In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler(). Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout). Let's pass oreq to reqsk_put().

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7387-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Media staging drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Memory management;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - SELinux security module;

    - ALSA framework;

    - USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142,     CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237,     CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574,     CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688,     CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226,     CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690,     CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901,     CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998,     CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315,     CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569,     CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571, CVE-2024-56754,     CVE-2024-56572, CVE-2024-49974, CVE-2024-53140, CVE-2025-21639, CVE-2024-56369, CVE-2024-56601,     CVE-2024-56642, CVE-2024-57792, CVE-2024-57838, CVE-2024-53127, CVE-2025-21690, CVE-2024-56548,     CVE-2024-53155, CVE-2024-47143, CVE-2024-56691, CVE-2024-57938, CVE-2025-21692, CVE-2024-56648,     CVE-2024-46841, CVE-2024-57807, CVE-2024-57908, CVE-2024-50121, CVE-2024-57841, CVE-2024-53135,     CVE-2024-53180, CVE-2025-21683, CVE-2024-56568, CVE-2024-56575, CVE-2024-56774, CVE-2024-56589,     CVE-2024-36899, CVE-2024-57889, CVE-2024-50275, CVE-2024-56606, CVE-2024-56578, CVE-2024-56726,     CVE-2024-36476, CVE-2024-53122, CVE-2024-56594, CVE-2024-56562, CVE-2024-53690, CVE-2024-56769,     CVE-2024-57910, CVE-2024-56720, CVE-2024-56581, CVE-2024-56723, CVE-2025-21669, CVE-2024-56627,     CVE-2024-57925, CVE-2024-56600, CVE-2024-56631, CVE-2024-56595, CVE-2024-53685, CVE-2024-53157,     CVE-2024-57931, CVE-2024-56644, CVE-2024-53215, CVE-2024-57897, CVE-2024-56748, CVE-2024-53138,     CVE-2025-21646, CVE-2024-47707, CVE-2024-56781, CVE-2024-57922, CVE-2024-53197, CVE-2024-56777,     CVE-2024-56625, CVE-2024-56650, CVE-2024-56704, CVE-2025-21638, CVE-2024-56623, CVE-2024-57890,     CVE-2024-56630, CVE-2024-53680, CVE-2025-21637, CVE-2024-56539, CVE-2024-56532, CVE-2024-53217,     CVE-2024-53120, CVE-2024-56780, CVE-2022-49034, CVE-2024-43098, CVE-2024-56590, CVE-2024-50283,     CVE-2024-57917, CVE-2024-56776, CVE-2024-53151, CVE-2024-49950, CVE-2024-57850, CVE-2024-44938,     CVE-2024-47408, CVE-2024-56778, CVE-2024-56779, CVE-2024-56637, CVE-2024-56640, CVE-2024-57907,     CVE-2024-57940, CVE-2025-21697, CVE-2024-57946, CVE-2024-53156, CVE-2024-56759, CVE-2024-53146,     CVE-2024-56610, CVE-2024-56670, CVE-2024-57912, CVE-2024-57874, CVE-2024-57884, CVE-2024-56745,     CVE-2024-56715, CVE-2024-56746, CVE-2024-53112, CVE-2024-53145, CVE-2024-56614, CVE-2024-53174,     CVE-2024-57849, CVE-2024-56767, CVE-2024-53173, CVE-2025-21689, CVE-2024-56739, CVE-2024-56694,     CVE-2024-57939, CVE-2024-56622, CVE-2024-56570, CVE-2024-56634, CVE-2024-53161, CVE-2024-53121,     CVE-2024-56705, CVE-2024-56756, CVE-2024-53183, CVE-2024-56629, CVE-2025-21636, CVE-2024-56763,     CVE-2024-56593, CVE-2025-21640, CVE-2024-53148, CVE-2025-21678, CVE-2024-56602, CVE-2024-57882,     CVE-2024-56576, CVE-2024-53096, CVE-2024-53165, CVE-2024-57903, CVE-2024-57802, CVE-2025-21653,     CVE-2024-56662, CVE-2024-56626, CVE-2024-56645, CVE-2024-48881, CVE-2024-57892, CVE-2024-56531,     CVE-2024-56716, CVE-2024-56787, CVE-2024-57929, CVE-2024-50055, CVE-2024-49996, CVE-2024-53171,     CVE-2025-21648, CVE-2024-57948, CVE-2024-53099, CVE-2024-56785, CVE-2024-57913, CVE-2024-53131,     CVE-2024-53194, CVE-2024-56659, CVE-2024-55916, CVE-2024-56616, CVE-2024-56728, CVE-2024-43900,     CVE-2025-21680, CVE-2024-53113, CVE-2024-58087, CVE-2024-56598, CVE-2024-57902, CVE-2024-56679,     CVE-2025-21666, CVE-2024-57951, CVE-2024-56708, CVE-2024-56633, CVE-2024-56747, CVE-2024-53125,     CVE-2024-45828, CVE-2024-53124, CVE-2024-46871, CVE-2024-57900, CVE-2024-50304, CVE-2024-53158)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7388-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168,     CVE-2024-53214, CVE-2024-56670, CVE-2024-53146, CVE-2024-50302, CVE-2024-56629, CVE-2024-53680,     CVE-2024-53124, CVE-2024-56610, CVE-2024-50259, CVE-2024-47408, CVE-2024-53217, CVE-2025-21683,     CVE-2024-50196, CVE-2025-21694, CVE-2024-56596, CVE-2024-53161, CVE-2024-53061, CVE-2024-57940,     CVE-2024-41066, CVE-2024-53122, CVE-2024-56776, CVE-2024-50268, CVE-2024-53184, CVE-2024-53088,     CVE-2024-56590, CVE-2024-50182, CVE-2024-56705, CVE-2024-50103, CVE-2024-57938, CVE-2024-53155,     CVE-2024-50282, CVE-2024-50209, CVE-2024-53150, CVE-2024-56532, CVE-2024-57910, CVE-2024-56678,     CVE-2024-53181, CVE-2024-50230, CVE-2024-42291, CVE-2024-50233, CVE-2024-53130, CVE-2024-56756,     CVE-2024-53113, CVE-2024-56623, CVE-2024-41080, CVE-2024-53197, CVE-2024-53142, CVE-2024-50251,     CVE-2024-50237, CVE-2024-47143, CVE-2024-56633, CVE-2024-57889, CVE-2024-53127, CVE-2024-46871,     CVE-2024-56640, CVE-2024-50193, CVE-2024-53148, CVE-2025-21669, CVE-2024-53690, CVE-2024-50279,     CVE-2024-56780, CVE-2024-56769, CVE-2024-53125, CVE-2024-53052, CVE-2024-56601, CVE-2024-56778,     CVE-2024-50198, CVE-2025-21665, CVE-2024-53227, CVE-2024-40953, CVE-2024-50295, CVE-2024-53194,     CVE-2024-56777, CVE-2024-56770, CVE-2025-21697, CVE-2024-57904, CVE-2024-56691, CVE-2024-56787,     CVE-2024-57948, CVE-2024-53140, CVE-2024-50051, CVE-2025-21648, CVE-2024-56754, CVE-2024-50156,     CVE-2024-50205, CVE-2024-57911, CVE-2024-50290, CVE-2024-56715, CVE-2024-56643, CVE-2024-49974,     CVE-2024-50287, CVE-2024-50162, CVE-2024-57849, CVE-2024-50142, CVE-2024-53198, CVE-2024-56568,     CVE-2024-56704, CVE-2024-35887, CVE-2024-57908, CVE-2024-56767, CVE-2024-56701, CVE-2025-21680,     CVE-2024-57913, CVE-2024-50171, CVE-2024-56558, CVE-2024-50121, CVE-2024-50036, CVE-2024-53180,     CVE-2024-53096, CVE-2024-57897, CVE-2024-56746, CVE-2024-55881, CVE-2024-57874, CVE-2024-56774,     CVE-2024-57946, CVE-2024-56531, CVE-2024-56698, CVE-2024-56650, CVE-2025-21637, CVE-2024-50242,     CVE-2024-49996, CVE-2024-53136, CVE-2024-56575, CVE-2024-56642, CVE-2024-56763, CVE-2024-57802,     CVE-2024-57929, CVE-2024-56726, CVE-2024-56615, CVE-2024-56619, CVE-2024-50234, CVE-2024-50299,     CVE-2024-56569, CVE-2024-57792, CVE-2024-50150, CVE-2024-56728, CVE-2024-53173, CVE-2024-56630,     CVE-2025-21639, CVE-2024-53183, CVE-2024-56681, CVE-2024-46809, CVE-2024-53165, CVE-2024-53215,     CVE-2024-50296, CVE-2024-50267, CVE-2024-53097, CVE-2024-56369, CVE-2024-56578, CVE-2024-56562,     CVE-2025-21699, CVE-2024-50134, CVE-2024-56589, CVE-2024-50232, CVE-2024-53685, CVE-2024-50265,     