The version of kernel installed on the remote host is prior to 4.14.238-125.421. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1516 advisory.

    2024-04-25: CVE-2021-46938 was added to this advisory.

    A denial-of-service (DoS) flaw was identified  in the Linux kernel due to an incorrect memory barrier in     xt_replace_table in net/netfilter/x_tables.c in the netfilter subsystem. (CVE-2021-29650)

    A flaw was found in kernel/bpf/verifier.c in BPF in the Linux kernel. An incorrect limit is enforced for     pointer arithmetic operations which can be abused to perform out-of-bounds reads and writes in kernel     memory, leading to local privilege escalation. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-33200)

    In the Linux kernel, the following vulnerability has been resolved:

    dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (CVE-2021-46938)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux AMI : kernel (ALAS-2021-1516)

high Nessus Plugin ID 151521

Version 1.4

Version 1.3

Version 1.4 Dec 12, 2024, 9:55 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202412120955
Version 1.3 Apr 25, 2024, 11:59 PM CVE (set "CVE" coverage to "CVE-2021-29650,CVE-2021-33200,CVE-2021-46938") CVSSv3 score source (set to "CVE-2021-46938") Detection (updated detection logic) Plugin metadata Plugin Feed: 202404252359