In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.

suse_linux SUSE-SU-2024:3561-1: SUSE SLED15 / SLES15 / openSUSE 15 : Security update for the Linux Kernel (Important) (SUSE-SU-2024:3561-1)

suse_linux SUSE-SU-2024:3564-1: SUSE SLES15 / openSUSE 15 : Security update for the Linux Kernel (Important) (SUSE-SU-2024:3564-1)

suse_linux SUSE-SU-2024:3569-1: SUSE SLED15 / SLES15 : Security update for the Linux Kernel (Important) (SUSE-SU-2024:3569-1)

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3551-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
    - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
    - CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
    - CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
    - CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
    - CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
    - CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
    - CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
    - CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
    - CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
    - CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
    - CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
    - CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
    - CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
    - CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
    - CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
    - CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
    - CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
    - CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
    - CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
    - CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
    - CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
    - CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
    - CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
    - CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
    - CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
    - CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
    - CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
    - CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
    - CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
    - CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
    - CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
    - CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
    - CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
    - CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
    - CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
    - CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
    - CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
    - CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
    - CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
    - CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
    - CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
    - CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
    - CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
    - CVE-2024-45017: net/mlx5: Fix IPsec RoCE MPV trace call (bsc#1230430).
    - CVE-2024-45018: netfilter: flowtable: initialise extack before use (bsc#1230431).
    - CVE-2024-45019: net/mlx5e: Take state lock during tx timeout reporter (bsc#1230432).
    - CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
    - CVE-2024-45022: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order     0 (bsc#1230435).
    - CVE-2024-45023: md/raid1: Fix data corruption for degraded array with slow disk (bsc#1230455).
    - CVE-2024-45029: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451).
    - CVE-2024-45030: igb: cope with large MAX_SKB_FRAGS (bsc#1230457).
    - CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
    - CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
    - CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
    - CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
    - CVE-2024-46687: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()     (bsc#1230518).
    - CVE-2024-46691: usb: typec: ucsi: Move unregister out of atomic section (bsc#1230526).
    - CVE-2024-46692: firmware: qcom: scm: Mark get_wq_ctx() as atomic call (bsc#1230520).
    - CVE-2024-46693: kABI workaround for soc-qcom pmic_glink changes (bsc#1230521).
    - CVE-2024-46710: drm/vmwgfx: Prevent unmapping active read buffers (bsc#1230540).
    - CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719).
    - CVE-2024-46729: drm/amd/display: Fix incorrect size calculation for loop (bsc#1230704).
    - CVE-2024-46735: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() (bsc#1230727).
    - CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756).
    - CVE-2024-46751: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info()     (bsc#1230786).
    - CVE-2024-46752: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (bsc#1230794).
    - CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796).
    - CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772).
    - CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810).
    - CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815).
    - CVE-2024-46794: x86/tdx: Fix data leak in mmio_read() (bsc#1230825).
    - CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3912 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3912-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     October 07, 2024                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.226-1     CVE ID         : CVE-2021-3669 CVE-2022-48733 CVE-2023-31083 CVE-2023-52889                      CVE-2024-27397 CVE-2024-38577 CVE-2024-41011 CVE-2024-41042                      CVE-2024-41098 CVE-2024-42114 CVE-2024-42228 CVE-2024-42246                      CVE-2024-42259 CVE-2024-42265 CVE-2024-42272 CVE-2024-42276                      CVE-2024-42280 CVE-2024-42281 CVE-2024-42283 CVE-2024-42284                      CVE-2024-42285 CVE-2024-42286 CVE-2024-42287 CVE-2024-42288                      CVE-2024-42289 CVE-2024-42290 CVE-2024-42292 CVE-2024-42295                      CVE-2024-42297 CVE-2024-42301 CVE-2024-42302 CVE-2024-42304                      CVE-2024-42305 CVE-2024-42306 CVE-2024-42308 CVE-2024-42309                      CVE-2024-42310 CVE-2024-42311 CVE-2024-42312 CVE-2024-42313                      CVE-2024-43828 CVE-2024-43829 CVE-2024-43830 CVE-2024-43834                      CVE-2024-43835 CVE-2024-43839 CVE-2024-43841 CVE-2024-43846                      CVE-2024-43849 CVE-2024-43853 CVE-2024-43854 CVE-2024-43856                      CVE-2024-43858 CVE-2024-43860 CVE-2024-43861 CVE-2024-43867                      CVE-2024-43871 CVE-2024-43879 CVE-2024-43880 CVE-2024-43882                      CVE-2024-43883 CVE-2024-43884 CVE-2024-43889 CVE-2024-43890                      CVE-2024-43892 CVE-2024-43893 CVE-2024-43894 CVE-2024-43905                      CVE-2024-43907 CVE-2024-43908 CVE-2024-43914 CVE-2024-44935                      CVE-2024-44944 CVE-2024-44946 CVE-2024-44947 CVE-2024-44948                      CVE-2024-44952 CVE-2024-44954 CVE-2024-44960 CVE-2024-44965                      CVE-2024-44968 CVE-2024-44971 CVE-2024-44974 CVE-2024-44987                      CVE-2024-44988 CVE-2024-44989 CVE-2024-44990 CVE-2024-44995                      CVE-2024-44998 CVE-2024-44999 CVE-2024-45003 CVE-2024-45006                      CVE-2024-45008 CVE-2024-45016 CVE-2024-45018 CVE-2024-45021                      CVE-2024-45025 CVE-2024-45028 CVE-2024-46673 CVE-2024-46674                      CVE-2024-46675 CVE-2024-46676 CVE-2024-46677 CVE-2024-46679                      CVE-2024-46685 CVE-2024-46689 CVE-2024-46702 CVE-2024-46707                      CVE-2024-46713 CVE-2024-46714 CVE-2024-46719 CVE-2024-46721                      CVE-2024-46722 CVE-2024-46723 CVE-2024-46724 CVE-2024-46725                      CVE-2024-46731 CVE-2024-46737 CVE-2024-46738 CVE-2024-46739                      CVE-2024-46740 CVE-2024-46743 CVE-2024-46744 CVE-2024-46745                      CVE-2024-46747 CVE-2024-46750 CVE-2024-46755 CVE-2024-46756                      CVE-2024-46757 CVE-2024-46758 CVE-2024-46759 CVE-2024-46763                      CVE-2024-46771 CVE-2024-46777 CVE-2024-46780 CVE-2024-46781                      CVE-2024-46782 CVE-2024-46783 CVE-2024-46791 CVE-2024-46798                      CVE-2024-46800 CVE-2024-46804 CVE-2024-46814 CVE-2024-46815                      CVE-2024-46817 CVE-2024-46818 CVE-2024-46819 CVE-2024-46822                      CVE-2024-46828 CVE-2024-46829 CVE-2024-46840 CVE-2024-46844