CVE-2024-53206, CVE-2024-50257, CVE-2024-57925, CVE-2024-50269, CVE-2024-56570, CVE-2024-50278,     CVE-2024-56595, CVE-2024-56720, CVE-2024-50085, CVE-2024-50201, CVE-2024-56693, CVE-2023-52913,     CVE-2025-21666, CVE-2024-50249, CVE-2024-50247, CVE-2024-47730, CVE-2024-49925, CVE-2025-21690,     CVE-2024-56606, CVE-2024-53172, CVE-2024-53119, CVE-2024-56602, CVE-2024-50262, CVE-2024-50127,     CVE-2024-50115, CVE-2024-57901, CVE-2024-50185, CVE-2024-53058, CVE-2025-21631, CVE-2024-56574,     CVE-2024-56539, CVE-2025-21678, CVE-2024-56659, CVE-2024-56594, CVE-2024-56708, CVE-2024-56662,     CVE-2024-55916, CVE-2024-53042, CVE-2024-50229, CVE-2024-56616, CVE-2024-50074, CVE-2024-57838,     CVE-2024-50160, CVE-2024-50218, CVE-2024-56597, CVE-2024-36476, CVE-2024-49571, CVE-2024-53112,     CVE-2024-50128, CVE-2024-53157, CVE-2024-56747, CVE-2024-56779, CVE-2024-50143, CVE-2024-42315,     CVE-2024-56688, CVE-2024-57903, CVE-2024-50283, CVE-2025-21640, CVE-2024-53099, CVE-2024-57902,     CVE-2024-57912, CVE-2024-56567, CVE-2024-56637, CVE-2024-50086, CVE-2024-56679, CVE-2024-56598,     CVE-2024-50236, CVE-2024-56593, CVE-2024-50058, CVE-2024-53239, CVE-2024-57906, CVE-2024-43098,     CVE-2024-53138, CVE-2024-50208, CVE-2024-49950, CVE-2024-53174, CVE-2024-50072, CVE-2024-45828,     CVE-2024-56759, CVE-2024-56533, CVE-2024-50117, CVE-2024-53131, CVE-2024-47707, CVE-2025-21689,     CVE-2025-21636, CVE-2024-56605, CVE-2024-57807, CVE-2024-56724, CVE-2024-57841, CVE-2024-53120,     CVE-2024-50304, CVE-2024-56748, CVE-2024-58087, CVE-2024-57917, CVE-2024-44938, CVE-2024-57896,     CVE-2024-56600, CVE-2024-57922, CVE-2024-53066, CVE-2024-56634, CVE-2024-53171, CVE-2024-56700,     CVE-2024-57939, CVE-2024-53151, CVE-2024-50202, CVE-2024-56572, CVE-2024-40965, CVE-2024-56716,     CVE-2024-46841, CVE-2024-50292, CVE-2024-57907, CVE-2024-53145, CVE-2024-50192, CVE-2024-53055,     CVE-2025-21646, CVE-2024-56690, CVE-2024-57882, CVE-2024-56576, CVE-2024-50301, CVE-2024-53059,     CVE-2024-56745, CVE-2024-57890, CVE-2024-50055, CVE-2024-56739, CVE-2024-50099, CVE-2024-50131,     CVE-2024-50194, CVE-2024-57884, CVE-2024-43900, CVE-2024-52332, CVE-2024-57931, CVE-2024-50163,     CVE-2024-53063, CVE-2024-53104, CVE-2024-57951, CVE-2025-21638, CVE-2024-53129, CVE-2024-56781,     CVE-2024-50195, CVE-2024-56548, CVE-2024-56603, CVE-2024-56586, CVE-2024-50167, CVE-2024-56648,     CVE-2024-56581, CVE-2024-53158, CVE-2024-56587, CVE-2024-49998, CVE-2024-50148, CVE-2024-56694,     CVE-2024-50110, CVE-2024-50244, CVE-2024-46784, CVE-2024-50273, CVE-2024-50116, CVE-2024-56614,     CVE-2024-50154, CVE-2024-56672, CVE-2025-21692, CVE-2024-56636, CVE-2024-56626, CVE-2024-50010,     CVE-2024-39497, CVE-2024-50101, CVE-2024-50141, CVE-2024-57791, CVE-2024-50082, CVE-2024-53226,     CVE-2024-53135, CVE-2024-50275, CVE-2024-56723, CVE-2024-53121, CVE-2024-50199, CVE-2024-56631,     CVE-2024-50083, CVE-2024-50245, CVE-2025-21687, CVE-2024-50151, CVE-2022-49034, CVE-2024-57900,     CVE-2024-53156, CVE-2024-36899, CVE-2024-50153, CVE-2024-53237, CVE-2024-56645, CVE-2024-26718,     CVE-2024-57892, CVE-2025-21653, CVE-2024-56627, CVE-2024-48881, CVE-2024-56625, CVE-2024-57850,     CVE-2024-56644, CVE-2024-56785)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0201-2 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
    - CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (bsc#1226694).
    - CVE-2022-49033: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()     (bsc#1232045).
    - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).
    - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the     vmwgfx driver (bsc#1211593).
    - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the     vmwgfx driver (bsc#1211595).
    - CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking     (bsc#1232823).
    - CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (bsc#1223044).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-47666: scsi: pm80xx: Set phy->enable_completion only when we wait for it (bsc#1231453).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
    - CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
    - CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).
    - CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (bsc#1233127).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50211: udf: refactor inode_bmap() to handle error (bsc#1233096).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
    - CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
    - CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
    - CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
    - CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53072: platform/x86/amd/pmc: Detect when STB is not available (bsc#1233564).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
    - CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid (bsc#1233769).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53114: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1234072).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853).
    - CVE-2024-53150: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (bsc#1234834).
    - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846).
    - CVE-2024-53157: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (bsc#1234827).
    - CVE-2024-53158: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (bsc#1234811).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53162: crypto: qat/qat_4xxx - fix off by one in uof_get_name() (bsc#1234843).
    - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53210: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (bsc#1234971).
    - CVE-2024-53213: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (bsc#1234973).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()     (bsc#1234963).
    - CVE-2024-56548: hfsplus: do not query the device logical block size multiple times (bsc#1235073).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
    - CVE-2024-56571: media: uvcvideo: Require entities to have a non-zero unique ID (bsc#1235037).
    - CVE-2024-56575: media: imx-jpeg: Ensure power suppliers be suspended before detach them (bsc#1235039).
    - CVE-2024-56598: jfs: array-index-out-of-bounds fix in dtReadFirst (bsc#1235220).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()     (bsc#1235061).
    - CVE-2024-56619: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (bsc#1235224).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53206 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in     reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with
    __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler(). Then, oreq should be passed to     reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the     retry attempt failed (e.g. due to timeout). Let's pass oreq to reqsk_put(). (CVE-2024-53206)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in     reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with
