In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sk_select_reuseport() memory leak As pointed out in the original comment, lookup in sockmap can return a TCP ESTABLISHED socket. Such TCP socket may have had SO_ATTACH_REUSEPORT_EBPF set before it was ESTABLISHED. In other words, a non-NULL sk_reuseport_cb does not imply a non-refcounted socket. Drop sk's reference in both error paths. unreferenced object 0xffff888101911800 (size 2048): comm "test_progs", pid 44109, jiffies 4297131437 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 9336483b): __kmalloc_noprof+0x3bf/0x560 __reuseport_alloc+0x1d/0x40 reuseport_alloc+0xca/0x150 reuseport_attach_prog+0x87/0x140 sk_reuseport_attach_bpf+0xc8/0x100 sk_setsockopt+0x1181/0x1990 do_sock_setsockopt+0x12b/0x160 __sys_setsockopt+0x7b/0xc0 __x64_sys_setsockopt+0x1b/0x30 do_syscall_64+0x93/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    net: fix data-races around sk-sk_forward_alloc(CVE-2024-53124)

    nvme-multipath: defer partition scanning(CVE-2024-53093)

    bpf: sync_linked_regs() must preserve subreg_def(CVE-2024-53125)

    KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN(CVE-2024-53135)

    netlink: terminate outstanding dump on socket close(CVE-2024-53140)

    media: ts2020: fix null-ptr-deref in ts2020_probe().(CVE-2024-56574)

    drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'(CVE-2024-56608)

    ftrace: Fix regression with module command in stack_trace_filter(CVE-2024-56569)

    scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb().(CVE-2024-56748)

    ovl: Filter invalid inodes with missing lookup function(CVE-2024-56570)

    smb: client: fix NULL ptr deref in crypto_aead_setkey().(CVE-2024-53185)

    vfio/pci: Properly hide first-in-list PCIe extended capability(CVE-2024-53214)

    bpf: fix OOB devmap writes when deleting elemen(CVE-2024-56615)

    io_uring: check if iowq is killed before queuing(CVE-2024-56709)

    leds: class: Protect brightness_show() with led_cdev-led_access mutex(CVE-2024-56587)

    io_uring: check for overflows in io_pin_pages(CVE-2024-53187)

    RDMA/mlx5: Move events notifier registration to be after device registration(CVE-2024-53224)

    scsi: sg: Fix slab-use-after-free read in sg_release()(CVE-2024-56631)

    bpf, sockmap: Fix race between element replace and close()(CVE-2024-56664)

    net: inet: do not leave a dangling sk pointer in inet_create().(CVE-2024-56601)

    tipc: Fix use-after-free of kernel socket in cleanup_bearer().(CVE-2024-56642)

    sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport(CVE-2024-56688)

    ipv6: Fix soft lockups in fib6_select_path under high next hop churn(CVE-2024-56703)

    rtc: check if __rtc_read_time was successful in rtc_timer_do_work()(CVE-2024-56739)

    mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM(CVE-2024-56611)

    virtiofs: use pages instead of pointer for kernel direct IO(CVE-2024-53219)

    PCI: Fix use-after-free of slot-bus on hot remove(CVE-2024-53194)

    io_uring/tctx: work around xa_store() allocation error issue(CVE-2024-56584)

    SUNRPC: make sure cache entry active before cache_show(CVE-2024-53174)

    tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg(CVE-2024-56633)

    firmware: arm_scpi: Check the DVFS OPP count returned by the firmware(CVE-2024-53157)

    crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY(CVE-2024-56690)

    smb: client: fix use-after-free of signing key(CVE-2024-53179)

    quota: flush quota_release_work upon quota writeback(CVE-2024-56780)

    netfilter: x_tables: fix LED ID check in led_tg_check().(CVE-2024-56650)

    tracing: Prevent bad count for tracing_cpumask_write(CVE-2024-56763)

    media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg(CVE-2024-56769)

    nvme-pci: fix freeing of the HMB descriptor table(CVE-2024-56756)

    net: defer final 'struct net' free in netns dismantle(CVE-2024-56658)

    blk-cgroup: Fix UAF in blkcg_unpin_online().(CVE-2024-56672)

    acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl(CVE-2024-56662)

    hv_sock: Initializing vsk-trans to NULL to prevent a dangling pointer(CVE-2024-53103)

    net: Fix icmp host relookup triggering ip_rt_bug(CVE-2024-56647)

    NFSD: Prevent a potential integer overflow(CVE-2024-53146)

    scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()(CVE-2024-56747)

    ipv6: release nexthop on device removal(CVE-2024-56751)

    bpf: Call free_htab_elem() after htab_unlock_bucket().(CVE-2024-56592)

    RDMA/hns: Fix cpu stuck caused by printings during reset(CVE-2024-56722)

    scsi: qla2xxx: Fix use after free on unload(CVE-2024-56623)

    scsi: hisi_sas: Create all dump files during debugfs initialization(CVE-2024-56588)

    drm/modes: Avoid divide by zero harder in drm_mode_vrefresh().(CVE-2024-56369)

    NFSv4.0: Fix a use-after-free problem in the asynchronous open()(CVE-2024-53173)

    af_packet: avoid erroring out after sock_init_data() in packet_create().(CVE-2024-56606)

    net: inet6: do not leave a dangling sk pointer in inet6_create().(CVE-2024-56600)

    wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw().(CVE-2024-56593)

    bpf, sockmap: Several fixes to bpf_msg_pop_data(CVE-2024-56720)

    xsk: fix OOB map writes when deleting elements(CVE-2024-56614)

    netdevsim: prevent bad user input in nsim_dev_health_break_write().(CVE-2024-56716)

    nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur(CVE-2024-56779)

    nvme-rdma: unquiesce admin_q before destroy it(CVE-2024-49569)

    net/sched: netem: account for backlog updates from child qdisc(CVE-2024-56770)

    smb: client: fix TCP timers deadlock after rmmod(CVE-2024-54680)

    fs: relax assertions on failure to encode file handles(CVE-2024-57924)

    bpf: Prevent tailcall infinite loop caused by freplace(CVE-2024-47794)

    netfilter: IDLETIMER: Fix for possible ABBA deadlock(CVE-2024-54683)

    scsi: megaraid_sas: Fix for a potential deadlock(CVE-2024-57807)

    Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet(CVE-2024-55916)

    mm: hugetlb: independent PMD page table shared count(CVE-2024-57883)

    arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL(CVE-2024-57874)

    drm/dp_mst: Fix resetting msg rx state after topology removal(CVE-2024-57876)

    ceph: give up on paths longer than PATH_MAX(CVE-2024-53685)

    mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim().(CVE-2024-57884)

    workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker(CVE-2024-57888)

    virtio-blk: don't keep queue frozen during system suspend(CVE-2024-57946)

    KVM: arm64: Get rid of userspace_irqchip_in_use(CVE-2024-53195)

    netfilter: nf_set_pipapo: fix initial map fill(CVE-2024-57947)

    sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket(CVE-2024-53168)

    net: restrict SO_REUSEPORT to inet sockets(CVE-2024-57903)

    bpf: Fix bpf_sk_select_reuseport() memory leak(CVE-2025-21683)

    selinux: ignore unknown extended permissions(CVE-2024-57931)

    pinmux: Use sequential access to access desc-pinmux data(CVE-2024-47141)

    drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req().(CVE-2024-57798)

    RDMA/uverbs: Prevent integer overflow issue(CVE-2024-57890)

    dlm: fix possible lkb_resource null dereference(CVE-2024-47809)

    net/sctp: Prevent autoclose integer overflow in sctp_association_init().(CVE-2024-57938)

    iommu/arm-smmu: Defer probe of clients after smmu device bound(CVE-2024-56568)

    NFSD: Prevent NULL dereference in nfsd4_process_cb_update()(CVE-2024-53217)

    net/ipv6: release expired exception dst cached in socket(CVE-2024-56644)

    RDMA/rxe: Remove the direct link to net_device(CVE-2024-57795)

    af_packet: fix vlan_get_tci() vs MSG_PEEK(CVE-2024-57902)

    net: sched: fix ordering of qlen adjustment(CVE-2024-53164)

    af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK(CVE-2024-57901)

    sctp: sysctl: cookie_hmac_alg: avoid using current-nsproxy(CVE-2025-21640)

    sctp: sysctl: auth_enable: avoid using current-nsproxy(CVE-2025-21638)

    gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag(CVE-2025-21699)

    netfilter: ipset: Hold module reference while requesting a module(CVE-2024-56637)

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute(CVE-2025-21653)

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX(CVE-2025-21648)

    fs/proc: fix softlockup in __read_vmcore (part 2).(CVE-2025-21694)

    filemap: avoid truncating 64-bit offset to 32 bits(CVE-2025-21665)

    mm: zswap: properly synchronize freeing resources during CPU hotunplug(CVE-2025-21693)

    bpf: fix recursive lock when verdict program return SK_PASS(CVE-2024-56694)

    net/mlx5: Fix variable not being completed when function returns(CVE-2025-21662)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7421-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Media staging drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Network namespace;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Memory management;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - SELinux security module;

    - ALSA framework;

