In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6926-3 advisory.

     discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel did not     properly handle certain memory allocation failure conditions, leading to a null pointer dereference     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-46343)

    It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when     modifying certain settings values through debugfs. A privileged local attacker could use this to cause a     denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

    Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did     not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this     to cause a denial of service (system crash). (CVE-2024-25739)

    Supraja Sridhara, Benedict Schlter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the     Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit     emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service     (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - MTD block device drivers;

    - Network drivers;

    - TTY drivers;

    - USB subsystem;

    - File systems infrastructure;

    - F2FS file system;

    - SMB network file system;

    - BPF subsystem;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Netfilter;

    - Unix domain sockets;

    - AppArmor security module; (CVE-2023-52435, CVE-2024-27013, CVE-2024-35984, CVE-2023-52620,     CVE-2024-35997, CVE-2023-52436, CVE-2024-26884, CVE-2024-26901, CVE-2023-52469, CVE-2024-35978,     CVE-2024-26886, CVE-2024-35982, CVE-2024-36902, CVE-2024-26857, CVE-2024-26923, CVE-2023-52443,     CVE-2024-27020, CVE-2024-36016, CVE-2024-26840, CVE-2024-26934, CVE-2023-52449, CVE-2024-26882,     CVE-2023-52444, CVE-2023-52752)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6926-2 advisory.

     discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel did not     properly handle certain memory allocation failure conditions, leading to a null pointer dereference     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-46343)

    It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when     modifying certain settings values through debugfs. A privileged local attacker could use this to cause a     denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

    Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did     not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this     to cause a denial of service (system crash). (CVE-2024-25739)

    Supraja Sridhara, Benedict Schlter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the     Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit     emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service     (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - MTD block device drivers;

    - Network drivers;

    - TTY drivers;

    - USB subsystem;

    - File systems infrastructure;

    - F2FS file system;

    - SMB network file system;

    - BPF subsystem;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Netfilter;

    - Unix domain sockets;

    - AppArmor security module; (CVE-2024-26884, CVE-2024-26882, CVE-2024-26923, CVE-2024-26840,     CVE-2023-52435, CVE-2024-35984, CVE-2024-26886, CVE-2023-52752, CVE-2023-52436, CVE-2024-36016,     CVE-2024-26857, CVE-2024-36902, CVE-2023-52443, CVE-2024-35997, CVE-2024-35982, CVE-2023-52469,     CVE-2024-27020, CVE-2024-35978, CVE-2024-26934, CVE-2024-27013, CVE-2023-52449, CVE-2024-26901,     CVE-2023-52444, CVE-2023-52620)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6926-1 advisory.

     discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel did not     properly handle certain memory allocation failure conditions, leading to a null pointer dereference     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-46343)

    It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when     modifying certain settings values through debugfs. A privileged local attacker could use this to cause a     denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

    Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did     not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this     to cause a denial of service (system crash). (CVE-2024-25739)

    Supraja Sridhara, Benedict Schlter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the     Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit     emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service     (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - GPU drivers;

    - HID subsystem;

    - I2C subsystem;

    - MTD block device drivers;

    - Network drivers;

    - TTY drivers;

    - USB subsystem;

    - File systems infrastructure;

    - F2FS file system;

    - SMB network file system;

    - BPF subsystem;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Netfilter;

    - Unix domain sockets;

    - AppArmor security module; (CVE-2023-52435, CVE-2024-27013, CVE-2024-35984, CVE-2023-52620,     CVE-2024-35997, CVE-2023-52436, CVE-2024-26884, CVE-2024-26901, CVE-2023-52469, CVE-2024-35978,     CVE-2024-26886, CVE-2024-35982, CVE-2024-36902, CVE-2024-26857, CVE-2024-26923, CVE-2023-52443,     CVE-2024-27020, CVE-2024-36016, CVE-2024-26840, CVE-2024-26934, CVE-2023-52449, CVE-2024-26882,     CVE-2023-52444, CVE-2023-52752)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3618 advisory.

