The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5377-1 advisory.

    It was discovered that the network traffic control implementation in the Linux kernel contained a use-     after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2022-1055)

    Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly     restrict access to the cgroups v1 release_agent feature. A local attacker could use this to gain     administrative privileges. (CVE-2022-0492)

    Jrgen Gro discovered that the Xen subsystem within the Linux kernel did not adequately limit the     number of events driver domains (unprivileged PV backends) could send to other guest VMs. An attacker in a     driver domain could use this to cause a denial of service in other guest VMs. (CVE-2021-28711,     CVE-2021-28712, CVE-2021-28713)

    Jrgen Gro discovered that the Xen network backend driver in the Linux kernel did not adequately limit     the amount of queued packets when a guest did not process them. An attacker in a guest VM can use this to     cause a denial of service (excessive kernel memory consumption) in the network backend domain.
    (CVE-2021-28714, CVE-2021-28715)

    It was discovered that the simulated networking device driver for the Linux kernel did not properly     initialize memory in certain situations. A local attacker could use this to expose sensitive information     (kernel memory). (CVE-2021-4135)

    Brendan Dolan-Gavitt discovered that the Marvell WiFi-Ex USB device driver in the Linux kernel did not     properly handle some error conditions. A physically proximate attacker could use this to cause a denial of     service (system crash). (CVE-2021-43976)

    It was discovered that the ARM Trusted Execution Environment (TEE) subsystem in the Linux kernel contained     a race condition leading to a use- after-free vulnerability. A local attacker could use this to cause a     denial of service or possibly execute arbitrary code. (CVE-2021-44733)

    It was discovered that the Phone Network protocol (PhoNet) implementation in the Linux kernel did not     properly perform reference counting in some error conditions. A local attacker could possibly use this to     cause a denial of service (memory exhaustion). (CVE-2021-45095)

    Wenqing Liu discovered that the f2fs file system in the Linux kernel did not properly validate the last     xattr entry in an inode. An attacker could use this to construct a malicious f2fs image that, when mounted     and operated on, could cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2021-45469)

    It was discovered that the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel did     not properly deallocate memory in some error conditions. A local attacker could possibly use this to cause     a denial of service (memory exhaustion). (CVE-2021-45480)

    Samuel Page discovered that the Transparent Inter-Process Communication (TIPC) protocol implementation in     the Linux kernel contained a stack-based buffer overflow. A remote attacker could use this to cause a     denial of service (system crash) for systems that have a TIPC bearer configured. (CVE-2022-0435)

    It was discovered that the IPsec implementation in the Linux kernel did not properly allocate enough     memory when performing ESP transformations, leading to a heap-based buffer overflow. A local attacker     could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2022-27666)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-5377-1)

high Nessus Plugin ID 159729

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.12 Sep 19, 2024, 8:47 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") Plugin Feed: 202409190847
Version 1.11 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 8.6) CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.10 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.9 Dec 7, 2023, 3:25 PM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202312071525
Version 1.9 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856
Version 1.8 Oct 21, 2023, 5:06 AM Detection Plugin metadata Plugin requirements Plugin Feed: 202310210506
Version 1.7 Jul 11, 2023, 1:48 AM Detection Plugin requirements Plugin Feed: 202307110148
Version 1.6 Mar 23, 2023, 8:46 PM Plugin requirements Plugin Feed: 202303232046
Version 1.5 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901