The version of kernel installed on the remote host is prior to 5.4.80-40.140. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-018 advisory.

    A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem     allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate     privileges.  The highest threat from this vulnerability is to data confidentiality and integrity as well     as system availability. (CVE-2020-14351)

    A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was     using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of     bounds. The highest threat from this vulnerability is to data confidentiality. (CVE-2020-25656)

    A use-after-free flaw was found in the Linux kernel's TTY driver functionality in the way the user     triggers the con_font_op function. This flaw allows a local user to crash or escalate their privileges on     the system or expose sensitive information (kernel memory). (CVE-2020-25668)

    A memory leak flaw was found in the Linux kernel's performance monitoring subsystem when using     PERF_EVENT_IOC_SET_FILTER. This flaw allows a local user to starve the resources, causing a denial of     service. The highest threat from this vulnerability is to system availability. (CVE-2020-25704)

    An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users     can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271.
    (CVE-2020-27673)

    An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x.
    drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race     condition). This can cause a use-after-free or NULL pointer dereference, as demonstrated by a dom0 crash     via events for an in-reconfiguration paravirtualized device, aka CID-073d0552ead5. (CVE-2020-27675)

    An out-of-bounds (OOB) SLAB memory access flaw was found in the Linux kernel's fbcon driver module. A     bounds check failure allows a local attacker with special user privileges to gain access to out-of-bounds     memory, leading to a system crash or leaking of internal kernel information. The highest threat from this     vulnerability is to system availability. (CVE-2020-28974)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-018)

high Nessus Plugin ID 160441

Version 1.6

Version 1.5

Version 1.6 Dec 12, 2024, 9:55 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202412120955
Version 1.5 Sep 5, 2023, 10:10 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Detection Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin requirements Plugin Feed: 202309052210