000000300 RDI: ffff88810b172a00 RBP: ffff88810b172a00 R08: ffff888104273c00 R09: 0000000000100007 R10: 0000000000020000 R11: 0000000000000006 R12: ffff88810b172a00 R13: 0000000000000004 R14: 0000000000000000 R15: ffff888237c31f78 FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc63fecac8 CR3: 000000000342e000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? __warn+0x88/0x130 ? inet_sock_destruct+0x1c5/0x1e0 ? report_bug+0x18e/0x1a0 ? handle_bug+0x53/0x90 ? exc_invalid_op+0x18/0x70 ? asm_exc_invalid_op+0x1a/0x20 ? inet_sock_destruct+0x1c5/0x1e0 __sk_destruct+0x2a/0x200 rcu_do_batch+0x1aa/0x530 ? rcu_do_batch+0x13b/0x530 rcu_core+0x159/0x2f0 handle_softirqs+0xd3/0x2b0 ? __pfx_smpboot_thread_fn+0x10/0x10 run_ksoftirqd+0x25/0x30 smpboot_thread_fn+0xdd/0x1d0 kthread+0xd3/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> ---[ end trace 0000000000000000 ]--- Its possible that two threads call tcp_v6_do_rcv()/sk_forward_alloc_add() concurrently when sk->sk_state == TCP_LISTEN with sk->sk_lock unlocked, which triggers a data-race around sk->sk_forward_alloc: tcp_v6_rcv tcp_v6_do_rcv skb_clone_and_charge_r sk_rmem_schedule __sk_mem_schedule sk_forward_alloc_add() skb_set_owner_r sk_mem_charge sk_forward_alloc_add() __kfree_skb skb_release_all skb_release_head_state sock_rfree sk_mem_uncharge sk_forward_alloc_add() sk_mem_reclaim // set local var reclaimable __sk_mem_reclaim sk_forward_alloc_add() In this syzkaller testcase, two threads call tcp_v6_do_rcv() with skb->truesize=768, the sk_forward_alloc changes like this: (cpu 1) | (cpu 2) | sk_forward_alloc ... | ... | 0 __sk_mem_schedule() | | +4096 = 4096 | __sk_mem_schedule() | +4096 = 8192 sk_mem_charge() | | -768 = 7424 | sk_mem_charge() | -768 = 6656 ... | ... | sk_mem_uncharge() | | +768 = 7424 reclaimable=7424 | | | sk_mem_uncharge() | +768 = 8192 | reclaimable=8192 | __sk_mem_reclaim() | | -4096 = 4096 | __sk_mem_reclaim() | -8192 = -4096 != 0 The skb_clone_and_charge_r() should not be called in tcp_v6_do_rcv() when sk->sk_state is TCP_LISTEN, it happens later in tcp_v6_syn_recv_sock(). Fix the same issue in dccp_v6_do_rcv().

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7391-1 advisory.

    Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2024-23848)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Cryptographic API;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - File systems infrastructure;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - Tracing infrastructure;

    - Memory management;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IEEE 802.15.4 subsystem;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - eXpress Data Path;

    - SELinux security module;

    - USB sound devices; (CVE-2024-53172, CVE-2024-56572, CVE-2024-56739, CVE-2024-56643, CVE-2024-53131,     CVE-2024-57904, CVE-2024-53145, CVE-2024-57908, CVE-2024-53155, CVE-2024-56691, CVE-2024-57901,     CVE-2024-56595, CVE-2024-55916, CVE-2024-50051, CVE-2024-49936, CVE-2024-57900, CVE-2024-53239,     CVE-2024-53142, CVE-2024-57889, CVE-2024-53217, CVE-2024-56619, CVE-2025-21653, CVE-2024-53140,     CVE-2024-53130, CVE-2024-43098, CVE-2024-56746, CVE-2024-56650, CVE-2024-56723, CVE-2024-56558,     CVE-2024-57884, CVE-2024-56601, CVE-2024-56581, CVE-2024-57906, CVE-2024-57948, CVE-2024-49996,     CVE-2024-56598, CVE-2025-21638, CVE-2024-49925, CVE-2024-56767, CVE-2024-53127, CVE-2024-53181,     CVE-2024-53194, CVE-2024-57902, CVE-2024-56630, CVE-2024-56567, CVE-2024-56602, CVE-2024-56562,     CVE-2024-56596, CVE-2024-56570, CVE-2024-56670, CVE-2024-53135, CVE-2024-56629, CVE-2024-56769,     CVE-2024-56637, CVE-2024-56681, CVE-2024-57910, CVE-2024-57892, CVE-2024-56574, CVE-2024-53121,     CVE-2024-56532, CVE-2025-21689, CVE-2024-53156, CVE-2024-57912, CVE-2024-56597, CVE-2025-21640,     CVE-2024-53690, CVE-2024-56548, CVE-2024-56633, CVE-2024-43900, CVE-2024-56631, CVE-2021-47219,     CVE-2024-56659, CVE-2024-53158, CVE-2025-21639, CVE-2024-53136, CVE-2024-56615, CVE-2024-56586,     CVE-2024-57946, CVE-2024-57911, CVE-2025-21699, CVE-2025-21664, CVE-2024-53174, CVE-2024-53184,     CVE-2024-53138, CVE-2024-53680, CVE-2024-56593, CVE-2024-56644, CVE-2024-56720, CVE-2024-53197,     CVE-2024-57802, CVE-2024-53157, CVE-2024-56756, CVE-2024-53171, CVE-2024-57931, CVE-2024-56600,     CVE-2024-53112, CVE-2024-56770, CVE-2024-53214, CVE-2024-57849, CVE-2024-57890, CVE-2024-56634,     CVE-2024-44938, CVE-2024-53183, CVE-2025-21697, CVE-2024-57929, CVE-2024-53165, CVE-2024-53161,     CVE-2024-53150, CVE-2024-56606, CVE-2024-56748, CVE-2024-48881, CVE-2024-56594, CVE-2024-56645,     CVE-2024-56781, CVE-2024-56531, CVE-2024-56605, CVE-2024-56779, CVE-2025-21678, CVE-2024-53227,     CVE-2024-56688, CVE-2024-56576, CVE-2024-56587, CVE-2024-53124, CVE-2024-49884, CVE-2024-57850,     CVE-2024-56569, CVE-2024-53148, CVE-2025-21694, CVE-2024-56700, CVE-2024-53173, CVE-2024-53198,     CVE-2024-52332, CVE-2024-47707, CVE-2024-56539, CVE-2024-56704, CVE-2024-56747, CVE-2025-21687,     CVE-2024-56690, CVE-2022-49034, CVE-2024-57938, CVE-2024-57951, CVE-2024-38588, CVE-2024-56603,     CVE-2024-57807, CVE-2024-56780, CVE-2024-57922, CVE-2024-56642, CVE-2024-57913, CVE-2024-53146,     CVE-2024-56614, CVE-2024-56694, CVE-2024-56724)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu Pro FIPS-updates 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7393-1 advisory.

    Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2024-23848)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - Virtio block driver;

    - TPM device driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - LED subsystem;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - USB Device Class drivers;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - File systems infrastructure;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - Perf events;

    - Arbitrary resource management;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - Amlogic Meson SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-49938, CVE-2024-41066, CVE-2024-57951, CVE-2024-56779, CVE-2024-50194,     CVE-2024-50265, CVE-2024-56596, CVE-2024-57922, CVE-2024-56614, CVE-2024-57912, CVE-2024-50251,     CVE-2024-56569, CVE-2024-56587, CVE-2024-57807, CVE-2024-50051, CVE-2024-49997, CVE-2024-57911,     CVE-2024-50195, CVE-2024-50205, CVE-2024-35896, CVE-2025-21689, CVE-2024-43098, CVE-2024-47757,     CVE-2025-21639, CVE-2024-57900, CVE-2024-56634, CVE-2024-50230, CVE-2024-57946, CVE-2024-53059,     CVE-2024-50290, CVE-2024-49985, CVE-2024-50142, CVE-2024-49925, CVE-2024-50199, CVE-2024-47699,     CVE-2024-53172, CVE-2024-53173, CVE-2024-56631, CVE-2024-57938, CVE-2024-53101, CVE-2024-53197,     CVE-2024-49896, CVE-2024-47697, CVE-2024-56644, CVE-2024-50236, CVE-2024-46731, CVE-2024-47674,     CVE-2024-38544, CVE-2024-46853, CVE-2024-47740, CVE-2024-53121, CVE-2024-50082, CVE-2024-53165,     CVE-2024-50040, CVE-2024-57929, CVE-2024-57889, CVE-2024-49860, CVE-2024-50287, CVE-2022-49034,     CVE-2024-56690, CVE-2024-50302, CVE-2024-50006, CVE-2024-49949, CVE-2024-49868, CVE-2024-49903,     CVE-2024-47723, CVE-2024-49936, CVE-2024-49955, CVE-2024-50234, CVE-2024-50301, CVE-2024-47670,     CVE-2024-56574, CVE-2024-50168, CVE-2024-57913, CVE-2024-56602, CVE-2024-56630, CVE-2024-53130,     CVE-2024-53145, CVE-2024-56642, CVE-2024-50202, CVE-2024-38588, CVE-2024-56767, CVE-2024-50024,     CVE-2024-53198, CVE-2024-56548, CVE-2024-50184, CVE-2024-47756, CVE-2024-50167, CVE-2025-21694,     CVE-2024-53063, CVE-2024-49966, CVE-2024-50299, CVE-2024-50143, CVE-2024-49924, CVE-2024-53061,     CVE-2024-53124, CVE-2024-49902, CVE-2024-56739, CVE-2024-49952, CVE-2025-21664, CVE-2024-49877,     CVE-2024-47701, CVE-2024-52332, CVE-2024-49975, CVE-2024-56645, CVE-2024-53140, CVE-2024-49948,     CVE-2024-56724, CVE-2024-49963, CVE-2025-21687, CVE-2024-47698, CVE-2024-50039, CVE-2024-56595,     CVE-2024-50282, CVE-2023-52458, CVE-2024-56615, CVE-2024-40965, CVE-2024-49965, CVE-2024-53112,     CVE-2024-53135, CVE-2024-56601, CVE-2024-56532, CVE-2024-53184, CVE-2024-47672, CVE-2024-53155,     CVE-2024-50171, CVE-2024-50035, CVE-2024-56704, CVE-2024-53156, CVE-2024-47685, CVE-2024-50044,     CVE-2024-47712, CVE-2024-47707, CVE-2024-50179, CVE-2024-56594, CVE-2024-56688, CVE-2024-50151,     CVE-2025-21699, CVE-2024-56598, CVE-2024-47737, CVE-2024-57849, CVE-2024-56576, CVE-2025-21638,     CVE-2024-53181, CVE-2024-50033, CVE-2024-49995, CVE-2024-56756, CVE-2024-49867, CVE-2025-21697,     CVE-2024-56600, CVE-2024-56670, CVE-2024-47713, CVE-2024-46854, CVE-2024-47671, CVE-2024-53680,     CVE-2024-49851, CVE-2024-49883, CVE-2024-56780, CVE-2024-56770, CVE-2024-56650, CVE-2024-53146,     CVE-2024-50218, CVE-2024-56531, CVE-2024-47706, CVE-2024-56572, CVE-2024-47709, CVE-2024-49958,     CVE-2024-57948, CVE-2024-40911, CVE-2024-57904, CVE-2024-56769, CVE-2024-35887, CVE-2025-21678,     CVE-2024-57802, CVE-2024-56700, CVE-2024-43900, CVE-2024-47747, CVE-2024-50059, CVE-2024-56606,     CVE-2024-53161, CVE-2024-50116, CVE-2024-50180, CVE-2024-50127, CVE-2024-53131, CVE-2024-53157,     CVE-2024-50279, CVE-2024-57850, CVE-2024-56619, CVE-2024-49982, CVE-2024-56748, CVE-2024-53104,     CVE-2024-49981, CVE-2024-56643, CVE-2024-49962, CVE-2024-50131, CVE-2024-56781, CVE-2024-50233,     CVE-2024-56597, CVE-2024-56567, CVE-2024-57902, CVE-2024-43863, CVE-2024-56581, CVE-2024-53171,     CVE-2024-56633, CVE-2024-50296, CVE-2024-49879, CVE-2024-56593, CVE-2024-47679, CVE-2024-53148,     CVE-2024-50237, CVE-2024-49959, CVE-2024-50269, CVE-2024-53138, CVE-2024-49957, CVE-2024-50278,     CVE-2024-49894, CVE-2024-49900, CVE-2024-56586, CVE-2024-50148, CVE-2024-50262, CVE-2024-56720,     CVE-2024-50096, CVE-2024-57931, CVE-2024-56681, CVE-2021-47219, CVE-2025-21640, CVE-2024-56603,     CVE-2024-50229, CVE-2024-53174, CVE-2024-50007, CVE-2024-49944, CVE-2024-50273, CVE-2024-49878,     CVE-2024-56605, CVE-2024-53150, CVE-2024-44931, CVE-2024-53214, CVE-2024-49882, CVE-2024-53158,     CVE-2024-55916, CVE-2024-50117, CVE-2024-56570, CVE-2024-44938, CVE-2024-53239, CVE-2024-53217,     CVE-2024-50099, CVE-2024-50267, CVE-2024-56562, CVE-2024-40953, CVE-2024-57884, CVE-2024-49892,     CVE-2024-56659, CVE-2024-56746, CVE-2024-50074, CVE-2024-41016, CVE-2024-53142, CVE-2024-57901,     CVE-2024-56637, CVE-2024-47710, CVE-2024-46849, CVE-2024-57910, CVE-2024-47692, CVE-2024-48881,     CVE-2024-53194, CVE-2024-56558, CVE-2024-56747, CVE-2024-56629, CVE-2024-47696, CVE-2024-56691,     CVE-2024-53227, CVE-2024-57908, CVE-2024-57892, CVE-2024-53183, CVE-2024-56723, CVE-2024-42252,     CVE-2024-57890, CVE-2024-50134, CVE-2024-56694, CVE-2024-57906, CVE-2024-56539, CVE-2024-53690,     CVE-2024-53066, CVE-2024-49973, CVE-2024-47684, CVE-2024-50045, CVE-2024-49884, CVE-2025-21653,     CVE-2024-47749, CVE-2024-47742, CVE-2024-50008, CVE-2024-50150, CVE-2024-53127, CVE-2024-49996)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7392-1 advisory.

    Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2024-23848)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Cryptographic API;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - BTRFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - File systems infrastructure;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - Tracing infrastructure;

    - Memory management;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IEEE 802.15.4 subsystem;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - Sun RPC protocol;

    - TIPC protocol;

    - eXpress Data Path;

    - SELinux security module;

