The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5298-1 advisory.

    It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-     free vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2021-22600)

    Jrgen Gro discovered that the Xen subsystem within the Linux kernel did not adequately limit the     number of events driver domains (unprivileged PV backends) could send to other guest VMs. An attacker in a     driver domain could use this to cause a denial of service in other guest VMs. (CVE-2021-28711,     CVE-2021-28712, CVE-2021-28713)

    Jrgen Gro discovered that the Xen network backend driver in the Linux kernel did not adequately limit     the amount of queued packets when a guest did not process them. An attacker in a guest VM can use this to     cause a denial of service (excessive kernel memory consumption) in the network backend domain.
    (CVE-2021-28714, CVE-2021-28715)

    Szymon Heidrich discovered that the USB Gadget subsystem in the Linux kernel did not properly restrict the     size of control requests for certain gadget types, leading to possible out of bounds reads or writes. A     local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2021-39685)

    Jann Horn discovered a race condition in the Unix domain socket implementation in the Linux kernel that     could result in a read-after-free. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2021-4083)

    Kirill Tkhai discovered that the XFS file system implementation in the Linux kernel did not calculate size     correctly when pre-allocating space in some situations. A local attacker could use this to expose     sensitive information. (CVE-2021-4155)

    Lin Ma discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel contained a     race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a     denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-4202)

    Sushma Venkatesh Reddy discovered that the Intel i915 graphics driver in the Linux kernel did not perform     a GPU TLB flush in some situations. A local attacker could use this to cause a denial of service or     possibly execute arbitrary code. (CVE-2022-0330)

    It was discovered that the VMware Virtual GPU driver in the Linux kernel did not properly handle certain     failure conditions, leading to a stale entry in the file descriptor table. A local attacker could use this     to expose sensitive information or possibly gain administrative privileges. (CVE-2022-22942)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5298-1)

high Nessus Plugin ID 158249

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.7

Version 1.6

Version 1.5

Version 1.12 Aug 28, 2024, 11:02 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408282302
Version 1.11 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.10 Dec 13, 2023, 4:19 PM CVSSv3 score source (changed from "CVE-2022-0330" to "CVE-2022-22942") Plugin Feed: 202312131619
Version 1.9 Oct 16, 2023, 7:25 PM Detection Plugin metadata Plugin requirements Plugin Feed: 202310161925
Version 1.8 Jul 11, 2023, 4:01 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Detection Exploit attributes ("Exploited by malware" set to "True") Plugin requirements Plugin Feed: 202307110401
Version 1.7 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.7 Jul 11, 2023, 1:48 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Detection Exploit attributes ("Exploited by malware" set to "True") Plugin requirements Plugin Feed: 202307110148
Version 1.6 Feb 1, 2023, 2:09 PM CVSSv3 score source (set to "CVE-2022-0330") Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202302011409
Version 1.5 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901