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption     operation (CVE-2023-6240)

    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()     (CVE-2024-0340)

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer     that cause loop forever (CVE-2024-26603)

    * kernel: use after free in i2c (CVE-2019-25162)

    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()     (CVE-2020-36777)

    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors     (CVE-2023-52477)

    * kernel: mtd: require write permissions for locking and badblock ioctls     (CVE-2021-47055)

    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump     (CVE-2024-26615)

    * kernel: vt: fix memory overlapping when deleting chars in the buffer     (CVE-2022-48627)

    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu()     (CVE-2023-52565)

    * kernel: net: bridge: data races indata-races in br_handle_frame_finish()     (CVE-2023-52578)

    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg     (CVE-2023-52528)

    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)

    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags     (CVE-2023-52610)

    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set     with timeout (CVE-2024-26643)

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag     (CVE-2024-26642)

    * kernel: i2c: i801: Don't generate an interrupt on bus reset     (CVE-2021-47153)

    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly     (CVE-2024-26659)

    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit     (CVE-2024-26779)

    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter     (CVE-2024-26744)

    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc     (CVE-2021-47185)

    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak     (CVE-2024-26901)

    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully     setup (CVE-2024-26872)

    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface()     (CVE-2024-26934)

    * kernel: USB: core: Fix deadlock in port disable sysfs attribute     (CVE-2024-26933)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()     (CVE-2024-26993)

    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command     (CVE-2024-27059)

    * kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)

    * kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)

    * kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)

    * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)

    * kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()     (CVE-2023-52594)

    * kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3627 advisory.

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever     (CVE-2024-26603)

    * kernel: use after free in i2c (CVE-2019-25162)

    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)

    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)

    * kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)

    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)

    * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)

    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)

    * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)

    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)

    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)

    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout     (CVE-2024-26643)

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

    * kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)

    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)

    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)

    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)

    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)

    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)

    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)

    * kernel: USB: core: Fix deadlock in port disable sysfs attribute (CVE-2024-26933)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-34640)

    * kernel-rt: epoll_wait not reporting catching all events to application (JIRA:Rocky Linux-23022)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3618 advisory.

    - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439}
    - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013}
    - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150]     {CVE-2024-27048}
    - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140]     {CVE-2024-27052}
    - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130]     {CVE-2024-27056}
    - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866]     {CVE-2024-26892}
    - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos     Martinez) [RHEL-34189] {CVE-2024-26897}
    - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547]     {CVE-2024-26693}
    - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694}
    - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos     Martinez) [RHEL-29089] {CVE-2023-52594}
    - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093]     {CVE-2023-52595}
    - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610}
    - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014}
    - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311]     {CVE-2021-47171}
    - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171}
    - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter)     [RHEL-30076] {CVE-2024-26643}
    - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080]     {CVE-2024-26642}
    - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307}
    - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919}
    - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213]     {CVE-2022-48669}
    - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122]     {CVE-2024-27059}
    - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934}
    - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964}
    - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076]     {CVE-2024-26993}
    - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659}
    - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297]     {CVE-2024-26659}
    - USB: core: Fix deadlock in port disable sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933}
    - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933}
    - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087]     {CVE-2024-25744}
    - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
    - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087]     {CVE-2024-25744}
    - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087]     {CVE-2024-25744}
    - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
    - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
    - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
    - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598}
    - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746]     {CVE-2024-26615}
    - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664]     {CVE-2024-26779}
    - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585]     {CVE-2021-47055}
    - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055}
    - pid: take a reference when initializing  (Waiman Long) [RHEL-29420] {CVE-2021-47118}
    - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153}
    - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224]     {CVE-2024-26872}
    - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108]     {CVE-2024-26973}
    - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186]     {CVE-2024-26901}
    - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590]     {CVE-2021-47185}
    - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744}
    - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743}
    - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664}
    - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
    - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989]     {CVE-2023-52578}
    - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
    - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610}
    - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez)     [RHEL-28015] {CVE-2023-52528     }
    - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118]     {CVE-2023-52607}
    - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606}
    - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986]     {CVE-2023-52477}
    - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565}
    - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445}
    - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593}
    - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254]     {CVE-2020-36777}
    - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162}
    - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934}
    - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520}
    - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340}
    - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513}
    - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779]     {CVE-2022-48627}
    - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669]     {CVE-2024-26603}
    - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782}
    - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240}
    - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114]     {CVE-2023-6240}
    - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3627 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever     (CVE-2024-26603)

    * kernel: use after free in i2c (CVE-2019-25162)

    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)

    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)

    * kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)

    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)

    * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)

    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)

    * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)

    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)

    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)

    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout     (CVE-2024-26643)

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

    * kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)

    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)

    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)

    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)

    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)

    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)

    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)

    * kernel: USB: core: Fix deadlock in port disable sysfs attribute (CVE-2024-26933)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest RHEL-8.10.z kernel (JIRA:RHEL-34640)

    * kernel-rt: epoll_wait not reporting catching all events to application (JIRA:RHEL-23022)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:3618 advisory.

