The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5071-2 advisory.

    USN-5071-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04 LTS. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 20.04 LTS for Ubuntu     18.04 LTS.

    Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in     the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An     attacker in a guest VM could use this to read or write portions of the host's physical memory.
    (CVE-2021-3656)

    Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel     did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM     could use this to write to portions of the host's physical memory. (CVE-2021-3653)

    It was discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not     ensure enough processing time was given to perform cleanups of large SEV VMs. A local attacker could use     this to cause a denial of service (soft lockup). (CVE-2020-36311)

    It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly perform     reference counting in some situations, leading to a use-after-free vulnerability. An attacker who could     start and control a VM could possibly use this to expose sensitive information or execute arbitrary code.
    (CVE-2021-22543)

    Murray McAllister discovered that the joystick device interface in the Linux kernel did not properly     validate data passed via an ioctl(). A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code on systems with a joystick device registered. (CVE-2021-3612)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerabilities (USN-5071-2)

high Nessus Plugin ID 153445

Version 1.11

Version 1.10

Version 1.9

Version 1.9

Version 1.8

Version 1.11 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.10 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.9 Oct 16, 2023, 7:25 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv3 score source (set to "CVE-2021-3656") Detection Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin metadata Plugin Feed: 202310161925
Version 1.9 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856
Version 1.8 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901