The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:2627 advisory.

    * kernel: ACPI: extlog: fix NULL pointer dereference check (CVE-2023-52605)
      * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (CVE-2024-50264)
      * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302)
      * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922)
      * kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (CVE-2024-53113)
      * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices     (CVE-2024-53197)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9 : kernel (ALSA-2025:2627)

high Nessus Plugin ID 232729

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Apr 10, 2025, 3:52 PM CISA reference Plugin Feed: 202504101552
Version 1.2 Apr 10, 2025, 7:20 AM CISA reference Plugin Feed: 202504100720
Version 1.1 Mar 15, 2025, 2:36 AM New Plugin Feed: 202503150236