    - USB sound devices; (CVE-2024-53680, CVE-2024-53148, CVE-2024-47408, CVE-2024-53122, CVE-2024-56691,     CVE-2024-56763, CVE-2024-53227, CVE-2024-56369, CVE-2024-50275, CVE-2024-57892, CVE-2024-53142,     CVE-2024-56693, CVE-2024-56658, CVE-2024-57882, CVE-2024-56606, CVE-2024-46871, CVE-2024-57907,     CVE-2024-56642, CVE-2025-21631, CVE-2024-57908, CVE-2024-57890, CVE-2024-53194, CVE-2024-57913,     CVE-2024-56659, CVE-2024-56643, CVE-2024-56590, CVE-2024-56754, CVE-2025-21678, CVE-2024-56678,     CVE-2024-49974, CVE-2024-56614, CVE-2024-53124, CVE-2022-49034, CVE-2024-49996, CVE-2024-47143,     CVE-2024-50055, CVE-2024-53184, CVE-2024-56681, CVE-2025-21683, CVE-2024-57922, CVE-2024-56532,     CVE-2024-53161, CVE-2024-57791, CVE-2025-21664, CVE-2024-53206, CVE-2024-56589, CVE-2024-57902,     CVE-2024-56633, CVE-2024-53140, CVE-2024-56627, CVE-2024-57912, CVE-2024-55916, CVE-2024-56594,     CVE-2025-21690, CVE-2024-56602, CVE-2024-49998, CVE-2024-53171, CVE-2024-53174, CVE-2024-53172,     CVE-2024-56701, CVE-2024-52332, CVE-2024-57948, CVE-2024-57802, CVE-2024-53237, CVE-2024-50304,     CVE-2024-56568, CVE-2024-49571, CVE-2025-21636, CVE-2024-57906, CVE-2024-57939, CVE-2024-57931,     CVE-2024-56698, CVE-2024-56781, CVE-2024-50051, CVE-2024-57904, CVE-2024-43900, CVE-2024-53146,     CVE-2024-53217, CVE-2024-56548, CVE-2024-56616, CVE-2024-53155, CVE-2024-57889, CVE-2025-21666,     CVE-2024-53165, CVE-2024-56615, CVE-2024-56629, CVE-2024-53197, CVE-2024-47707, CVE-2024-53690,     CVE-2024-56572, CVE-2024-56748, CVE-2024-45828, CVE-2024-53156, CVE-2024-53150, CVE-2024-53181,     CVE-2024-56625, CVE-2024-57938, CVE-2024-56708, CVE-2024-57925, CVE-2024-56644, CVE-2024-50121,     CVE-2024-53125, CVE-2025-21697, CVE-2024-53180, CVE-2024-53129, CVE-2024-57910, CVE-2024-57951,     CVE-2024-46841, CVE-2024-56670, CVE-2024-56759, CVE-2024-56662, CVE-2024-56769, CVE-2024-56623,     CVE-2024-26928, CVE-2024-56777, CVE-2024-53183, CVE-2024-53135, CVE-2024-57884, CVE-2024-56778,     CVE-2024-56774, CVE-2024-53145, CVE-2024-56574, CVE-2025-21687, CVE-2024-53215, CVE-2024-57807,     CVE-2024-56704, CVE-2025-21665, CVE-2024-56637, CVE-2024-56601, CVE-2024-56650, CVE-2024-57911,     CVE-2024-57900, CVE-2024-56716, CVE-2025-21689, CVE-2024-56597, CVE-2024-56570, CVE-2024-56779,     CVE-2025-21653, CVE-2024-56747, CVE-2024-56622, CVE-2024-44938, CVE-2025-21639, CVE-2024-56578,     CVE-2024-56728, CVE-2024-53151, CVE-2024-56723, CVE-2024-53158, CVE-2024-56645, CVE-2024-56586,     CVE-2024-50242, CVE-2024-53099, CVE-2024-56726, CVE-2024-35864, CVE-2024-56739, CVE-2024-56785,     CVE-2024-46784, CVE-2024-56539, CVE-2024-57838, CVE-2024-57850, CVE-2024-56593, CVE-2024-53239,     CVE-2024-53173, CVE-2024-57901, CVE-2024-56595, CVE-2024-53138, CVE-2024-56724, CVE-2025-21699,     CVE-2025-21694, CVE-2024-49925, CVE-2024-53113, CVE-2024-56603, CVE-2024-53119, CVE-2024-53121,     CVE-2024-48881, CVE-2024-56745, CVE-2025-21637, CVE-2025-21640, CVE-2024-50283, CVE-2024-42069,     CVE-2024-53214, CVE-2024-56605, CVE-2024-53226, CVE-2024-56640, CVE-2024-57929, CVE-2024-56575,     CVE-2024-56700, CVE-2024-57903, CVE-2024-56776, CVE-2024-56679, CVE-2024-56648, CVE-2025-21692,     CVE-2024-56558, CVE-2024-53198, CVE-2024-56787, CVE-2024-56600, CVE-2024-56576, CVE-2024-53120,     CVE-2024-56531, CVE-2024-56567, CVE-2025-21680, CVE-2024-56780, CVE-2024-56631, CVE-2024-56694,     CVE-2024-43098, CVE-2024-53127, CVE-2024-56626, CVE-2024-56598, CVE-2024-47730, CVE-2024-53130,     CVE-2024-56619, CVE-2024-56569, CVE-2024-57917, CVE-2024-56767, CVE-2024-56587, CVE-2024-56690,     CVE-2024-53112, CVE-2024-57946, CVE-2025-21638, CVE-2024-56770, CVE-2024-56596, CVE-2024-56720,     CVE-2024-36476, CVE-2024-56533, CVE-2025-21648, CVE-2024-56705, CVE-2025-21646, CVE-2024-57897,     CVE-2024-57798, CVE-2024-56636, CVE-2024-53096, CVE-2024-56715, CVE-2024-58087, CVE-2024-57841,     CVE-2024-46809, CVE-2024-56634, CVE-2024-53685, CVE-2024-56756, CVE-2024-56562, CVE-2024-57874,     CVE-2024-56581, CVE-2024-56630, CVE-2025-21669, CVE-2024-57896, CVE-2024-55881, CVE-2024-53157,     CVE-2024-56688, CVE-2024-57849, CVE-2024-53131, CVE-2024-56610, CVE-2024-57940, CVE-2024-57792,     CVE-2024-36899, CVE-2024-53136, CVE-2024-42315, CVE-2024-56746, CVE-2024-49950)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7407-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Media staging drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Network namespace;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Memory management;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - SELinux security module;

    - ALSA framework;