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption     operation (CVE-2023-6240)
    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()     (CVE-2024-0340)
    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer     that cause loop forever (CVE-2024-26603)
    * kernel: use after free in i2c (CVE-2019-25162)
    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()     (CVE-2020-36777)
    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors     (CVE-2023-52477)
    * kernel: mtd: require write permissions for locking and badblock ioctls     (CVE-2021-47055)
    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump     (CVE-2024-26615)
    * kernel: vt: fix memory overlapping when deleting chars in the buffer     (CVE-2022-48627)
    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu()     (CVE-2023-52565)
    * kernel: net: bridge: data races indata-races in br_handle_frame_finish()     (CVE-2023-52578)
    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg     (CVE-2023-52528)
    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)
    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags     (CVE-2023-52610)
    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set     with timeout (CVE-2024-26643)
    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag     (CVE-2024-26642)
    * kernel: i2c: i801: Don't generate an interrupt on bus reset     (CVE-2021-47153)
    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly     (CVE-2024-26659)
    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit     (CVE-2024-26779)
    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter     (CVE-2024-26744)
    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc     (CVE-2021-47185)
    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak     (CVE-2024-26901)
    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully     setup (CVE-2024-26872)
    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface()     (CVE-2024-26934)
    * kernel: USB: core: Fix deadlock in port disable sysfs attribute     (CVE-2024-26933)
    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()     (CVE-2024-26993)
    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command     (CVE-2024-27059)
    * kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
    * kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
    * kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
    * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
    * kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()     (CVE-2023-52594)
    * kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:3627 advisory.

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever     (CVE-2024-26603)
    * kernel: use after free in i2c (CVE-2019-25162)
    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
    * kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
    * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
    * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)
    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout     (CVE-2024-26643)
    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
    * kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
    * kernel: USB: core: Fix deadlock in port disable sysfs attribute (CVE-2024-26933)
    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest AlmaLinux-8.10.z kernel (JIRA:AlmaLinux-34640)
    * kernel-rt: epoll_wait not reporting catching all events to application (JIRA:AlmaLinux-23022)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3618 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption     operation (CVE-2023-6240)

    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()     (CVE-2024-0340)

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer     that cause loop forever (CVE-2024-26603)

    * kernel: use after free in i2c (CVE-2019-25162)

    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()     (CVE-2020-36777)

    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors     (CVE-2023-52477)

    * kernel: mtd: require write permissions for locking and badblock ioctls     (CVE-2021-47055)

    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump     (CVE-2024-26615)

    * kernel: vt: fix memory overlapping when deleting chars in the buffer     (CVE-2022-48627)

    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu()     (CVE-2023-52565)

    * kernel: net: bridge: data races indata-races in br_handle_frame_finish()     (CVE-2023-52578)

    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg     (CVE-2023-52528)

    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)

    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags     (CVE-2023-52610)

    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set     with timeout (CVE-2024-26643)

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag     (CVE-2024-26642)

    * kernel: i2c: i801: Don't generate an interrupt on bus reset     (CVE-2021-47153)

    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly     (CVE-2024-26659)

    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit     (CVE-2024-26779)

    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter     (CVE-2024-26744)

    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc     (CVE-2021-47185)

    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak     (CVE-2024-26901)

    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully     setup (CVE-2024-26872)

    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface()     (CVE-2024-26934)

    * kernel: USB: core: Fix deadlock in port disable sysfs attribute     (CVE-2024-26933)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()     (CVE-2024-26993)

    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command     (CVE-2024-27059)

    * kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)

    * kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)

    * kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)

    * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)

    * kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()     (CVE-2023-52594)

    * kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2845 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (CVE-2023-52628)