    __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler(). Then, oreq should be passed to     reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the     retry attempt failed (e.g. due to timeout). Let's pass oreq to reqsk_put(). (CVE-2024-53206)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4076 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4076-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.6.1.128-1~deb11u1     CVE ID         : CVE-2022-49034 CVE-2023-52916 CVE-2023-52926 CVE-2024-26595                      CVE-2024-27407 CVE-2024-35870 CVE-2024-35956 CVE-2024-36476                      CVE-2024-36479 CVE-2024-36899 CVE-2024-37021 CVE-2024-39282                      CVE-2024-41014 CVE-2024-42252 CVE-2024-42315 CVE-2024-42319                      CVE-2024-43098 CVE-2024-44950 CVE-2024-45828 CVE-2024-46809                      CVE-2024-46841 CVE-2024-46896 CVE-2024-47143 CVE-2024-47408                      CVE-2024-47745 CVE-2024-48881 CVE-2024-49571 CVE-2024-49861                      CVE-2024-49891 CVE-2024-49897 CVE-2024-49898 CVE-2024-49899                      CVE-2024-49909 CVE-2024-49911 CVE-2024-49915 CVE-2024-49917                      CVE-2024-49925 CVE-2024-49929 CVE-2024-49934 CVE-2024-49939                      CVE-2024-49951 CVE-2024-49994 CVE-2024-49996 CVE-2024-50014                      CVE-2024-50047 CVE-2024-50051 CVE-2024-50055 CVE-2024-50121                      CVE-2024-50146 CVE-2024-50164 CVE-2024-50248 CVE-2024-50258                      CVE-2024-50275 CVE-2024-50304 CVE-2024-52332 CVE-2024-53099                      CVE-2024-53105 CVE-2024-53124 CVE-2024-53125 CVE-2024-53128                      CVE-2024-53141 CVE-2024-53142 CVE-2024-53145 CVE-2024-53146                      CVE-2024-53148 CVE-2024-53150 CVE-2024-53151 CVE-2024-53154                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53165 CVE-2024-53170                      CVE-2024-53171 CVE-2024-53172 CVE-2024-53173 CVE-2024-53174                      CVE-2024-53175 CVE-2024-53180 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53190 CVE-2024-53194 CVE-2024-53196                      CVE-2024-53197 CVE-2024-53198 CVE-2024-53206 CVE-2024-53207                      CVE-2024-53208 CVE-2024-53210 CVE-2024-53213 CVE-2024-53214                      CVE-2024-53215 CVE-2024-53217 CVE-2024-53220 CVE-2024-53226                      CVE-2024-53227 CVE-2024-53229 CVE-2024-53230 CVE-2024-53231                      CVE-2024-53233 CVE-2024-53234 CVE-2024-53237 CVE-2024-53239                      CVE-2024-53240 CVE-2024-53241 CVE-2024-53680 CVE-2024-53685                      CVE-2024-53690 CVE-2024-54031 CVE-2024-55881 CVE-2024-55916                      CVE-2024-56369 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56546 CVE-2024-56548 CVE-2024-56551                      CVE-2024-56557 CVE-2024-56558 CVE-2024-56562 CVE-2024-56567                      CVE-2024-56568 CVE-2024-56569 CVE-2024-56570 CVE-2024-56572                      CVE-2024-56574 CVE-2024-56575 CVE-2024-56576 CVE-2024-56578                      CVE-2024-56579 CVE-2024-56581 CVE-2024-56582 CVE-2024-56584                      CVE-2024-56585 CVE-2024-56586 CVE-2024-56587 CVE-2024-56589                      CVE-2024-56590 CVE-2024-56593 CVE-2024-56594 CVE-2024-56595                      CVE-2024-56596 CVE-2024-56597 CVE-2024-56598 CVE-2024-56599                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56604 CVE-2024-56605 CVE-2024-56606 CVE-2024-56608                      CVE-2024-56610 CVE-2024-56614 CVE-2024-56615 CVE-2024-56616                      CVE-2024-56619 CVE-2024-56622 CVE-2024-56623 CVE-2024-56625                      CVE-2024-56626 CVE-2024-56627 CVE-2024-56628 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56640 CVE-2024-56642                      CVE-2024-56643 CVE-2024-56644 CVE-2024-56645 CVE-2024-56648                      CVE-2024-56650 CVE-2024-56651 CVE-2024-56658 CVE-2024-56659                      CVE-2024-56660 CVE-2024-56661 CVE-2024-56662 CVE-2024-56663                      CVE-2024-56664 CVE-2024-56665 CVE-2024-56670 CVE-2024-56672                      CVE-2024-56675 CVE-2024-56677 CVE-2024-56678 CVE-2024-56679                      CVE-2024-56681 CVE-2024-56683 CVE-2024-56687 CVE-2024-56688                      CVE-2024-56690 CVE-2024-56691 CVE-2024-56693 CVE-2024-56694                      CVE-2024-56698 CVE-2024-56700 CVE-2024-56701 CVE-2024-56703                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56707 CVE-2024-56708                      CVE-2024-56709 CVE-2024-56715 CVE-2024-56716 CVE-2024-56717                      CVE-2024-56718 CVE-2024-56720 CVE-2024-56722 CVE-2024-56723                      CVE-2024-56724 CVE-2024-56725 CVE-2024-56726 CVE-2024-56727                      CVE-2024-56728 CVE-2024-56739 CVE-2024-56741 CVE-2024-56745                      CVE-2024-56746 CVE-2024-56747 CVE-2024-56748 CVE-2024-56751                      CVE-2024-56754 CVE-2024-56755 CVE-2024-56756 CVE-2024-56759                      CVE-2024-56763 CVE-2024-56765 CVE-2024-56766 CVE-2024-56767                      CVE-2024-56769 CVE-2024-56770 CVE-2024-56774 CVE-2024-56776                      CVE-2024-56777 CVE-2024-56778 CVE-2024-56779 CVE-2024-56780                      CVE-2024-56781 CVE-2024-56783 CVE-2024-56785 CVE-2024-56787                      CVE-2024-57791 CVE-2024-57792 CVE-2024-57798 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57838 CVE-2024-57841 CVE-2024-57849                      CVE-2024-57850 CVE-2024-57874 CVE-2024-57876 CVE-2024-57882                      CVE-2024-57884 CVE-2024-57887 CVE-2024-57889 CVE-2024-57890                      CVE-2024-57892 CVE-2024-57893 CVE-2024-57894 CVE-2024-57896                      CVE-2024-57897 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57903 CVE-2024-57904 CVE-2024-57906 CVE-2024-57907                      CVE-2024-57908 CVE-2024-57910 CVE-2024-57911 CVE-2024-57912                      CVE-2024-57913 CVE-2024-57916 CVE-2024-57917 CVE-2024-57922                      CVE-2024-57925 CVE-2024-57929 CVE-2024-57930 CVE-2024-57931                      CVE-2024-57938 CVE-2024-57939 CVE-2024-57940 CVE-2024-57946                      CVE-2024-57948 CVE-2024-57949 CVE-2024-57951 CVE-2025-21629                      CVE-2025-21631 CVE-2025-21636 CVE-2025-21637 CVE-2025-21638                      CVE-2025-21639 CVE-2025-21640 CVE-2025-21646 CVE-2025-21647                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21655 CVE-2025-21660                      CVE-2025-21662 CVE-2025-21664 CVE-2025-21665 CVE-2025-21666                      CVE-2025-21667 CVE-2025-21668 CVE-2025-21669 CVE-2025-21671                      CVE-2025-21675 CVE-2025-21678 CVE-2025-21680 CVE-2025-21681                      CVE-2025-21683 CVE-2025-21687 CVE-2025-21688 CVE-2025-21689                      CVE-2025-21690 CVE-2025-21692 CVE-2025-21694 CVE-2025-21697                      CVE-2025-21699