    - USB sound devices; (CVE-2024-50242, CVE-2024-53165, CVE-2024-56569, CVE-2024-57938, CVE-2024-57889,     CVE-2024-53226, CVE-2024-57882, CVE-2024-57913, CVE-2024-53096, CVE-2024-56575, CVE-2024-56630,     CVE-2024-50055, CVE-2024-53129, CVE-2025-21646, CVE-2024-50121, CVE-2024-56594, CVE-2024-57802,     CVE-2024-53183, CVE-2024-57904, CVE-2025-21653, CVE-2024-56633, CVE-2024-56595, CVE-2024-56659,     CVE-2024-47730, CVE-2024-57948, CVE-2024-56614, CVE-2024-56601, CVE-2024-36476, CVE-2024-49998,     CVE-2024-53122, CVE-2024-56701, CVE-2024-56781, CVE-2024-56785, CVE-2024-47707, CVE-2025-21694,     CVE-2024-56715, CVE-2024-56693, CVE-2024-56587, CVE-2024-56726, CVE-2024-56688, CVE-2024-53124,     CVE-2024-46871, CVE-2025-21648, CVE-2024-56603, CVE-2024-56779, CVE-2025-21637, CVE-2025-21664,     CVE-2024-57951, CVE-2024-53136, CVE-2025-21687, CVE-2024-57798, CVE-2024-53680, CVE-2024-56606,     CVE-2024-56643, CVE-2024-56634, CVE-2024-56716, CVE-2024-57908, CVE-2024-56774, CVE-2024-56562,     CVE-2025-21669, CVE-2024-57849, CVE-2024-56623, CVE-2024-56691, CVE-2024-53155, CVE-2024-49996,     CVE-2024-56615, CVE-2024-47143, CVE-2024-56616, CVE-2024-56589, CVE-2024-56532, CVE-2024-53181,     CVE-2024-53112, CVE-2024-53130, CVE-2024-56640, CVE-2024-57791, CVE-2024-56574, CVE-2024-57792,     CVE-2024-56690, CVE-2024-57940, CVE-2024-53157, CVE-2024-48881, CVE-2024-57925, CVE-2025-21638,     CVE-2024-57897, CVE-2024-56586, CVE-2024-56570, CVE-2024-56694, CVE-2024-56637, CVE-2024-53142,     CVE-2024-57906, CVE-2024-49925, CVE-2024-56787, CVE-2024-56605, CVE-2024-57841, CVE-2024-53215,     CVE-2024-57917, CVE-2024-43900, CVE-2024-50304, CVE-2024-56780, CVE-2024-56644, CVE-2024-56597,     CVE-2025-21640, CVE-2024-56756, CVE-2024-53239, CVE-2024-57912, CVE-2024-56567, CVE-2024-55881,     CVE-2024-53237, CVE-2024-56593, CVE-2024-53184, CVE-2024-56708, CVE-2024-57911, CVE-2024-56746,     CVE-2024-53197, CVE-2024-57807, CVE-2024-57903, CVE-2024-56369, CVE-2024-56739, CVE-2024-56600,     CVE-2024-57838, CVE-2024-53120, CVE-2024-57929, CVE-2024-56754, CVE-2024-56679, CVE-2024-56745,     CVE-2024-57890, CVE-2025-21697, CVE-2024-57931, CVE-2024-53172, CVE-2024-53227, CVE-2024-56548,     CVE-2024-53206, CVE-2024-56650, CVE-2024-56769, CVE-2024-57902, CVE-2025-21666, CVE-2024-56705,     CVE-2025-21680, CVE-2025-21689, CVE-2024-57907, CVE-2024-56670, CVE-2024-56728, CVE-2024-53146,     CVE-2024-55916, CVE-2024-53685, CVE-2024-56578, CVE-2024-57896, CVE-2024-49950, CVE-2024-56763,     CVE-2024-44938, CVE-2025-21678, CVE-2024-57874, CVE-2024-47408, CVE-2024-56636, CVE-2024-56723,     CVE-2024-56776, CVE-2024-56681, CVE-2024-56610, CVE-2024-56581, CVE-2024-56539, CVE-2024-56720,     CVE-2024-53135, CVE-2025-21639, CVE-2024-53158, CVE-2024-53214, CVE-2024-46784, CVE-2024-53194,     CVE-2024-57939, CVE-2024-56747, CVE-2024-53161, CVE-2024-57850, CVE-2024-56602, CVE-2025-21692,     CVE-2024-56626, CVE-2024-53113, CVE-2024-56770, CVE-2024-53121, CVE-2024-56598, CVE-2024-57900,     CVE-2022-49034, CVE-2024-53198, CVE-2024-53171, CVE-2024-56619, CVE-2024-56631, CVE-2024-56558,     CVE-2024-53138, CVE-2024-53151, CVE-2024-56622, CVE-2024-56704, CVE-2024-53173, CVE-2024-56662,     CVE-2024-53131, CVE-2025-21683, CVE-2024-53125, CVE-2025-21631, CVE-2024-56625, CVE-2025-21699,     CVE-2024-53140, CVE-2024-57910, CVE-2024-56724, CVE-2024-56777, CVE-2024-56596, CVE-2024-56648,     CVE-2024-53145, CVE-2024-50051, CVE-2024-58087, CVE-2024-57884, CVE-2024-57946, CVE-2025-21636,     CVE-2024-35864, CVE-2024-57892, CVE-2024-56572, CVE-2024-56778, CVE-2024-53156, CVE-2024-56531,     CVE-2024-56629, CVE-2024-56698, CVE-2024-43098, CVE-2024-56700, CVE-2024-56533, CVE-2025-21665,     CVE-2024-56658, CVE-2025-21690, CVE-2024-53150, CVE-2024-52332, CVE-2024-53180, CVE-2024-53119,     CVE-2024-53217, CVE-2024-49974, CVE-2024-57922, CVE-2024-26928, CVE-2024-56568, CVE-2024-53174,     CVE-2024-56767, CVE-2024-56590, CVE-2024-56642, CVE-2024-56748, CVE-2024-56645, CVE-2024-46841,     CVE-2024-46809, CVE-2024-42315, CVE-2024-56678, CVE-2024-36899, CVE-2024-56759, CVE-2024-50275,     CVE-2024-49571, CVE-2024-53148, CVE-2024-56576, CVE-2024-53099, CVE-2024-56627, CVE-2024-53690,     CVE-2024-50283, CVE-2024-53127, CVE-2024-45828, CVE-2024-57901)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7390-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-50299, CVE-2024-50304, CVE-2024-50196, CVE-2024-56548, CVE-2024-56531,     CVE-2024-56720, CVE-2024-58087, CVE-2024-50116, CVE-2024-56590, CVE-2024-56589, CVE-2024-53172,     CVE-2025-21687, CVE-2024-57925, CVE-2024-56640, CVE-2024-57896, CVE-2024-56739, CVE-2024-56622,     CVE-2024-53173, CVE-2024-56610, CVE-2024-56787, CVE-2025-21690, CVE-2024-50259, CVE-2024-50278,     CVE-2024-53685, CVE-2024-50099, CVE-2024-56616, CVE-2024-53181, CVE-2024-56643, CVE-2024-49950,     CVE-2024-53119, CVE-2024-50257, CVE-2024-56777, CVE-2024-49998, CVE-2024-56629, CVE-2024-56728,     CVE-2024-56601, CVE-2024-56776, CVE-2024-46809, CVE-2024-53061, CVE-2024-50273, CVE-2024-45828,     CVE-2024-53161, CVE-2024-56700, CVE-2024-50103, CVE-2024-50156, CVE-2024-53150, CVE-2024-50237,     CVE-2024-46841, CVE-2024-56636, CVE-2024-56572, CVE-2024-50290, CVE-2024-57913, CVE-2024-56698,     CVE-2024-56690, CVE-2024-56568, CVE-2024-57911, CVE-2024-49974, CVE-2024-47707, CVE-2024-53059,     CVE-2024-50244, CVE-2024-57874, CVE-2024-56539, CVE-2024-53145, CVE-2024-56602, CVE-2024-50115,     CVE-2024-56726, CVE-2024-53157, CVE-2024-41080, CVE-2024-57938, CVE-2024-56569, CVE-2024-50171,     CVE-2024-57807, CVE-2024-57890, CVE-2024-53122, CVE-2024-56746, CVE-2024-53135, CVE-2024-53063,     CVE-2024-57922, CVE-2024-53130, CVE-2024-53174, CVE-2024-56774, CVE-2024-56606, CVE-2024-56648,     CVE-2024-50160, CVE-2024-50262, CVE-2024-50163, CVE-2024-53112, CVE-2024-50234, CVE-2024-56576,     CVE-2025-21664, CVE-2024-53113, CVE-2024-56625, CVE-2024-50154, CVE-2024-56662, CVE-2024-56645,     CVE-2024-56778, CVE-2024-40953, CVE-2024-50055, CVE-2024-40965, CVE-2024-56627, CVE-2024-43900,     CVE-2024-56578, CVE-2024-50202, CVE-2024-56670, CVE-2024-56705, CVE-2024-53103, CVE-2024-57948,     CVE-2024-53197, CVE-2024-56704, CVE-2024-50101, CVE-2024-53180, CVE-2024-56769, CVE-2024-53171,     CVE-2024-56558, CVE-2024-53042, CVE-2024-50051, CVE-2024-42291, CVE-2024-39497, CVE-2024-53183,     CVE-2024-43098, CVE-2024-57904, CVE-2024-56615, CVE-2024-50086, CVE-2024-53239, CVE-2024-50127,     CVE-2024-50134, CVE-2024-53148, CVE-2024-47408, CVE-2024-50279, CVE-2024-50292, CVE-2024-53099,     CVE-2024-50121, CVE-2024-56567, CVE-2024-53146, CVE-2024-53052, CVE-2024-53120, CVE-2024-56678,     CVE-2024-50282, CVE-2024-50249, CVE-2024-56623, CVE-2024-56701, CVE-2024-56708, CVE-2024-56763,     CVE-2024-50209, CVE-2025-21639, CVE-2024-50230, CVE-2024-53096, CVE-2024-47730, CVE-2024-42252,     CVE-2024-57849, CVE-2024-56587, CVE-2024-56614, CVE-2024-56369, CVE-2024-57838, CVE-2025-21653,     CVE-2024-57792, CVE-2024-53140, CVE-2024-56780, CVE-2024-50218, CVE-2024-56767, CVE-2024-49571,     CVE-2024-57910, CVE-2024-50269, CVE-2024-56630, CVE-2024-52332, CVE-2024-56693, CVE-2024-50148,     CVE-2025-21648, CVE-2024-49996, CVE-2024-50085, CVE-2024-56688, CVE-2024-53125, CVE-2024-53129,     CVE-2024-55916, CVE-2024-57900, CVE-2024-57903, CVE-2024-57939, CVE-2024-50010, CVE-2024-50265,     CVE-2023-52913, CVE-2024-36476, CVE-2024-56574, CVE-2025-21636, CVE-2024-57912, CVE-2024-56642,     CVE-2024-50287, CVE-2024-36899, CVE-2024-53131, CVE-2024-56595, CVE-2024-53058, CVE-2024-46871,     CVE-2024-56586, CVE-2024-53198, CVE-2025-21699, CVE-2024-50082, CVE-2024-53194, CVE-2024-57901,     CVE-2024-50199, CVE-2024-57802, CVE-2024-53138, CVE-2024-53124, CVE-2024-50167, CVE-2024-56597,     CVE-2024-50233, CVE-2024-49925, CVE-2024-56781, CVE-2024-53127, CVE-2025-21680, CVE-2024-53165,     CVE-2024-53227, CVE-2024-56672, CVE-2024-55881, CVE-2024-53184, CVE-2024-50198, CVE-2024-42315,     CVE-2024-57931, CVE-2024-56694, CVE-2024-57951, CVE-2024-56659, CVE-2024-50247, CVE-2024-53690,     CVE-2024-56650, CVE-2024-57889, CVE-2024-53097, CVE-2024-50072, CVE-2024-50267, CVE-2024-53066,     CVE-2024-50153, CVE-2024-50194, CVE-2024-56681, CVE-2025-21692, CVE-2024-50131, CVE-2024-57884,     