In the Linux kernel, the following vulnerability has been resolved: x86/entry_32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to exc_nmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS mitigation requires CPU buffers to be cleared when registers don't have any sensitive data. Move CLEAR_CPU_BUFFERS after RESTORE_ALL_NMI.

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50193 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: x86/entry_32: Clear CPU buffers after     register restore in NMI return CPU buffers are currently cleared after call to exc_nmi, but before     register state is restored. This May be okay for MDS mitigation but not for RDFS. Because RDFS mitigation     requires CPU buffers to be cleared when registers don't have any sensitive data. Move CLEAR_CPU_BUFFERS     after RESTORE_ALL_NMI. (CVE-2024-50193)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
213470	Debian dla-4008 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	critical
213191	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12887)	Nessus	Oracle Linux Local Security Checks	critical
212813	CBL Mariner 2.0 Security Update: kernel (CVE-2024-50193)	Nessus	MarinerOS Local Security Checks	high

Detections

Analytics

CVE-2024-50193

high

Tenable Plugins

critical

critical

high