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.6.1.128-1~deb11u1.  This additionally includes many more bug fixes     from stable updates 6.1.120-6.1.128 inclusive.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0289-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security     bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
    - CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events     (bsc#1220355).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
    - CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
    - CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
    - CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
    - CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
    - CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
    - CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
    - CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
    - CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
    - CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
    - CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
    - CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
    - CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
    - CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
    - CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
    - CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
    - CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
    - CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
    - CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
    - CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
    - CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe()     (bsc#1234923).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
    - CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
    - CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
    - CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
    - CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
    - CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
    - CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
    - CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()     (bsc#1235521).
    - CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()     (bsc#1235061).
    - CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM     (bsc#1235391).
    - CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
    - CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
    - CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU     (bsc#1235429).
    - CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
    - CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
    - CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
    - CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
    - CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
    - CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
    - CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
    - CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
    - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
    - CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
    - CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
    - CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
    - CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
    - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
    - CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
    - CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
    - CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
    - CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
    - CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
    - CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
    - CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
    - CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
    - CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).
    - CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
    - CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
    - CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
    - CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
    - CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
    - CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
    - CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
    - CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
    - CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
    - CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
    - CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
    - CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
    - CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount     (bsc#1235965).
    - CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
    - CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
    - CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
    - CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
    - CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
    - CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
    - CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue     (bsc#1236144).
    - CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
    - CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.15.176-118.170. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-061 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (CVE-2024-43098)