    - USB sound devices; (CVE-2024-56532, CVE-2024-53127, CVE-2024-56574, CVE-2024-56576, CVE-2024-57922,     CVE-2024-53135, CVE-2024-56606, CVE-2024-53155, CVE-2024-53136, CVE-2024-56769, CVE-2024-56690,     CVE-2024-53150, CVE-2024-38588, CVE-2024-53171, CVE-2024-56748, CVE-2024-56558, CVE-2024-56595,     CVE-2024-56670, CVE-2024-56637, CVE-2024-56739, CVE-2024-56681, CVE-2024-53158, CVE-2024-53172,     CVE-2024-56700, CVE-2024-56645, CVE-2024-56723, CVE-2024-56572, CVE-2024-57889, CVE-2024-43098,     CVE-2024-56614, CVE-2024-53197, CVE-2025-21640, CVE-2024-57938, CVE-2024-53140, CVE-2024-57929,     CVE-2024-56593, CVE-2024-56691, CVE-2025-21687, CVE-2024-56770, CVE-2024-53131, CVE-2024-56531,     CVE-2024-56603, CVE-2025-21653, CVE-2024-53239, CVE-2024-57946, CVE-2024-56581, CVE-2024-56694,     CVE-2024-56597, CVE-2024-57849, CVE-2024-56601, CVE-2024-53156, CVE-2024-56747, CVE-2024-53146,     CVE-2025-21664, CVE-2024-53217, CVE-2025-21638, CVE-2024-53157, CVE-2024-56688, CVE-2024-47707,     CVE-2024-53173, CVE-2024-56605, CVE-2024-56619, CVE-2024-49925, CVE-2024-49936, CVE-2024-56586,     CVE-2024-57892, CVE-2024-56562, CVE-2024-57902, CVE-2024-53148, CVE-2024-53194, CVE-2024-56720,     CVE-2024-53121, CVE-2024-48881, CVE-2024-56767, CVE-2024-56780, CVE-2024-56548, CVE-2024-57931,     CVE-2024-56724, CVE-2024-53142, CVE-2024-53214, CVE-2025-21639, CVE-2024-43900, CVE-2024-56659,     CVE-2024-57908, CVE-2024-57913, CVE-2024-53181, CVE-2024-56630, CVE-2024-56598, CVE-2024-56539,     CVE-2024-57951, CVE-2024-56600, CVE-2024-52332, CVE-2024-55916, CVE-2024-53130, CVE-2024-56587,     CVE-2024-57911, CVE-2024-57901, CVE-2024-57807, CVE-2024-49996, CVE-2025-21697, CVE-2024-53198,     CVE-2024-53145, CVE-2024-57910, CVE-2022-49034, CVE-2024-56629, CVE-2024-56570, CVE-2024-57948,     CVE-2024-53227, CVE-2024-56643, CVE-2024-56602, CVE-2024-57904, CVE-2024-56594, CVE-2024-56615,     CVE-2024-53690, CVE-2024-56650, CVE-2025-21699, CVE-2024-56644, CVE-2024-56631, CVE-2024-53183,     CVE-2024-50051, CVE-2024-49884, CVE-2024-56569, CVE-2024-56596, CVE-2024-57912, CVE-2024-56781,     CVE-2024-57802, CVE-2024-56704, CVE-2024-57850, CVE-2024-57906, CVE-2025-21678, CVE-2024-56634,     CVE-2024-53138, CVE-2021-47219, CVE-2024-57890, CVE-2024-53112, CVE-2024-53174, CVE-2024-56756,     CVE-2024-56779, CVE-2024-57884, CVE-2024-56746, CVE-2024-53161, CVE-2024-57900, CVE-2024-56567,     CVE-2024-56633, CVE-2025-21694, CVE-2024-53165, CVE-2024-56642, CVE-2024-53184, CVE-2024-44938,     CVE-2024-53124, CVE-2025-21689, CVE-2024-53680)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7390-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-50299, CVE-2024-50304, CVE-2024-50196, CVE-2024-56548, CVE-2024-56531,     CVE-2024-56720, CVE-2024-58087, CVE-2024-50116, CVE-2024-56590, CVE-2024-56589, CVE-2024-53172,     CVE-2025-21687, CVE-2024-57925, CVE-2024-56640, CVE-2024-57896, CVE-2024-56739, CVE-2024-56622,     CVE-2024-53173, CVE-2024-56610, CVE-2024-56787, CVE-2025-21690, CVE-2024-50259, CVE-2024-50278,     CVE-2024-53685, CVE-2024-50099, CVE-2024-56616, CVE-2024-53181, CVE-2024-56643, CVE-2024-49950,     CVE-2024-53119, CVE-2024-50257, CVE-2024-56777, CVE-2024-49998, CVE-2024-56629, CVE-2024-56728,     CVE-2024-56601, CVE-2024-56776, CVE-2024-46809, CVE-2024-53061, CVE-2024-50273, CVE-2024-45828,     CVE-2024-53161, CVE-2024-56700, CVE-2024-50103, CVE-2024-50156, CVE-2024-53150, CVE-2024-50237,     CVE-2024-46841, CVE-2024-56636, CVE-2024-56572, CVE-2024-50290, CVE-2024-57913, CVE-2024-56698,     CVE-2024-56690, CVE-2024-56568, CVE-2024-57911, CVE-2024-49974, CVE-2024-47707, CVE-2024-53059,     CVE-2024-50244, CVE-2024-57874, CVE-2024-56539, CVE-2024-53145, CVE-2024-56602, CVE-2024-50115,     CVE-2024-56726, CVE-2024-53157, CVE-2024-41080, CVE-2024-57938, CVE-2024-56569, CVE-2024-50171,     CVE-2024-57807, CVE-2024-57890, CVE-2024-53122, CVE-2024-56746, CVE-2024-53135, CVE-2024-53063,     CVE-2024-57922, CVE-2024-53130, CVE-2024-53174, CVE-2024-56774, CVE-2024-56606, CVE-2024-56648,     CVE-2024-50160, CVE-2024-50262, CVE-2024-50163, CVE-2024-53112, CVE-2024-50234, CVE-2024-56576,     CVE-2025-21664, CVE-2024-53113, CVE-2024-56625, CVE-2024-50154, CVE-2024-56662, CVE-2024-56645,     CVE-2024-56778, CVE-2024-40953, CVE-2024-50055, CVE-2024-40965, CVE-2024-56627, CVE-2024-43900,     CVE-2024-56578, CVE-2024-50202, CVE-2024-56670, CVE-2024-56705, CVE-2024-53103, CVE-2024-57948,     CVE-2024-53197, CVE-2024-56704, CVE-2024-50101, CVE-2024-53180, CVE-2024-56769, CVE-2024-53171,     CVE-2024-56558, CVE-2024-53042, CVE-2024-50051, CVE-2024-42291, CVE-2024-39497, CVE-2024-53183,     CVE-2024-43098, CVE-2024-57904, CVE-2024-56615, CVE-2024-50086, CVE-2024-53239, CVE-2024-50127,     CVE-2024-50134, CVE-2024-53148, CVE-2024-47408, CVE-2024-50279, CVE-2024-50292, CVE-2024-53099,     CVE-2024-50121, CVE-2024-56567, CVE-2024-53146, CVE-2024-53052, CVE-2024-53120, CVE-2024-56678,     CVE-2024-50282, CVE-2024-50249, CVE-2024-56623, CVE-2024-56701, CVE-2024-56708, CVE-2024-56763,     CVE-2024-50209, CVE-2025-21639, CVE-2024-50230, CVE-2024-53096, CVE-2024-47730, CVE-2024-42252,     CVE-2024-57849, CVE-2024-56587, CVE-2024-56614, CVE-2024-56369, CVE-2024-57838, CVE-2025-21653,     CVE-2024-57792, CVE-2024-53140, CVE-2024-56780, CVE-2024-50218, CVE-2024-56767, CVE-2024-49571,     CVE-2024-57910, CVE-2024-50269, CVE-2024-56630, CVE-2024-52332, CVE-2024-56693, CVE-2024-50148,     CVE-2025-21648, CVE-2024-49996, CVE-2024-50085, CVE-2024-56688, CVE-2024-53125, CVE-2024-53129,     CVE-2024-55916, CVE-2024-57900, CVE-2024-57903, CVE-2024-57939, CVE-2024-50010, CVE-2024-50265,     CVE-2023-52913, CVE-2024-36476, CVE-2024-56574, CVE-2025-21636, CVE-2024-57912, CVE-2024-56642,     CVE-2024-50287, CVE-2024-36899, CVE-2024-53131, CVE-2024-56595, CVE-2024-53058, CVE-2024-46871,     CVE-2024-56586, CVE-2024-53198, CVE-2025-21699, CVE-2024-50082, CVE-2024-53194, CVE-2024-57901,     CVE-2024-50199, CVE-2024-57802, CVE-2024-53138, CVE-2024-53124, CVE-2024-50167, CVE-2024-56597,     CVE-2024-50233, CVE-2024-49925, CVE-2024-56781, CVE-2024-53127, CVE-2025-21680, CVE-2024-53165,     CVE-2024-53227, CVE-2024-56672, CVE-2024-55881, CVE-2024-53184, CVE-2024-50198, CVE-2024-42315,     CVE-2024-57931, CVE-2024-56694, CVE-2024-57951, CVE-2024-56659, CVE-2024-50247, CVE-2024-53690,     CVE-2024-56650, CVE-2024-57889, CVE-2024-53097, CVE-2024-50072, CVE-2024-50267, CVE-2024-53066,     CVE-2024-50153, CVE-2024-50194, CVE-2024-56681, CVE-2025-21692, CVE-2024-50131, CVE-2024-57884,     CVE-2024-56748, CVE-2024-48881, CVE-2024-56593, CVE-2024-50162, CVE-2024-44938, CVE-2024-50128,     CVE-2024-50275, CVE-2025-21638, CVE-2024-56634, CVE-2024-56679, CVE-2024-47143, CVE-2024-50251,     CVE-2024-56570, CVE-2024-53156, CVE-2024-50205, CVE-2024-56747, CVE-2024-53121, CVE-2024-50208,     CVE-2024-57841, CVE-2024-56575, CVE-2024-57791, CVE-2024-57897, CVE-2024-56626, CVE-2024-35887,     CVE-2024-50302, CVE-2024-50242, CVE-2024-56756, CVE-2024-53217, CVE-2025-21669, CVE-2024-56603,     CVE-2024-56785, CVE-2024-57917, CVE-2024-50058, CVE-2024-57902, CVE-2024-53215, CVE-2024-50229,     CVE-2024-50295, CVE-2024-56633, CVE-2024-50151, CVE-2024-53214, CVE-2024-50232, CVE-2024-53158,     CVE-2024-56715, CVE-2024-50182, CVE-2025-21631, CVE-2024-53104, CVE-2024-53101, CVE-2024-57908,     CVE-2024-53055, CVE-2024-50143, CVE-2025-21646, CVE-2024-56605, CVE-2025-21640, CVE-2024-56779,     CVE-2024-50296, CVE-2024-50201, CVE-2024-56691, CVE-2024-57882, CVE-2024-53141, CVE-2024-56600,     CVE-2025-21689, CVE-2024-26718, CVE-2024-56596, CVE-2024-53151, CVE-2024-50083, CVE-2024-50283,     CVE-2024-56532, CVE-2024-53226, CVE-2024-56637, CVE-2024-50193, CVE-2024-56644, CVE-2025-21637,     CVE-2024-56716, CVE-2024-53680, CVE-2024-57907, CVE-2022-49034, CVE-2024-50150, CVE-2024-56723,     CVE-2025-21665, CVE-2024-56759, CVE-2024-50301, CVE-2024-57929, CVE-2024-53164, CVE-2024-56754,     CVE-2024-53237, CVE-2025-21694, CVE-2024-56770, CVE-2024-50141, CVE-2024-50192, CVE-2024-56581,     CVE-2024-57892, CVE-2024-53142, CVE-2024-50268, CVE-2024-53088, CVE-2025-21683, CVE-2024-56724,     CVE-2024-41066, CVE-2024-46784, CVE-2024-50074, CVE-2024-57906, CVE-2024-57850, CVE-2024-50036,     CVE-2024-57946, CVE-2024-50117, CVE-2024-56594, CVE-2024-56619, CVE-2024-56598, CVE-2024-56533,     CVE-2024-56562, CVE-2024-57940, CVE-2024-56745, CVE-2024-53155, CVE-2024-50236, CVE-2025-21666,     CVE-2025-21697, CVE-2024-50185, CVE-2024-56631, CVE-2024-50195, CVE-2024-50245, CVE-2024-50110,     CVE-2025-21678, CVE-2024-50142)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7389-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2025-21640, CVE-2024-56625, CVE-2024-53104, CVE-2024-53055, CVE-2024-26718,     CVE-2024-53180, CVE-2024-50257, CVE-2024-53174, CVE-2024-53680, CVE-2024-56670, CVE-2024-56606,     CVE-2024-53156, CVE-2024-53112, CVE-2024-57940, CVE-2024-57807, CVE-2024-50259, CVE-2024-53172,     CVE-2024-53214, CVE-2024-50275, CVE-2024-56770, CVE-2025-21666, CVE-2024-53101, CVE-2024-56630,     CVE-2025-21638, CVE-2024-50199, CVE-2024-56705, CVE-2024-56619, CVE-2024-50115, CVE-2024-50209,     CVE-2024-50116, CVE-2024-57908, CVE-2024-50242, CVE-2024-50128, CVE-2024-50247, CVE-2024-56626,     CVE-2024-56693, CVE-2024-56648, CVE-2024-56745, CVE-2024-42252, CVE-2024-53088, CVE-2024-50251,     CVE-2024-57889, CVE-2024-53150, CVE-2024-53066, CVE-2024-56569, CVE-2025-21697, CVE-2024-50185,     CVE-2024-53158, CVE-2024-50168, CVE-2024-41066, CVE-2024-53145, CVE-2024-50171, CVE-2024-53135,     CVE-2024-42315, CVE-2024-56615, CVE-2024-50230, CVE-2024-50299, CVE-2024-53140, CVE-2024-56704,     CVE-2024-56533, CVE-2024-50121, CVE-2024-39497, CVE-2024-50282, CVE-2024-56715, CVE-2024-56779,     CVE-2024-56769, CVE-2024-56570, CVE-2024-55916, CVE-2024-56637, CVE-2025-21694, CVE-2024-56691,     CVE-2024-50301, CVE-2024-50156, CVE-2024-57903, CVE-2025-21636, CVE-2024-49974, CVE-2024-56532,     CVE-2024-50201, CVE-2024-57929, CVE-2024-56590, CVE-2024-57882, CVE-2024-57925, CVE-2024-56759,     CVE-2024-56726, CVE-2024-53215, CVE-2024-53121, CVE-2024-57912, CVE-2024-53119, CVE-2024-57931,     CVE-2024-41080, CVE-2024-35887, CVE-2024-53173, CVE-2024-50245, CVE-2024-50267, CVE-2024-56627,     CVE-2024-50085, CVE-2024-56756, CVE-2024-50232, CVE-2024-56636, CVE-2024-56581, CVE-2024-53194,     CVE-2025-21689, CVE-2024-53226, CVE-2024-53239, CVE-2024-56662, CVE-2024-50205, CVE-2024-53127,     CVE-2024-56586, CVE-2024-56603, CVE-2024-53122, CVE-2025-21699, CVE-2024-56568, CVE-2024-57884,     CVE-2024-53113, CVE-2024-56574, CVE-2025-21669, CVE-2024-53125, CVE-2024-56748, CVE-2024-56575,     CVE-2024-56640, CVE-2024-57901, CVE-2022-49034, CVE-2024-56728, CVE-2024-57910, CVE-2024-40965,     CVE-2024-36899, CVE-2024-50131, CVE-2024-42291, CVE-2024-50233, CVE-2024-57791, CVE-2024-57948,     CVE-2024-56633, CVE-2025-21653, CVE-2024-50287, CVE-2024-56724, CVE-2024-57907, CVE-2024-49925,     CVE-2024-47730, CVE-2024-46841, CVE-2024-56716, CVE-2024-44938, CVE-2024-49950, CVE-2024-53131,     CVE-2024-46809, CVE-2024-50074, CVE-2024-50167, CVE-2024-53171, CVE-2024-57911, CVE-2025-21680,     CVE-2024-53059, CVE-2024-53161, CVE-2024-47707, CVE-2025-21683, CVE-2024-56597, CVE-2024-53184,     CVE-2024-56562, CVE-2024-47143, CVE-2024-50103, CVE-2024-53138, CVE-2025-21639, CVE-2024-50182,     CVE-2024-36476, CVE-2024-50099, CVE-2024-50194, CVE-2024-50163, CVE-2024-43098, CVE-2023-52913,     CVE-2024-56708, CVE-2024-53130, CVE-2024-56587, CVE-2024-57951, CVE-2024-57938, CVE-2024-57917,     CVE-2024-53063, CVE-2024-50148, CVE-2024-50229, CVE-2024-56763, CVE-2024-50101, CVE-2024-57939,     CVE-2024-57874, CVE-2024-56778, CVE-2024-56701, CVE-2024-56672, CVE-2024-56598, CVE-2024-45828,     CVE-2024-50208, CVE-2024-53129, CVE-2024-56754, CVE-2024-50141, CVE-2024-56539, CVE-2024-56720,     CVE-2024-53165, CVE-2024-50234, CVE-2024-53120, CVE-2024-50192, CVE-2024-50283, CVE-2024-50160,     CVE-2024-57922, CVE-2024-53052, CVE-2024-48881, CVE-2024-56596, CVE-2024-50202, CVE-2025-21646,     CVE-2024-50082, CVE-2024-50278, CVE-2024-57904, CVE-2024-56602, CVE-2024-57913, CVE-2024-50151,     CVE-2025-21690, CVE-2024-53690, CVE-2024-56739, CVE-2024-56594, CVE-2024-53155, CVE-2024-56694,     CVE-2024-56767, CVE-2024-50117, CVE-2024-56634, CVE-2024-47408, CVE-2024-53124, CVE-2024-50292,     CVE-2024-56576, CVE-2024-57841, CVE-2024-57902, CVE-2024-57849, CVE-2024-50196, CVE-2024-56629,     CVE-2024-57792, CVE-2024-56605, CVE-2024-57896, CVE-2025-21664, CVE-2024-53142, CVE-2025-21665,     CVE-2024-50249, CVE-2024-50290, CVE-2024-56688, CVE-2024-53096, CVE-2024-53061, CVE-2024-56622,     CVE-2024-50110, CVE-2024-56777, CVE-2024-58087, CVE-2024-56600, CVE-2024-56601, CVE-2024-56645,     CVE-2024-56572, CVE-2024-56723, CVE-2024-50195, CVE-2024-56595, CVE-2024-56698, CVE-2024-57906,     CVE-2024-52332, CVE-2024-53099, CVE-2024-56787, CVE-2025-21687, CVE-2024-53141, CVE-2024-53058,     CVE-2024-49998, CVE-2024-53103, CVE-2024-56642, CVE-2024-50058, CVE-2024-53151, CVE-2024-50162,     CVE-2024-53164, CVE-2024-56643, CVE-2024-56610, CVE-2024-50302, CVE-2024-57900, CVE-2024-50083,     CVE-2024-50072, CVE-2024-53227, CVE-2024-53183, CVE-2024-56690, CVE-2024-50142, CVE-2024-50127,     CVE-2024-50134, CVE-2024-56700, CVE-2024-53198, CVE-2024-56781, CVE-2024-57897, CVE-2024-56774,     CVE-2024-50269, CVE-2025-21678, CVE-2024-46784, CVE-2024-53685, CVE-2024-56593, CVE-2024-50051,     CVE-2024-57890, CVE-2024-53197, CVE-2024-50198, CVE-2024-50279, CVE-2024-57802, CVE-2024-56578,     CVE-2024-50154, CVE-2024-56623, CVE-2024-56776, CVE-2024-56681, CVE-2024-53157, CVE-2024-57850,     CVE-2024-57946, CVE-2024-53148, CVE-2024-53042, CVE-2024-53181, CVE-2024-57892, CVE-2024-50153,     CVE-2024-50265, CVE-2025-21631, CVE-2025-21692, CVE-2024-56558, CVE-2024-56747, CVE-2024-50304,     CVE-2024-50244, CVE-2024-43900, CVE-2024-56746, CVE-2024-56631, CVE-2024-56644, CVE-2024-50262,     CVE-2024-49571, CVE-2024-50296, CVE-2024-56614, CVE-2024-50036, CVE-2024-50273, CVE-2024-56659,     CVE-2024-56650, CVE-2024-50236, CVE-2024-50268, CVE-2025-21637, CVE-2025-21648, CVE-2024-53097,     CVE-2024-56678, CVE-2024-56780, CVE-2024-50010, CVE-2024-46871, CVE-2024-50237, CVE-2024-57838,     CVE-2024-49996, CVE-2024-50055, CVE-2024-50143, CVE-2024-53146, CVE-2024-50150, CVE-2024-50193,     CVE-2024-56567, CVE-2024-50086, CVE-2024-50295, CVE-2024-50218, CVE-2024-40953, CVE-2024-56616,     CVE-2024-56548, CVE-2024-56531, CVE-2024-56679, CVE-2024-56785, CVE-2024-53217, CVE-2024-53237,     CVE-2024-56369, CVE-2024-55881, CVE-2024-56589)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7387-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Media staging drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Memory management;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - SELinux security module;

    - ALSA framework;

    - USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142,     CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237,     CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574,     CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688,     CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226,     CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690,     CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901,     CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998,     CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315,     CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569,     CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571, CVE-2024-56754,     CVE-2024-56572, CVE-2024-49974, CVE-2024-53140, CVE-2025-21639, CVE-2024-56369, CVE-2024-56601,     CVE-2024-56642, CVE-2024-57792, CVE-2024-57838, CVE-2024-53127, CVE-2025-21690, CVE-2024-56548,     CVE-2024-53155, CVE-2024-47143, CVE-2024-56691, CVE-2024-57938, CVE-2025-21692, CVE-2024-56648,     CVE-2024-46841, CVE-2024-57807, CVE-2024-57908, CVE-2024-50121, CVE-2024-57841, CVE-2024-53135,     CVE-2024-53180, CVE-2025-21683, CVE-2024-56568, CVE-2024-56575, CVE-2024-56774, CVE-2024-56589,     CVE-2024-36899, CVE-2024-57889, CVE-2024-50275, CVE-2024-56606, CVE-2024-56578, CVE-2024-56726,     CVE-2024-36476, CVE-2024-53122, CVE-2024-56594, CVE-2024-56562, CVE-2024-53690, CVE-2024-56769,     CVE-2024-57910, CVE-2024-56720, CVE-2024-56581, CVE-2024-56723, CVE-2025-21669, CVE-2024-56627,     CVE-2024-57925, CVE-2024-56600, CVE-2024-56631, CVE-2024-56595, CVE-2024-53685, CVE-2024-53157,     CVE-2024-57931, CVE-2024-56644, CVE-2024-53215, CVE-2024-57897, CVE-2024-56748, CVE-2024-53138,     CVE-2025-21646, CVE-2024-47707, CVE-2024-56781, CVE-2024-57922, CVE-2024-53197, CVE-2024-56777,     CVE-2024-56625, CVE-2024-56650, CVE-2024-56704, CVE-2025-21638, CVE-2024-56623, CVE-2024-57890,     CVE-2024-56630, CVE-2024-53680, CVE-2025-21637, CVE-2024-56539, CVE-2024-56532, CVE-2024-53217,     CVE-2024-53120, CVE-2024-56780, CVE-2022-49034, CVE-2024-43098, CVE-2024-56590, CVE-2024-50283,     CVE-2024-57917, CVE-2024-56776, CVE-2024-53151, CVE-2024-49950, CVE-2024-57850, CVE-2024-44938,     CVE-2024-47408, CVE-2024-56778, CVE-2024-56779, CVE-2024-56637, CVE-2024-56640, CVE-2024-57907,     CVE-2024-57940, CVE-2025-21697, CVE-2024-57946, CVE-2024-53156, CVE-2024-56759, CVE-2024-53146,     CVE-2024-56610, CVE-2024-56670, CVE-2024-57912, CVE-2024-57874, CVE-2024-57884, CVE-2024-56745,     CVE-2024-56715, CVE-2024-56746, CVE-2024-53112, CVE-2024-53145, CVE-2024-56614, CVE-2024-53174,     CVE-2024-57849, CVE-2024-56767, CVE-2024-53173, CVE-2025-21689, CVE-2024-56739, CVE-2024-56694,     CVE-2024-57939, CVE-2024-56622, CVE-2024-56570, CVE-2024-56634, CVE-2024-53161, CVE-2024-53121,     CVE-2024-56705, CVE-2024-56756, CVE-2024-53183, CVE-2024-56629, CVE-2025-21636, CVE-2024-56763,     CVE-2024-56593, CVE-2025-21640, CVE-2024-53148, CVE-2025-21678, CVE-2024-56602, CVE-2024-57882,     CVE-2024-56576, CVE-2024-53096, CVE-2024-53165, CVE-2024-57903, CVE-2024-57802, CVE-2025-21653,     CVE-2024-56662, CVE-2024-56626, CVE-2024-56645, CVE-2024-48881, CVE-2024-57892, CVE-2024-56531,     CVE-2024-56716, CVE-2024-56787, CVE-2024-57929, CVE-2024-50055, CVE-2024-49996, CVE-2024-53171,     CVE-2025-21648, CVE-2024-57948, CVE-2024-53099, CVE-2024-56785, CVE-2024-57913, CVE-2024-53131,     CVE-2024-53194, CVE-2024-56659, CVE-2024-55916, CVE-2024-56616, CVE-2024-56728, CVE-2024-43900,     CVE-2025-21680, CVE-2024-53113, CVE-2024-58087, CVE-2024-56598, CVE-2024-57902, CVE-2024-56679,     CVE-2025-21666, CVE-2024-57951, CVE-2024-56708, CVE-2024-56633, CVE-2024-56747, CVE-2024-53125,     CVE-2024-45828, CVE-2024-53124, CVE-2024-46871, CVE-2024-57900, CVE-2024-50304, CVE-2024-53158)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7388-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168,     CVE-2024-53214, CVE-2024-56670, CVE-2024-53146, CVE-2024-50302, CVE-2024-56629, CVE-2024-53680,     CVE-2024-53124, CVE-2024-56610, CVE-2024-50259, CVE-2024-47408, CVE-2024-53217, CVE-2025-21683,     CVE-2024-50196, CVE-2025-21694, CVE-2024-56596, CVE-2024-53161, CVE-2024-53061, CVE-2024-57940,     CVE-2024-41066, CVE-2024-53122, CVE-2024-56776, CVE-2024-50268, CVE-2024-53184, CVE-2024-53088,     CVE-2024-56590, CVE-2024-50182, CVE-2024-56705, CVE-2024-50103, CVE-2024-57938, CVE-2024-53155,     CVE-2024-50282, CVE-2024-50209, CVE-2024-53150, CVE-2024-56532, CVE-2024-57910, CVE-2024-56678,     CVE-2024-53181, CVE-2024-50230, CVE-2024-42291, CVE-2024-50233, CVE-2024-53130, CVE-2024-56756,     CVE-2024-53113, CVE-2024-56623, CVE-2024-41080, CVE-2024-53197, CVE-2024-53142, CVE-2024-50251,     CVE-2024-50237, CVE-2024-47143, CVE-2024-56633, CVE-2024-57889, CVE-2024-53127, CVE-2024-46871,     CVE-2024-56640, CVE-2024-50193, CVE-2024-53148, CVE-2025-21669, CVE-2024-53690, CVE-2024-50279,     CVE-2024-56780, CVE-2024-56769, CVE-2024-53125, CVE-2024-53052, CVE-2024-56601, CVE-2024-56778,     CVE-2024-50198, CVE-2025-21665, CVE-2024-53227, CVE-2024-40953, CVE-2024-50295, CVE-2024-53194,     CVE-2024-56777, CVE-2024-56770, CVE-2025-21697, CVE-2024-57904, CVE-2024-56691, CVE-2024-56787,     CVE-2024-57948, CVE-2024-53140, CVE-2024-50051, CVE-2025-21648, CVE-2024-56754, CVE-2024-50156,     CVE-2024-50205, CVE-2024-57911, CVE-2024-50290, CVE-2024-56715, CVE-2024-56643, CVE-2024-49974,     CVE-2024-50287, CVE-2024-50162, CVE-2024-57849, CVE-2024-50142, CVE-2024-53198, CVE-2024-56568,     CVE-2024-56704, CVE-2024-35887, CVE-2024-57908, CVE-2024-56767, CVE-2024-56701, CVE-2025-21680,     CVE-2024-57913, CVE-2024-50171, CVE-2024-56558, CVE-2024-50121, CVE-2024-50036, CVE-2024-53180,     CVE-2024-53096, CVE-2024-57897, CVE-2024-56746, CVE-2024-55881, CVE-2024-57874, CVE-2024-56774,     CVE-2024-57946, CVE-2024-56531, CVE-2024-56698, CVE-2024-56650, CVE-2025-21637, CVE-2024-50242,     CVE-2024-49996, CVE-2024-53136, CVE-2024-56575, CVE-2024-56642, CVE-2024-56763, CVE-2024-57802,     CVE-2024-57929, CVE-2024-56726, CVE-2024-56615, CVE-2024-56619, CVE-2024-50234, CVE-2024-50299,     CVE-2024-56569, CVE-2024-57792, CVE-2024-50150, CVE-2024-56728, CVE-2024-53173, CVE-2024-56630,     CVE-2025-21639, CVE-2024-53183, CVE-2024-56681, CVE-2024-46809, CVE-2024-53165, CVE-2024-53215,     CVE-2024-50296, CVE-2024-50267, CVE-2024-53097, CVE-2024-56369, CVE-2024-56578, CVE-2024-56562,     CVE-2025-21699, CVE-2024-50134, CVE-2024-56589, CVE-2024-50232, CVE-2024-53685, CVE-2024-50265,     CVE-2024-53206, CVE-2024-50257, CVE-2024-57925, CVE-2024-50269, CVE-2024-56570, CVE-2024-50278,     CVE-2024-56595, CVE-2024-56720, CVE-2024-50085, CVE-2024-50201, CVE-2024-56693, CVE-2023-52913,     CVE-2025-21666, CVE-2024-50249, CVE-2024-50247, CVE-2024-47730, CVE-2024-49925, CVE-2025-21690,     CVE-2024-56606, CVE-2024-53172, CVE-2024-53119, CVE-2024-56602, CVE-2024-50262, CVE-2024-50127,     CVE-2024-50115, CVE-2024-57901, CVE-2024-50185, CVE-2024-53058, CVE-2025-21631, CVE-2024-56574,     CVE-2024-56539, CVE-2025-21678, CVE-2024-56659, CVE-2024-56594, CVE-2024-56708, CVE-2024-56662,     CVE-2024-55916, CVE-2024-53042, CVE-2024-50229, CVE-2024-56616, CVE-2024-50074, CVE-2024-57838,     CVE-2024-50160, CVE-2024-50218, CVE-2024-56597, CVE-2024-36476, CVE-2024-49571, CVE-2024-53112,     CVE-2024-50128, CVE-2024-53157, CVE-2024-56747, CVE-2024-56779, CVE-2024-50143, CVE-2024-42315,     CVE-2024-56688, CVE-2024-57903, CVE-2024-50283, CVE-2025-21640, CVE-2024-53099, CVE-2024-57902,     CVE-2024-57912, CVE-2024-56567, CVE-2024-56637, CVE-2024-50086, CVE-2024-56679, CVE-2024-56598,     CVE-2024-50236, CVE-2024-56593, CVE-2024-50058, CVE-2024-53239, CVE-2024-57906, CVE-2024-43098,     CVE-2024-53138, CVE-2024-50208, CVE-2024-49950, CVE-2024-53174, CVE-2024-50072, CVE-2024-45828,     CVE-2024-56759, CVE-2024-56533, CVE-2024-50117, CVE-2024-53131, CVE-2024-47707, CVE-2025-21689,     CVE-2025-21636, CVE-2024-56605, CVE-2024-57807, CVE-2024-56724, CVE-2024-57841, CVE-2024-53120,     CVE-2024-50304, CVE-2024-56748, CVE-2024-58087, CVE-2024-57917, CVE-2024-44938, CVE-2024-57896,     CVE-2024-56600, CVE-2024-57922, CVE-2024-53066, CVE-2024-56634, CVE-2024-53171, CVE-2024-56700,     CVE-2024-57939, CVE-2024-53151, CVE-2024-50202, CVE-2024-56572, CVE-2024-40965, CVE-2024-56716,     CVE-2024-46841, CVE-2024-50292, CVE-2024-57907, CVE-2024-53145, CVE-2024-50192, CVE-2024-53055,     CVE-2025-21646, CVE-2024-56690, CVE-2024-57882, CVE-2024-56576, CVE-2024-50301, CVE-2024-53059,     CVE-2024-56745, CVE-2024-57890, CVE-2024-50055, CVE-2024-56739, CVE-2024-50099, CVE-2024-50131,     CVE-2024-50194, CVE-2024-57884, CVE-2024-43900, CVE-2024-52332, CVE-2024-57931, CVE-2024-50163,     CVE-2024-53063, CVE-2024-53104, CVE-2024-57951, CVE-2025-21638, CVE-2024-53129, CVE-2024-56781,     CVE-2024-50195, CVE-2024-56548, CVE-2024-56603, CVE-2024-56586, CVE-2024-50167, CVE-2024-56648,     CVE-2024-56581, CVE-2024-53158, CVE-2024-56587, CVE-2024-49998, CVE-2024-50148, CVE-2024-56694,     CVE-2024-50110, CVE-2024-50244, CVE-2024-46784, CVE-2024-50273, CVE-2024-50116, CVE-2024-56614,     CVE-2024-50154, CVE-2024-56672, CVE-2025-21692, CVE-2024-56636, CVE-2024-56626, CVE-2024-50010,     CVE-2024-39497, CVE-2024-50101, CVE-2024-50141, CVE-2024-57791, CVE-2024-50082, CVE-2024-53226,     CVE-2024-53135, CVE-2024-50275, CVE-2024-56723, CVE-2024-53121, CVE-2024-50199, CVE-2024-56631,     CVE-2024-50083, CVE-2024-50245, CVE-2025-21687, CVE-2024-50151, CVE-2022-49034, CVE-2024-57900,     CVE-2024-53156, CVE-2024-36899, CVE-2024-50153, CVE-2024-53237, CVE-2024-56645, CVE-2024-26718,     CVE-2024-57892, CVE-2025-21653, CVE-2024-56627, CVE-2024-48881, CVE-2024-56625, CVE-2024-57850,     CVE-2024-56644, CVE-2024-56785)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.234-225.895. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-082 advisory.

    Integer Overflow or Wraparound vulnerability in Linux kernel on x86 and ARM (md, raid, raid5 modules)     allows Forced Integer Overflow. (CVE-2024-23307)

    In the Linux kernel, the following vulnerability has been resolved:

    gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (CVE-2024-47707)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (CVE-2024-50304)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix data-races around sk->sk_forward_alloc (CVE-2024-53124)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631)

    In the Linux kernel, the following vulnerability has been resolved:

    net: defer final 'struct net' free in netns dismantle (CVE-2024-56658)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CVE-2024-57929)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix the infinite loop in exfat_readdir() (CVE-2024-57940)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Handle CPU state correctly on hotplug (CVE-2024-57951)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: auth_enable: avoid using current->nsproxy (CVE-2025-21638)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: rto_min/max: avoid using current->nsproxy (CVE-2025-21639)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (CVE-2025-21640)

    In the Linux kernel, the following vulnerability has been resolved:

    afs: Fix the maximum cell name length (CVE-2025-21646)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653)

    In the Linux kernel, the following vulnerability has been resolved:

    dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CVE-2025-21666)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: discard packets if the transport changes (CVE-2025-21669)

    In the Linux kernel, the following vulnerability has been resolved:

    gtp: Destroy device along with udp socket's netns dismantle. (CVE-2025-21678)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix bpf_sk_select_reuseport() memory leak (CVE-2025-21683)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/platform: check the bounds of read/write syscalls (CVE-2025-21687)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (CVE-2025-21689)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix softlockup in __read_vmcore (part 2) (CVE-2025-21694)

    In the Linux kernel, the following vulnerability has been resolved:

    gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (CVE-2025-21699)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20152 advisory.

    - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar)  [Orabug: 37472354]     {CVE-2024-57804}
    - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter)  [Orabug: 37427536]     {CVE-2024-53162}
    - vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang)  [Orabug: 37296163]     {CVE-2024-53110}
    - vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea)  [Orabug: 37296163] {CVE-2024-47687}
    - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [Orabug: 37388795] {CVE-2024-53124}
    - scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane) [Orabug: 37434117]     {CVE-2024-56631}
    - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [Orabug: 37200706]     {CVE-2024-47707}
    - blk-cgroup: Fix UAF in blkcg_unpin_online() (Tejun Heo) [Orabug: 37434276] {CVE-2024-56672}
    - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Zhongqiu Han) [Orabug: 36683269]     {CVE-2024-36899}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around     sk->sk_forward_alloc Syzkaller reported this warning: ------------[ cut here ]------------ WARNING: CPU: 0     PID: 16 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x1c5/0x1e0 Modules linked in: CPU: 0 UID: 0 PID: 16     Comm: ksoftirqd/0 Not tainted 6.12.0-rc5 #26 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS     1.15.0-1 04/01/2014 RIP: 0010:inet_sock_destruct+0x1c5/0x1e0 Code: 24 12 4c 89 e2 5b 48 c7 c7 98 ec bb 82     41 5c e9 d1 18 17 ff 4c 89 e6 5b 48 c7 c7 d0 ec bb 82 41 5c e9 bf 18 17 ff 0f 0b eb 83 <0f> 0b eb 97 0f 0b     eb 87 0f 0b e9 68 ff ff ff 66 66 2e 0f 1f 84 00 RSP: 0018:ffffc9000008bd90 EFLAGS: 00010206 RAX:
    0000000000000300 RBX: ffff88810b172a90 RCX: 0000000000000007 RDX: 0000000000000002 RSI: 0000000000000300     RDI: ffff88810b172a00 RBP: ffff88810b172a00 R08: ffff888104273c00 R09: 0000000000100007 R10:
    0000000000020000 R11: 0000000000000006 R12: ffff88810b172a00 R13: 0000000000000004 R14: 0000000000000000     R15: ffff888237c31f78 FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010     DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc63fecac8 CR3: 000000000342e000 CR4: 00000000000006f0     DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6:
    00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? __warn+0x88/0x130 ?     inet_sock_destruct+0x1c5/0x1e0 ? report_bug+0x18e/0x1a0 ? handle_bug+0x53/0x90 ? exc_invalid_op+0x18/0x70     ? asm_exc_invalid_op+0x1a/0x20 ? inet_sock_destruct+0x1c5/0x1e0 __sk_destruct+0x2a/0x200     rcu_do_batch+0x1aa/0x530 ? rcu_do_batch+0x13b/0x530 rcu_core+0x159/0x2f0 handle_softirqs+0xd3/0x2b0 ?
    __pfx_smpboot_thread_fn+0x10/0x10 run_ksoftirqd+0x25/0x30 smpboot_thread_fn+0xdd/0x1d0 kthread+0xd3/0x100     ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30     </TASK> ---[ end trace 0000000000000000 ]--- Its possible that two threads call     tcp_v6_do_rcv()/sk_forward_alloc_add() concurrently when sk->sk_state == TCP_LISTEN with sk->sk_lock     unlocked, which triggers a data-race around sk->sk_forward_alloc: tcp_v6_rcv tcp_v6_do_rcv     skb_clone_and_charge_r sk_rmem_schedule __sk_mem_schedule sk_forward_alloc_add() skb_set_owner_r     sk_mem_charge sk_forward_alloc_add() __kfree_skb skb_release_all skb_release_head_state sock_rfree     sk_mem_uncharge sk_forward_alloc_add() sk_mem_reclaim // set local var reclaimable __sk_mem_reclaim     sk_forward_alloc_add() In this syzkaller testcase, two threads call tcp_v6_do_rcv() with     skb->truesize=768, the sk_forward_alloc changes like this: (cpu 1) | (cpu 2) | sk_forward_alloc ... | ...
    | 0 __sk_mem_schedule() | | +4096 = 4096 | __sk_mem_schedule() | +4096 = 8192 sk_mem_charge() | | -768 =     7424 | sk_mem_charge() | -768 = 6656 ... | ... | sk_mem_uncharge() | | +768 = 7424 reclaimable=7424 | | |     sk_mem_uncharge() | +768 = 8192 | reclaimable=8192 | __sk_mem_reclaim() | | -4096 = 4096 |
    __sk_mem_reclaim() | -8192 = -4096 != 0 The skb_clone_and_charge_r() should not be called in     tcp_v6_do_rcv() when sk->sk_state is TCP_LISTEN, it happens later in tcp_v6_syn_recv_sock(). Fix the same     issue in dccp_v6_do_rcv(). (CVE-2024-53124)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4076 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4076-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.6.1.128-1~deb11u1     CVE ID         : CVE-2022-49034 CVE-2023-52916 CVE-2023-52926 CVE-2024-26595                      CVE-2024-27407 CVE-2024-35870 CVE-2024-35956 CVE-2024-36476                      CVE-2024-36479 CVE-2024-36899 CVE-2024-37021 CVE-2024-39282                      CVE-2024-41014 CVE-2024-42252 CVE-2024-42315 CVE-2024-42319                      CVE-2024-43098 CVE-2024-44950 CVE-2024-45828 CVE-2024-46809                      CVE-2024-46841 CVE-2024-46896 CVE-2024-47143 CVE-2024-47408                      CVE-2024-47745 CVE-2024-48881 CVE-2024-49571 CVE-2024-49861                      CVE-2024-49891 CVE-2024-49897 CVE-2024-49898 CVE-2024-49899                      CVE-2024-49909 CVE-2024-49911 CVE-2024-49915 CVE-2024-49917                      CVE-2024-49925 CVE-2024-49929 CVE-2024-49934 CVE-2024-49939                      CVE-2024-49951 CVE-2024-49994 CVE-2024-49996 CVE-2024-50014                      CVE-2024-50047 CVE-2024-50051 CVE-2024-50055 CVE-2024-50121                      CVE-2024-50146 CVE-2024-50164 CVE-2024-50248 CVE-2024-50258                      CVE-2024-50275 CVE-2024-50304 CVE-2024-52332 CVE-2024-53099                      CVE-2024-53105 CVE-2024-53124 CVE-2024-53125 CVE-2024-53128                      CVE-2024-53141 CVE-2024-53142 CVE-2024-53145 CVE-2024-53146                      CVE-2024-53148 CVE-2024-53150 CVE-2024-53151 CVE-2024-53154                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53165 CVE-2024-53170                      CVE-2024-53171 CVE-2024-53172 CVE-2024-53173 CVE-2024-53174                      CVE-2024-53175 CVE-2024-53180 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53190 CVE-2024-53194 CVE-2024-53196                      CVE-2024-53197 CVE-2024-53198 CVE-2024-53206 CVE-2024-53207                      CVE-2024-53208 CVE-2024-53210 CVE-2024-53213 CVE-2024-53214                      CVE-2024-53215 CVE-2024-53217 CVE-2024-53220 CVE-2024-53226                      CVE-2024-53227 CVE-2024-53229 CVE-2024-53230 CVE-2024-53231                      CVE-2024-53233 CVE-2024-53234 CVE-2024-53237 CVE-2024-53239                      CVE-2024-53240 CVE-2024-53241 CVE-2024-53680 CVE-2024-53685                      CVE-2024-53690 CVE-2024-54031 CVE-2024-55881 CVE-2024-55916                      CVE-2024-56369 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56546 CVE-2024-56548 CVE-2024-56551                      CVE-2024-56557 CVE-2024-56558 CVE-2024-56562 CVE-2024-56567                      CVE-2024-56568 CVE-2024-56569 CVE-2024-56570 CVE-2024-56572                      CVE-2024-56574 CVE-2024-56575 CVE-2024-56576 CVE-2024-56578                      CVE-2024-56579 CVE-2024-56581 CVE-2024-56582 CVE-2024-56584                      CVE-2024-56585 CVE-2024-56586 CVE-2024-56587 CVE-2024-56589                      CVE-2024-56590 CVE-2024-56593 CVE-2024-56594 CVE-2024-56595                      CVE-2024-56596 CVE-2024-56597 CVE-2024-56598 CVE-2024-56599                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56604 CVE-2024-56605 CVE-2024-56606 CVE-2024-56608                      CVE-2024-56610 CVE-2024-56614 CVE-2024-56615 CVE-2024-56616                      CVE-2024-56619 CVE-2024-56622 CVE-2024-56623 CVE-2024-56625                      CVE-2024-56626 CVE-2024-56627 CVE-2024-56628 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56640 CVE-2024-56642                      CVE-2024-56643 CVE-2024-56644 CVE-2024-56645 CVE-2024-56648                      CVE-2024-56650 CVE-2024-56651 CVE-2024-56658 CVE-2024-56659                      CVE-2024-56660 CVE-2024-56661 CVE-2024-56662 CVE-2024-56663                      CVE-2024-56664 CVE-2024-56665 CVE-2024-56670 CVE-2024-56672                      CVE-2024-56675 CVE-2024-56677 CVE-2024-56678 CVE-2024-56679                      CVE-2024-56681 CVE-2024-56683 CVE-2024-56687 CVE-2024-56688                      CVE-2024-56690 CVE-2024-56691 CVE-2024-56693 CVE-2024-56694                      CVE-2024-56698 CVE-2024-56700 CVE-2024-56701 CVE-2024-56703                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56707 CVE-2024-56708                      CVE-2024-56709 CVE-2024-56715 CVE-2024-56716 CVE-2024-56717                      CVE-2024-56718 CVE-2024-56720 CVE-2024-56722 CVE-2024-56723                      CVE-2024-56724 CVE-2024-56725 CVE-2024-56726 CVE-2024-56727                      CVE-2024-56728 CVE-2024-56739 CVE-2024-56741 CVE-2024-56745                      CVE-2024-56746 CVE-2024-56747 CVE-2024-56748 CVE-2024-56751                      CVE-2024-56754 CVE-2024-56755 CVE-2024-56756 CVE-2024-56759                      CVE-2024-56763 CVE-2024-56765 CVE-2024-56766 CVE-2024-56767                      CVE-2024-56769 CVE-2024-56770 CVE-2024-56774 CVE-2024-56776                      CVE-2024-56777 CVE-2024-56778 CVE-2024-56779 CVE-2024-56780                      CVE-2024-56781 CVE-2024-56783 CVE-2024-56785 CVE-2024-56787                      CVE-2024-57791 CVE-2024-57792 CVE-2024-57798 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57838 CVE-2024-57841 CVE-2024-57849                      CVE-2024-57850 CVE-2024-57874 CVE-2024-57876 CVE-2024-57882                      CVE-2024-57884 CVE-2024-57887 CVE-2024-57889 CVE-2024-57890                      CVE-2024-57892 CVE-2024-57893 CVE-2024-57894 CVE-2024-57896                      CVE-2024-57897 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57903 CVE-2024-57904 CVE-2024-57906 CVE-2024-57907                      CVE-2024-57908 CVE-2024-57910 CVE-2024-57911 CVE-2024-57912                      CVE-2024-57913 CVE-2024-57916 CVE-2024-57917 CVE-2024-57922                      CVE-2024-57925 CVE-2024-57929 CVE-2024-57930 CVE-2024-57931                      CVE-2024-57938 CVE-2024-57939 CVE-2024-57940 CVE-2024-57946                      CVE-2024-57948 CVE-2024-57949 CVE-2024-57951 CVE-2025-21629                      CVE-2025-21631 CVE-2025-21636 CVE-2025-21637 CVE-2025-21638                      CVE-2025-21639 CVE-2025-21640 CVE-2025-21646 CVE-2025-21647                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21655 CVE-2025-21660                      CVE-2025-21662 CVE-2025-21664 CVE-2025-21665 CVE-2025-21666                      CVE-2025-21667 CVE-2025-21668 CVE-2025-21669 CVE-2025-21671                      CVE-2025-21675 CVE-2025-21678 CVE-2025-21680 CVE-2025-21681                      CVE-2025-21683 CVE-2025-21687 CVE-2025-21688 CVE-2025-21689                      CVE-2025-21690 CVE-2025-21692 CVE-2025-21694 CVE-2025-21697                      CVE-2025-21699

