The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5218-1 advisory.

    Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes     under certain conditions. A local attacker could use this to leak or alter data from other processes that     use huge pages. (CVE-2021-4002)

    It was discovered that the eBPF implementation in the Linux kernel did not properly validate the memory     size of certain ring buffer operation arguments. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2021-4204)

    It was discovered that a race condition existed in the overlay file system implementation in the Linux     kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-20321)

    It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in     its NFC Controller Interface (NCI) implementation. A local attacker could possibly use this to cause a     denial of service (system crash) or execute arbitrary code. (CVE-2021-3760)

    It was discovered that an integer overflow could be triggered in the eBPF implementation in the Linux     kernel when preallocating objects for stack maps. A privileged local attacker could use this to cause a     denial of service or possibly execute arbitrary code. (CVE-2021-41864)

    It was discovered that the KVM implementation for POWER8 processors in the Linux kernel did not properly     keep track if a wakeup event could be resolved by a guest. An attacker in a guest VM could possibly use     this to cause a denial of service (host OS crash). (CVE-2021-43056)

    It was discovered that the TIPC Protocol implementation in the Linux kernel did not properly validate     MSG_CRYPTO messages in some situations. An attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2021-43267)

    It was discovered that the ISDN CAPI implementation in the Linux kernel contained a race condition in     certain situations that could trigger an array out-of-bounds bug. A privileged local attacker could     possibly use this to cause a denial of service or execute arbitrary code. (CVE-2021-43389)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5218-1)

critical Nessus Plugin ID 156613

Version 1.11

Version 1.10

Version 1.9

Version 1.9

Version 1.8

Version 1.7

Version 1.11 Aug 28, 2024, 11:02 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408282302
Version 1.10 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.9 Oct 23, 2023, 6:27 PM Detection Plugin metadata Plugin requirements Plugin Feed: 202310231827
Version 1.9 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856
Version 1.8 Jul 13, 2023, 12:08 AM Detection Plugin requirements Plugin Feed: 202307130008
Version 1.7 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901