    In the Linux kernel, the following vulnerability has been resolved:

    i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (CVE-2024-45828)

    In the Linux kernel, the following vulnerability has been resolved:

    bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (CVE-2024-48881)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Limit the number of concurrent async COPY operations (CVE-2024-49974)

    In the Linux kernel, the following vulnerability has been resolved:

    driver core: bus: Fix double free in driver API bus_register() (CVE-2024-50055)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (CVE-2024-50121)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275)

    In the Linux kernel, the following vulnerability has been resolved:

    igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: resolve faulty mmap_region() error path behaviour (CVE-2024-53096)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Check validity of link->type in bpf_link_show_fdinfo() (CVE-2024-53099)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: fs, lock FTE when checking if active (CVE-2024-53121)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: sync_linked_regs() must preserve subreg_def (CVE-2024-53125)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/rockchip: vop: Fix a dereferenced before check warning (CVE-2024-53129)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (CVE-2024-53130)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (CVE-2024-53131)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: revert mm: shmem: fix data-race in shmem_getattr() (CVE-2024-53136)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: kTLS, Fix incorrect page refcounting (CVE-2024-53138)

    In the Linux kernel, the following vulnerability has been resolved:

    netlink: terminate outstanding dump on socket close (CVE-2024-53140)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: add missing range check in bitmap_ip_uadt (CVE-2024-53141)

    In the Linux kernel, the following vulnerability has been resolved:

    initramfs: avoid filename buffer overrun (CVE-2024-53142)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Prevent a potential integer overflow (CVE-2024-53146)

    In the Linux kernel, the following vulnerability has been resolved:

    firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (CVE-2024-53157)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: fix ordering of qlen adjustment (CVE-2024-53164)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4.0: Fix a use-after-free problem in the asynchronous open() (CVE-2024-53173)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: make sure cache entry active before cache_show (CVE-2024-53174)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix use-after-free of slot->bus on hot remove (CVE-2024-53194)

    In the Linux kernel, the following vulnerability has been resolved:

    xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (CVE-2024-53198)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (CVE-2024-53206)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/pci: Properly hide first-in-list PCIe extended capability (CVE-2024-53214)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (CVE-2024-53217)

    In the Linux kernel, the following vulnerability has been resolved:

    xen/netfront: fix crash when removing device (CVE-2024-53240)

    In the Linux kernel, the following vulnerability has been resolved:

    ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Play nice with protected guests in complete_hypercall_exit() (CVE-2024-55881)

    In the Linux kernel, the following vulnerability has been resolved:

    Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (CVE-2024-55916)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (CVE-2024-56369)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: make sure exp active before svc_export_show (CVE-2024-56558)

    In the Linux kernel, the following vulnerability has been resolved:

    i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (CVE-2024-56562)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/arm-smmu: Defer probe of clients after smmu device bound (CVE-2024-56568)

    In the Linux kernel, the following vulnerability has been resolved:

    ovl: Filter invalid inodes with missing lookup function (CVE-2024-56570)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: ref-verify: fix use-after-free after invalid ref action (CVE-2024-56581)

    In the Linux kernel, the following vulnerability has been resolved:

    leds: class: Protect brightness_show() with led_cdev->led_access mutex (CVE-2024-56587)

    In the Linux kernel, the following vulnerability has been resolved:

    net: inet6: do not leave a dangling sk pointer in inet6_create() (CVE-2024-56600)

    In the Linux kernel, the following vulnerability has been resolved:

    net: inet: do not leave a dangling sk pointer in inet_create() (CVE-2024-56601)

    In the Linux kernel, the following vulnerability has been resolved:

    net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)

    In the Linux kernel, the following vulnerability has been resolved:

    af_packet: avoid erroring out after sock_init_data() in packet_create() (CVE-2024-56606)

    In the Linux kernel, the following vulnerability has been resolved:

    kcsan: Turn report_filterlist_lock into a raw_spinlock (CVE-2024-56610)

    In the Linux kernel, the following vulnerability has been resolved:

    xsk: fix OOB map writes when deleting elements (CVE-2024-56614)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: fix OOB devmap writes when deleting elements (CVE-2024-56615)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/dp_mst: Fix MST sideband message body length check (CVE-2024-56616)

    In the Linux kernel, the following vulnerability has been resolved:

    can: dev: can_set_termination(): allow sleeping GPIOs (CVE-2024-56625)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633)

    In the Linux kernel, the following vulnerability has been resolved:

    gpio: grgpio: Add NULL check in grgpio_probe (CVE-2024-56634)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: do not assume mac header is set in geneve_xmit_skb() (CVE-2024-56636)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: Hold module reference while requesting a module (CVE-2024-56637)

    In the Linux kernel, the following vulnerability has been resolved:

    net/ipv6: release expired exception dst cached in socket (CVE-2024-56644)

    In the Linux kernel, the following vulnerability has been resolved:

    can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)

    In the Linux kernel, the following vulnerability has been resolved:

    net: hsr: avoid potential out-of-bound access in fill_frame_info() (CVE-2024-56648)

    In the Linux kernel, the following vulnerability has been resolved:

    sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (CVE-2024-56688)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

    In the Linux kernel, the following vulnerability has been resolved:

    brd: defer automatic disk creation until module initialization succeeds (CVE-2024-56693)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: fix recursive lock when verdict program return SK_PASS (CVE-2024-56694)

    In the Linux kernel, the following vulnerability has been resolved:

    netdevsim: prevent bad user input in nsim_dev_health_break_write() (CVE-2024-56716)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Several fixes to bpf_msg_pop_data (CVE-2024-56720)

    In the Linux kernel, the following vulnerability has been resolved:

    rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix reset_method_store() memory leak (CVE-2024-56745)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme-pci: fix freeing of the HMB descriptor table (CVE-2024-56756)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix use-after-free when COWing tree bock and tracing is enabled (CVE-2024-56759)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Prevent bad count for tracing_cpumask_write (CVE-2024-56763)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: netem: account for backlog updates from child qdisc (CVE-2024-56770)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: add a sanity check for btrfs root in btrfs_search_slot() (CVE-2024-56774)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (CVE-2024-56779)

    In the Linux kernel, the following vulnerability has been resolved:

    quota: flush quota_release_work upon quota writeback (CVE-2024-56780)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix memory leak in tcp_conn_request() (CVE-2024-57841)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (CVE-2024-57874)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CVE-2024-57884)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/uverbs: Prevent integer overflow issue (CVE-2024-57890)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (CVE-2024-57896)

    In the Linux kernel, the following vulnerability has been resolved:

    ila: serialize calls to nf_register_net_hooks() (CVE-2024-57900)