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.6.1.128-1~deb11u1.  This additionally includes many more bug fixes     from stable updates 6.1.120-6.1.128 inclusive.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4075 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4075-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.234-1     CVE ID         : CVE-2021-47469 CVE-2023-52530 CVE-2023-52917 CVE-2024-26921                      CVE-2024-27017 CVE-2024-27072 CVE-2024-35965 CVE-2024-35966                      CVE-2024-36476 CVE-2024-36899 CVE-2024-38538 CVE-2024-38544                      CVE-2024-38588 CVE-2024-38591 CVE-2024-39497 CVE-2024-40953                      CVE-2024-41016 CVE-2024-41060 CVE-2024-41080 CVE-2024-42315                      CVE-2024-43098 CVE-2024-44931 CVE-2024-44940 CVE-2024-46695                      CVE-2024-46809 CVE-2024-46841 CVE-2024-46849 CVE-2024-46853                      CVE-2024-46854 CVE-2024-46858 CVE-2024-46865 CVE-2024-47143                      CVE-2024-47670 CVE-2024-47671 CVE-2024-47672 CVE-2024-47674                      CVE-2024-47679 CVE-2024-47684 CVE-2024-47685 CVE-2024-47692                      CVE-2024-47696 CVE-2024-47697 CVE-2024-47698 CVE-2024-47699                      CVE-2024-47701 CVE-2024-47705 CVE-2024-47706 CVE-2024-47707                      CVE-2024-47709 CVE-2024-47710 CVE-2024-47712 CVE-2024-47713                      CVE-2024-47718 CVE-2024-47723 CVE-2024-47735 CVE-2024-47737                      CVE-2024-47739 CVE-2024-47740 CVE-2024-47742 CVE-2024-47748                      CVE-2024-47749 CVE-2024-47756 CVE-2024-47757 CVE-2024-48881                      CVE-2024-49851 CVE-2024-49858 CVE-2024-49860 CVE-2024-49863                      CVE-2024-49867 CVE-2024-49868 CVE-2024-49875 CVE-2024-49877                      CVE-2024-49878 CVE-2024-49879 CVE-2024-49881 CVE-2024-49882                      CVE-2024-49883 CVE-2024-49884 CVE-2024-49889 CVE-2024-49890                      CVE-2024-49892 CVE-2024-49894 CVE-2024-49895 CVE-2024-49896                      CVE-2024-49900 CVE-2024-49902 CVE-2024-49903 CVE-2024-49907                      CVE-2024-49913 CVE-2024-49930 CVE-2024-49933 CVE-2024-49936                      CVE-2024-49938 CVE-2024-49944 CVE-2024-49948 CVE-2024-49949                      CVE-2024-49952 CVE-2024-49955 CVE-2024-49957 CVE-2024-49958                      CVE-2024-49959 CVE-2024-49962 CVE-2024-49963 CVE-2024-49965                      CVE-2024-49966 CVE-2024-49969 CVE-2024-49973 CVE-2024-49974                      CVE-2024-49975 CVE-2024-49977 CVE-2024-49981 CVE-2024-49982                      CVE-2024-49983 CVE-2024-49985 CVE-2024-49995 CVE-2024-49996                      CVE-2024-50001 CVE-2024-50006 CVE-2024-50007 CVE-2024-50008                      CVE-2024-50010 CVE-2024-50013 CVE-2024-50015 CVE-2024-50024                      CVE-2024-50033 CVE-2024-50035 CVE-2024-50036 CVE-2024-50039                      CVE-2024-50040 CVE-2024-50044 CVE-2024-50045 CVE-2024-50046                      CVE-2024-50049 CVE-2024-50055 CVE-2024-50058 CVE-2024-50059                      CVE-2024-50072 CVE-2024-50074 CVE-2024-50082 CVE-2024-50083                      CVE-2024-50095 CVE-2024-50096 CVE-2024-50099 CVE-2024-50103                      CVE-2024-50115 CVE-2024-50116 CVE-2024-50117 CVE-2024-50121                      CVE-2024-50127 CVE-2024-50131 CVE-2024-50134 CVE-2024-50142                      CVE-2024-50148 CVE-2024-50150 CVE-2024-50151 CVE-2024-50153                      CVE-2024-50167 CVE-2024-50171 CVE-2024-50179 CVE-2024-50180                      CVE-2024-50181 CVE-2024-50184 CVE-2024-50185 CVE-2024-50188                      CVE-2024-50192 CVE-2024-50193 CVE-2024-50194 CVE-2024-50195                      CVE-2024-50198 CVE-2024-50199 CVE-2024-50201 CVE-2024-50202                      CVE-2024-50205 CVE-2024-50208 CVE-2024-50209 CVE-2024-50210                      CVE-2024-50218 CVE-2024-50229 CVE-2024-50230 CVE-2024-50233                      CVE-2024-50234 CVE-2024-50236 CVE-2024-50237 CVE-2024-50251                      CVE-2024-50262 CVE-2024-50264 CVE-2024-50265 CVE-2024-50267                      CVE-2024-50268 CVE-2024-50269 CVE-2024-50273 CVE-2024-50278                      CVE-2024-50279 CVE-2024-50282 CVE-2024-50287 CVE-2024-50290                      CVE-2024-50292 CVE-2024-50295 CVE-2024-50296 CVE-2024-50299                      CVE-2024-50301 CVE-2024-50302 CVE-2024-50304 CVE-2024-52332                      CVE-2024-53042 CVE-2024-53052 CVE-2024-53057 CVE-2024-53059                      CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066                      CVE-2024-53096 CVE-2024-53097 CVE-2024-53099 CVE-2024-53101                      CVE-2024-53103 CVE-2024-53104 CVE-2024-53112 CVE-2024-53119                      CVE-2024-53121 CVE-2024-53124 CVE-2024-53125 CVE-2024-53127                      CVE-2024-53130 CVE-2024-53131 CVE-2024-53135 CVE-2024-53136                      CVE-2024-53138 CVE-2024-53140 CVE-2024-53141 CVE-2024-53142                      CVE-2024-53145 CVE-2024-53146 CVE-2024-53148 CVE-2024-53150                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53171 CVE-2024-53172                      CVE-2024-53173 CVE-2024-53174 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53194 CVE-2024-53197 CVE-2024-53198                      CVE-2024-53214 CVE-2024-53217 CVE-2024-53226 CVE-2024-53227                      CVE-2024-53237 CVE-2024-53239 CVE-2024-53240 CVE-2024-53241                      CVE-2024-53680 CVE-2024-53685 CVE-2024-53690 CVE-2024-54031                      CVE-2024-55916 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56548 CVE-2024-56558 CVE-2024-56562                      CVE-2024-56567 CVE-2024-56568 CVE-2024-56569 CVE-2024-56570                      CVE-2024-56574 CVE-2024-56576 CVE-2024-56581 CVE-2024-56586                      CVE-2024-56587 CVE-2024-56589 CVE-2024-56593 CVE-2024-56594                      CVE-2024-56595 CVE-2024-56596 CVE-2024-56597 CVE-2024-56598                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56605 CVE-2024-56606 CVE-2024-56610 CVE-2024-56615                      CVE-2024-56616 CVE-2024-56619 CVE-2024-56623 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56642 CVE-2024-56643                      CVE-2024-56644 CVE-2024-56645 CVE-2024-56648 CVE-2024-56650                      CVE-2024-56659 CVE-2024-56661 CVE-2024-56662 CVE-2024-56670                      CVE-2024-56672 CVE-2024-56681 CVE-2024-56688 CVE-2024-56690                      CVE-2024-56691 CVE-2024-56694 CVE-2024-56698 CVE-2024-56700                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56716 CVE-2024-56720                      CVE-2024-56723 CVE-2024-56724 CVE-2024-56728 CVE-2024-56739                      CVE-2024-56741 CVE-2024-56747 CVE-2024-56748 CVE-2024-56754                      CVE-2024-56756 CVE-2024-56759 CVE-2024-56763 CVE-2024-56766                      CVE-2024-56767 CVE-2024-56769 CVE-2024-56770 CVE-2024-56779                      CVE-2024-56780 CVE-2024-57791 CVE-2024-57792 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57850 CVE-2024-57874 CVE-2024-57884                      CVE-2024-57887 CVE-2024-57889 CVE-2024-57890 CVE-2024-57892                      CVE-2024-57896 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57904 CVE-2024-57906 CVE-2024-57907 CVE-2024-57908                      CVE-2024-57910 CVE-2024-57911 CVE-2024-57912 CVE-2024-57913                      CVE-2024-57922 CVE-2024-57929 CVE-2024-57931 CVE-2024-57938                      CVE-2024-57940 CVE-2024-57946 CVE-2024-57948 CVE-2024-57951                      CVE-2025-21638 CVE-2025-21639 CVE-2025-21640 CVE-2025-21646                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21664 CVE-2025-21666                      CVE-2025-21669 CVE-2025-21678 CVE-2025-21683 CVE-2025-21687                      CVE-2025-21688 CVE-2025-21689 CVE-2025-21692 CVE-2025-21694                      CVE-2025-21697 CVE-2025-21699     Debian Bug     : 1082001

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.234-1.  This additionally includes many more bug fixes from     stable updates 5.10.227-5.10.234 inclusive.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7310-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - RAM backed block device driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bluetooth drivers;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - Buffer Sharing and Synchronization framework;

    - EDAC drivers;

    - FireWire subsystem;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Powercap sysfs driver;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Virtio drivers;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - UBI file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Bluetooth subsystem;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Static call mechanism;

    - Task handling mechanism;

    - Timer substystem drivers;

    - Maple Tree data structure library;

    - Memory management;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - L2TP protocol;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - AppArmor security module;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - ALSA framework;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - HD-audio driver;