    Bug Fix(es):

    * kernel: untrusted VMM can trigger int80 syscall handling (JIRA:RHEL-30266)

    * kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (JIRA:RHEL-31090)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2846 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (CVE-2023-52628)

    Bug Fix(es):

    * kernel-rt: kernel: untrusted VMM can trigger int80 syscall handling (JIRA:RHEL-30421)

    * kernel-rt: kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (JIRA:RHEL-31093)

    * kernel-rt: update RT source tree to the latest RHEL-9.2 ad hoc schedule build (JIRA:RHEL-34746)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2621 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640)

    * kernel: Information leak in l2cap_parse_conf_req in net/bluetooth/l2cap_core.c (CVE-2022-42895)

    * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546,ZDI-CAN-20527)

    * kernel: ext4: kernel bug in ext4_write_inline_data_end() (CVE-2021-33631)

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    Bug Fix(es):

    * kernel: use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (JIRA:RHEL-18806)

    * tx-checksumming required for accessing port in OpenShift for RHEL 8.6 (JIRA:RHEL-20821)

    * ceph: several cap and snap fixes (JIRA:RHEL-20908)

    * unable to access smsc95xx based interface unless you start outgoing traffic.  (JIRA:RHEL-25718)

    * [RHEL8] ] BUG bio-696 (Not tainted): Poison overwritten  (JIRA:RHEL-26100)

    * kernel: ext4: kernel bug in ext4_write_inline_data_end() (JIRA:RHEL-26330)

    * kernel: Information leak in l2cap_parse_conf_req in net/bluetooth/l2cap_core.c (JIRA:RHEL-18808)

    * kernel: GSM multiplexing race condition leads to privilege escalation (JIRA:RHEL-19953)

    Enhancement(s):

    * [IBM 8.10 FEAT] Upgrade the qeth driver to latest from upstream, e.g. kernel 6.4 (JIRA:RHEL-25810)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6680-3 advisory.

     discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel did not     properly handle certain memory allocation failure conditions, leading to a null pointer dereference     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-46343)

    It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-51779)

    It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux     kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect     command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker     could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

    Jann Horn discovered that the io_uring subsystem in the Linux kernel contained an out-of-bounds access     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-6560)

    Dan Carpenter discovered that the netfilter subsystem in the Linux kernel did not store data in properly     sized memory locations. A local user could use this to cause a denial of service (system crash).
    (CVE-2024-0607)

    Supraja Sridhara, Benedict Schlter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the     Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit     emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service     (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0910-1 advisory.

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
    - CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
    - CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
    - CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
    - CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
    - CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the     same transaction (bsc#1218216).
    - CVE-2023-52340: Fixed ICMPv6 Packet Too Big packets force a DoS of the Linux kernel by forcing     100% CPU (bsc#1219295).
    - CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
    - CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
    - CVE-2023-52443: Fixed crash when parsed profile name is empty  (bsc#1220240).
    - CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
    - CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
    - CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump  (bsc#1220253).
    - CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier  (bsc#1220238).
    - CVE-2023-52451: Fixed access beyond end of drmem array  (bsc#1220250).
    - CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
    - CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
    - CVE-2023-52457: Fixed skipped resource freeing if  pm_runtime_resume_and_get() failed (bsc#1220350).
    - CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
    - CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
    - CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
    - CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
    - CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
    - CVE-2024-0607: Fixed 64-bit load issue in  nft_byteorder_eval() (bsc#1218915).
    - CVE-2024-1151: Fixed unlimited number of recursions from action  sets (bsc#1219835).
    - CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv  (bsc#1219127).
    - CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
    - CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
    - CVE-2024-25744: Fixed Security issue with int 80 interrupt vector (bsc#1217927).
    - CVE-2024-26585: Fixed race between tx work scheduling and socket close  (bsc#1220187).
    - CVE-2024-26586: Fixed stack corruption (bsc#1220243).
    - CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
    - CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach  (bsc#1220254).
    - CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
    - CVE-2024-26595: Fixed NULL pointer dereference in  error path (bsc#1220344).
    - CVE-2024-26598: Fixed potential UAF in LPI translation  cache (bsc#1220326).
    - CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
    - CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
    - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0858-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
    - CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
    - CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
    - CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
    - CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
    - CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the     same transaction (bsc#1218216).
    - CVE-2023-52340: Fixed ICMPv6 Packet Too Big packets force a DoS of the Linux kernel by forcing     100% CPU (bsc#1219295).
    - CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
    - CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
    - CVE-2023-52443: Fixed crash when parsed profile name is empty  (bsc#1220240).
    - CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
    - CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
    - CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump  (bsc#1220253).
    - CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier  (bsc#1220238).
    - CVE-2023-52451: Fixed access beyond end of drmem array  (bsc#1220250).
    - CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
    - CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
    - CVE-2023-52457: Fixed skipped resource freeing if  pm_runtime_resume_and_get() failed (bsc#1220350).
    - CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
    - CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
    - CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
    - CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
    - CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
    - CVE-2024-0607: Fixed 64-bit load issue in  nft_byteorder_eval() (bsc#1218915).
    - CVE-2024-1151: Fixed unlimited number of recursions from action  sets (bsc#1219835).
    - CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv  (bsc#1219127).
    - CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
    - CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
    - CVE-2024-25744: Fixed Security issue with int 80 interrupt vector (bsc#1217927).
    - CVE-2024-26585: Fixed race between tx work scheduling and socket close  (bsc#1220187).
    - CVE-2024-26586: Fixed stack corruption (bsc#1220243).
    - CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
    - CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach  (bsc#1220254).
    - CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
    - CVE-2024-26595: Fixed NULL pointer dereference in  error path (bsc#1220344).
    - CVE-2024-26598: Fixed potential UAF in LPI translation  cache (bsc#1220326).
    - CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
    - CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
    - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0855-1 advisory.