CVE-2024-56748, CVE-2024-48881, CVE-2024-56593, CVE-2024-50162, CVE-2024-44938, CVE-2024-50128,     CVE-2024-50275, CVE-2025-21638, CVE-2024-56634, CVE-2024-56679, CVE-2024-47143, CVE-2024-50251,     CVE-2024-56570, CVE-2024-53156, CVE-2024-50205, CVE-2024-56747, CVE-2024-53121, CVE-2024-50208,     CVE-2024-57841, CVE-2024-56575, CVE-2024-57791, CVE-2024-57897, CVE-2024-56626, CVE-2024-35887,     CVE-2024-50302, CVE-2024-50242, CVE-2024-56756, CVE-2024-53217, CVE-2025-21669, CVE-2024-56603,     CVE-2024-56785, CVE-2024-57917, CVE-2024-50058, CVE-2024-57902, CVE-2024-53215, CVE-2024-50229,     CVE-2024-50295, CVE-2024-56633, CVE-2024-50151, CVE-2024-53214, CVE-2024-50232, CVE-2024-53158,     CVE-2024-56715, CVE-2024-50182, CVE-2025-21631, CVE-2024-53104, CVE-2024-53101, CVE-2024-57908,     CVE-2024-53055, CVE-2024-50143, CVE-2025-21646, CVE-2024-56605, CVE-2025-21640, CVE-2024-56779,     CVE-2024-50296, CVE-2024-50201, CVE-2024-56691, CVE-2024-57882, CVE-2024-53141, CVE-2024-56600,     CVE-2025-21689, CVE-2024-26718, CVE-2024-56596, CVE-2024-53151, CVE-2024-50083, CVE-2024-50283,     CVE-2024-56532, CVE-2024-53226, CVE-2024-56637, CVE-2024-50193, CVE-2024-56644, CVE-2025-21637,     CVE-2024-56716, CVE-2024-53680, CVE-2024-57907, CVE-2022-49034, CVE-2024-50150, CVE-2024-56723,     CVE-2025-21665, CVE-2024-56759, CVE-2024-50301, CVE-2024-57929, CVE-2024-53164, CVE-2024-56754,     CVE-2024-53237, CVE-2025-21694, CVE-2024-56770, CVE-2024-50141, CVE-2024-50192, CVE-2024-56581,     CVE-2024-57892, CVE-2024-53142, CVE-2024-50268, CVE-2024-53088, CVE-2025-21683, CVE-2024-56724,     CVE-2024-41066, CVE-2024-46784, CVE-2024-50074, CVE-2024-57906, CVE-2024-57850, CVE-2024-50036,     CVE-2024-57946, CVE-2024-50117, CVE-2024-56594, CVE-2024-56619, CVE-2024-56598, CVE-2024-56533,     CVE-2024-56562, CVE-2024-57940, CVE-2024-56745, CVE-2024-53155, CVE-2024-50236, CVE-2025-21666,     CVE-2025-21697, CVE-2024-50185, CVE-2024-56631, CVE-2024-50195, CVE-2024-50245, CVE-2024-50110,     CVE-2025-21678, CVE-2024-50142)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7389-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2025-21640, CVE-2024-56625, CVE-2024-53104, CVE-2024-53055, CVE-2024-26718,     CVE-2024-53180, CVE-2024-50257, CVE-2024-53174, CVE-2024-53680, CVE-2024-56670, CVE-2024-56606,     CVE-2024-53156, CVE-2024-53112, CVE-2024-57940, CVE-2024-57807, CVE-2024-50259, CVE-2024-53172,     CVE-2024-53214, CVE-2024-50275, CVE-2024-56770, CVE-2025-21666, CVE-2024-53101, CVE-2024-56630,     CVE-2025-21638, CVE-2024-50199, CVE-2024-56705, CVE-2024-56619, CVE-2024-50115, CVE-2024-50209,     CVE-2024-50116, CVE-2024-57908, CVE-2024-50242, CVE-2024-50128, CVE-2024-50247, CVE-2024-56626,     CVE-2024-56693, CVE-2024-56648, CVE-2024-56745, CVE-2024-42252, CVE-2024-53088, CVE-2024-50251,     CVE-2024-57889, CVE-2024-53150, CVE-2024-53066, CVE-2024-56569, CVE-2025-21697, CVE-2024-50185,     CVE-2024-53158, CVE-2024-50168, CVE-2024-41066, CVE-2024-53145, CVE-2024-50171, CVE-2024-53135,     CVE-2024-42315, CVE-2024-56615, CVE-2024-50230, CVE-2024-50299, CVE-2024-53140, CVE-2024-56704,     CVE-2024-56533, CVE-2024-50121, CVE-2024-39497, CVE-2024-50282, CVE-2024-56715, CVE-2024-56779,     CVE-2024-56769, CVE-2024-56570, CVE-2024-55916, CVE-2024-56637, CVE-2025-21694, CVE-2024-56691,     CVE-2024-50301, CVE-2024-50156, CVE-2024-57903, CVE-2025-21636, CVE-2024-49974, CVE-2024-56532,     CVE-2024-50201, CVE-2024-57929, CVE-2024-56590, CVE-2024-57882, CVE-2024-57925, CVE-2024-56759,     CVE-2024-56726, CVE-2024-53215, CVE-2024-53121, CVE-2024-57912, CVE-2024-53119, CVE-2024-57931,     CVE-2024-41080, CVE-2024-35887, CVE-2024-53173, CVE-2024-50245, CVE-2024-50267, CVE-2024-56627,     CVE-2024-50085, CVE-2024-56756, CVE-2024-50232, CVE-2024-56636, CVE-2024-56581, CVE-2024-53194,     CVE-2025-21689, CVE-2024-53226, CVE-2024-53239, CVE-2024-56662, CVE-2024-50205, CVE-2024-53127,     CVE-2024-56586, CVE-2024-56603, CVE-2024-53122, CVE-2025-21699, CVE-2024-56568, CVE-2024-57884,     CVE-2024-53113, CVE-2024-56574, CVE-2025-21669, CVE-2024-53125, CVE-2024-56748, CVE-2024-56575,     CVE-2024-56640, CVE-2024-57901, CVE-2022-49034, CVE-2024-56728, CVE-2024-57910, CVE-2024-40965,     CVE-2024-36899, CVE-2024-50131, CVE-2024-42291, CVE-2024-50233, CVE-2024-57791, CVE-2024-57948,     CVE-2024-56633, CVE-2025-21653, CVE-2024-50287, CVE-2024-56724, CVE-2024-57907, CVE-2024-49925,     CVE-2024-47730, CVE-2024-46841, CVE-2024-56716, CVE-2024-44938, CVE-2024-49950, CVE-2024-53131,     CVE-2024-46809, CVE-2024-50074, CVE-2024-50167, CVE-2024-53171, CVE-2024-57911, CVE-2025-21680,     CVE-2024-53059, CVE-2024-53161, CVE-2024-47707, CVE-2025-21683, CVE-2024-56597, CVE-2024-53184,     CVE-2024-56562, CVE-2024-47143, CVE-2024-50103, CVE-2024-53138, CVE-2025-21639, CVE-2024-50182,     CVE-2024-36476, CVE-2024-50099, CVE-2024-50194, CVE-2024-50163, CVE-2024-43098, CVE-2023-52913,     CVE-2024-56708, CVE-2024-53130, CVE-2024-56587, CVE-2024-57951, CVE-2024-57938, CVE-2024-57917,     CVE-2024-53063, CVE-2024-50148, CVE-2024-50229, CVE-2024-56763, CVE-2024-50101, CVE-2024-57939,     CVE-2024-57874, CVE-2024-56778, CVE-2024-56701, CVE-2024-56672, CVE-2024-56598, CVE-2024-45828,     CVE-2024-50208, CVE-2024-53129, CVE-2024-56754, CVE-2024-50141, CVE-2024-56539, CVE-2024-56720,     CVE-2024-53165, CVE-2024-50234, CVE-2024-53120, CVE-2024-50192, CVE-2024-50283, CVE-2024-50160,     CVE-2024-57922, CVE-2024-53052, CVE-2024-48881, CVE-2024-56596, CVE-2024-50202, CVE-2025-21646,     CVE-2024-50082, CVE-2024-50278, CVE-2024-57904, CVE-2024-56602, CVE-2024-57913, CVE-2024-50151,     CVE-2025-21690, CVE-2024-53690, CVE-2024-56739, CVE-2024-56594, CVE-2024-53155, CVE-2024-56694,     CVE-2024-56767, CVE-2024-50117, CVE-2024-56634, CVE-2024-47408, CVE-2024-53124, CVE-2024-50292,     CVE-2024-56576, CVE-2024-57841, CVE-2024-57902, CVE-2024-57849, CVE-2024-50196, CVE-2024-56629,     CVE-2024-57792, CVE-2024-56605, CVE-2024-57896, CVE-2025-21664, CVE-2024-53142, CVE-2025-21665,     CVE-2024-50249, CVE-2024-50290, CVE-2024-56688, CVE-2024-53096, CVE-2024-53061, CVE-2024-56622,     CVE-2024-50110, CVE-2024-56777, CVE-2024-58087, CVE-2024-56600, CVE-2024-56601, CVE-2024-56645,     CVE-2024-56572, CVE-2024-56723, CVE-2024-50195, CVE-2024-56595, CVE-2024-56698, CVE-2024-57906,     CVE-2024-52332, CVE-2024-53099, CVE-2024-56787, CVE-2025-21687, CVE-2024-53141, CVE-2024-53058,     CVE-2024-49998, CVE-2024-53103, CVE-2024-56642, CVE-2024-50058, CVE-2024-53151, CVE-2024-50162,     CVE-2024-53164, CVE-2024-56643, CVE-2024-56610, CVE-2024-50302, CVE-2024-57900, CVE-2024-50083,     CVE-2024-50072, CVE-2024-53227, CVE-2024-53183, CVE-2024-56690, CVE-2024-50142, CVE-2024-50127,     CVE-2024-50134, CVE-2024-56700, CVE-2024-53198, CVE-2024-56781, CVE-2024-57897, CVE-2024-56774,     CVE-2024-50269, CVE-2025-21678, CVE-2024-46784, CVE-2024-53685, CVE-2024-56593, CVE-2024-50051,     CVE-2024-57890, CVE-2024-53197, CVE-2024-50198, CVE-2024-50279, CVE-2024-57802, CVE-2024-56578,     CVE-2024-50154, CVE-2024-56623, CVE-2024-56776, CVE-2024-56681, CVE-2024-53157, CVE-2024-57850,     CVE-2024-57946, CVE-2024-53148, CVE-2024-53042, CVE-2024-53181, CVE-2024-57892, CVE-2024-50153,     CVE-2024-50265, CVE-2025-21631, CVE-2025-21692, CVE-2024-56558, CVE-2024-56747, CVE-2024-50304,     CVE-2024-50244, CVE-2024-43900, CVE-2024-56746, CVE-2024-56631, CVE-2024-56644, CVE-2024-50262,     CVE-2024-49571, CVE-2024-50296, CVE-2024-56614, CVE-2024-50036, CVE-2024-50273, CVE-2024-56659,     CVE-2024-56650, CVE-2024-50236, CVE-2024-50268, CVE-2025-21637, CVE-2025-21648, CVE-2024-53097,     CVE-2024-56678, CVE-2024-56780, CVE-2024-50010, CVE-2024-46871, CVE-2024-50237, CVE-2024-57838,     CVE-2024-49996, CVE-2024-50055, CVE-2024-50143, CVE-2024-53146, CVE-2024-50150, CVE-2024-50193,     CVE-2024-56567, CVE-2024-50086, CVE-2024-50295, CVE-2024-50218, CVE-2024-40953, CVE-2024-56616,     CVE-2024-56548, CVE-2024-56531, CVE-2024-56679, CVE-2024-56785, CVE-2024-53217, CVE-2024-53237,     CVE-2024-56369, CVE-2024-55881, CVE-2024-56589)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7387-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - NVME drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Media staging drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Serial drivers;