    - SoC Audio for Freescale CPUs drivers;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-50244, CVE-2024-56754, CVE-2024-50082, CVE-2024-47737, CVE-2024-50300,     CVE-2024-49872, CVE-2024-50180, CVE-2024-50218, CVE-2024-49956, CVE-2024-53189, CVE-2024-56705,     CVE-2024-50119, CVE-2024-53192, CVE-2024-49950, CVE-2024-56722, CVE-2024-49943, CVE-2024-50031,     CVE-2024-47685, CVE-2024-50296, CVE-2024-49939, CVE-2024-47696, CVE-2024-47752, CVE-2024-49937,     CVE-2024-53140, CVE-2024-50236, CVE-2024-50151, CVE-2024-50069, CVE-2024-50170, CVE-2024-50246,     CVE-2024-50217, CVE-2024-53125, CVE-2024-50084, CVE-2024-50005, CVE-2024-53137, CVE-2024-50233,     CVE-2024-49991, CVE-2024-50067, CVE-2024-50290, CVE-2024-47735, CVE-2024-53133, CVE-2024-50289,     CVE-2024-49855, CVE-2024-49868, CVE-2024-56728, CVE-2024-56726, CVE-2024-50012, CVE-2024-53078,     CVE-2024-50223, CVE-2024-50143, CVE-2024-50287, CVE-2024-49971, CVE-2024-49900, CVE-2024-50263,     CVE-2024-50206, CVE-2024-47707, CVE-2024-47751, CVE-2024-56747, CVE-2024-50260, CVE-2024-50173,     CVE-2024-47680, CVE-2024-50009, CVE-2024-53219, CVE-2024-53144, CVE-2024-50008, CVE-2024-53208,     CVE-2024-49966, CVE-2024-50104, CVE-2024-50030, CVE-2024-53049, CVE-2024-53201, CVE-2024-50130,     CVE-2024-49856, CVE-2024-53095, CVE-2024-50033, CVE-2024-47730, CVE-2024-53216, CVE-2024-50286,     CVE-2024-50284, CVE-2024-47744, CVE-2023-52917, CVE-2024-50275, CVE-2024-53114, CVE-2024-49968,     CVE-2024-50111, CVE-2024-50000, CVE-2024-53081, CVE-2024-49857, CVE-2024-50262, CVE-2024-50281,     CVE-2024-53156, CVE-2024-50225, CVE-2024-53239, CVE-2024-50036, CVE-2024-50187, CVE-2024-53165,     CVE-2024-49931, CVE-2024-53111, CVE-2024-49862, CVE-2024-47701, CVE-2024-53091, CVE-2024-50103,     CVE-2024-53046, CVE-2024-56678, CVE-2024-56749, CVE-2024-53175, CVE-2024-49970, CVE-2024-50035,     CVE-2024-50088, CVE-2024-50297, CVE-2024-47721, CVE-2024-50240, CVE-2024-50076, CVE-2024-56683,     CVE-2024-53120, CVE-2024-50074, CVE-2024-50095, CVE-2024-49963, CVE-2024-50158, CVE-2024-50020,     CVE-2024-53083, CVE-2024-50029, CVE-2024-56755, CVE-2024-49969, CVE-2024-50022, CVE-2024-50278,     CVE-2024-50125, CVE-2024-47706, CVE-2024-50204, CVE-2024-56543, CVE-2024-53108, CVE-2024-49885,     CVE-2024-50128, CVE-2024-50062, CVE-2024-50139, CVE-2024-50183, CVE-2024-50288, CVE-2024-56729,     CVE-2024-49945, CVE-2024-47695, CVE-2024-56533, CVE-2024-53234, CVE-2024-50002, CVE-2024-50040,     CVE-2024-49903, CVE-2024-47702, CVE-2024-47728, CVE-2024-49874, CVE-2024-47718, CVE-2024-53142,     CVE-2024-49983, CVE-2024-50211, CVE-2024-50294, CVE-2024-50132, CVE-2024-53236, CVE-2024-50042,     CVE-2024-49999, CVE-2024-50001, CVE-2024-50046, CVE-2024-50133, CVE-2024-50256, CVE-2024-49869,     CVE-2024-49852, CVE-2024-47717, CVE-2024-56704, CVE-2024-50102, CVE-2024-50150, CVE-2024-49880,     CVE-2024-50235, CVE-2024-49892, CVE-2024-53194, CVE-2024-53104, CVE-2024-50232, CVE-2024-50226,     CVE-2024-56684, CVE-2024-47713, CVE-2024-50191, CVE-2024-49850, CVE-2024-50277, CVE-2024-53113,     CVE-2024-50013, CVE-2024-53221, CVE-2024-50220, CVE-2024-49960, CVE-2024-53228, CVE-2024-50152,     CVE-2024-56689, CVE-2024-53220, CVE-2024-50209, CVE-2024-50285, CVE-2024-50197, CVE-2024-53072,     CVE-2024-50273, CVE-2024-49928, CVE-2024-53132, CVE-2024-56720, CVE-2024-50194, CVE-2024-50112,     CVE-2024-53079, CVE-2024-56696, CVE-2024-47750, CVE-2024-53212, CVE-2024-56541, CVE-2024-50024,     CVE-2024-53168, CVE-2024-50247, CVE-2024-50193, CVE-2024-47754, CVE-2024-56540, CVE-2024-50026,     CVE-2024-53047, CVE-2024-53151, CVE-2024-50176, CVE-2024-49975, CVE-2024-50034, CVE-2024-50126,     CVE-2024-49863, CVE-2024-47693, CVE-2024-49954, CVE-2024-49938, CVE-2024-50171, CVE-2024-50185,     CVE-2024-50200, CVE-2024-50201, CVE-2024-53184, CVE-2024-47709, CVE-2024-50138, CVE-2024-49935,     CVE-2024-50049, CVE-2024-56537, CVE-2024-50057, CVE-2024-56677, CVE-2024-47743, CVE-2024-50293,     CVE-2024-50099, CVE-2024-47720, CVE-2024-50021, CVE-2024-50059, CVE-2024-49871, CVE-2024-49884,     CVE-2024-47694, CVE-2024-56723, CVE-2024-47724, CVE-2024-50038, CVE-2024-53123, CVE-2024-53177,     CVE-2024-49932, CVE-2024-50196, CVE-2024-50234, CVE-2024-50078, CVE-2024-53043, CVE-2024-49926,     CVE-2024-49988, CVE-2024-53187, CVE-2024-53056, CVE-2024-53217, CVE-2024-56745, CVE-2024-47726,     CVE-2024-50063, CVE-2024-49987, CVE-2024-49955, CVE-2024-50179, CVE-2024-49866, CVE-2024-50283,     CVE-2024-49997, CVE-2024-47742, CVE-2024-56691, CVE-2024-50253, CVE-2024-56690, CVE-2024-47710,     CVE-2024-53129, CVE-2024-50190, CVE-2024-50090, CVE-2024-56702, CVE-2024-50148, CVE-2024-53183,     CVE-2024-50070, CVE-2024-50154, CVE-2024-50243, CVE-2024-50003, CVE-2024-50117, CVE-2024-56751,     CVE-2024-56697, CVE-2024-53166, CVE-2024-53196, CVE-2024-47677, CVE-2024-56679, CVE-2024-49996,     CVE-2024-47681, CVE-2024-53181, CVE-2024-47700, CVE-2024-53071, CVE-2024-50015, CVE-2024-53126,     CVE-2024-50165, CVE-2024-50172, CVE-2024-53063, CVE-2024-53200, CVE-2024-53135, CVE-2024-49974,     CVE-2024-53088, CVE-2024-49936, CVE-2024-53121, CVE-2024-50166, CVE-2024-50087, CVE-2024-53065,     CVE-2024-53214, CVE-2024-53076, CVE-2024-53059, CVE-2024-50230, CVE-2024-49985, CVE-2024-50092,     CVE-2024-53233, CVE-2024-50047, CVE-2024-56685, CVE-2024-47682, CVE-2024-47705, CVE-2024-50077,     CVE-2024-53224, CVE-2024-49887, CVE-2024-49940, CVE-2024-47741, CVE-2024-49858, CVE-2024-56536,     CVE-2024-53055, CVE-2024-56687, CVE-2024-50100, CVE-2024-53075, CVE-2024-47699, CVE-2024-53213,     CVE-2024-49977, CVE-2024-50268, CVE-2024-53146, CVE-2024-50304, CVE-2024-50096, CVE-2024-53162,     CVE-2024-56725, CVE-2024-49953, CVE-2024-53077, CVE-2024-50107, CVE-2024-53226, CVE-2024-53134,     CVE-2024-49873, CVE-2024-56548, CVE-2024-53145, CVE-2024-53141, CVE-2024-56741, CVE-2024-53067,     CVE-2024-53152, CVE-2024-50072, CVE-2024-50282, CVE-2024-53232, CVE-2024-50140, CVE-2024-53198,     CVE-2024-53150, CVE-2024-49876, CVE-2024-50302, CVE-2024-53115, CVE-2024-47692, CVE-2024-50301,     CVE-2024-50202, CVE-2024-50155, CVE-2024-56693, CVE-2024-53082, CVE-2024-53167, CVE-2024-56748,     CVE-2024-53064, CVE-2024-50227, CVE-2024-56539, CVE-2024-50215, CVE-2024-50043, CVE-2024-50146,     CVE-2024-50147, CVE-2024-56699, CVE-2024-50122, CVE-2024-53044, CVE-2024-47712, CVE-2024-53230,     CVE-2024-50121, CVE-2024-50216, CVE-2024-53084, CVE-2024-56703, CVE-2024-50178, CVE-2024-49934,     CVE-2024-47678, CVE-2024-50271, CVE-2024-50144, CVE-2024-50252, CVE-2024-47734, CVE-2024-47711,     CVE-2024-50214, CVE-2024-53100, CVE-2024-56680, CVE-2024-50198, CVE-2024-50025, CVE-2024-50044,     CVE-2024-50098, CVE-2024-47745, CVE-2024-49860, CVE-2024-49881, CVE-2024-53048, CVE-2024-56721,     CVE-2024-56756, CVE-2024-53171, CVE-2024-49901, CVE-2024-53109, CVE-2024-53061, CVE-2024-49929,     CVE-2024-47691, CVE-2024-50045, CVE-2024-47723, CVE-2024-56546, CVE-2024-50157, CVE-2024-53169,     CVE-2024-47716, CVE-2024-53093, CVE-2024-50224, CVE-2024-53193, CVE-2024-49895, CVE-2024-47698,     CVE-2024-49942, CVE-2024-50167, CVE-2024-53202, CVE-2024-49870, CVE-2024-50291, CVE-2024-50156,     CVE-2024-53153, CVE-2024-50272, CVE-2024-50145, CVE-2024-50298, CVE-2024-50274, CVE-2024-56694,     CVE-2024-50108, CVE-2024-50222, CVE-2024-53163, CVE-2024-50164, CVE-2024-53062, CVE-2024-50212,     CVE-2024-53127, CVE-2024-47688, CVE-2024-49959, CVE-2024-50203, CVE-2024-49927, CVE-2024-50083,     CVE-2024-53227, CVE-2024-47697, CVE-2024-53053, CVE-2024-53172, CVE-2024-56752, CVE-2024-50207,     CVE-2024-50169, CVE-2024-53176, CVE-2024-53089, CVE-2024-56707, CVE-2024-53195, CVE-2024-49851,     CVE-2024-53209, CVE-2024-49972, CVE-2024-53130, CVE-2024-53157, CVE-2024-53094, CVE-2024-50182,     CVE-2024-49879, CVE-2024-53191, CVE-2024-49925, CVE-2024-49949, CVE-2024-56534, CVE-2024-47714,     CVE-2024-53161, CVE-2024-49992, CVE-2024-47732, CVE-2024-53143, CVE-2024-53119, CVE-2024-50064,     CVE-2024-50039, CVE-2024-53087, CVE-2024-49886, CVE-2024-49979, CVE-2024-50041, CVE-2024-50184,     CVE-2024-49958, CVE-2024-50221, CVE-2024-56688, CVE-2024-49941, CVE-2024-50245, CVE-2024-50017,     CVE-2024-53180, CVE-2024-56535, CVE-2024-50142, CVE-2024-50295, CVE-2024-56708, CVE-2024-50016,     CVE-2024-49902, CVE-2024-50120, CVE-2024-47748, CVE-2024-49982, CVE-2024-50257, CVE-2024-50086,     CVE-2024-50261, CVE-2024-53188, CVE-2024-49888, CVE-2024-53106, CVE-2024-50073, CVE-2024-50186,     CVE-2024-56544, CVE-2024-47739, CVE-2024-50238, CVE-2024-56739, CVE-2024-49964, CVE-2024-47686,     CVE-2024-46869, CVE-2024-53116, CVE-2024-50014, CVE-2024-53231, CVE-2024-53138, CVE-2024-50213,     CVE-2024-50265, CVE-2024-49998, CVE-2024-50292, CVE-2024-50137, CVE-2024-50114, CVE-2024-53237,     CVE-2024-49952, CVE-2024-53074, CVE-2024-49981, CVE-2024-47733, CVE-2024-50019, CVE-2024-47719,     CVE-2024-53068, CVE-2024-49944, CVE-2024-50066, CVE-2024-50007, CVE-2024-53155, CVE-2024-47756,     CVE-2024-49947, CVE-2024-49951, CVE-2024-50065, CVE-2024-49957, CVE-2024-50116, CVE-2024-50188,     CVE-2024-50255, CVE-2024-53197, CVE-2024-50267, CVE-2024-50124, CVE-2024-53069, CVE-2024-53139,     CVE-2024-47676, CVE-2024-56545, CVE-2024-53085, CVE-2024-50163, CVE-2024-53092, CVE-2024-53099,     CVE-2024-49889, CVE-2024-53052, CVE-2024-49995, CVE-2024-49976, CVE-2024-50110, CVE-2024-50192,     CVE-2024-50208, CVE-2024-50276, CVE-2024-53170, CVE-2024-50259, CVE-2024-47731, CVE-2024-49924,     CVE-2024-56532, CVE-2024-50048, CVE-2024-49965, CVE-2024-53147, CVE-2024-50205, CVE-2024-49859,     CVE-2024-53066, CVE-2024-47687, CVE-2024-50149, CVE-2024-49864, CVE-2024-49867, CVE-2024-50160,     CVE-2024-53058, CVE-2024-47753, CVE-2024-49883, CVE-2024-53199, CVE-2024-56746, CVE-2024-50094,     CVE-2024-49946, CVE-2024-50006, CVE-2024-53101, CVE-2024-49891, CVE-2024-50075, CVE-2024-47747,     CVE-2024-47740, CVE-2024-50248, CVE-2024-50162, CVE-2024-53090, CVE-2024-53203, CVE-2024-50242,     CVE-2024-49961, CVE-2024-50085, CVE-2024-50299, CVE-2024-49980, CVE-2024-50280, CVE-2024-53107,     CVE-2024-50199, CVE-2024-53122, CVE-2024-56674, CVE-2024-50079, CVE-2024-50060, CVE-2024-53210,     CVE-2024-50177, CVE-2024-53223, CVE-2024-50127, CVE-2024-53190, CVE-2022-49034, CVE-2024-56744,     CVE-2024-50136, CVE-2024-47675, CVE-2024-50303, CVE-2024-50123, CVE-2024-47738, CVE-2024-50239,     CVE-2024-50135, CVE-2024-53218, CVE-2024-50109, CVE-2024-56724, CVE-2024-56681, CVE-2024-50027,     CVE-2024-50081, CVE-2024-50068, CVE-2024-50101, CVE-2024-50071, CVE-2024-50129, CVE-2024-50091,     CVE-2024-53112, CVE-2024-50181, CVE-2024-50080, CVE-2024-47703, CVE-2024-47727, CVE-2024-53215,     CVE-2024-53105, CVE-2024-50174, CVE-2024-50105, CVE-2024-56700, CVE-2024-53173, CVE-2024-49865,     CVE-2024-49973, CVE-2024-56538, CVE-2024-50251, CVE-2024-56692, CVE-2024-47671, CVE-2024-50189,     CVE-2024-49853, CVE-2024-50153, CVE-2024-53124, CVE-2024-56549, CVE-2024-53160, CVE-2024-53174,     CVE-2024-53117, CVE-2024-50279, CVE-2024-50118, CVE-2024-47757, CVE-2024-50055, CVE-2024-49875,     CVE-2024-50141, CVE-2024-49890, CVE-2024-49878, CVE-2024-50134, CVE-2024-53042, CVE-2024-56727,     CVE-2024-49861, CVE-2024-49948, CVE-2024-50010, CVE-2024-49930, CVE-2024-49877, CVE-2024-47690,     CVE-2024-50115, CVE-2024-50254, CVE-2024-50250, CVE-2024-47679, CVE-2024-50258, CVE-2024-53128,     CVE-2024-49994, CVE-2024-53154, CVE-2024-50037, CVE-2024-53149, CVE-2024-50266, CVE-2024-50061,     CVE-2024-56698, CVE-2024-53118, CVE-2024-47689, CVE-2024-47708, CVE-2024-50131, CVE-2024-50168,     CVE-2024-53158, CVE-2024-49894, CVE-2024-50056, CVE-2024-50231, CVE-2024-50270, CVE-2024-50269,     CVE-2024-50237, CVE-2024-56742, CVE-2024-49882, CVE-2024-47749, CVE-2024-49962, CVE-2024-49933,     CVE-2024-53045, CVE-2024-50028, CVE-2024-53178, CVE-2024-50229, CVE-2024-50023, CVE-2024-50161,     CVE-2024-56701, CVE-2024-49978, CVE-2024-50093, CVE-2024-50195, CVE-2024-49986, CVE-2024-53098,     CVE-2024-53131, CVE-2024-47684, CVE-2024-53148, CVE-2024-50058, CVE-2024-53086, CVE-2024-50113,     CVE-2024-49989, CVE-2024-50106, CVE-2024-53080, CVE-2024-53229, CVE-2024-50159, CVE-2024-56531,     CVE-2024-53110, CVE-2024-47736, CVE-2024-56542, CVE-2024-47746)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.15.178-120.178. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-063 advisory.

    Integer Overflow or Wraparound vulnerability in Linux kernel on x86 and ARM (md, raid, raid5 modules)     allows Forced Integer Overflow. (CVE-2024-23307)

    In the Linux kernel, the following vulnerability has been resolved:

    Bluetooth: RFCOMM: Fix not validating setsockopt user input (CVE-2024-35966)

    In the Linux kernel, the following vulnerability has been resolved:

    gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (CVE-2024-47707)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix timer use-after-free on failed mount (CVE-2024-49960)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (CVE-2024-50304)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix data-races around sk->sk_forward_alloc (CVE-2024-53124)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix TCP options overflow. (CVE-2024-57882)

    In the Linux kernel, the following vulnerability has been resolved:

    topology: Keep the cpumask unchanged when printing cpumap (CVE-2024-57917)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CVE-2024-57929)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix the infinite loop in exfat_readdir() (CVE-2024-57940)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Handle CPU state correctly on hotplug (CVE-2024-57951)

    In the Linux kernel, the following vulnerability has been resolved:

    block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (CVE-2025-21636)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: udp_port: avoid using current->nsproxy (CVE-2025-21637)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: auth_enable: avoid using current->nsproxy (CVE-2025-21638)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: rto_min/max: avoid using current->nsproxy (CVE-2025-21639)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (CVE-2025-21640)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653)

    In the Linux kernel, the following vulnerability has been resolved:

    dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664)

    In the Linux kernel, the following vulnerability has been resolved:

    filemap: avoid truncating 64-bit offset to 32 bits (CVE-2025-21665)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CVE-2025-21666)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: discard packets if the transport changes (CVE-2025-21669)

    In the Linux kernel, the following vulnerability has been resolved:

    gtp: Destroy device along with udp socket's netns dismantle. (CVE-2025-21678)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix bpf_sk_select_reuseport() memory leak (CVE-2025-21683)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (CVE-2025-21690)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: fix ets qdisc OOB Indexing (CVE-2025-21692)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix softlockup in __read_vmcore (part 2) (CVE-2025-21694)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.4.290-205.397. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-094 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fix possible UAF in ip6_finish_output2() (CVE-2024-44986)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (CVE-2024-47707)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix slab-use-after-free in ext4_split_extent_at() (CVE-2024-49884)

    In the Linux kernel, the following vulnerability has been resolved:

    net/xen-netback: prevent UAF in xenvif_flush_hash() (CVE-2024-49936)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix timer use-after-free on failed mount (CVE-2024-49960)

    In the Linux kernel, the following vulnerability has been resolved:

    driver core: bus: Fix double free in driver API bus_register() (CVE-2024-50055)

    In the Linux kernel, the following vulnerability has been resolved:

    uprobe: avoid out-of-bounds memory access of fetching args (CVE-2024-50067)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix data-races around sk->sk_forward_alloc (CVE-2024-53124)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: fix ordering of qlen adjustment (CVE-2024-53164)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: prevent use of deleted inode (CVE-2024-53690)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (CVE-2024-54031)

    In the Linux kernel, the following vulnerability has been resolved:

    Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (CVE-2024-55916)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631)

    In the Linux kernel, the following vulnerability has been resolved:

    net: defer final 'struct net' free in netns dismantle (CVE-2024-56658)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: megaraid_sas: Fix for a potential deadlock (CVE-2024-57807)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CVE-2024-57884)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/uverbs: Prevent integer overflow issue (CVE-2024-57890)

    In the Linux kernel, the following vulnerability has been resolved:

    ila: serialize calls to nf_register_net_hooks() (CVE-2024-57900)

    In the Linux kernel, the following vulnerability has been resolved:

    af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

    In the Linux kernel, the following vulnerability has been resolved:

    af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CVE-2024-57929)

    In the Linux kernel, the following vulnerability has been resolved:

    selinux: ignore unknown extended permissions (CVE-2024-57931)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sctp: Prevent autoclose integer overflow in sctp_association_init() (CVE-2024-57938)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio-blk: don't keep queue frozen during system suspend (CVE-2024-57946)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Handle CPU state correctly on hotplug (CVE-2024-57951)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: auth_enable: avoid using current->nsproxy (CVE-2025-21638)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: rto_min/max: avoid using current->nsproxy (CVE-2025-21639)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (CVE-2025-21640)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653)

    In the Linux kernel, the following vulnerability has been resolved:

    dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664)

    In the Linux kernel, the following vulnerability has been resolved:

    gtp: Destroy device along with udp socket's netns dismantle. (CVE-2025-21678)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/platform: check the bounds of read/write syscalls (CVE-2025-21687)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (CVE-2025-21689)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix softlockup in __read_vmcore (part 2) (CVE-2025-21694)

    In the Linux kernel, the following vulnerability has been resolved:

    gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (CVE-2025-21699)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7276-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - RAM backed block device driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bluetooth drivers;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - Buffer Sharing and Synchronization framework;

    - EDAC drivers;

    - FireWire subsystem;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Powercap sysfs driver;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Virtio drivers;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - UBI file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Bluetooth subsystem;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Static call mechanism;

    - Task handling mechanism;

    - Timer substystem drivers;

    - Maple Tree data structure library;

    - Memory management;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - L2TP protocol;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - AppArmor security module;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - ALSA framework;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - HD-audio driver;

