The version of kernel installed on the remote host is prior to 5.4.110-54.182. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-002 advisory.

    2024-09-12: CVE-2021-4442 was added to this advisory.

    An issue was discovered in the Linux kernel. Fastrpc_internal_invoke in drivers/misc/fastrpc.c does not     prevent user applications from sending kernel RPC messages. This is a related issue to CVE-2019-2308.
    (CVE-2021-28375)

    A flaw was found in the Linux kernel. The rtw_wx_set_scan driver allows writing beyond the end of the
    ->ssid[] array. The highest threat from this vulnerability is to data confidentiality and integrity as     well system availability. (CVE-2021-28660)

    The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use     uninitialized or stale values. This initialization went too far and may under certain conditions also     overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking     persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died,     leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable.
    XSA-365 was classified to affect versions back to at least 3.11. (CVE-2021-28688)

    A race condition flaw was found in get_old_root in fs/btrfs/ctree.c in the Linux kernel in btrfs file-     system. This flaw allows a local attacker with a special user privilege to cause a denial of service due     to not locking an extent buffer before a cloning operation. The highest threat from this vulnerability is     to system availability. (CVE-2021-28964)

    A flaw was found in the Linux kernel. On some Haswell CPUs, userspace applications (such as perf-fuzzer)     can cause a system crash because the PEBS status in a PEBS record is mishandled. (CVE-2021-28971)

    A denial-of-service (DoS) flaw was identified  in the Linux kernel due to an incorrect memory barrier in     xt_replace_table in net/netfilter/x_tables.c in the netfilter subsystem. (CVE-2021-29650)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: add sanity tests to TCP_QUEUE_SEQ (CVE-2021-4442)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-002)

high Nessus Plugin ID 160445

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.9 Dec 12, 2024, 9:55 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202412120955
Version 1.8 Sep 16, 2024, 7:15 AM Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202409160715
Version 1.7 Sep 13, 2024, 3:37 PM CVE (set "CVE" coverage to "CVE-2021-28375,CVE-2021-28660,CVE-2021-28688,CVE-2021-28964,CVE-2021-28971,CVE-2021-29650,CVE-2021-4442") CVSS metrics ("Cvssv4 score" set to 0.0) CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Exploit attributes ("Exploit available" set to "True") Plugin metadata Plugin Feed: 202409131537
Version 1.6 Sep 5, 2023, 10:10 PM Detection Plugin requirements Plugin Feed: 202309052210
Version 1.5 Mar 23, 2023, 8:46 PM Plugin requirements Plugin Feed: 202303232046