    - USB Type-C Port Controller Manager driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - Kernel init infrastructure;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Memory management;

    - 9P file system network protocol;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - SELinux security module;

    - ALSA framework;

    - USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142,     CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237,     CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574,     CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688,     CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226,     CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690,     CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901,     CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998,     CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315,     CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569,     CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571, CVE-2024-56754,     CVE-2024-56572, CVE-2024-49974, CVE-2024-53140, CVE-2025-21639, CVE-2024-56369, CVE-2024-56601,     CVE-2024-56642, CVE-2024-57792, CVE-2024-57838, CVE-2024-53127, CVE-2025-21690, CVE-2024-56548,     CVE-2024-53155, CVE-2024-47143, CVE-2024-56691, CVE-2024-57938, CVE-2025-21692, CVE-2024-56648,     CVE-2024-46841, CVE-2024-57807, CVE-2024-57908, CVE-2024-50121, CVE-2024-57841, CVE-2024-53135,     CVE-2024-53180, CVE-2025-21683, CVE-2024-56568, CVE-2024-56575, CVE-2024-56774, CVE-2024-56589,     CVE-2024-36899, CVE-2024-57889, CVE-2024-50275, CVE-2024-56606, CVE-2024-56578, CVE-2024-56726,     CVE-2024-36476, CVE-2024-53122, CVE-2024-56594, CVE-2024-56562, CVE-2024-53690, CVE-2024-56769,     CVE-2024-57910, CVE-2024-56720, CVE-2024-56581, CVE-2024-56723, CVE-2025-21669, CVE-2024-56627,     CVE-2024-57925, CVE-2024-56600, CVE-2024-56631, CVE-2024-56595, CVE-2024-53685, CVE-2024-53157,     CVE-2024-57931, CVE-2024-56644, CVE-2024-53215, CVE-2024-57897, CVE-2024-56748, CVE-2024-53138,     CVE-2025-21646, CVE-2024-47707, CVE-2024-56781, CVE-2024-57922, CVE-2024-53197, CVE-2024-56777,     CVE-2024-56625, CVE-2024-56650, CVE-2024-56704, CVE-2025-21638, CVE-2024-56623, CVE-2024-57890,     CVE-2024-56630, CVE-2024-53680, CVE-2025-21637, CVE-2024-56539, CVE-2024-56532, CVE-2024-53217,     CVE-2024-53120, CVE-2024-56780, CVE-2022-49034, CVE-2024-43098, CVE-2024-56590, CVE-2024-50283,     CVE-2024-57917, CVE-2024-56776, CVE-2024-53151, CVE-2024-49950, CVE-2024-57850, CVE-2024-44938,     CVE-2024-47408, CVE-2024-56778, CVE-2024-56779, CVE-2024-56637, CVE-2024-56640, CVE-2024-57907,     CVE-2024-57940, CVE-2025-21697, CVE-2024-57946, CVE-2024-53156, CVE-2024-56759, CVE-2024-53146,     CVE-2024-56610, CVE-2024-56670, CVE-2024-57912, CVE-2024-57874, CVE-2024-57884, CVE-2024-56745,     CVE-2024-56715, CVE-2024-56746, CVE-2024-53112, CVE-2024-53145, CVE-2024-56614, CVE-2024-53174,     CVE-2024-57849, CVE-2024-56767, CVE-2024-53173, CVE-2025-21689, CVE-2024-56739, CVE-2024-56694,     CVE-2024-57939, CVE-2024-56622, CVE-2024-56570, CVE-2024-56634, CVE-2024-53161, CVE-2024-53121,     CVE-2024-56705, CVE-2024-56756, CVE-2024-53183, CVE-2024-56629, CVE-2025-21636, CVE-2024-56763,     CVE-2024-56593, CVE-2025-21640, CVE-2024-53148, CVE-2025-21678, CVE-2024-56602, CVE-2024-57882,     CVE-2024-56576, CVE-2024-53096, CVE-2024-53165, CVE-2024-57903, CVE-2024-57802, CVE-2025-21653,     CVE-2024-56662, CVE-2024-56626, CVE-2024-56645, CVE-2024-48881, CVE-2024-57892, CVE-2024-56531,     CVE-2024-56716, CVE-2024-56787, CVE-2024-57929, CVE-2024-50055, CVE-2024-49996, CVE-2024-53171,     CVE-2025-21648, CVE-2024-57948, CVE-2024-53099, CVE-2024-56785, CVE-2024-57913, CVE-2024-53131,     CVE-2024-53194, CVE-2024-56659, CVE-2024-55916, CVE-2024-56616, CVE-2024-56728, CVE-2024-43900,     CVE-2025-21680, CVE-2024-53113, CVE-2024-58087, CVE-2024-56598, CVE-2024-57902, CVE-2024-56679,     CVE-2025-21666, CVE-2024-57951, CVE-2024-56708, CVE-2024-56633, CVE-2024-56747, CVE-2024-53125,     CVE-2024-45828, CVE-2024-53124, CVE-2024-46871, CVE-2024-57900, CVE-2024-50304, CVE-2024-53158)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7388-1 advisory.

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - MIPS architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - SuperH RISC architecture;

    - User-Mode Linux (UML);

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Drivers core;

    - RAM backed block device driver;

    - Virtio block driver;

    - Data acquisition framework and drivers;

    - Hardware crypto device drivers;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCPI message protocol;

    - GPIO subsystem;

    - GPU drivers;

    - HID subsystem;

    - Microsoft Hyper-V drivers;

    - I2C subsystem;

    - I3C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - IRQ chip drivers;

    - LED subsystem;

    - Multiple devices driver;

    - Media drivers;

    - Multifunction device drivers;

    - MMC subsystem;

    - MTD block device drivers;

    - Network drivers;

    - Mellanox network drivers;

    - Microsoft Azure Network Adapter (MANA) driver;

    - STMicroelectronics network drivers;

    - NVME drivers;

    - Parport drivers;

    - PCI subsystem;

    - Pin controllers subsystem;

    - x86 platform drivers;

    - Power supply drivers;

    - Real Time Clock drivers;

    - SCSI subsystem;

    - SuperH / SH-Mobile drivers;

    - i.MX SoC drivers;

    - QCOM SoC drivers;

    - SPI subsystem;

    - Direct Digital Synthesis drivers;

    - Media staging drivers;

    - TCM subsystem;

    - TTY drivers;

    - UFS subsystem;

    - DesignWare USB3 driver;

    - USB Gadget drivers;

    - USB Dual Role (OTG-ready) Controller drivers;

    - USB Serial drivers;

    - USB Type-C support driver;

    - USB Type-C Port Controller Manager driver;

    - USB Type-C Connector System Software Interface driver;

    - VFIO drivers;

    - Framebuffer layer;

    - Xen hypervisor drivers;

    - AFS file system;

    - BTRFS file system;

    - Ceph distributed file system;

    - File systems infrastructure;

    - F2FS file system;

    - GFS2 file system;

    - JFFS2 file system;

    - JFS file system;

    - Network file system (NFS) client;

    - Network file system (NFS) server daemon;

    - NILFS2 file system;

    - NTFS3 file system;

    - Overlay file system;

    - Proc file system;

    - Diskquota system;

    - SMB network file system;

    - UBI file system;

    - Timer subsystem;

    - VLANs driver;

    - LAPB network protocol;

    - User-space API (UAPI);

    - Kernel init infrastructure;

    - io_uring subsystem;

    - BPF subsystem;

    - Kernel CPU control infrastructure;

    - DMA mapping infrastructure;

    - KCSAN framework;

    - Tracing infrastructure;

    - Closures library;

    - Memory management;

    - 9P file system network protocol;

    - Amateur Radio drivers;

    - Bluetooth subsystem;

    - CAN network layer;

    - Networking core;

    - DCCP (Datagram Congestion Control Protocol);

    - Distributed Switch Architecture;

    - HSR network protocol;

    - IEEE802154.4 network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - MAC80211 subsystem;

    - IEEE 802.15.4 subsystem;

    - Multipath TCP;

    - Netfilter;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - Network traffic control;

    - SCTP protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - VMware vSockets driver;

    - eXpress Data Path;

    - XFRM subsystem;

    - Key management;

    - SELinux security module;

    - ALSA framework;

    - FireWire sound drivers;

    - HD-audio driver;

    - QCOM ASoC drivers;

    - STMicroelectronics SoC drivers;

    - USB sound devices;

    - KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168,     CVE-2024-53214, CVE-2024-56670, CVE-2024-53146, CVE-2024-50302, CVE-2024-56629, CVE-2024-53680,     CVE-2024-53124, CVE-2024-56610, CVE-2024-50259, CVE-2024-47408, CVE-2024-53217, CVE-2025-21683,     CVE-2024-50196, CVE-2025-21694, CVE-2024-56596, CVE-2024-53161, CVE-2024-53061, CVE-2024-57940,     CVE-2024-41066, CVE-2024-53122, CVE-2024-56776, CVE-2024-50268, CVE-2024-53184, CVE-2024-53088,     CVE-2024-56590, CVE-2024-50182, CVE-2024-56705, CVE-2024-50103, CVE-2024-57938, CVE-2024-53155,     CVE-2024-50282, CVE-2024-50209, CVE-2024-53150, CVE-2024-56532, CVE-2024-57910, CVE-2024-56678,     CVE-2024-53181, CVE-2024-50230, CVE-2024-42291, CVE-2024-50233, CVE-2024-53130, CVE-2024-56756,     CVE-2024-53113, CVE-2024-56623, CVE-2024-41080, CVE-2024-53197, CVE-2024-53142, CVE-2024-50251,     CVE-2024-50237, CVE-2024-47143, CVE-2024-56633, CVE-2024-57889, CVE-2024-53127, CVE-2024-46871,     CVE-2024-56640, CVE-2024-50193, CVE-2024-53148, CVE-2025-21669, CVE-2024-53690, CVE-2024-50279,     CVE-2024-56780, CVE-2024-56769, CVE-2024-53125, CVE-2024-53052, CVE-2024-56601, CVE-2024-56778,     CVE-2024-50198, CVE-2025-21665, CVE-2024-53227, CVE-2024-40953, CVE-2024-50295, CVE-2024-53194,     CVE-2024-56777, CVE-2024-56770, CVE-2025-21697, CVE-2024-57904, CVE-2024-56691, CVE-2024-56787,     CVE-2024-57948, CVE-2024-53140, CVE-2024-50051, CVE-2025-21648, CVE-2024-56754, CVE-2024-50156,     CVE-2024-50205, CVE-2024-57911, CVE-2024-50290, CVE-2024-56715, CVE-2024-56643, CVE-2024-49974,     CVE-2024-50287, CVE-2024-50162, CVE-2024-57849, CVE-2024-50142, CVE-2024-53198, CVE-2024-56568,     CVE-2024-56704, CVE-2024-35887, CVE-2024-57908, CVE-2024-56767, CVE-2024-56701, CVE-2025-21680,     CVE-2024-57913, CVE-2024-50171, CVE-2024-56558, CVE-2024-50121, CVE-2024-50036, CVE-2024-53180,     CVE-2024-53096, CVE-2024-57897, CVE-2024-56746, CVE-2024-55881, CVE-2024-57874, CVE-2024-56774,     CVE-2024-57946, CVE-2024-56531, CVE-2024-56698, CVE-2024-56650, CVE-2025-21637, CVE-2024-50242,     CVE-2024-49996, CVE-2024-53136, CVE-2024-56575, CVE-2024-56642, CVE-2024-56763, CVE-2024-57802,     CVE-2024-57929, CVE-2024-56726, CVE-2024-56615, CVE-2024-56619, CVE-2024-50234, CVE-2024-50299,     CVE-2024-56569, CVE-2024-57792, CVE-2024-50150, CVE-2024-56728, CVE-2024-53173, CVE-2024-56630,     CVE-2025-21639, CVE-2024-53183, CVE-2024-56681, CVE-2024-46809, CVE-2024-53165, CVE-2024-53215,     CVE-2024-50296, CVE-2024-50267, CVE-2024-53097, CVE-2024-56369, CVE-2024-56578, CVE-2024-56562,     CVE-2025-21699, CVE-2024-50134, CVE-2024-56589, CVE-2024-50232, CVE-2024-53685, CVE-2024-50265,     CVE-2024-53206, CVE-2024-50257, CVE-2024-57925, CVE-2024-50269, CVE-2024-56570, CVE-2024-50278,     CVE-2024-56595, CVE-2024-56720, CVE-2024-50085, CVE-2024-50201, CVE-2024-56693, CVE-2023-52913,     CVE-2025-21666, CVE-2024-50249, CVE-2024-50247, CVE-2024-47730, CVE-2024-49925, CVE-2025-21690,     CVE-2024-56606, CVE-2024-53172, CVE-2024-53119, CVE-2024-56602, CVE-2024-50262, CVE-2024-50127,     CVE-2024-50115, CVE-2024-57901, CVE-2024-50185, CVE-2024-53058, CVE-2025-21631, CVE-2024-56574,     CVE-2024-56539, CVE-2025-21678, CVE-2024-56659, CVE-2024-56594, CVE-2024-56708, CVE-2024-56662,     CVE-2024-55916, CVE-2024-53042, CVE-2024-50229, CVE-2024-56616, CVE-2024-50074, CVE-2024-57838,     CVE-2024-50160, CVE-2024-50218, CVE-2024-56597, CVE-2024-36476, CVE-2024-49571, CVE-2024-53112,     CVE-2024-50128, CVE-2024-53157, CVE-2024-56747, CVE-2024-56779, CVE-2024-50143, CVE-2024-42315,     CVE-2024-56688, CVE-2024-57903, CVE-2024-50283, CVE-2025-21640, CVE-2024-53099, CVE-2024-57902,     CVE-2024-57912, CVE-2024-56567, CVE-2024-56637, CVE-2024-50086, CVE-2024-56679, CVE-2024-56598,     CVE-2024-50236, CVE-2024-56593, CVE-2024-50058, CVE-2024-53239, CVE-2024-57906, CVE-2024-43098,     CVE-2024-53138, CVE-2024-50208, CVE-2024-49950, CVE-2024-53174, CVE-2024-50072, CVE-2024-45828,     CVE-2024-56759, CVE-2024-56533, CVE-2024-50117, CVE-2024-53131, CVE-2024-47707, CVE-2025-21689,     CVE-2025-21636, CVE-2024-56605, CVE-2024-57807, CVE-2024-56724, CVE-2024-57841, CVE-2024-53120,     CVE-2024-50304, CVE-2024-56748, CVE-2024-58087, CVE-2024-57917, CVE-2024-44938, CVE-2024-57896,     CVE-2024-56600, CVE-2024-57922, CVE-2024-53066, CVE-2024-56634, CVE-2024-53171, CVE-2024-56700,     CVE-2024-57939, CVE-2024-53151, CVE-2024-50202, CVE-2024-56572, CVE-2024-40965, CVE-2024-56716,     CVE-2024-46841, CVE-2024-50292, CVE-2024-57907, CVE-2024-53145, CVE-2024-50192, CVE-2024-53055,     CVE-2025-21646, CVE-2024-56690, CVE-2024-57882, CVE-2024-56576, CVE-2024-50301, CVE-2024-53059,     CVE-2024-56745, CVE-2024-57890, CVE-2024-50055, CVE-2024-56739, CVE-2024-50099, CVE-2024-50131,     CVE-2024-50194, CVE-2024-57884, CVE-2024-43900, CVE-2024-52332, CVE-2024-57931, CVE-2024-50163,     CVE-2024-53063, CVE-2024-53104, CVE-2024-57951, CVE-2025-21638, CVE-2024-53129, CVE-2024-56781,     CVE-2024-50195, CVE-2024-56548, CVE-2024-56603, CVE-2024-56586, CVE-2024-50167, CVE-2024-56648,     CVE-2024-56581, CVE-2024-53158, CVE-2024-56587, CVE-2024-49998, CVE-2024-50148, CVE-2024-56694,     CVE-2024-50110, CVE-2024-50244, CVE-2024-46784, CVE-2024-50273, CVE-2024-50116, CVE-2024-56614,     CVE-2024-50154, CVE-2024-56672, CVE-2025-21692, CVE-2024-56636, CVE-2024-56626, CVE-2024-50010,     CVE-2024-39497, CVE-2024-50101, CVE-2024-50141, CVE-2024-57791, CVE-2024-50082, CVE-2024-53226,     CVE-2024-53135, CVE-2024-50275, CVE-2024-56723, CVE-2024-53121, CVE-2024-50199, CVE-2024-56631,     CVE-2024-50083, CVE-2024-50245, CVE-2025-21687, CVE-2024-50151, CVE-2022-49034, CVE-2024-57900,     CVE-2024-53156, CVE-2024-36899, CVE-2024-50153, CVE-2024-53237, CVE-2024-56645, CVE-2024-26718,     CVE-2024-57892, CVE-2025-21653, CVE-2024-56627, CVE-2024-48881, CVE-2024-56625, CVE-2024-57850,     CVE-2024-56644, CVE-2024-56785)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.234-225.895. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-082 advisory.