    - SoC Audio for Freescale CPUs drivers;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-53192, CVE-2024-53130, CVE-2024-53234, CVE-2024-49986, CVE-2024-49948,     CVE-2024-49976, CVE-2024-53158, CVE-2024-50142, CVE-2024-53160, CVE-2024-50124, CVE-2024-50055,     CVE-2024-56744, CVE-2024-53128, CVE-2024-50204, CVE-2024-50176, CVE-2024-50294, CVE-2024-50166,     CVE-2024-49906, CVE-2024-50074, CVE-2024-47734, CVE-2024-50249, CVE-2024-53216, CVE-2024-53162,     CVE-2024-50189, CVE-2024-53196, CVE-2024-49969, CVE-2024-53210, CVE-2024-50300, CVE-2024-47714,     CVE-2024-50158, CVE-2024-49983, CVE-2024-49959, CVE-2024-49985, CVE-2024-53078, CVE-2024-53180,     CVE-2024-50099, CVE-2024-50009, CVE-2024-53059, CVE-2024-49962, CVE-2024-56755, CVE-2024-50106,     CVE-2024-53184, CVE-2024-53063, CVE-2024-50161, CVE-2024-50289, CVE-2024-56705, CVE-2024-56697,     CVE-2024-53135, CVE-2024-47676, CVE-2024-53084, CVE-2024-50270, CVE-2024-50078, CVE-2024-50247,     CVE-2024-50075, CVE-2024-49946, CVE-2024-50209, CVE-2024-53048, CVE-2024-53071, CVE-2024-49930,     CVE-2024-50174, CVE-2024-50039, CVE-2024-50115, CVE-2024-56680, CVE-2024-49901, CVE-2024-49971,     CVE-2024-50180, CVE-2024-50061, CVE-2024-47681, CVE-2024-50107, CVE-2024-49972, CVE-2024-49889,     CVE-2024-49872, CVE-2024-50067, CVE-2024-47718, CVE-2024-50246, CVE-2024-53090, CVE-2024-49961,     CVE-2024-56549, CVE-2024-47688, CVE-2024-50073, CVE-2024-47716, CVE-2024-49952, CVE-2024-56749,     CVE-2024-47737, CVE-2024-56739, CVE-2024-56752, CVE-2024-47700, CVE-2024-56741, CVE-2024-50196,     CVE-2024-49881, CVE-2024-50230, CVE-2024-50020, CVE-2024-49992, CVE-2024-56534, CVE-2024-49883,     CVE-2024-50233, CVE-2024-50057, CVE-2024-53091, CVE-2024-49886, CVE-2024-53144, CVE-2024-50029,     CVE-2024-50240, CVE-2024-56720, CVE-2024-50282, CVE-2024-50036, CVE-2024-53126, CVE-2024-56702,     CVE-2024-50101, CVE-2024-56696, CVE-2024-50193, CVE-2024-53089, CVE-2024-50263, CVE-2024-47707,     CVE-2024-49925, CVE-2024-50178, CVE-2024-47690, CVE-2024-53119, CVE-2024-49939, CVE-2024-50274,     CVE-2024-50168, CVE-2024-49963, CVE-2024-50220, CVE-2024-50250, CVE-2024-49966, CVE-2024-50104,     CVE-2024-49968, CVE-2024-47685, CVE-2024-50281, CVE-2024-50190, CVE-2024-50181, CVE-2024-50304,     CVE-2022-49034, CVE-2024-47726, CVE-2024-50159, CVE-2024-49851, CVE-2024-49933, CVE-2024-50277,     CVE-2024-56729, CVE-2024-49885, CVE-2024-53068, CVE-2024-50162, CVE-2024-50179, CVE-2024-53072,     CVE-2024-47742, CVE-2024-53083, CVE-2024-50025, CVE-2023-52917, CVE-2024-50269, CVE-2024-50302,     CVE-2024-50293, CVE-2024-50177, CVE-2024-53075, CVE-2024-50257, CVE-2024-49995, CVE-2024-53076,     CVE-2024-49940, CVE-2024-50114, CVE-2024-50043, CVE-2024-47713, CVE-2024-53081, CVE-2024-50151,     CVE-2024-50211, CVE-2024-53047, CVE-2024-50016, CVE-2024-56679, CVE-2024-56689, CVE-2024-50008,     CVE-2024-47723, CVE-2024-50285, CVE-2024-49899, CVE-2024-50098, CVE-2024-50000, CVE-2024-53098,     CVE-2024-53175, CVE-2024-49888, CVE-2024-50132, CVE-2024-49964, CVE-2024-53042, CVE-2024-50295,     CVE-2024-50038, CVE-2024-49905, CVE-2024-50012, CVE-2024-47754, CVE-2024-50017, CVE-2024-53095,     CVE-2024-49978, CVE-2024-56541, CVE-2024-49891, CVE-2024-50033, CVE-2024-50292, CVE-2024-50037,     CVE-2024-53145, CVE-2024-56747, CVE-2024-50260, CVE-2024-53177, CVE-2024-53229, CVE-2024-53221,     CVE-2024-56677, CVE-2024-53171, CVE-2024-50299, CVE-2024-50202, CVE-2024-53208, CVE-2024-53105,     CVE-2024-50006, CVE-2024-50149, CVE-2024-50275, CVE-2024-47753, CVE-2024-50212, CVE-2024-49855,     CVE-2024-50145, CVE-2024-53120, CVE-2024-53061, CVE-2024-53217, CVE-2024-53198, CVE-2024-50165,     CVE-2024-49866, CVE-2024-49994, CVE-2024-50109, CVE-2024-50137, CVE-2024-50245, CVE-2024-53154,     CVE-2024-56724, CVE-2024-53187, CVE-2024-53202, CVE-2024-49927, CVE-2024-50163, CVE-2024-50152,     CVE-2024-53220, CVE-2024-47741, CVE-2024-50102, CVE-2024-53188, CVE-2024-53116, CVE-2024-47695,     CVE-2024-47702, CVE-2024-49970, CVE-2024-50155, CVE-2024-53058, CVE-2024-49908, CVE-2024-50256,     CVE-2024-53161, CVE-2024-49893, CVE-2024-53074, CVE-2024-50144, CVE-2024-53219, CVE-2024-49869,     CVE-2024-53133, CVE-2024-50041, CVE-2024-49974, CVE-2024-50287, CVE-2024-50133, CVE-2024-53183,     CVE-2024-49997, CVE-2024-47749, CVE-2024-53153, CVE-2024-50063, CVE-2024-49852, CVE-2024-50259,     CVE-2024-50013, CVE-2024-56751, CVE-2024-53236, CVE-2024-49999, CVE-2024-50076, CVE-2024-49923,     CVE-2024-50288, CVE-2024-49867, CVE-2024-49887, CVE-2024-53101, CVE-2024-56725, CVE-2024-56745,     CVE-2024-49863, CVE-2024-49890, CVE-2024-50187, CVE-2024-50200, CVE-2024-47679, CVE-2024-50077,     CVE-2024-50069, CVE-2024-53114, CVE-2024-50071, CVE-2024-50072, CVE-2024-47705, CVE-2024-50205,     CVE-2024-49975, CVE-2024-50237, CVE-2024-53092, CVE-2024-49917, CVE-2024-49853, CVE-2024-50103,     CVE-2024-53190, CVE-2024-53215, CVE-2024-50280, CVE-2024-50014, CVE-2024-47756, CVE-2024-53231,     CVE-2024-49856, CVE-2024-50023, CVE-2024-53123, CVE-2024-56756, CVE-2024-50140, CVE-2024-56699,     CVE-2024-47703, CVE-2024-49958, CVE-2024-56692, CVE-2024-50082, CVE-2024-53181, CVE-2024-47699,     CVE-2024-50154, CVE-2024-49960, CVE-2024-53226, CVE-2024-56683, CVE-2024-53239, CVE-2024-53104,     CVE-2024-50044, CVE-2024-50255, CVE-2024-50021, CVE-2024-50070, CVE-2024-47740, CVE-2024-49882,     CVE-2024-50232, CVE-2024-47708, CVE-2024-47747, CVE-2024-49929, CVE-2024-56693, CVE-2024-53124,     CVE-2024-50223, CVE-2024-50265, CVE-2024-53172, CVE-2024-50197, CVE-2024-49915, CVE-2024-53224,     CVE-2024-47684, CVE-2024-50217, CVE-2024-50286, CVE-2024-47677, CVE-2024-49942, CVE-2024-50026,     CVE-2024-50236, CVE-2024-50086, CVE-2024-50153, CVE-2024-47675, CVE-2024-53112, CVE-2024-50138,     CVE-2024-53045, CVE-2024-53170, CVE-2024-50095, CVE-2024-50188, CVE-2024-50173, CVE-2024-50019,     CVE-2024-50117, CVE-2024-47746, CVE-2024-50172, CVE-2024-53166, CVE-2024-56721, CVE-2024-50266,     CVE-2024-47696, CVE-2024-47719, CVE-2024-49892, CVE-2024-56678, CVE-2024-47680, CVE-2024-50296,     CVE-2024-53152, CVE-2024-56536, CVE-2024-50042, CVE-2024-49894, CVE-2024-49897, CVE-2024-47671,     CVE-2024-53064, CVE-2024-53077, CVE-2024-49903, CVE-2024-53169, CVE-2024-50011, CVE-2024-47710,     CVE-2024-53046, CVE-2024-50046, CVE-2024-53131, CVE-2024-53237, CVE-2024-56707, CVE-2024-49950,     CVE-2024-53079, CVE-2024-56694, CVE-2024-53106, CVE-2024-49900, CVE-2024-47745, CVE-2024-50301,     CVE-2024-50040, CVE-2024-50183, CVE-2024-56532, CVE-2024-56698, CVE-2024-53139, CVE-2024-47721,     CVE-2024-50062, CVE-2024-50129, CVE-2024-50027, CVE-2024-49941, CVE-2024-53199, CVE-2024-50185,     CVE-2024-49858, CVE-2024-50024, CVE-2024-50146, CVE-2024-50088, CVE-2024-53111, CVE-2024-50244,     CVE-2024-47697, CVE-2024-53108, CVE-2024-49896, CVE-2024-49859, CVE-2024-56748, CVE-2024-50111,     CVE-2024-53056, CVE-2024-50283, CVE-2024-49955, CVE-2024-47706, CVE-2024-53214, CVE-2024-47712,     CVE-2024-47678, CVE-2024-53125, CVE-2024-53178, CVE-2024-53232, CVE-2024-49928, CVE-2024-47731,     CVE-2024-53121, CVE-2024-56540, CVE-2024-50271, CVE-2024-53044, CVE-2024-53132, CVE-2024-53052,     CVE-2024-50195, CVE-2024-50191, CVE-2024-47694, CVE-2024-49973, CVE-2024-49910, CVE-2024-56746,     CVE-2024-56674, CVE-2024-49871, CVE-2024-50258, CVE-2024-50049, CVE-2024-49951, CVE-2024-50182,     CVE-2024-53174, CVE-2024-50143, CVE-2024-53203, CVE-2024-53129, CVE-2024-50224, CVE-2024-49943,     CVE-2024-50131, CVE-2024-50221, CVE-2024-53143, CVE-2024-56531, CVE-2024-53055, CVE-2024-50135,     CVE-2024-50279, CVE-2024-50120, CVE-2024-53140, CVE-2024-50272, CVE-2024-47728, CVE-2024-53167,     CVE-2024-56691, CVE-2024-53223, CVE-2024-49919, CVE-2024-53082, CVE-2024-53213, CVE-2024-50298,     CVE-2024-56681, CVE-2024-53069, CVE-2024-50001, CVE-2024-50083, CVE-2024-50056, CVE-2024-56544,     CVE-2024-49989, CVE-2024-50251, CVE-2024-50121, CVE-2024-53228, CVE-2024-56700, CVE-2024-49862,     CVE-2024-49870, CVE-2024-50148, CVE-2024-53138, CVE-2024-50160, CVE-2024-50002, CVE-2024-56533,     CVE-2024-46869, CVE-2024-50118, CVE-2024-50276, CVE-2024-50226, CVE-2024-53146, CVE-2024-53134,     CVE-2024-53165, CVE-2024-56728, CVE-2024-49931, CVE-2024-50261, CVE-2024-50064, CVE-2024-47711,     CVE-2024-53157, CVE-2024-53113, CVE-2024-49898, CVE-2024-50214, CVE-2024-53085, CVE-2024-49924,     CVE-2024-49944, CVE-2024-47686, CVE-2024-53238, CVE-2024-56754, CVE-2024-50066, CVE-2024-53189,     CVE-2024-49864, CVE-2024-50093, CVE-2024-50060, CVE-2024-56684, CVE-2024-49861, CVE-2024-50243,     CVE-2024-50007, CVE-2024-50227, CVE-2024-50238, CVE-2024-49918, CVE-2024-53227, CVE-2024-50119,     CVE-2024-53088, CVE-2024-53100, CVE-2024-47693, CVE-2024-53197, CVE-2024-49932, CVE-2024-53163,     CVE-2024-53118, CVE-2024-47733, CVE-2024-49913, CVE-2024-56545, CVE-2024-47739, CVE-2024-47709,     CVE-2024-50015, CVE-2024-56690, CVE-2024-56535, CVE-2024-50167, CVE-2024-49965, CVE-2024-53043,     CVE-2024-50092, CVE-2024-50128, CVE-2024-53080, CVE-2024-56539, CVE-2024-50222, CVE-2024-47724,     CVE-2024-49980, CVE-2024-49860, CVE-2024-50034, CVE-2024-47682, CVE-2024-49949, CVE-2024-49935,     CVE-2024-49914, CVE-2024-47732, CVE-2024-47701, CVE-2024-53200, CVE-2024-50123, CVE-2024-50100,     CVE-2024-56704, CVE-2024-53115, CVE-2024-49879, CVE-2024-50096, CVE-2024-53062, CVE-2024-50094,     CVE-2024-50105, CVE-2024-49947, CVE-2024-50252, CVE-2024-56537, CVE-2024-49953, CVE-2024-53067,     CVE-2024-50091, CVE-2024-53148, CVE-2024-50164, CVE-2024-50231, CVE-2024-49874, CVE-2024-47750,     CVE-2024-50206, CVE-2024-50207, CVE-2024-56742, CVE-2024-50005, CVE-2024-56687, CVE-2024-50157,     CVE-2024-50201, CVE-2024-49921, CVE-2024-56727, CVE-2024-50136, CVE-2024-50126, CVE-2024-50239,     CVE-2024-50268, CVE-2024-50234, CVE-2024-50085, CVE-2024-47736, CVE-2024-49911, CVE-2024-50198,     CVE-2024-47704, CVE-2024-53233, CVE-2024-49981, CVE-2024-53053, CVE-2024-50139, CVE-2024-49895,     CVE-2024-56688, CVE-2024-50031, CVE-2024-49916, CVE-2024-53155, CVE-2024-50035, CVE-2024-53230,     CVE-2024-47738, CVE-2024-53099, CVE-2024-53212, CVE-2024-47743, CVE-2024-56701, CVE-2024-53151,     CVE-2024-49934, CVE-2024-53141, CVE-2024-50059, CVE-2024-49922, CVE-2024-50215, CVE-2024-50022,     CVE-2024-50229, CVE-2024-50184, CVE-2024-50065, CVE-2024-50242, CVE-2024-50003, CVE-2024-47715,     CVE-2024-53093, CVE-2024-49956, CVE-2024-49868, CVE-2024-49878, CVE-2024-56722, CVE-2024-53156,     CVE-2024-49857, CVE-2024-53110, CVE-2024-47735, CVE-2024-53168, CVE-2024-56543, CVE-2024-50080,     CVE-2024-50068, CVE-2024-49909, CVE-2024-56708, CVE-2024-50134, CVE-2024-50262, CVE-2024-50303,     CVE-2024-50203, CVE-2024-49957, CVE-2024-50087, CVE-2024-53065, CVE-2024-49920, CVE-2024-49880,     CVE-2024-50110, CVE-2024-49877, CVE-2024-47692, CVE-2024-50127, CVE-2024-49907, CVE-2024-49937,     CVE-2024-49987, CVE-2024-50141, CVE-2024-56538, CVE-2024-49865, CVE-2024-47689, CVE-2024-50218,     CVE-2024-47720, CVE-2024-53191, CVE-2024-53194, CVE-2024-50216, CVE-2024-50213, CVE-2024-49988,     CVE-2024-53094, CVE-2024-50186, CVE-2024-50010, CVE-2024-50169, CVE-2024-53107, CVE-2024-47698,     CVE-2024-53142, CVE-2024-49945, CVE-2024-49873, CVE-2024-53176, CVE-2024-49884, CVE-2024-50112,     CVE-2024-50199, CVE-2024-53122, CVE-2024-50284, CVE-2024-50208, CVE-2024-53218, CVE-2024-50045,     CVE-2024-50028, CVE-2024-50122, CVE-2024-50291, CVE-2024-50047, CVE-2024-50090, CVE-2024-49876,     CVE-2024-47730, CVE-2024-53195, CVE-2024-56703, CVE-2024-49996, CVE-2024-49954, CVE-2024-47757,     CVE-2024-47717, CVE-2024-49850, CVE-2024-50273, CVE-2024-47752, CVE-2024-53149, CVE-2024-53173,     CVE-2024-50235, CVE-2024-50150, CVE-2024-50030, CVE-2024-50079, CVE-2024-56546, CVE-2024-53086,     CVE-2024-53150, CVE-2024-49979, CVE-2024-50058, CVE-2024-50171, CVE-2024-56685, CVE-2024-50254,     CVE-2024-47751, CVE-2024-53193, CVE-2024-53209, CVE-2024-49926, CVE-2024-47748, CVE-2024-53109,     CVE-2024-53066, CVE-2024-50225, CVE-2024-53137, CVE-2024-50113, CVE-2024-49912, CVE-2024-49998,     CVE-2024-50116, CVE-2024-49977, CVE-2024-47687, CVE-2024-50084, CVE-2024-49982, CVE-2024-50253,     CVE-2024-50290, CVE-2024-47727, CVE-2024-50248, CVE-2024-50170, CVE-2024-47691, CVE-2024-53147,     CVE-2024-50192, CVE-2024-53117, CVE-2024-49938, CVE-2024-47744, CVE-2024-50147, CVE-2024-49991,     CVE-2024-50048, CVE-2024-53127, CVE-2024-49902, CVE-2024-50156, CVE-2024-53087, CVE-2024-56548,     CVE-2024-50125, CVE-2024-56723, CVE-2024-50108, CVE-2024-53049, CVE-2024-50081, CVE-2024-56726,     CVE-2024-49875, CVE-2024-50194, CVE-2024-50278, CVE-2024-49904, CVE-2024-50267, CVE-2024-50297,     CVE-2024-50130, CVE-2024-49936)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7277-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - Compute Acceleration Framework;

    - ACPI drivers;

    - Drivers core;

    - ATA over ethernet (AOE) driver;

    - RAM backed block device driver;

    - Network block device driver;

    - Ublk userspace block driver;

    - Compressed RAM block device driver;

    - Bluetooth drivers;

    - TPM device driver;

    - Clock framework and drivers;

    - Data acquisition framework and drivers;

    - CPU frequency scaling framework;

    - Hardware crypto device drivers;

    - CXL (Compute Express Link) drivers;

    - DAX dirext access to differentiated memory framework;

    - Buffer Sharing and Synchronization framework;

    - EDAC drivers;

    - FireWire subsystem;

    - ARM SCMI message protocol;

    - ARM SCPI message protocol;

    - EFI core;

    - Qualcomm firmware drivers;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - Mailbox framework;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Ethernet bonding driver;

    - Network drivers;

    - Mellanox network drivers;

    - STMicroelectronics network drivers;

    - NTB driver;

    - Virtio pmem driver;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Alibaba DDR Sub-System Driveway PMU driver;

    - PHY drivers;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - i.MX PM domains;

    - Powercap sysfs driver;

    - Voltage and Current Regulator drivers;

    - Remote Processor subsystem;

    - StarFive reset controller drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - QCOM SoC drivers;

    - Xilinx SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - Thermal drivers;

    - Thunderbolt and USB4 drivers;

    - TTY drivers;

    - UFS subsystem;

    - USB Device Class drivers;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Host Controller drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - TI TPS6598x USB Power Delivery controller driver;

    - USB Type-C Connector System Software Interface driver;

    - vDPA drivers;

    - VFIO drivers;

    - Virtio Host (VHOST) subsystem;

    - Framebuffer layer;

    - Virtio drivers;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - File systems infrastructure;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - File system notification infrastructure;

    - NTFS3 file system;

    - Proc file system;

    - SMB network file system;

    - UBI file system;

    - BPF subsystem;

    - Network file system (NFS) superblock;

    - Virtio network driver;

    - Bluetooth subsystem;

    - Network traffic control;

    - Network sockets;

    - TCP network protocol;

    - Tracing infrastructure;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - IPC subsystem;

    - Perf events;

    - Kernel fork() syscall;

    - Kernel thread helper (kthread);

    - Padata parallel execution mechanism;