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-6270: Fixed a use-after-free bug in aoecmd_cfg_pkts (bsc#1218562).
    - CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
    - CVE-2023-52462: Fixed a security check for attempt to corrupt spilled pointer (bsc#1220325).
    - CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
    - CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
    - CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
    - CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
    - CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach  (bsc#1220254).
    - CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
    - CVE-2024-26585: Fixed race between tx work scheduling and socket close  (bsc#1220187).
    - CVE-2023-52340: Fixed ICMPv6 Packet Too Big packets force a DoS of the Linux kernel by forcing     100% CPU (bsc#1219295).
    - CVE-2024-0607: Fixed 64-bit load issue in  nft_byteorder_eval() (bsc#1218915).
    - CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
    - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
    - CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).
    - CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
    - CVE-2023-52457: Fixed skipped resource freeing if  pm_runtime_resume_and_get() failed (bsc#1220350).
    - CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
    - CVE-2023-52451: Fixed access beyond end of drmem array  (bsc#1220250).
    - CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).
    - CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier  (bsc#1220238).
    - CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
    - CVE-2024-26598: Fixed potential UAF in LPI translation  cache (bsc#1220326).
    - CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
    - CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
    - CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
    - CVE-2023-52443: Fixed crash when parsed profile name is empty  (bsc#1220240).
    - CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
    - CVE-2024-26586: Fixed stack corruption (bsc#1220243).
    - CVE-2024-26595: Fixed NULL pointer dereference in  error path (bsc#1220344).
    - CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
    - CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump  (bsc#1220253).
    - CVE-2024-1151: Fixed unlimited number of recursions from action  sets (bsc#1219835).
    - CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the     same transaction (bsc#1218216).
    - CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv  (bsc#1219127).
    - CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
    - CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6680-2 advisory.

     discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel did not     properly handle certain memory allocation failure conditions, leading to a null pointer dereference     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-46343)

    It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-51779)

    It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux     kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect     command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker     could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

    Jann Horn discovered that the io_uring subsystem in the Linux kernel contained an out-of-bounds access     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-6560)

    Dan Carpenter discovered that the netfilter subsystem in the Linux kernel did not store data in properly     sized memory locations. A local user could use this to cause a denial of service (system crash).
    (CVE-2024-0607)

    Supraja Sridhara, Benedict Schlter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the     Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit     emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service     (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6680-1 advisory.

     discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel did not     properly handle certain memory allocation failure conditions, leading to a null pointer dereference     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-46343)

    It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-51779)

    It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux     kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect     command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker     could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

    Jann Horn discovered that the io_uring subsystem in the Linux kernel contained an out-of-bounds access     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-6560)

    Dan Carpenter discovered that the netfilter subsystem in the Linux kernel did not store data in properly     sized memory locations. A local user could use this to cause a denial of service (system crash).
    (CVE-2024-0607)

    Supraja Sridhara, Benedict Schlter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the     Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit     emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service     (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-488 advisory.

