The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip     expired elements during walk There is an asymmetry between commit/abort and preparation phase if the     following conditions are met: 1. set is a verdict map (1.2.3.4 : jump foo) 2. timeouts are enabled In     this case, following sequence is problematic: 1. element E in set S refers to chain C 2. userspace     requests removal of set S 3. kernel does a set walk to decrement chain->use count for all elements from     preparation phase 4. kernel does another set walk to remove elements from the commit phase (or another     walk to do a chain->use increment for all elements from abort phase) If E has already expired in 1), it     will be ignored during list walk, so its use count won't have been changed. Then, when set is culled,
    ->destroy callback will zap the element via nf_tables_set_elem_destroy(), but this function is only safe     for elements that have been deactivated earlier from the preparation phase: lack of earlier deactivate     removes the element but leaks the chain use count, which results in a WARN splat when the chain gets     removed later, plus a leak of the nft_chain structure. Update pipapo_get() not to skip expired elements,     otherwise flush command reports bogus ENOENT errors. (CVE-2023-52924)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0784-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security     bugfixes.


    The following security bugs were fixed:

    - CVE-2024-26708: mptcp: fastopen and PM-trigger subflow shutdown can race (bsc#1222672).
    - CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
    - CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
    - CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
    - CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
    - CVE-2024-50185: mptcp: handle consistently DSS corruption (bsc#1233109).
    - CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
    - CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
    - CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
    - CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
    - CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
    - CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
    - CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
    - CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
    - CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
    - CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
    - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
    - CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
    - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
    - CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
226643	Linux Distros Unpatched Vulnerability : CVE-2023-52924	Nessus	Misc.	3/5/2025	3/5/2025	medium
232209	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:0784-1)	Nessus	SuSE Local Security Checks	3/6/2025	3/6/2025	high

Detections

Analytics

Plugins Search

medium

high