    - RCU subsystem;

    - Arbitrary resource management;

    - Scheduler infrastructure;

    - Signal handling mechanism;

    - Static call mechanism;

    - Task handling mechanism;

    - Timer substystem drivers;

    - Maple Tree data structure library;

    - Memory management;

    - 9P file system network protocol;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - IPv4 networking;

    - IPv6 networking;

    - IUCV driver;

    - L2TP protocol;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - NCSI (Network Controller Sideband Interface) driver;

    - Netfilter;

    - Netlink;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - VMware vSockets driver;

    - Wireless networking;

    - eXpress Data Path;

    - XFRM subsystem;

    - AppArmor security module;

    - Integrity Measurement Architecture(IMA) framework;

    - Key management;

    - ALSA framework;

    - FireWire sound drivers;

    - AudioScience HPI driver;

    - HD-audio driver;

    - SoC Audio for Freescale CPUs drivers;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - QCOM ASoC drivers;

    - SoC audio core drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-50030, CVE-2024-47689, CVE-2024-50088, CVE-2024-50154, CVE-2024-49994,     CVE-2024-50243, CVE-2024-50284, CVE-2024-50207, CVE-2024-53200, CVE-2024-53155, CVE-2024-50179,     CVE-2024-50171, CVE-2024-53167, CVE-2024-49885, CVE-2024-49869, CVE-2024-49934, CVE-2024-53089,     CVE-2024-50196, CVE-2024-53090, CVE-2024-47675, CVE-2024-47690, CVE-2024-56674, CVE-2024-50082,     CVE-2024-47742, CVE-2024-53220, CVE-2024-50172, CVE-2024-50009, CVE-2024-49881, CVE-2024-50249,     CVE-2024-47752, CVE-2024-56707, CVE-2024-53105, CVE-2024-53048, CVE-2024-50148, CVE-2024-50036,     CVE-2024-53141, CVE-2024-50213, CVE-2024-49911, CVE-2024-50285, CVE-2024-56535, CVE-2024-49882,     CVE-2024-50225, CVE-2024-50090, CVE-2024-53063, CVE-2024-56703, CVE-2024-47687, CVE-2024-53079,     CVE-2024-47744, CVE-2024-50020, CVE-2024-53078, CVE-2024-53176, CVE-2024-53183, CVE-2024-50248,     CVE-2024-50283, CVE-2024-49907, CVE-2024-50084, CVE-2024-56541, CVE-2024-49979, CVE-2024-53175,     CVE-2024-49871, CVE-2024-47678, CVE-2024-47720, CVE-2024-53059, CVE-2024-56685, CVE-2024-56702,     CVE-2024-50071, CVE-2024-56534, CVE-2024-56745, CVE-2024-53154, CVE-2024-47736, CVE-2024-49965,     CVE-2024-47701, CVE-2024-50159, CVE-2024-50040, CVE-2024-50274, CVE-2024-49876, CVE-2024-49895,     CVE-2024-50189, CVE-2024-56704, CVE-2024-47681, CVE-2024-53106, CVE-2024-56744, CVE-2024-53197,     CVE-2024-50120, CVE-2024-50204, CVE-2024-50184, CVE-2024-53095, CVE-2024-50101, CVE-2024-53146,     CVE-2024-50256, CVE-2024-53226, CVE-2024-47712, CVE-2024-50137, CVE-2024-53131, CVE-2024-49888,     CVE-2024-50235, CVE-2024-50047, CVE-2024-50224, CVE-2024-50142, CVE-2024-50200, CVE-2024-53085,     CVE-2024-49892, CVE-2024-50263, CVE-2024-53150, CVE-2024-53121, CVE-2024-49977, CVE-2024-50144,     CVE-2024-50127, CVE-2024-53092, CVE-2024-50265, CVE-2024-56691, CVE-2024-53069, CVE-2024-49902,     CVE-2024-47715, CVE-2024-56720, CVE-2024-53127, CVE-2024-53142, CVE-2024-49862, CVE-2024-49918,     CVE-2024-56684, CVE-2024-50208, CVE-2024-53189, CVE-2024-50103, CVE-2024-56756, CVE-2024-50273,     CVE-2024-56536, CVE-2024-53068, CVE-2024-49878, CVE-2024-47705, CVE-2024-53113, CVE-2024-50129,     CVE-2024-49942, CVE-2024-50100, CVE-2024-49930, CVE-2024-50043, CVE-2024-53198, CVE-2024-49861,     CVE-2024-50124, CVE-2024-50209, CVE-2024-53187, CVE-2024-49864, CVE-2024-56689, CVE-2024-50294,     CVE-2024-47706, CVE-2024-50186, CVE-2024-53086, CVE-2024-49954, CVE-2024-56692, CVE-2024-47679,     CVE-2024-53109, CVE-2024-50001, CVE-2024-49983, CVE-2024-56679, CVE-2024-50034, CVE-2024-50276,     CVE-2024-56680, CVE-2024-49988, CVE-2024-53099, CVE-2024-50021, CVE-2024-50022, CVE-2024-50136,     CVE-2024-53193, CVE-2024-50220, CVE-2024-49858, CVE-2024-50229, CVE-2024-50074, CVE-2024-50002,     CVE-2024-53117, CVE-2024-50176, CVE-2024-50075, CVE-2024-50045, CVE-2024-49924, CVE-2024-47686,     CVE-2024-50104, CVE-2024-47714, CVE-2024-50291, CVE-2024-49929, CVE-2024-53215, CVE-2024-50157,     CVE-2024-50147, CVE-2024-49898, CVE-2024-50164, CVE-2024-47711, CVE-2024-53082, CVE-2024-50230,     CVE-2024-50152, CVE-2024-53218, CVE-2024-53199, CVE-2024-50253, CVE-2024-47754, CVE-2024-49910,     CVE-2024-53137, CVE-2024-50128, CVE-2024-50044, CVE-2024-47719, CVE-2024-53188, CVE-2024-53061,     CVE-2024-49944, CVE-2024-50091, CVE-2024-49945, CVE-2024-50119, CVE-2024-50133, CVE-2024-50033,     CVE-2024-53083, CVE-2024-50138, CVE-2024-49872, CVE-2024-50140, CVE-2024-56727, CVE-2024-50003,     CVE-2024-50015, CVE-2024-50303, CVE-2024-50258, CVE-2024-49867, CVE-2024-50116, CVE-2024-47716,     CVE-2024-50132, CVE-2024-50055, CVE-2024-49950, CVE-2024-50203, CVE-2024-47695, CVE-2024-50250,     CVE-2024-50165, CVE-2024-50156, CVE-2024-56700, CVE-2024-49913, CVE-2024-50281, CVE-2024-53045,     CVE-2024-49998, CVE-2024-53180, CVE-2024-50271, CVE-2024-50286, CVE-2024-49887, CVE-2024-53168,     CVE-2024-47676, CVE-2024-47726, CVE-2024-47732, CVE-2024-47704, CVE-2024-49980, CVE-2024-49931,     CVE-2024-53229, CVE-2024-50141, CVE-2024-50282, CVE-2024-50233, CVE-2024-56725, CVE-2024-50239,     CVE-2024-50299, CVE-2024-50218, CVE-2024-53072, CVE-2024-49903, CVE-2024-50163, CVE-2024-53100,     CVE-2024-50146, CVE-2024-49859, CVE-2024-50227, CVE-2024-50188, CVE-2024-56739, CVE-2024-53217,     CVE-2024-53118, CVE-2024-49946, CVE-2024-53212, CVE-2024-49926, CVE-2024-53177, CVE-2024-56741,     CVE-2024-53234, CVE-2024-49932, CVE-2024-50095, CVE-2024-50190, CVE-2024-49995, CVE-2024-49976,     CVE-2024-49906, CVE-2024-49996, CVE-2024-53049, CVE-2024-47751, CVE-2024-56677, CVE-2024-56724,     CVE-2024-47746, CVE-2024-50245, CVE-2024-53236, CVE-2024-53191, CVE-2024-50112, CVE-2024-49937,     CVE-2024-50234, CVE-2024-50067, CVE-2024-53112, CVE-2024-50017, CVE-2024-50008, CVE-2024-50194,     CVE-2024-50076, CVE-2024-47697, CVE-2024-56693, CVE-2024-50280, CVE-2024-50182, CVE-2024-53237,     CVE-2024-50011, CVE-2024-49912, CVE-2024-50217, CVE-2024-56532, CVE-2024-53221, CVE-2024-50206,     CVE-2024-47700, CVE-2024-56537, CVE-2024-49959, CVE-2024-56681, CVE-2024-49936, CVE-2024-49900,     CVE-2024-53077, CVE-2024-56705, CVE-2024-53125, CVE-2024-49968, CVE-2024-49969, CVE-2024-56545,     CVE-2024-50106, CVE-2024-53160, CVE-2024-50013, CVE-2024-49880, CVE-2024-53228, CVE-2024-50177,     CVE-2024-47684, CVE-2024-47739, CVE-2024-50029, CVE-2024-53194, CVE-2024-50237, CVE-2024-50035,     CVE-2024-49941, CVE-2024-49947, CVE-2024-50289, CVE-2024-49949, CVE-2024-50023, CVE-2024-50139,     CVE-2024-49886, CVE-2024-50026, CVE-2024-56748, CVE-2024-53080, CVE-2024-56754, CVE-2024-49999,     CVE-2024-49963, CVE-2024-49855, CVE-2024-50252, CVE-2024-49975, CVE-2024-50107, CVE-2024-56749,     CVE-2024-49928, CVE-2024-49865, CVE-2024-50125, CVE-2024-49899, CVE-2024-47750, CVE-2024-53152,     CVE-2024-50081, CVE-2024-49891, CVE-2024-49927, CVE-2024-49852, CVE-2024-50085, CVE-2024-50185,     CVE-2024-50205, CVE-2024-49896, CVE-2024-50278, CVE-2024-49866, CVE-2024-53190, CVE-2024-50251,     CVE-2024-50269, CVE-2024-49889, CVE-2024-50037, CVE-2024-53144, CVE-2024-53138, CVE-2024-50087,     CVE-2024-56678, CVE-2024-53087, CVE-2024-50180, CVE-2024-49940, CVE-2024-50019, CVE-2024-53149,     CVE-2024-50122, CVE-2024-50038, CVE-2024-53156, CVE-2024-49943, CVE-2024-50113, CVE-2024-47721,     CVE-2024-53076, CVE-2024-50115, CVE-2024-50178, CVE-2024-50268, CVE-2024-50279, CVE-2024-53134,     CVE-2024-50199, CVE-2024-49989, CVE-2024-47671, CVE-2024-49909, CVE-2024-53173, CVE-2024-53053,     CVE-2024-53088, CVE-2024-50078, CVE-2024-50105, CVE-2024-50223, CVE-2024-50126, CVE-2024-47680,     CVE-2024-47724, CVE-2024-53047, CVE-2024-50060, CVE-2024-53056, CVE-2024-49987, CVE-2024-49879,     CVE-2024-53128, CVE-2024-53123, CVE-2024-49981, CVE-2024-50277, CVE-2024-50166, CVE-2024-53067,     CVE-2024-49964, CVE-2024-56728, CVE-2024-49853, CVE-2024-53064, CVE-2024-56531, CVE-2024-53213,     CVE-2024-50246, CVE-2024-50192, CVE-2024-53184, CVE-2024-56697, CVE-2024-47710, CVE-2024-53052,     CVE-2024-47718, CVE-2024-49938, CVE-2024-49893, CVE-2024-53133, CVE-2024-50096, CVE-2024-53129,     CVE-2024-49951, CVE-2024-53181, CVE-2024-50059, CVE-2024-50193, CVE-2024-53120, CVE-2024-50114,     CVE-2024-49962, CVE-2024-49921, CVE-2024-50298, CVE-2024-50255, CVE-2024-53219, CVE-2024-49905,     CVE-2024-50211, CVE-2024-49860, CVE-2024-47727, CVE-2024-50028, CVE-2024-47723, CVE-2024-53081,     CVE-2024-56683, CVE-2024-49897, CVE-2024-50065, CVE-2024-56708, CVE-2024-50151, CVE-2023-52917,     CVE-2024-56538, CVE-2024-47691, CVE-2024-53196, CVE-2024-50150, CVE-2024-50069, CVE-2024-50301,     CVE-2024-50131, CVE-2024-53110, CVE-2024-56701, CVE-2024-53115, CVE-2024-53062, CVE-2024-50058,     CVE-2024-53148, CVE-2024-53147, CVE-2024-50226, CVE-2024-56540, CVE-2024-53124, CVE-2024-50170,     CVE-2024-50266, CVE-2024-50296, CVE-2024-49953, CVE-2024-47692, CVE-2024-49916, CVE-2024-53239,     CVE-2024-50173, CVE-2024-49868, CVE-2024-47677, CVE-2024-49972, CVE-2024-50130, CVE-2024-56698,     CVE-2024-50231, CVE-2024-50272, CVE-2024-53153, CVE-2024-50158, CVE-2024-53046, CVE-2024-49908,     CVE-2024-47709, CVE-2024-53058, CVE-2024-50006, CVE-2024-49948, CVE-2024-47685, CVE-2024-47693,     CVE-2024-50260, CVE-2024-50079, CVE-2024-50149, CVE-2024-53151, CVE-2024-47757, CVE-2024-49917,     CVE-2024-50288, CVE-2024-50117, CVE-2024-50039, CVE-2024-56690, CVE-2024-50293, CVE-2024-50145,     CVE-2024-53166, CVE-2024-47713, CVE-2024-53158, CVE-2024-50068, CVE-2024-53074, CVE-2024-49914,     CVE-2024-49870, CVE-2024-50031, CVE-2024-47735, CVE-2024-50007, CVE-2024-49915, CVE-2024-47699,     CVE-2024-50244, CVE-2024-50216, CVE-2024-53114, CVE-2024-53043, CVE-2024-47688, CVE-2024-47734,     CVE-2024-53230, CVE-2024-53122, CVE-2024-50123, CVE-2024-53116, CVE-2024-56726, CVE-2024-56747,     CVE-2024-56548, CVE-2024-50174, CVE-2024-53042, CVE-2024-53135, CVE-2024-50080, CVE-2024-49997,     CVE-2024-49974, CVE-2024-53145, CVE-2024-53075, CVE-2024-47730, CVE-2024-50304, CVE-2024-50161,     CVE-2024-49883, CVE-2024-53111, CVE-2024-53233, CVE-2024-47698, CVE-2024-50012, CVE-2024-50240,     CVE-2024-53163, CVE-2024-53071, CVE-2024-50168, CVE-2024-47740, CVE-2024-50275, CVE-2024-49961,     CVE-2024-50183, CVE-2024-53203, CVE-2024-47738, CVE-2024-49856, CVE-2024-50014, CVE-2024-50191,     CVE-2024-46869, CVE-2024-56721, CVE-2024-50056, CVE-2024-53210, CVE-2024-49978, CVE-2024-53161,     CVE-2024-50155, CVE-2024-50270, CVE-2024-50169, CVE-2024-49952, CVE-2024-50236, CVE-2024-49863,     CVE-2024-49857, CVE-2024-53140, CVE-2024-53107, CVE-2024-50247, CVE-2024-53084, CVE-2024-50077,     CVE-2024-50121, CVE-2024-53091, CVE-2024-49925, CVE-2024-47745, CVE-2024-50086, CVE-2024-53101,     CVE-2024-56729, CVE-2024-56751, CVE-2024-50016, CVE-2024-49901, CVE-2024-47694, CVE-2024-53098,     CVE-2024-53232, CVE-2024-50108, CVE-2024-50197, CVE-2024-50242, CVE-2024-50222, CVE-2024-53132,     CVE-2024-50212, CVE-2024-49933, CVE-2024-53169, CVE-2024-49957, CVE-2024-56533, CVE-2024-47708,     CVE-2024-50267, CVE-2024-56723, CVE-2024-50110, CVE-2024-50064, CVE-2024-56722, CVE-2024-53130,     CVE-2024-53208, CVE-2024-50102, CVE-2024-50153, CVE-2024-49939, CVE-2024-53094, CVE-2024-50262,     CVE-2024-49850, CVE-2024-53195, CVE-2024-53170, CVE-2024-50093, CVE-2024-53223, CVE-2024-53093,     CVE-2024-56699, CVE-2024-50070, CVE-2024-49992, CVE-2024-50111, CVE-2024-47728, CVE-2024-53202,     CVE-2024-47741, CVE-2024-49920, CVE-2024-56694, CVE-2024-53126, CVE-2024-49851, CVE-2024-50099,     CVE-2024-50302, CVE-2024-50214, CVE-2024-49973, CVE-2024-50024, CVE-2024-50162, CVE-2024-53214,     CVE-2024-50073, CVE-2024-50061, CVE-2024-56549, CVE-2024-56688, CVE-2024-49960, CVE-2024-56543,     CVE-2024-53178, CVE-2024-50027, CVE-2024-50295, CVE-2024-53104, CVE-2024-53065, CVE-2024-47747,     CVE-2024-49991, CVE-2024-50202, CVE-2024-49935, CVE-2024-50062, CVE-2024-50094, CVE-2024-56544,     CVE-2024-50010, CVE-2024-49971, CVE-2024-50083, CVE-2024-56687, CVE-2024-47753, CVE-2024-50297,     CVE-2024-47733, CVE-2024-50135, CVE-2024-50066, CVE-2024-50118, CVE-2024-56746, CVE-2024-47682,     CVE-2024-53165, CVE-2024-50025, CVE-2024-49875, CVE-2024-47717, CVE-2024-49894, CVE-2024-50198,     CVE-2024-50167, CVE-2024-49958, CVE-2024-49966, CVE-2024-50254, CVE-2024-49904, CVE-2024-50041,     CVE-2024-50005, CVE-2024-53066, CVE-2024-50000, CVE-2024-50215, CVE-2024-47748, CVE-2024-56742,     CVE-2024-50259, CVE-2024-50092, CVE-2024-47737, CVE-2024-53238, CVE-2024-50300, CVE-2024-53192,     CVE-2024-47696, CVE-2024-50134, CVE-2024-50201, CVE-2024-50181, CVE-2024-49873, CVE-2024-50187,     CVE-2024-53171, CVE-2024-50160, CVE-2024-49923, CVE-2024-50063, CVE-2024-53174, CVE-2024-50143,     CVE-2024-49982, CVE-2024-56546, CVE-2024-50109, CVE-2024-53119, CVE-2024-47707, CVE-2024-56696,     CVE-2024-53108, CVE-2024-47731, CVE-2024-50261, CVE-2024-50042, CVE-2024-49884, CVE-2024-53162,     CVE-2024-56755, CVE-2024-49919, CVE-2024-53216, CVE-2024-50287, CVE-2024-53143, CVE-2024-50257,     CVE-2024-49890, CVE-2024-53172, CVE-2024-53209, CVE-2024-49956, CVE-2024-50238, CVE-2024-49955,     CVE-2024-50046, CVE-2024-50098, CVE-2024-50232, CVE-2024-50292, CVE-2024-56752, CVE-2024-50195,     CVE-2024-47743, CVE-2024-53044, CVE-2024-50049, CVE-2024-49986, CVE-2024-53055, CVE-2024-56539,     CVE-2024-50048, CVE-2024-49985, CVE-2024-53227, CVE-2024-49970, CVE-2024-47702, CVE-2024-49874,     CVE-2024-47703, CVE-2024-53139, CVE-2024-50072, CVE-2024-53224, CVE-2024-49877, CVE-2024-49922,     CVE-2024-50290, CVE-2024-47756, CVE-2024-50221, CVE-2024-50057, CVE-2022-49034, CVE-2024-53157,     CVE-2024-47749, CVE-2024-53231)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    bpf: sync_linked_regs() must preserve subreg_def(CVE-2024-53125)

    nvme-multipath: defer partition scanning(CVE-2024-53093)

    dm cache: fix flushing uninitialized delayed_work on cache_ctr error(CVE-2024-50280)

    net: fix data-races around sk-sk_forward_alloc(CVE-2024-53124)