    2024-08-14: CVE-2023-52654 was added to this advisory.

    2024-06-06: CVE-2023-52881 was added to this advisory.

    2024-05-23: CVE-2023-6531 was added to this advisory.

    2024-05-09: CVE-2023-6931 was added to this advisory.

    2024-04-25: CVE-2023-6817 was added to this advisory.

    2024-04-10: CVE-2024-25744 was added to this advisory.

    2024-02-01: CVE-2024-0646 was added to this advisory.

    2024-02-01: CVE-2024-0565 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/af_unix: disable sending io_uring over sockets (CVE-2023-52654)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: do not accept ACK of bytes we never sent (CVE-2023-52881)

    A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's     deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.
    (CVE-2023-6531)

    An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux     Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
    (CVE-2023-6606)

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to     achieve local privilege escalation.

    The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double     deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.

    We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a. (CVE-2023-6817)

    A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be     exploited to achieve local privilege escalation.

    A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in     perf_read_group().

    We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b. (CVE-2023-6931)

    A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is     garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a     use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with     CAP_NET_ADMIN capability to escalate their privileges on the system. (CVE-2024-0193)

    An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in     the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy     length, leading to a denial of service. (CVE-2024-0565)

    An out-of-bounds memory write flaw was found in the Linux kernel's Transport Layer Security functionality     in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user     to crash or potentially escalate their privileges on the system. (CVE-2024-0646)

    In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point.
    This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c. (CVE-2024-25744)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
205331	Ubuntu 16.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6926-3)	Nessus	Ubuntu Local Security Checks	high
204956	Ubuntu 14.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-6926-2)	Nessus	Ubuntu Local Security Checks	high
204834	Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-6926-1)	Nessus	Ubuntu Local Security Checks	high
200609	Rocky Linux 8 : kernel update (Moderate) (RLSA-2024:3618)	Nessus	Rocky Linux Local Security Checks	high
200568	Rocky Linux 8 : kernel-rt (RLSA-2024:3627)	Nessus	Rocky Linux Local Security Checks	high
200159	Oracle Linux 8 : kernel (ELSA-2024-3618)	Nessus	Oracle Linux Local Security Checks	high
200116	RHEL 8 : kernel-rt (RHSA-2024:3627)	Nessus	Red Hat Local Security Checks	high
200115	AlmaLinux 8 : kernel update (Medium) (ALSA-2024:3618)	Nessus	Alma Linux Local Security Checks	high
200113	AlmaLinux 8 : kernel-rt (ALSA-2024:3627)	Nessus	Alma Linux Local Security Checks	high
200106	RHEL 8 : kernel update (Moderate) (RHSA-2024:3618)	Nessus	Red Hat Local Security Checks	high
197043	RHEL 9 : kernel (RHSA-2024:2845)	Nessus	Red Hat Local Security Checks	high
197042	RHEL 9 : kernel-rt (RHSA-2024:2846)	Nessus	Red Hat Local Security Checks	high
194828	RHEL 8 : kernel (RHSA-2024:2621)	Nessus	Red Hat Local Security Checks	high
192293	Ubuntu 22.04 LTS / 23.10 : Linux kernel (AWS) vulnerabilities (USN-6680-3)	Nessus	Ubuntu Local Security Checks	high
192180	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:0910-1)	Nessus	SuSE Local Security Checks	high
192011	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:0858-1)	Nessus	SuSE Local Security Checks	high
192006	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:0855-1)	Nessus	SuSE Local Security Checks	high
191739	Ubuntu 22.04 LTS / 23.10 : Linux kernel vulnerabilities (USN-6680-2)	Nessus	Ubuntu Local Security Checks	high
191664	Ubuntu 22.04 LTS / 23.10 : Linux kernel vulnerabilities (USN-6680-1)	Nessus	Ubuntu Local Security Checks	high
189347	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-488)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2024-25744

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high