    Integer Overflow or Wraparound vulnerability in Linux kernel on x86 and ARM (md, raid, raid5 modules)     allows Forced Integer Overflow. (CVE-2024-23307)

    In the Linux kernel, the following vulnerability has been resolved:

    gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (CVE-2024-47707)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (CVE-2024-50304)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix data-races around sk->sk_forward_alloc (CVE-2024-53124)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631)

    In the Linux kernel, the following vulnerability has been resolved:

    net: defer final 'struct net' free in netns dismantle (CVE-2024-56658)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CVE-2024-57929)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix the infinite loop in exfat_readdir() (CVE-2024-57940)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Handle CPU state correctly on hotplug (CVE-2024-57951)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: auth_enable: avoid using current->nsproxy (CVE-2025-21638)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: rto_min/max: avoid using current->nsproxy (CVE-2025-21639)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (CVE-2025-21640)

    In the Linux kernel, the following vulnerability has been resolved:

    afs: Fix the maximum cell name length (CVE-2025-21646)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653)

    In the Linux kernel, the following vulnerability has been resolved:

    dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CVE-2025-21666)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: discard packets if the transport changes (CVE-2025-21669)

    In the Linux kernel, the following vulnerability has been resolved:

    gtp: Destroy device along with udp socket's netns dismantle. (CVE-2025-21678)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix bpf_sk_select_reuseport() memory leak (CVE-2025-21683)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/platform: check the bounds of read/write syscalls (CVE-2025-21687)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (CVE-2025-21689)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix softlockup in __read_vmcore (part 2) (CVE-2025-21694)

    In the Linux kernel, the following vulnerability has been resolved:

    gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (CVE-2025-21699)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sk_select_reuseport()     memory leak As pointed out in the original comment, lookup in sockmap can return a TCP ESTABLISHED socket.
    Such TCP socket may have had SO_ATTACH_REUSEPORT_EBPF set before it was ESTABLISHED. In other words, a     non-NULL sk_reuseport_cb does not imply a non-refcounted socket. Drop sk's reference in both error paths.
    unreferenced object 0xffff888101911800 (size 2048): comm test_progs, pid 44109, jiffies 4297131437 hex     dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 80 00 01 00 00 00     00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 9336483b): __kmalloc_noprof+0x3bf/0x560
    __reuseport_alloc+0x1d/0x40 reuseport_alloc+0xca/0x150 reuseport_attach_prog+0x87/0x140     sk_reuseport_attach_bpf+0xc8/0x100 sk_setsockopt+0x1181/0x1990 do_sock_setsockopt+0x12b/0x160
    __sys_setsockopt+0x7b/0xc0 __x64_sys_setsockopt+0x1b/0x30 do_syscall_64+0x93/0x180     entry_SYSCALL_64_after_hwframe+0x76/0x7e (CVE-2025-21683)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4076 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4076-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.6.1.128-1~deb11u1     CVE ID         : CVE-2022-49034 CVE-2023-52916 CVE-2023-52926 CVE-2024-26595                      CVE-2024-27407 CVE-2024-35870 CVE-2024-35956 CVE-2024-36476                      CVE-2024-36479 CVE-2024-36899 CVE-2024-37021 CVE-2024-39282                      CVE-2024-41014 CVE-2024-42252 CVE-2024-42315 CVE-2024-42319                      CVE-2024-43098 CVE-2024-44950 CVE-2024-45828 CVE-2024-46809                      CVE-2024-46841 CVE-2024-46896 CVE-2024-47143 CVE-2024-47408                      CVE-2024-47745 CVE-2024-48881 CVE-2024-49571 CVE-2024-49861                      CVE-2024-49891 CVE-2024-49897 CVE-2024-49898 CVE-2024-49899                      CVE-2024-49909 CVE-2024-49911 CVE-2024-49915 CVE-2024-49917                      CVE-2024-49925 CVE-2024-49929 CVE-2024-49934 CVE-2024-49939                      CVE-2024-49951 CVE-2024-49994 CVE-2024-49996 CVE-2024-50014                      CVE-2024-50047 CVE-2024-50051 CVE-2024-50055 CVE-2024-50121                      CVE-2024-50146 CVE-2024-50164 CVE-2024-50248 CVE-2024-50258                      CVE-2024-50275 CVE-2024-50304 CVE-2024-52332 CVE-2024-53099                      CVE-2024-53105 CVE-2024-53124 CVE-2024-53125 CVE-2024-53128                      CVE-2024-53141 CVE-2024-53142 CVE-2024-53145 CVE-2024-53146                      CVE-2024-53148 CVE-2024-53150 CVE-2024-53151 CVE-2024-53154                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53165 CVE-2024-53170                      CVE-2024-53171 CVE-2024-53172 CVE-2024-53173 CVE-2024-53174                      CVE-2024-53175 CVE-2024-53180 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53190 CVE-2024-53194 CVE-2024-53196                      CVE-2024-53197 CVE-2024-53198 CVE-2024-53206 CVE-2024-53207                      CVE-2024-53208 CVE-2024-53210 CVE-2024-53213 CVE-2024-53214                      CVE-2024-53215 CVE-2024-53217 CVE-2024-53220 CVE-2024-53226                      CVE-2024-53227 CVE-2024-53229 CVE-2024-53230 CVE-2024-53231                      CVE-2024-53233 CVE-2024-53234 CVE-2024-53237 CVE-2024-53239                      CVE-2024-53240 CVE-2024-53241 CVE-2024-53680 CVE-2024-53685                      CVE-2024-53690 CVE-2024-54031 CVE-2024-55881 CVE-2024-55916                      CVE-2024-56369 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56546 CVE-2024-56548 CVE-2024-56551                      CVE-2024-56557 CVE-2024-56558 CVE-2024-56562 CVE-2024-56567                      CVE-2024-56568 CVE-2024-56569 CVE-2024-56570 CVE-2024-56572                      CVE-2024-56574 CVE-2024-56575 CVE-2024-56576 CVE-2024-56578                      CVE-2024-56579 CVE-2024-56581 CVE-2024-56582 CVE-2024-56584                      CVE-2024-56585 CVE-2024-56586 CVE-2024-56587 CVE-2024-56589                      CVE-2024-56590 CVE-2024-56593 CVE-2024-56594 CVE-2024-56595                      CVE-2024-56596 CVE-2024-56597 CVE-2024-56598 CVE-2024-56599                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56604 CVE-2024-56605 CVE-2024-56606 CVE-2024-56608                      CVE-2024-56610 CVE-2024-56614 CVE-2024-56615 CVE-2024-56616                      CVE-2024-56619 CVE-2024-56622 CVE-2024-56623 CVE-2024-56625                      CVE-2024-56626 CVE-2024-56627 CVE-2024-56628 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56640 CVE-2024-56642                      CVE-2024-56643 CVE-2024-56644 CVE-2024-56645 CVE-2024-56648                      CVE-2024-56650 CVE-2024-56651 CVE-2024-56658 CVE-2024-56659                      CVE-2024-56660 CVE-2024-56661 CVE-2024-56662 CVE-2024-56663                      CVE-2024-56664 CVE-2024-56665 CVE-2024-56670 CVE-2024-56672                      CVE-2024-56675 CVE-2024-56677 CVE-2024-56678 CVE-2024-56679                      CVE-2024-56681 CVE-2024-56683 CVE-2024-56687 CVE-2024-56688                      CVE-2024-56690 CVE-2024-56691 CVE-2024-56693 CVE-2024-56694                      CVE-2024-56698 CVE-2024-56700 CVE-2024-56701 CVE-2024-56703                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56707 CVE-2024-56708                      CVE-2024-56709 CVE-2024-56715 CVE-2024-56716 CVE-2024-56717                      CVE-2024-56718 CVE-2024-56720 CVE-2024-56722 CVE-2024-56723                      CVE-2024-56724 CVE-2024-56725 CVE-2024-56726 CVE-2024-56727                      CVE-2024-56728 CVE-2024-56739 CVE-2024-56741 CVE-2024-56745                      CVE-2024-56746 CVE-2024-56747 CVE-2024-56748 CVE-2024-56751                      CVE-2024-56754 CVE-2024-56755 CVE-2024-56756 CVE-2024-56759                      CVE-2024-56763 CVE-2024-56765 CVE-2024-56766 CVE-2024-56767                      CVE-2024-56769 CVE-2024-56770 CVE-2024-56774 CVE-2024-56776                      CVE-2024-56777 CVE-2024-56778 CVE-2024-56779 CVE-2024-56780                      CVE-2024-56781 CVE-2024-56783 CVE-2024-56785 CVE-2024-56787                      CVE-2024-57791 CVE-2024-57792 CVE-2024-57798 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57838 CVE-2024-57841 CVE-2024-57849                      CVE-2024-57850 CVE-2024-57874 CVE-2024-57876 CVE-2024-57882                      CVE-2024-57884 CVE-2024-57887 CVE-2024-57889 CVE-2024-57890                      CVE-2024-57892 CVE-2024-57893 CVE-2024-57894 CVE-2024-57896                      CVE-2024-57897 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57903 CVE-2024-57904 CVE-2024-57906 CVE-2024-57907                      CVE-2024-57908 CVE-2024-57910 CVE-2024-57911 CVE-2024-57912                      CVE-2024-57913 CVE-2024-57916 CVE-2024-57917 CVE-2024-57922                      CVE-2024-57925 CVE-2024-57929 CVE-2024-57930 CVE-2024-57931                      CVE-2024-57938 CVE-2024-57939 CVE-2024-57940 CVE-2024-57946                      CVE-2024-57948 CVE-2024-57949 CVE-2024-57951 CVE-2025-21629                      CVE-2025-21631 CVE-2025-21636 CVE-2025-21637 CVE-2025-21638                      CVE-2025-21639 CVE-2025-21640 CVE-2025-21646 CVE-2025-21647                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21655 CVE-2025-21660                      CVE-2025-21662 CVE-2025-21664 CVE-2025-21665 CVE-2025-21666                      CVE-2025-21667 CVE-2025-21668 CVE-2025-21669 CVE-2025-21671                      CVE-2025-21675 CVE-2025-21678 CVE-2025-21680 CVE-2025-21681                      CVE-2025-21683 CVE-2025-21687 CVE-2025-21688 CVE-2025-21689                      CVE-2025-21690 CVE-2025-21692 CVE-2025-21694 CVE-2025-21697                      CVE-2025-21699