    NFSD: Never decrement pending_async_copies on error(CVE-2024-53073)

    smb: client: Fix use-after-free of network namespace.(CVE-2024-53095)

    mm: resolve faulty mmap_region() error path behaviour(CVE-2024-53096)

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format(CVE-2024-53104)

    arm64: probes: Fix uprobes for big-endian kernels(CVE-2024-50194)

    HID: core: zero-initialize the report buffer(CVE-2024-50302)

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find().(CVE-2024-50304)

    i40e: fix race condition by adding filter's intermediate sync state(CVE-2024-53088)

    media: dvbdev: prevent the risk of out of memory access(CVE-2024-53063)

    dm cache: fix potential out-of-bounds access on the first resume(CVE-2024-50278)

    dm cache: fix out-of-bounds access to the dirty bitset when resizing(CVE-2024-50279)

    net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT(CVE-2024-53057)

    usb: typec: altmode should keep reference to parent(CVE-2024-50150)

    vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans(CVE-2024-50264)

    USB: serial: io_edgeport: fix use after free in debug printk(CVE-2024-50267)

    filemap: Fix bounds checking in filemap_read().(CVE-2024-50272)

    sctp: properly validate chunk size in sctp_sf_ootb().(CVE-2024-50299)

    bpf: Check validity of link-type in bpf_link_show_fdinfo().(CVE-2024-53099)

    media: av7110: fix a spectre vulnerability(CVE-2024-50289)

    RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages(CVE-2024-50208)

    security/keys: fix slab-out-of-bounds in key_task_permission(CVE-2024-50301)

    KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory(CVE-2024-50115)

    nfs: Fix KMSAN warning in decode_getfattr_attrs().(CVE-2024-53066)

    net: missing check virtio(CVE-2024-43817)

    io_uring/rw: fix missing NOWAIT check for O_DIRECT start write(CVE-2024-53052)

    An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider     that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF),     which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or     check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245.(CVE-2021-29648)

    sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start(CVE-2024-49944)

    be2net: fix potential memory leak in be_xmit().(CVE-2024-50167)

    netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6().(CVE-2024-50256)

    netfilter: nft_payload: sanitize offset and length before calling skb_checksum().(CVE-2024-50251)

    net: hns3: fix kernel crash when uninstalling driver(CVE-2024-50296)

    tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().(CVE-2024-50154)

    net: fix crash when config small gso_max_size/gso_ipv4_max_size(CVE-2024-50258)

    RDMA/bnxt_re: Add a check for memory allocation(CVE-2024-50209)

    netfilter: nf_tables: prevent nf_skb_duplicated corruption(CVE-2024-49952)

    udf: fix uninit-value use in udf_get_fileshortad(CVE-2024-50143)

    bpf: Fix out-of-bounds write in trie_get_next_key().(CVE-2024-50262)

    tpm: Lock TPM chip in tpm_pm_suspend() first(CVE-2024-53085)

    bpf: support non-r10 register spill/fill to/from stack in precision tracking(CVE-2023-52920)

    bpf, arm64: Fix address emission with tag-based KASAN enabled(CVE-2024-50203)

    mm/swapfile: skip HugeTLB pages for unuse_vma(CVE-2024-50199)

    secretmem: disable memfd_secret() if arch cannot set direct map(CVE-2024-50182)

    NFSD: Initialize struct nfsd4_copy earlier(CVE-2024-50241)

    nvme-pci: fix race condition between reset and nvme_dev_disable().(CVE-2024-50135)

    irqchip/gic-v4: Don't allow a VMOVP on a dying VPE(CVE-2024-50192)

    bpf: Use raw_spinlock_t in ringbuf(CVE-2024-50138)

    x86/sgx: Fix deadlock in SGX NUMA node search(CVE-2024-49856)

    KVM: x86: Acquire kvm-srcu when handling KVM_SET_VCPU_EVENTS(CVE-2024-46830)

    RDMA/mad: Improve handling of timed out WRs of mad agent(CVE-2024-50095)

    ceph: remove the incorrect Fw reference check when dirtying pages(CVE-2024-50179)

    kernel: Fix page corruption caused by racy check in __free_pages(CVE-2023-52739)

    xfrm: validate new SA's prefixlen using SA family when sel.family is unset(CVE-2024-50142)

    posix-clock: Fix missing timespec64 check in pc_clock_settime().(CVE-2024-50195)

    iommu/vt-d: Fix double list_add when enabling VMD in scalable mode(CVE-2022-48916)

    static_call: Replace pointless WARN_ON() in static_call_module_notify().(CVE-2024-49954)

    tracing: Consider the NULL character when validating the event length(CVE-2024-50131)

    tty: n_gsm: Fix use-after-free in gsm_cleanup_mux(CVE-2024-50073)

    arm64: probes: Remove broken LDR (literal) uprobe support(CVE-2024-50099)

    net: add more sanity checks to qdisc_pkt_len_init().(CVE-2024-49948)

    net: avoid potential underflow in qdisc_pkt_len_init() with UFO(CVE-2024-49949)

    l2tp: prevent possible tunnel refcount underflow(CVE-2024-49940)

    RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency(CVE-2024-47696)

    smb: client: fix OOBs when building SMB2_IOCTL request(CVE-2024-50151)

    platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug(CVE-2024-49886)

    resource: fix region_intersects() vs add_memory_driver_managed().(CVE-2024-49878)

    sched: Fix yet more sched_fork() races(CVE-2022-48944)

    sched/fair: Fix fault in reweight_entity(CVE-2022-48921)

    fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name(CVE-2024-49934)

    usb: xhci: Check endpoint is valid before dereferencing it(CVE-2023-52901)

    gso: fix udp gso fraglist segmentation after pull from frag_list(CVE-2024-49978)

    NFSD: Limit the number of concurrent async COPY operations(CVE-2024-49974)

    drm/amd/display: Initialize denominators' default to 1(CVE-2024-49899)

    igb: Initialize mailbox message for VF reset(CVE-2022-48949)

    tipc: guard against string buffer overrun(CVE-2024-49995)

    net/mlx5: Fix error path in multi-packet WQE transmit(CVE-2024-50001)

    static_call: Handle module init failure correctly in static_call_del_module().(CVE-2024-50002)

    blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race(CVE-2024-50082)

    iommu/vt-d: Fix PCI device refcount leak in has_external_pci()(CVE-2022-49000)

    drm/amd/display: Skip wbscl_set_scaler_filter if filter is null(CVE-2024-46714)

    memcg: fix possible use-after-free in memcg_write_event_control().(CVE-2022-48988)

    ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference(CVE-2022-48999)

    drm/amd/display: Avoid overflow assignment in link_dp_cts(CVE-2024-50016)

    x86/bugs: Use code segment selector for VERW operand(CVE-2024-50072)

    parport: Proper fix for array out-of-bounds access(CVE-2024-50074)

    net: phy: fix null-ptr-deref while probe() failed(CVE-2022-49021)

    ext4: fix timer use-after-free on failed mount(CVE-2024-49960)

    ext4: fix i_data_sem unlock order in ext4_ind_migrate().(CVE-2024-50006)

    ext4: fix access to uninitialised lock in fc replay path(CVE-2024-50014)

    bpf: Prevent tail call between progs attached to different hooks(CVE-2024-50063)

    RDMA/cxgb4: Added NULL check for lookup_atid(CVE-2024-47749)

    nfsd: map the EBADMSG to nfserr_io to avoid warning(CVE-2024-49875)

    iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()(CVE-2022-49002)

    nbd: fix race between timeout and normal completion(CVE-2024-49855)

    io_uring: check if we need to reschedule during overflow flush(CVE-2024-50060)

    ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free(CVE-2024-49983)

    net: Fix an unsafe loop on the list(CVE-2024-50024)

    rtc: cmos: Fix event handler registration ordering issue(CVE-2022-48953)

    gpiolib: fix memory leak in gpiochip_setup_dev().(CVE-2022-48975)

    thermal: core: Reference count the zone in thermal_zone_get_by_id().(CVE-2024-50028)

    nfsd: return -EINVAL when namelen is 0(CVE-2024-47692)

    IB/core: Fix ib_cache_setup_one error flow cleanup(CVE-2024-47693)

    efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption(CVE-2024-49858)

    Bluetooth: Fix not cleanup led when bt_init fails(CVE-2022-48971)

    igb: Do not bring the device up after non-fatal error(CVE-2024-50040)

    uprobes: fix kernel info leak via '[uprobes]' vma(CVE-2024-49975)

    serial: protect uart_port_dtr_rts() in uart_shutdown() too(CVE-2024-50058)

    bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error(CVE-2024-47728)

    NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies().(CVE-2024-50046)

    lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc().(CVE-2024-47668)

    iavf: Fix error handling in iavf_init_module().(CVE-2022-49027)

    netfilter: xtables: avoid NFPROTO_UNSPEC where needed(CVE-2024-50038)

    net: mdio: fix unbalanced fwnode reference count in mdio_device_release().(CVE-2022-48961)

    bpf, lsm: Add check for BPF LSM return value(CVE-2024-47703)

    net/sched: accept TCA_STAB only for root qdisc(CVE-2024-50039)

    block: fix potential invalid pointer dereference in blk_add_partition(CVE-2024-47705)

    drm/amd/display: Check null pointers before using dc-clk_mgr(CVE-2024-49907)

    scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths(CVE-2024-49891)

    nfsd: call cache_put if xdr_reserve_space returns NULL(CVE-2024-47737)

    padata: use integer wrap around to prevent deadlock on seq_nr overflow(CVE-2024-47739)

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev().(CVE-2024-47707)

    HID: core: fix shift-out-of-bounds in hid_report_raw_event(CVE-2022-48978)

    af_unix: Get user_ns from in_skb in unix_diag_get_exact().(CVE-2022-48970)

    icmp: change the order of rate limits(CVE-2024-47678)

    vfs: fix race between evice_inodes() and find_inode()iput().(CVE-2024-47679)

    ixgbevf: Fix resource leak in ixgbevf_init_module().(CVE-2022-49028)

    tipc: re-fetch skb cb after tipc_msg_validate(CVE-2022-49017)

    net: tun: Fix use-after-free in tun_detach()(CVE-2022-49014)

    net/mlx5e: Fix use-after-free when reverting termination table(CVE-2022-49025)

    drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error(CVE-2024-47697)

    smb: client: fix UAF in async decryption(CVE-2024-50047)

    drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error(CVE-2024-47698)

    crypto: hisilicon/qm - inject error before stopping queue(CVE-2024-47730)

    bpf: Fix helper writes to read-only maps(CVE-2024-49861)

    ppp: fix ppp_async_encode() illegal access(CVE-2024-50035)

    cifs: Fix buffer overflow when parsing NFS reparse points(CVE-2024-49996)

    libbpf: Handle size overflow for ringbuf mmap(CVE-2022-49030)

    slip: make slhc_remember() more robust against malicious packets(CVE-2024-50033)

    netfilter: br_netfilter: fix panic with metadata_dst skb(CVE-2024-50045)

    ACPI: sysfs: validate return type of _STR method(CVE-2024-49860)

    firmware_loader: Block path traversal(CVE-2024-47742)

    drm/amd/display: Fix index out of bounds in degamma hardware format translation(CVE-2024-49894)

    vhost/scsi: null-ptr-dereference in vhost_scsi_get_req().(CVE-2024-49863)

    uprobe: avoid out-of-bounds memory access of fetching args(CVE-2024-50067)

    ACPI: battery: Fix possible crash when unregistering a battery hook(CVE-2024-49955)

    jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error(CVE-2024-49959)

    ext4: dax: fix overflowing extents beyond inode size when partially writing(CVE-2024-50015)

    udf: Fix preallocation discarding at indirect extent boundary(CVE-2022-48946)

    ext4: avoid OOB when system.data xattr changes underneath the filesystem(CVE-2024-47701)

    fbdev: efifb: Register sysfs groups through driver core(CVE-2024-49925)

    net: do not delay dst_entries_add() in dst_release()(CVE-2024-50036)

    ext4: avoid use-after-free in ext4_ext_show_leaf().(CVE-2024-49889)

    ext4: fix slab-use-after-free in ext4_split_extent_at().(CVE-2024-49884)

    ext4: aovid use-after-free in ext4_ext_insert_extent().(CVE-2024-49883)

    ext4: fix double brelse() the buffer of the extents path(CVE-2024-49882)

    ext4: update orig_path in ext4_find_extent().(CVE-2024-49881)

    ACPI: PAD: fix crash in exit_round_robin().(CVE-2024-49935)

    netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()(CVE-2024-47685)

    scsi: fnic: Move flush_work initialization out of if block(CVE-2024-50025)

    tpm: Clean up TPM space after command failure(CVE-2024-49851)

    tcp: check skb is non-NULL in tcp_rto_delta_us().(CVE-2024-47684)

    sock_map: Add a cond_resched() in sock_hash_free().(CVE-2024-47710)

    vhost_vdpa: assign irq bypass producer token correctly(CVE-2024-47748)

    mm: call the security_mmap_file() LSM hook in remap_file_pages().(CVE-2024-47745)

    x86/ioapic: Handle allocation failures gracefully(CVE-2024-49927)

    mm: avoid leaving partial pfn mappings around in error case(CVE-2024-47674)

    blk_iocost: fix more out of bound shifts(CVE-2024-49933)

    ice: protect XDP configuration with a mutex(CVE-2024-46765)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5860 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5860-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     February 08, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-36899 CVE-2024-49994 CVE-2024-50014 CVE-2024-50047                      CVE-2024-50164 CVE-2024-50304 CVE-2024-53124 CVE-2024-53128                      CVE-2024-53170 CVE-2024-53229 CVE-2024-53234 CVE-2024-53685                      CVE-2024-56551 CVE-2024-56599 CVE-2024-56608 CVE-2024-56631                      CVE-2024-56664 CVE-2024-56703 CVE-2024-57887 CVE-2024-57892                      CVE-2024-57904 CVE-2024-57906 CVE-2024-57907 CVE-2024-57908                      CVE-2024-57910 CVE-2024-57911 CVE-2024-57912 CVE-2024-57913                      CVE-2024-57915 CVE-2024-57916 CVE-2024-57917 CVE-2024-57922                      CVE-2024-57925 CVE-2024-57929 CVE-2024-57939 CVE-2024-57940                      CVE-2024-57948 CVE-2025-21631 CVE-2025-21636 CVE-2025-21637                      CVE-2025-21638 CVE-2025-21639 CVE-2025-21640 CVE-2025-21646                      CVE-2025-21647 CVE-2025-21648 CVE-2025-21653 CVE-2025-21655                      CVE-2025-21660 CVE-2025-21662 CVE-2025-21664 CVE-2025-21665                      CVE-2025-21666 CVE-2025-21667 CVE-2025-21668 CVE-2025-21669                      CVE-2025-21671 CVE-2025-21675 CVE-2025-21678 CVE-2025-21680                      CVE-2025-21681 CVE-2025-21683

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.128-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-823 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix overloading of MEM_UNINIT's meaning (CVE-2024-50164)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Add rough attr alloc_size check (CVE-2024-50246)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix data-races around sk->sk_forward_alloc (CVE-2024-53124)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers (CVE-2024-53128)

    In the Linux kernel, the following vulnerability has been resolved:

    block: fix uaf for flush rq while iterating tags (CVE-2024-53170)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Fix race between element replace and close() (CVE-2024-56664)

    In the Linux kernel, the following vulnerability has been resolved:

    topology: Keep the cpumask unchanged when printing cpumap (CVE-2024-57917)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CVE-2024-57929)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix the infinite loop in exfat_readdir() (CVE-2024-57940)

    In the Linux kernel, the following vulnerability has been resolved:

    irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (CVE-2024-57949)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Handle CPU state correctly on hotplug (CVE-2024-57951)

    In the Linux kernel, the following vulnerability has been resolved:

    block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (CVE-2025-21636)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: udp_port: avoid using current->nsproxy (CVE-2025-21637)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: auth_enable: avoid using current->nsproxy (CVE-2025-21638)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: rto_min/max: avoid using current->nsproxy (CVE-2025-21639)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (CVE-2025-21640)

    In the Linux kernel, the following vulnerability has been resolved:

    sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Fix variable not being completed when function returns (CVE-2025-21662)

    In the Linux kernel, the following vulnerability has been resolved:

    dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664)

    In the Linux kernel, the following vulnerability has been resolved:

    filemap: avoid truncating 64-bit offset to 32 bits (CVE-2025-21665)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CVE-2025-21666)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: discard packets if the transport changes (CVE-2025-21669)

    In the Linux kernel, the following vulnerability has been resolved:

    zram: fix potential UAF of zram table (CVE-2025-21671)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Clear port select structure when fail to create (CVE-2025-21675)

    In the Linux kernel, the following vulnerability has been resolved:

    gtp: Destroy device along with udp socket's netns dismantle. (CVE-2025-21678)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: fix lockup on tx to unregistering netdev with carrier (CVE-2025-21681)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix bpf_sk_select_reuseport() memory leak (CVE-2025-21683)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix softlockup in __read_vmcore (part 2) (CVE-2025-21694)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
233669	Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7391-1)	Nessus	Ubuntu Local Security Checks	high
233668	Ubuntu Pro FIPS-updates 20.04 LTS : Linux kernel (FIPS) vulnerabilities (USN-7393-1)	Nessus	Ubuntu Local Security Checks	critical
233667	Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7392-1)	Nessus	Ubuntu Local Security Checks	high
233481	Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7390-1)	Nessus	Ubuntu Local Security Checks	high
233478	Ubuntu 22.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-7389-1)	Nessus	Ubuntu Local Security Checks	high
233468	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7387-1)	Nessus	Ubuntu Local Security Checks	high
233467	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7388-1)	Nessus	Ubuntu Local Security Checks	high
232712	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2025-082)	Nessus	Amazon Linux Local Security Checks	high
232558	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20152)	Nessus	Oracle Linux Local Security Checks	high
231339	Linux Distros Unpatched Vulnerability : CVE-2024-53124	Nessus	Misc.	medium
216985	Debian dla-4076 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	high
216984	Debian dla-4075 : ata-modules-5.10.0-29-armmp-di - security update	Nessus	Debian Local Security Checks	critical
216943	Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7310-1)	Nessus	Ubuntu Local Security Checks	critical
216819	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-063)	Nessus	Amazon Linux Local Security Checks	high
216788	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2025-094)	Nessus	Amazon Linux Local Security Checks	high
216493	Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7276-1)	Nessus	Ubuntu Local Security Checks	critical
216492	Ubuntu 24.10 : Linux kernel vulnerabilities (USN-7277-1)	Nessus	Ubuntu Local Security Checks	critical
216030	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1176)	Nessus	Huawei Local Security Checks	critical
216006	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1192)	Nessus	Huawei Local Security Checks	critical
215225	Photon OS 4.0: Linux PHSA-2025-4.0-0750	Nessus	PhotonOS Local Security Checks	high
215144	Debian dsa-5860 : affs-modules-6.1.0-21-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high
215034	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-823)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2024-53124

medium

Tenable Plugins

high

critical

high

high

high

high

high

high

high

medium

high

critical

critical

high

high

critical

critical

critical

critical

high

high

high