    In the Linux kernel, the following vulnerability has been resolved:

    af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

    In the Linux kernel, the following vulnerability has been resolved:

    af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

    In the Linux kernel, the following vulnerability has been resolved:

    net: restrict SO_REUSEPORT to inet sockets (CVE-2024-57903)

    In the Linux kernel, the following vulnerability has been resolved:

    selinux: ignore unknown extended permissions (CVE-2024-57931)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sctp: Prevent autoclose integer overflow in sctp_association_init() (CVE-2024-57938)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio-blk: don't keep queue frozen during system suspend (CVE-2024-57946)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-809 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    IORING_OP_READ did not correctly consume the provided buffer list when (CVE-2023-52926)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Fixed overflow check in mi_enum_attr() (CVE-2024-27407)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014)

    In the Linux kernel, the following vulnerability has been resolved:

    closures: Change BUG_ON() to WARN_ON() (CVE-2024-42252)

    In the Linux kernel, the following vulnerability has been resolved:

    i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (CVE-2024-43098)

    In the Linux kernel, the following vulnerability has been resolved:

    i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (CVE-2024-45828)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: call the security_mmap_file() LSM hook in remap_file_pages() (CVE-2024-47745)

    In the Linux kernel, the following vulnerability has been resolved:

    bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (CVE-2024-48881)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix helper writes to read-only maps (CVE-2024-49861)

    In the Linux kernel, the following vulnerability has been resolved:

    rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb() (CVE-2024-49926)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (CVE-2024-49934)

    In the Linux kernel, the following vulnerability has been resolved:

    driver core: bus: Fix double free in driver API bus_register() (CVE-2024-50055)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (CVE-2024-50121)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: Don't call cleanup on profile rollback failure (CVE-2024-50146)

    In the Linux kernel, the following vulnerability has been resolved:

    ntfs3: Add bounds checking to mi_enum_attr() (CVE-2024-50248)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix crash when config small gso_max_size/gso_ipv4_max_size (CVE-2024-50258)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275)

    In the Linux kernel, the following vulnerability has been resolved:

    igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Check validity of link->type in bpf_link_show_fdinfo() (CVE-2024-53099)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (CVE-2024-53105)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: sync_linked_regs() must preserve subreg_def (CVE-2024-53125)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: add missing range check in bitmap_ip_uadt (CVE-2024-53141)

    In the Linux kernel, the following vulnerability has been resolved:

    initramfs: avoid filename buffer overrun (CVE-2024-53142)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Prevent a potential integer overflow (CVE-2024-53146)

    In the Linux kernel, the following vulnerability has been resolved:

    firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (CVE-2024-53157)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: fix ordering of qlen adjustment (CVE-2024-53164)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4.0: Fix a use-after-free problem in the asynchronous open() (CVE-2024-53173)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: make sure cache entry active before cache_show (CVE-2024-53174)

    In the Linux kernel, the following vulnerability has been resolved:

    ipc: fix memleak if msg_init_ns failed in create_ipc_ns (CVE-2024-53175)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix use-after-free of slot->bus on hot remove (CVE-2024-53194)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Don't retire aborted MMIO instruction (CVE-2024-53196)

    In the Linux kernel, the following vulnerability has been resolved:

    xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (CVE-2024-53198)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (CVE-2024-53206)

    In the Linux kernel, the following vulnerability has been resolved:

    s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (CVE-2024-53210)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/pci: Properly hide first-in-list PCIe extended capability (CVE-2024-53214)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (CVE-2024-53217)

    In the Linux kernel, the following vulnerability has been resolved:

    unicode: Fix utf8_load() error path (CVE-2024-53233)

    In the Linux kernel, the following vulnerability has been resolved:

    xen/netfront: fix crash when removing device (CVE-2024-53240)

    In the Linux kernel, the following vulnerability has been resolved:

    ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Play nice with protected guests in complete_hypercall_exit() (CVE-2024-55881)

    In the Linux kernel, the following vulnerability has been resolved:

    Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (CVE-2024-55916)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (CVE-2024-56369)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: make sure exp active before svc_export_show (CVE-2024-56558)

    In the Linux kernel, the following vulnerability has been resolved:

    i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (CVE-2024-56562)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/arm-smmu: Defer probe of clients after smmu device bound (CVE-2024-56568)

    In the Linux kernel, the following vulnerability has been resolved:

    ftrace: Fix regression with module command in stack_trace_filter (CVE-2024-56569)

    In the Linux kernel, the following vulnerability has been resolved:

    ovl: Filter invalid inodes with missing lookup function (CVE-2024-56570)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: ref-verify: fix use-after-free after invalid ref action (CVE-2024-56581)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix use-after-free in btrfs_encoded_read_endio() (CVE-2024-56582)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/tctx: work around xa_store() allocation error issue (CVE-2024-56584)

    In the Linux kernel, the following vulnerability has been resolved:

    leds: class: Protect brightness_show() with led_cdev->led_access mutex (CVE-2024-56587)

    In the Linux kernel, the following vulnerability has been resolved:

    net: inet6: do not leave a dangling sk pointer in inet6_create() (CVE-2024-56600)

    In the Linux kernel, the following vulnerability has been resolved:

    net: inet: do not leave a dangling sk pointer in inet_create() (CVE-2024-56601)

    In the Linux kernel, the following vulnerability has been resolved:

    net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)

    In the Linux kernel, the following vulnerability has been resolved:

    af_packet: avoid erroring out after sock_init_data() in packet_create() (CVE-2024-56606)

    In the Linux kernel, the following vulnerability has been resolved:

    kcsan: Turn report_filterlist_lock into a raw_spinlock (CVE-2024-56610)

    In the Linux kernel, the following vulnerability has been resolved:

    xsk: fix OOB map writes when deleting elements (CVE-2024-56614)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: fix OOB devmap writes when deleting elements (CVE-2024-56615)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/dp_mst: Fix MST sideband message body length check (CVE-2024-56616)

    In the Linux kernel, the following vulnerability has been resolved:

    can: dev: can_set_termination(): allow sleeping GPIOs (CVE-2024-56625)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633)

    In the Linux kernel, the following vulnerability has been resolved:

    gpio: grgpio: Add NULL check in grgpio_probe (CVE-2024-56634)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: do not assume mac header is set in geneve_xmit_skb() (CVE-2024-56636)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: Hold module reference while requesting a module (CVE-2024-56637)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (CVE-2024-56642)