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.6.1.128-1~deb11u1.  This additionally includes many more bug fixes     from stable updates 6.1.120-6.1.128 inclusive.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4075 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4075-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     March 01, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.234-1     CVE ID         : CVE-2021-47469 CVE-2023-52530 CVE-2023-52917 CVE-2024-26921                      CVE-2024-27017 CVE-2024-27072 CVE-2024-35965 CVE-2024-35966                      CVE-2024-36476 CVE-2024-36899 CVE-2024-38538 CVE-2024-38544                      CVE-2024-38588 CVE-2024-38591 CVE-2024-39497 CVE-2024-40953                      CVE-2024-41016 CVE-2024-41060 CVE-2024-41080 CVE-2024-42315                      CVE-2024-43098 CVE-2024-44931 CVE-2024-44940 CVE-2024-46695                      CVE-2024-46809 CVE-2024-46841 CVE-2024-46849 CVE-2024-46853                      CVE-2024-46854 CVE-2024-46858 CVE-2024-46865 CVE-2024-47143                      CVE-2024-47670 CVE-2024-47671 CVE-2024-47672 CVE-2024-47674                      CVE-2024-47679 CVE-2024-47684 CVE-2024-47685 CVE-2024-47692                      CVE-2024-47696 CVE-2024-47697 CVE-2024-47698 CVE-2024-47699                      CVE-2024-47701 CVE-2024-47705 CVE-2024-47706 CVE-2024-47707                      CVE-2024-47709 CVE-2024-47710 CVE-2024-47712 CVE-2024-47713                      CVE-2024-47718 CVE-2024-47723 CVE-2024-47735 CVE-2024-47737                      CVE-2024-47739 CVE-2024-47740 CVE-2024-47742 CVE-2024-47748                      CVE-2024-47749 CVE-2024-47756 CVE-2024-47757 CVE-2024-48881                      CVE-2024-49851 CVE-2024-49858 CVE-2024-49860 CVE-2024-49863                      CVE-2024-49867 CVE-2024-49868 CVE-2024-49875 CVE-2024-49877                      CVE-2024-49878 CVE-2024-49879 CVE-2024-49881 CVE-2024-49882                      CVE-2024-49883 CVE-2024-49884 CVE-2024-49889 CVE-2024-49890                      CVE-2024-49892 CVE-2024-49894 CVE-2024-49895 CVE-2024-49896                      CVE-2024-49900 CVE-2024-49902 CVE-2024-49903 CVE-2024-49907                      CVE-2024-49913 CVE-2024-49930 CVE-2024-49933 CVE-2024-49936                      CVE-2024-49938 CVE-2024-49944 CVE-2024-49948 CVE-2024-49949                      CVE-2024-49952 CVE-2024-49955 CVE-2024-49957 CVE-2024-49958                      CVE-2024-49959 CVE-2024-49962 CVE-2024-49963 CVE-2024-49965                      CVE-2024-49966 CVE-2024-49969 CVE-2024-49973 CVE-2024-49974                      CVE-2024-49975 CVE-2024-49977 CVE-2024-49981 CVE-2024-49982                      CVE-2024-49983 CVE-2024-49985 CVE-2024-49995 CVE-2024-49996                      CVE-2024-50001 CVE-2024-50006 CVE-2024-50007 CVE-2024-50008                      CVE-2024-50010 CVE-2024-50013 CVE-2024-50015 CVE-2024-50024                      CVE-2024-50033 CVE-2024-50035 CVE-2024-50036 CVE-2024-50039                      CVE-2024-50040 CVE-2024-50044 CVE-2024-50045 CVE-2024-50046                      CVE-2024-50049 CVE-2024-50055 CVE-2024-50058 CVE-2024-50059                      CVE-2024-50072 CVE-2024-50074 CVE-2024-50082 CVE-2024-50083                      CVE-2024-50095 CVE-2024-50096 CVE-2024-50099 CVE-2024-50103                      CVE-2024-50115 CVE-2024-50116 CVE-2024-50117 CVE-2024-50121                      CVE-2024-50127 CVE-2024-50131 CVE-2024-50134 CVE-2024-50142                      CVE-2024-50148 CVE-2024-50150 CVE-2024-50151 CVE-2024-50153                      CVE-2024-50167 CVE-2024-50171 CVE-2024-50179 CVE-2024-50180                      CVE-2024-50181 CVE-2024-50184 CVE-2024-50185 CVE-2024-50188                      CVE-2024-50192 CVE-2024-50193 CVE-2024-50194 CVE-2024-50195                      CVE-2024-50198 CVE-2024-50199 CVE-2024-50201 CVE-2024-50202                      CVE-2024-50205 CVE-2024-50208 CVE-2024-50209 CVE-2024-50210                      CVE-2024-50218 CVE-2024-50229 CVE-2024-50230 CVE-2024-50233                      CVE-2024-50234 CVE-2024-50236 CVE-2024-50237 CVE-2024-50251                      CVE-2024-50262 CVE-2024-50264 CVE-2024-50265 CVE-2024-50267                      CVE-2024-50268 CVE-2024-50269 CVE-2024-50273 CVE-2024-50278                      CVE-2024-50279 CVE-2024-50282 CVE-2024-50287 CVE-2024-50290                      CVE-2024-50292 CVE-2024-50295 CVE-2024-50296 CVE-2024-50299                      CVE-2024-50301 CVE-2024-50302 CVE-2024-50304 CVE-2024-52332                      CVE-2024-53042 CVE-2024-53052 CVE-2024-53057 CVE-2024-53059                      CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066                      CVE-2024-53096 CVE-2024-53097 CVE-2024-53099 CVE-2024-53101                      CVE-2024-53103 CVE-2024-53104 CVE-2024-53112 CVE-2024-53119                      CVE-2024-53121 CVE-2024-53124 CVE-2024-53125 CVE-2024-53127                      CVE-2024-53130 CVE-2024-53131 CVE-2024-53135 CVE-2024-53136                      CVE-2024-53138 CVE-2024-53140 CVE-2024-53141 CVE-2024-53142                      CVE-2024-53145 CVE-2024-53146 CVE-2024-53148 CVE-2024-53150                      CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158                      CVE-2024-53161 CVE-2024-53164 CVE-2024-53171 CVE-2024-53172                      CVE-2024-53173 CVE-2024-53174 CVE-2024-53181 CVE-2024-53183                      CVE-2024-53184 CVE-2024-53194 CVE-2024-53197 CVE-2024-53198                      CVE-2024-53214 CVE-2024-53217 CVE-2024-53226 CVE-2024-53227                      CVE-2024-53237 CVE-2024-53239 CVE-2024-53240 CVE-2024-53241                      CVE-2024-53680 CVE-2024-53685 CVE-2024-53690 CVE-2024-54031                      CVE-2024-55916 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533                      CVE-2024-56539 CVE-2024-56548 CVE-2024-56558 CVE-2024-56562                      CVE-2024-56567 CVE-2024-56568 CVE-2024-56569 CVE-2024-56570                      CVE-2024-56574 CVE-2024-56576 CVE-2024-56581 CVE-2024-56586                      CVE-2024-56587 CVE-2024-56589 CVE-2024-56593 CVE-2024-56594                      CVE-2024-56595 CVE-2024-56596 CVE-2024-56597 CVE-2024-56598                      CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603                      CVE-2024-56605 CVE-2024-56606 CVE-2024-56610 CVE-2024-56615                      CVE-2024-56616 CVE-2024-56619 CVE-2024-56623 CVE-2024-56629                      CVE-2024-56630 CVE-2024-56631 CVE-2024-56633 CVE-2024-56634                      CVE-2024-56636 CVE-2024-56637 CVE-2024-56642 CVE-2024-56643                      CVE-2024-56644 CVE-2024-56645 CVE-2024-56648 CVE-2024-56650                      CVE-2024-56659 CVE-2024-56661 CVE-2024-56662 CVE-2024-56670                      CVE-2024-56672 CVE-2024-56681 CVE-2024-56688 CVE-2024-56690                      CVE-2024-56691 CVE-2024-56694 CVE-2024-56698 CVE-2024-56700                      CVE-2024-56704 CVE-2024-56705 CVE-2024-56716 CVE-2024-56720                      CVE-2024-56723 CVE-2024-56724 CVE-2024-56728 CVE-2024-56739                      CVE-2024-56741 CVE-2024-56747 CVE-2024-56748 CVE-2024-56754                      CVE-2024-56756 CVE-2024-56759 CVE-2024-56763 CVE-2024-56766                      CVE-2024-56767 CVE-2024-56769 CVE-2024-56770 CVE-2024-56779                      CVE-2024-56780 CVE-2024-57791 CVE-2024-57792 CVE-2024-57802                      CVE-2024-57807 CVE-2024-57850 CVE-2024-57874 CVE-2024-57884                      CVE-2024-57887 CVE-2024-57889 CVE-2024-57890 CVE-2024-57892                      CVE-2024-57896 CVE-2024-57900 CVE-2024-57901 CVE-2024-57902                      CVE-2024-57904 CVE-2024-57906 CVE-2024-57907 CVE-2024-57908                      CVE-2024-57910 CVE-2024-57911 CVE-2024-57912 CVE-2024-57913                      CVE-2024-57922 CVE-2024-57929 CVE-2024-57931 CVE-2024-57938                      CVE-2024-57940 CVE-2024-57946 CVE-2024-57948 CVE-2024-57951                      CVE-2025-21638 CVE-2025-21639 CVE-2025-21640 CVE-2025-21646                      CVE-2025-21648 CVE-2025-21653 CVE-2025-21664 CVE-2025-21666                      CVE-2025-21669 CVE-2025-21678 CVE-2025-21683 CVE-2025-21687                      CVE-2025-21688 CVE-2025-21689 CVE-2025-21692 CVE-2025-21694                      CVE-2025-21697 CVE-2025-21699     Debian Bug     : 1082001