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.226-1.  This additionally includes many more bug fixes from     stable updates 5.10.224-5.10.226 inclusive.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.15.165-110.161. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-051 advisory.

    2024-09-26: CVE-2024-42302 was added to this advisory.

    2024-09-12: CVE-2024-43870 was added to this advisory.

    2024-09-12: CVE-2024-44934 was added to this advisory.

    2024-09-12: CVE-2024-43869 was added to this advisory.

    2024-09-12: CVE-2024-43873 was added to this advisory.

    2024-09-12: CVE-2024-44944 was added to this advisory.

    2024-09-12: CVE-2024-43871 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    tls: fix race between tx work scheduling and socket close

    Similarly to previous commit, the submitting thread (recvmsg/sendmsg)may exit as soon as the async crypto     handler calls complete().Reorder scheduling the work before calling complete().This seems more logical in     the first place, as it'sthe inverse order of what the submitting thread will do. (CVE-2024-26585)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (CVE-2024-42259)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (CVE-2024-42302)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix event leak upon exec and file release (CVE-2024-43869)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix event leak upon exit (CVE-2024-43870)

    In the Linux kernel, the following vulnerability has been resolved:

    devres: Fix memory leakage caused by driver API devm_free_percpu() (CVE-2024-43871)

    In the Linux kernel, the following vulnerability has been resolved:

    vhost/vsock: always initialize seqpacket_allow (CVE-2024-43873)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: mcast: wait for previous gc cycles when removing port (CVE-2024-44934)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: use helper function to calculate expect ID (CVE-2024-44944)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.224-212.876. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-069 advisory.

    2024-09-26: CVE-2024-42302 was added to this advisory.

    2024-09-12: CVE-2024-42159 was added to this advisory.

    2024-09-12: CVE-2024-44944 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: mpi3mr: Sanitise num_phys (CVE-2024-42159)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (CVE-2024-42259)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (CVE-2024-42302)

    In the Linux kernel, the following vulnerability has been resolved:

    devres: Fix memory leakage caused by driver API devm_free_percpu() (CVE-2024-43871)

    In the Linux kernel, the following vulnerability has been resolved:

    mlxsw: spectrum_acl_erp: Fix object nesting warning (CVE-2024-43880)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: use helper function to calculate expect ID (CVE-2024-44944)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.4.282-194.378. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2024-083 advisory.

    2024-09-12: CVE-2024-44944 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

    In the Linux kernel, the following vulnerability has been resolved:

    devres: Fix memory leakage caused by driver API devm_free_percpu() (CVE-2024-43871)

    In the Linux kernel, the following vulnerability has been resolved:

    mlxsw: spectrum_acl_erp: Fix object nesting warning (CVE-2024-43880)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: use helper function to calculate expect ID (CVE-2024-44944)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-709 advisory.

    2024-09-12: CVE-2024-44934 was added to this advisory.

    2024-09-12: CVE-2024-44944 was added to this advisory.

    2024-09-12: CVE-2024-42159 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: mpi3mr: Sanitise num_phys (CVE-2024-42159)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines (CVE-2024-42258)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (CVE-2024-42259)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix event leak upon exec and file release (CVE-2024-43869)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix event leak upon exit (CVE-2024-43870)

    In the Linux kernel, the following vulnerability has been resolved:

    devres: Fix memory leakage caused by driver API devm_free_percpu() (CVE-2024-43871)

    In the Linux kernel, the following vulnerability has been resolved:

    vhost/vsock: always initialize seqpacket_allow (CVE-2024-43873)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: mcast: wait for previous gc cycles when removing port (CVE-2024-44934)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: use helper function to calculate expect ID (CVE-2024-44944)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
208423	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:3551-1)	Nessus	SuSE Local Security Checks	high
208245	Debian dla-3912 : ata-modules-5.10.0-29-armmp-di - security update	Nessus	Debian Local Security Checks	high
206819	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-051)	Nessus	Amazon Linux Local Security Checks	high
206818	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-069)	Nessus	Amazon Linux Local Security Checks	high
206811	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2024-083)	Nessus	Amazon Linux Local Security Checks	medium
206810	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-709)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2024-44944

medium

Tenable Plugins

Coming Soon

high

high

high

high

medium

high