    In the Linux kernel, the following vulnerability has been resolved:

    net/ipv6: release expired exception dst cached in socket (CVE-2024-56644)

    In the Linux kernel, the following vulnerability has been resolved:

    can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)

    In the Linux kernel, the following vulnerability has been resolved:

    net: hsr: avoid potential out-of-bound access in fill_frame_info() (CVE-2024-56648)

    In the Linux kernel, the following vulnerability has been resolved:

    net: defer final 'struct net' free in netns dismantle (CVE-2024-56658)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: DR, prevent potential error pointer dereference (CVE-2024-56660)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (CVE-2024-56665)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: musb: Fix hardware lockup on first Rx endpoint request (CVE-2024-56687)

    In the Linux kernel, the following vulnerability has been resolved:

    sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (CVE-2024-56688)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

    In the Linux kernel, the following vulnerability has been resolved:

    brd: defer automatic disk creation until module initialization succeeds (CVE-2024-56693)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: fix recursive lock when verdict program return SK_PASS (CVE-2024-56694)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring: check if iowq is killed before queuing (CVE-2024-56709)

    In the Linux kernel, the following vulnerability has been resolved:

    netdevsim: prevent bad user input in nsim_dev_health_break_write() (CVE-2024-56716)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Several fixes to bpf_msg_pop_data (CVE-2024-56720)

    In the Linux kernel, the following vulnerability has been resolved:

    rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI: Fix reset_method_store() memory leak (CVE-2024-56745)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: release nexthop on device removal

    The CI is hitting some aperiodic hangup at device removal time in thepmtu.sh self-test:

    unregister_netdevice: waiting for veth_A-R1 to become free. Usage count = 6ref_tracker:
    veth_A-R1@ffff888013df15d8 has 1/5 users atdst_init+0x84/0x4a0dst_alloc+0x97/0x150ip6_dst_alloc+0x23/0x90i     p6_rt_pcpu_alloc+0x1e6/0x520ip6_pol_route+0x56f/0x840fib6_rule_lookup+0x334/0x630ip6_route_output_flags+0x     259/0x480ip6_dst_lookup_tail.constprop.0+0x5c2/0x940ip6_dst_lookup_flow+0x88/0x190udp_tunnel6_dst_lookup+0     x2a7/0x4c0vxlan_xmit_one+0xbde/0x4a50 [vxlan]vxlan_xmit+0x9ad/0xf20 [vxlan]dev_hard_start_xmit+0x10e/0x360
    __dev_queue_xmit+0xf95/0x18c0arp_solicit+0x4a2/0xe00neigh_probe+0xaa/0xf0

    While the first suspect is the dst_cache, explicitly tracking the dstowing the last device reference via     probes proved such dst is held bythe nexthop in the originating fib6_info.

    Similar to commit f5b51fe804ec (ipv6: route: purge exception onremoval), we need to explicitly release     the originating fib info whendisconnecting a to-be-removed device from a live ipv6 dst: move thefib6_info     cleanup into ip6_dst_ifdown().

    Tested running:

    ./pmtu.sh cleanup_ipv6_exception

    in a tight loop for more than 400 iterations with no spat, running anunpatched kernel  I observed a splat     every ~10 iterations. (CVE-2024-56751)

    In the Linux kernel, the following vulnerability has been resolved:

    netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (CVE-2024-56755)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme-pci: fix freeing of the HMB descriptor table (CVE-2024-56756)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix use-after-free when COWing tree bock and tracing is enabled (CVE-2024-56759)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Prevent bad count for tracing_cpumask_write (CVE-2024-56763)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: netem: account for backlog updates from child qdisc (CVE-2024-56770)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: add a sanity check for btrfs root in btrfs_search_slot() (CVE-2024-56774)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (CVE-2024-56779)

    In the Linux kernel, the following vulnerability has been resolved:

    quota: flush quota_release_work upon quota writeback (CVE-2024-56780)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level (CVE-2024-56783)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (CVE-2024-57798)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix memory leak in tcp_conn_request() (CVE-2024-57841)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (CVE-2024-57874)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/dp_mst: Fix resetting msg rx state after topology removal (CVE-2024-57876)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix TCP options overflow. (CVE-2024-57882)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CVE-2024-57884)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/uverbs: Prevent integer overflow issue (CVE-2024-57890)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (CVE-2024-57896)

    In the Linux kernel, the following vulnerability has been resolved:

    ila: serialize calls to nf_register_net_hooks() (CVE-2024-57900)

    In the Linux kernel, the following vulnerability has been resolved:

    af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

    In the Linux kernel, the following vulnerability has been resolved:

    af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

    In the Linux kernel, the following vulnerability has been resolved:

    net: restrict SO_REUSEPORT to inet sockets (CVE-2024-57903)

    In the Linux kernel, the following vulnerability has been resolved:

    selinux: ignore unknown extended permissions (CVE-2024-57931)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sctp: Prevent autoclose integer overflow in sctp_association_init() (CVE-2024-57938)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio-blk: don't keep queue frozen during system suspend (CVE-2024-57946)

    In the Linux kernel, the following vulnerability has been resolved:

    net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets (CVE-2025-21629)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0201-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
    - CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (bsc#1226694).
    - CVE-2022-49033: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()     (bsc#1232045).
    - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).
    - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the     vmwgfx driver (bsc#1211593).
    - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the     vmwgfx driver (bsc#1211595).
    - CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking     (bsc#1232823).
    - CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (bsc#1223044).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-47666: scsi: pm80xx: Set phy->enable_completion only when we wait for it (bsc#1231453).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
    - CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
    - CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).
    - CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (bsc#1233127).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50211: udf: refactor inode_bmap() to handle error (bsc#1233096).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
    - CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
    - CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
    - CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
    - CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53072: platform/x86/amd/pmc: Detect when STB is not available (bsc#1233564).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
    - CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid (bsc#1233769).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53114: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1234072).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853).
    - CVE-2024-53150: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (bsc#1234834).
    - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846).
    - CVE-2024-53157: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (bsc#1234827).
    - CVE-2024-53158: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (bsc#1234811).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53162: crypto: qat/qat_4xxx - fix off by one in uof_get_name() (bsc#1234843).
    - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53210: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (bsc#1234971).
    - CVE-2024-53213: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (bsc#1234973).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()     (bsc#1234963).
    - CVE-2024-56548: hfsplus: do not query the device logical block size multiple times (bsc#1235073).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
    - CVE-2024-56571: media: uvcvideo: Require entities to have a non-zero unique ID (bsc#1235037).
    - CVE-2024-56575: media: imx-jpeg: Ensure power suppliers be suspended before detach them (bsc#1235039).
    - CVE-2024-56598: jfs: array-index-out-of-bounds fix in dtReadFirst (bsc#1235220).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()     (bsc#1235061).
    - CVE-2024-56619: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (bsc#1235224).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0203-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-41087: Fix double free on error (bsc#1228466).
    - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
    - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853).
    - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846).
    - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()     (bsc#1234963).
    - CVE-2024-56548: hfsplus: do not query the device logical block size multiple times (bsc#1235073).
    - CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
    - CVE-2024-56598: jfs: array-index-out-of-bounds fix in dtReadFirst (bsc#1235220).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()     (bsc#1235061).
    - CVE-2024-56619: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (bsc#1235224).
    - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1230697).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0153-1 advisory.