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.234-1.  This additionally includes many more bug fixes from     stable updates 5.10.227-5.10.234 inclusive.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.15.178-120.178. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-063 advisory.

    Integer Overflow or Wraparound vulnerability in Linux kernel on x86 and ARM (md, raid, raid5 modules)     allows Forced Integer Overflow. (CVE-2024-23307)

    In the Linux kernel, the following vulnerability has been resolved:

    Bluetooth: RFCOMM: Fix not validating setsockopt user input (CVE-2024-35966)

    In the Linux kernel, the following vulnerability has been resolved:

    gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (CVE-2024-47707)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix timer use-after-free on failed mount (CVE-2024-49960)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (CVE-2024-50304)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix data-races around sk->sk_forward_alloc (CVE-2024-53124)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix TCP options overflow. (CVE-2024-57882)

    In the Linux kernel, the following vulnerability has been resolved:

    topology: Keep the cpumask unchanged when printing cpumap (CVE-2024-57917)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CVE-2024-57929)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix the infinite loop in exfat_readdir() (CVE-2024-57940)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Handle CPU state correctly on hotplug (CVE-2024-57951)

    In the Linux kernel, the following vulnerability has been resolved:

    block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (CVE-2025-21636)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: udp_port: avoid using current->nsproxy (CVE-2025-21637)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: auth_enable: avoid using current->nsproxy (CVE-2025-21638)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: rto_min/max: avoid using current->nsproxy (CVE-2025-21639)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (CVE-2025-21640)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653)

    In the Linux kernel, the following vulnerability has been resolved:

    dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664)

    In the Linux kernel, the following vulnerability has been resolved:

    filemap: avoid truncating 64-bit offset to 32 bits (CVE-2025-21665)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CVE-2025-21666)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: discard packets if the transport changes (CVE-2025-21669)

    In the Linux kernel, the following vulnerability has been resolved:

    gtp: Destroy device along with udp socket's netns dismantle. (CVE-2025-21678)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix bpf_sk_select_reuseport() memory leak (CVE-2025-21683)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (CVE-2025-21690)

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: fix ets qdisc OOB Indexing (CVE-2025-21692)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix softlockup in __read_vmcore (part 2) (CVE-2025-21694)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5860 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5860-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     February 08, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-36899 CVE-2024-49994 CVE-2024-50014 CVE-2024-50047                      CVE-2024-50164 CVE-2024-50304 CVE-2024-53124 CVE-2024-53128                      CVE-2024-53170 CVE-2024-53229 CVE-2024-53234 CVE-2024-53685                      CVE-2024-56551 CVE-2024-56599 CVE-2024-56608 CVE-2024-56631                      CVE-2024-56664 CVE-2024-56703 CVE-2024-57887 CVE-2024-57892                      CVE-2024-57904 CVE-2024-57906 CVE-2024-57907 CVE-2024-57908                      CVE-2024-57910 CVE-2024-57911 CVE-2024-57912 CVE-2024-57913                      CVE-2024-57915 CVE-2024-57916 CVE-2024-57917 CVE-2024-57922                      CVE-2024-57925 CVE-2024-57929 CVE-2024-57939 CVE-2024-57940                      CVE-2024-57948 CVE-2025-21631 CVE-2025-21636 CVE-2025-21637                      CVE-2025-21638 CVE-2025-21639 CVE-2025-21640 CVE-2025-21646                      CVE-2025-21647 CVE-2025-21648 CVE-2025-21653 CVE-2025-21655                      CVE-2025-21660 CVE-2025-21662 CVE-2025-21664 CVE-2025-21665                      CVE-2025-21666 CVE-2025-21667 CVE-2025-21668 CVE-2025-21669                      CVE-2025-21671 CVE-2025-21675 CVE-2025-21678 CVE-2025-21680                      CVE-2025-21681 CVE-2025-21683

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.128-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-823 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix overloading of MEM_UNINIT's meaning (CVE-2024-50164)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Add rough attr alloc_size check (CVE-2024-50246)

    In the Linux kernel, the following vulnerability has been resolved:

    net: fix data-races around sk->sk_forward_alloc (CVE-2024-53124)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers (CVE-2024-53128)

    In the Linux kernel, the following vulnerability has been resolved:

    block: fix uaf for flush rq while iterating tags (CVE-2024-53170)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: Fix race between element replace and close() (CVE-2024-56664)

    In the Linux kernel, the following vulnerability has been resolved:

    topology: Keep the cpumask unchanged when printing cpumap (CVE-2024-57917)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CVE-2024-57929)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix the infinite loop in exfat_readdir() (CVE-2024-57940)

    In the Linux kernel, the following vulnerability has been resolved:

    irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (CVE-2024-57949)

    In the Linux kernel, the following vulnerability has been resolved:

    hrtimers: Handle CPU state correctly on hotplug (CVE-2024-57951)

    In the Linux kernel, the following vulnerability has been resolved:

    block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (CVE-2025-21636)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: udp_port: avoid using current->nsproxy (CVE-2025-21637)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: auth_enable: avoid using current->nsproxy (CVE-2025-21638)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: rto_min/max: avoid using current->nsproxy (CVE-2025-21639)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (CVE-2025-21640)

    In the Linux kernel, the following vulnerability has been resolved:

    sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

    In the Linux kernel, the following vulnerability has been resolved:

    net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Fix variable not being completed when function returns (CVE-2025-21662)

    In the Linux kernel, the following vulnerability has been resolved:

    dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664)

    In the Linux kernel, the following vulnerability has been resolved:

    filemap: avoid truncating 64-bit offset to 32 bits (CVE-2025-21665)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CVE-2025-21666)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: discard packets if the transport changes (CVE-2025-21669)

    In the Linux kernel, the following vulnerability has been resolved:

    zram: fix potential UAF of zram table (CVE-2025-21671)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: Clear port select structure when fail to create (CVE-2025-21675)

    In the Linux kernel, the following vulnerability has been resolved:

    gtp: Destroy device along with udp socket's netns dismantle. (CVE-2025-21678)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: fix lockup on tx to unregistering netdev with carrier (CVE-2025-21681)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Fix bpf_sk_select_reuseport() memory leak (CVE-2025-21683)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/proc: fix softlockup in __read_vmcore (part 2) (CVE-2025-21694)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234161	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1359)	Nessus	Huawei Local Security Checks	high
234145	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1360)	Nessus	Huawei Local Security Checks	high
233966	Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7421-1)	Nessus	Ubuntu Local Security Checks	high
233784	Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7407-1)	Nessus	Ubuntu Local Security Checks	high
233481	Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7390-1)	Nessus	Ubuntu Local Security Checks	high
233478	Ubuntu 22.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-7389-1)	Nessus	Ubuntu Local Security Checks	high
233468	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7387-1)	Nessus	Ubuntu Local Security Checks	high
233467	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7388-1)	Nessus	Ubuntu Local Security Checks	high
232712	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2025-082)	Nessus	Amazon Linux Local Security Checks	high
231679	Linux Distros Unpatched Vulnerability : CVE-2025-21683	Nessus	Misc.	medium
216985	Debian dla-4076 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	high
216984	Debian dla-4075 : ata-modules-5.10.0-29-armmp-di - security update	Nessus	Debian Local Security Checks	critical
216819	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-063)	Nessus	Amazon Linux Local Security Checks	high
215225	Photon OS 4.0: Linux PHSA-2025-4.0-0750	Nessus	PhotonOS Local Security Checks	high
215144	Debian dsa-5860 : affs-modules-6.1.0-21-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high
215034	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-823)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2025-21683

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

medium

high

critical

high

high

high

high