The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5938-1 advisory.

    It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly     handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability.
    A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2023-0461)

    Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel did not properly handle VLAN     headers in some situations. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2023-0179)

    It was discovered that the NVMe driver in the Linux kernel did not properly handle reset events in some     situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3169)

    Maxim Levitsky discovered that the KVM nested virtualization (SVM) implementation for AMD processors in     the Linux kernel did not properly handle nested shutdown execution. An attacker in a guest vm could use     this to cause a denial of service (host kernel crash) (CVE-2022-3344)

    Gwangun Jung discovered a race condition in the IPv4 implementation in the Linux kernel when deleting     multipath routes, resulting in an out-of-bounds read. An attacker could use this to cause a denial of     service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-3435)

    It was discovered that a race condition existed in the Kernel Connection Multiplexor (KCM) socket     implementation in the Linux kernel when releasing sockets in certain situations. A local attacker could     use this to cause a denial of service (system crash). (CVE-2022-3521)

    It was discovered that the Netronome Ethernet driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-3545)

    It was discovered that the Intel i915 graphics driver in the Linux kernel did not perform a GPU TLB flush     in some situations. A local attacker could use this to cause a denial of service or possibly execute     arbitrary code. (CVE-2022-4139)

    It was discovered that a race condition existed in the Xen network backend driver in the Linux kernel when     handling dropped packets in certain circumstances. An attacker could use this to cause a denial of service     (kernel deadlock). (CVE-2022-42328, CVE-2022-42329)

    It was discovered that the NFSD implementation in the Linux kernel contained a use-after-free     vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash) or     execute arbitrary code. (CVE-2022-4379)

    It was discovered that a race condition existed in the x86 KVM subsystem implementation in the Linux     kernel when nested virtualization and the TDP MMU are enabled. An attacker in a guest vm could use this to     cause a denial of service (host OS crash). (CVE-2022-45869)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate the number     of channels, leading to an out-of-bounds write vulnerability. An attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-47518)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate specific     attributes, leading to an out-of-bounds write vulnerability. An attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-47519)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate offsets,     leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service     (system crash). (CVE-2022-47520)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate specific     attributes, leading to a heap-based buffer overflow. An attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2022-47521)

    Lin Ma discovered a race condition in the io_uring subsystem in the Linux kernel, leading to a null     pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system     crash). (CVE-2023-0468)

    It was discovered that the file system writeback functionality in the Linux kernel contained a user-after-     free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash)     or execute arbitrary code. (CVE-2023-26605)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5962-1 advisory.

    It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly     handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability.
    A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2023-0461)

    Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel did not properly handle VLAN     headers in some situations. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2023-0179)

    It was discovered that the NVMe driver in the Linux kernel did not properly handle reset events in some     situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3169)

    Maxim Levitsky discovered that the KVM nested virtualization (SVM) implementation for AMD processors in     the Linux kernel did not properly handle nested shutdown execution. An attacker in a guest vm could use     this to cause a denial of service (host kernel crash) (CVE-2022-3344)

    Gwangun Jung discovered a race condition in the IPv4 implementation in the Linux kernel when deleting     multipath routes, resulting in an out-of-bounds read. An attacker could use this to cause a denial of     service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-3435)

    It was discovered that a race condition existed in the Kernel Connection Multiplexor (KCM) socket     implementation in the Linux kernel when releasing sockets in certain situations. A local attacker could     use this to cause a denial of service (system crash). (CVE-2022-3521)

    It was discovered that the Netronome Ethernet driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-3545)

    It was discovered that the Intel i915 graphics driver in the Linux kernel did not perform a GPU TLB flush     in some situations. A local attacker could use this to cause a denial of service or possibly execute     arbitrary code. (CVE-2022-4139)

    It was discovered that a race condition existed in the Xen network backend driver in the Linux kernel when     handling dropped packets in certain circumstances. An attacker could use this to cause a denial of service     (kernel deadlock). (CVE-2022-42328, CVE-2022-42329)

    It was discovered that the NFSD implementation in the Linux kernel contained a use-after-free     vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash) or     execute arbitrary code. (CVE-2022-4379)

    It was discovered that a race condition existed in the x86 KVM subsystem implementation in the Linux     kernel when nested virtualization and the TDP MMU are enabled. An attacker in a guest vm could use this to     cause a denial of service (host OS crash). (CVE-2022-45869)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate the number     of channels, leading to an out-of-bounds write vulnerability. An attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-47518)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate specific     attributes, leading to an out-of-bounds write vulnerability. An attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-47519)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate offsets,     leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service     (system crash). (CVE-2022-47520)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate specific     attributes, leading to a heap-based buffer overflow. An attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2022-47521)

    Lin Ma discovered a race condition in the io_uring subsystem in the Linux kernel, leading to a null     pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system     crash). (CVE-2023-0468)

    It was discovered that the file system writeback functionality in the Linux kernel contained a user-after-     free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash)     or execute arbitrary code. (CVE-2023-26605)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0979 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

    * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)

    * kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service     attack (CVE-2022-4379)

    * kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179)

    * kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest RHEL-9.1.z2 Batch (BZ#2160463)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0951 advisory.

  - An out-of-bounds memory access flaw was found in the Linux kernel Intel's iSMT SMBus host controller     driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input     data. This flaw allows a local user to crash the system. (CVE-2022-2873)

  - A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the     function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The     manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated     identifier of this vulnerability is VDB-211087. (CVE-2022-3564)

  - A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain     kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their     privileges on the system. (CVE-2022-4378)

  - A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel.
    This flaw allows an attacker to conduct a remote denial (CVE-2022-4379)

  - kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan (CVE-2023-0179)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1195-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
    - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
    - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
    - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
    - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
    - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
    - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (bsc#1237890).
    - CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (bsc#1237877).
    - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
    - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
172366	Ubuntu 22.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5938-1)	Nessus	Ubuntu Local Security Checks	3/9/2023	8/27/2024	high
172619	Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-5962-1)	Nessus	Ubuntu Local Security Checks	3/16/2023	8/27/2024	high
171968	RHEL 9 : kernel-rt (RHSA-2023:0979)	Nessus	Red Hat Local Security Checks	2/28/2023	3/6/2025	high
172003	AlmaLinux 9 : kernel (ALSA-2023:0951)	Nessus	Alma Linux Local Security Checks	2/28/2023	9/1/2023	high
178457	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:2871-1)	Nessus	SuSE Local Security Checks	7/19/2023	3/4/2024	high
234182	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:1195-1)	Nessus	SuSE Local Security Checks	4/11/2025	4/11/2025	high
502948	Siemens SIMATIC S7-1500 TM MFP BIOS Integer Overflow or Wraparound (CVE-2023-0179)	Tenable OT Security	Tenable.ot	2/25/2025	2/26/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high