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0154-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467 bsc#1233469).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (XSA-465 bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0117-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
    - CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info     (bsc#1224726).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
    - CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
    - CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
    - CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
    - CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
    - CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
    - CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
    - CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
    - CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
    - CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error     (bsc#1233467).
    - CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
    - CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558).
    - CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
    - CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
    - CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
    - CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
    - CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
    - CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
    - CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
    - CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
    - CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
    - CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
    - CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
    - CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
    - CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
    - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
    - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
    - CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
    - CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
    - CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
    - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
    - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (bsc#1234282).
    - CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
    - CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
    - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
    - CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
    - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()     (bsc#1235056).
    - CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20018 advisory.

    [5.15.0-304.171.4]
    - Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds)
    - Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno)
    - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima)
    - lib/buildid: Fix build ID parsing logic (Jiri Olsa)
    - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
    - mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin)
    - Revert 'ALSA: hda/conexant: Mute speakers at suspend / shutdown' (Jaroslaw Janik)
    - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros)
    - ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
    - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang)
    - mm: revert 'mm: shmem: fix data-race in shmem_getattr()' (Andrew Morton)
    - ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
    - scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
    - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli)
    - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
    - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393531]
    - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393531]

    [5.15.0-304.171.3]
    - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock)  [Orabug: 37381702]
    - mtd: fix use-after-free in mtd release (Alexander Usyskin)  [Orabug: 37371929]
    - mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal)  [Orabug: 37371929]
    - mtd: call external _get and _put in right order (Alexander Usyskin)  [Orabug: 37371929]
    - nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko)  [Orabug: 37371929]
    - Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang)  [Orabug: 37364544]
    - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna)  [Orabug: 37361290]
    - x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna)  [Orabug: 37361290]
    - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma)  [Orabug: 37347419]
    - mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna)  [Orabug: 37306542]

    [5.15.0-304.171.2]
    - uek-rpm: Add mstflint_access module to the core list (Thomas Tai)  [Orabug: 37345530]
    - uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai)  [Orabug: 37345530]
    - sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay)  [Orabug:
    37329531]
    - Partial revert 'rds: Add inc/frag cache statistics' (Hans Westgaard Ry)  [Orabug: 37232315]

    [5.15.0-304.171.1]
    - kpcimgr: assign CPU to handle PCIE transactions during kexec (Joe Dobosenski)  [Orabug: 37295980]
    - kexec: update start address for LPI table data (Joe Dobosenski)  [Orabug: 37295980]
    - kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37295980]
    - embedded2: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Joe Dobosenski)  [Orabug: 37295980]
    - embedded2: Support booting an encrypted root filesystem (Joe Dobosenski)  [Orabug: 37295980]
    - Update embedded2 config for UEK7 (Joe Dobosenski)  [Orabug: 37295980]
    - Pensando: kernel config changes for kdump (Rob Gardner)  [Orabug: 34091165] [Orabug: 37295980]
    - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Joe Dobosenski)  [Orabug:
    37295980]
    - arm64: kexec: add support for kexec with spin-table (Henry Willard)  [Orabug: 32549965] [Orabug:
    37295980]
    - drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear)  [Orabug: 37295980]
    - drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear)  [Orabug: 37295980]
    - mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson)  [Orabug: 37295980]
    - Fix NULL pointer dereference in cn_filter() (Anjali Kulkarni)  [Orabug: 37280567]
    - selftests: connector: Fix input argument error paths to skip (Shuah Khan)  [Orabug: 37280567]
    - connector/cn_proc: Selftest for proc connector (Anjali Kulkarni)  [Orabug: 37280567]
    - connector/cn_proc: Allow non-root users access (Anjali Kulkarni)  [Orabug: 37280567]
    - connector/cn_proc: Performance improvements (Anjali Kulkarni)  [Orabug: 37280567]
    - connector/cn_proc: Add filtering to fix some bugs (Anjali Kulkarni)  [Orabug: 37280567]
    - netlink: Add new netlink_release function (Anjali Kulkarni)  [Orabug: 37280567]
    - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski)  [Orabug: 37214589]     {CVE-2024-46770}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
233468	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7387-1)	Nessus	Ubuntu Local Security Checks	high
233467	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7388-1)	Nessus	Ubuntu Local Security Checks	high
232634	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:0201-2)	Nessus	SuSE Local Security Checks	high
232385	CBL Mariner 2.0 Security Update: kernel (CVE-2024-53206)	Nessus	MarinerOS Local Security Checks	high
230745	Linux Distros Unpatched Vulnerability : CVE-2024-53206	Nessus	Misc.	high
216985	Debian dla-4076 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	high
214901	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:0289-1)	Nessus	SuSE Local Security Checks	high
214614	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-061)	Nessus	Amazon Linux Local Security Checks	high
214608	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-809)	Nessus	Amazon Linux Local Security Checks	high
214457	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:0201-1)	Nessus	SuSE Local Security Checks	high
214451	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:0203-1)	Nessus	SuSE Local Security Checks	high
214356	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:0153-1)	Nessus	SuSE Local Security Checks	high
214353	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:0154-1)	Nessus	SuSE Local Security Checks	high
214250	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:0117-1)	Nessus	SuSE Local Security Checks	high
213998	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20018)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2024-53206

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high