The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1988 advisory.

  - An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions     before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the     system or possibly escalate their privileges on the system. The highest threat from this vulnerability is     to confidentiality, integrity, as well as system availability. (CVE-2021-3612)

  - A use-after-free flaw was found in the Linux kernel's Bluetooth subsystem in the way user calls connect to     the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the     system or escalate their privileges. The highest threat from this vulnerability is to confidentiality,     integrity, as well as system availability. (CVE-2021-3752)

  - A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP     association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and     the attacker can send packets with spoofed IP addresses. (CVE-2021-3772)

  - A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint     information for further use in traditional network attacks. (CVE-2021-3773)

  - A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some     regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the     memory pages. A local user could use this flaw to get unauthorized access to some data. (CVE-2021-4002)

  - An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66     and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read     the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process's     memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222     4.19.177 5.4.99 5.10.17 5.11 (CVE-2021-21781)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 8 : kernel (RLSA-2022:1988)

critical Nessus Plugin ID 161344

Version 1.4

Version 1.3

Version 1.3

Version 1.4 Nov 7, 2023, 5:17 PM CVE (set "CVE" coverage to "CVE-2020-0404,CVE-2020-13974,CVE-2020-27820,CVE-2020-4788,CVE-2021-0941,CVE-2021-20322,CVE-2021-3612,CVE-2021-3669,CVE-2021-37159,CVE-2021-3743,CVE-2021-3744,CVE-2021-3752,CVE-2021-3759,CVE-2021-3764,CVE-2021-3772,CVE-2021-3773,CVE-2021-4002,CVE-2021-4037,CVE-2021-4083,CVE-2021-4093,CVE-2021-4157,CVE-2021-41864,CVE-2021-4197,CVE-2021-4203,CVE-2021-42739,CVE-2021-43056,CVE-2021-43389,CVE-2021-43976,CVE-2021-44733,CVE-2021-45485,CVE-2021-45486,CVE-2022-0001,CVE-2022-0002,CVE-2022-0286,CVE-2022-0322,CVE-2022-1011,CVE-2021-21781,CVE-2021-26401,CVE-2021-29154") Detection (updated detection logic) Plugin metadata Plugin Feed: 202311071717
Version 1.3 Oct 27, 2023, 4:19 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202310271619
Version 1.3 Nov 7, 2023, 3:08 PM CVE (set "CVE" coverage to "CVE-2020-0404,CVE-2020-13974,CVE-2020-27820,CVE-2020-4788,CVE-2021-0941,CVE-2021-20322,CVE-2021-3612,CVE-2021-3669,CVE-2021-37159,CVE-2021-3743,CVE-2021-3744,CVE-2021-3752,CVE-2021-3759,CVE-2021-3764,CVE-2021-3772,CVE-2021-3773,CVE-2021-4002,CVE-2021-4037,CVE-2021-4083,CVE-2021-4093,CVE-2021-4157,CVE-2021-41864,CVE-2021-4197,CVE-2021-4203,CVE-2021-42739,CVE-2021-43056,CVE-2021-43389,CVE-2021-43976,CVE-2021-44733,CVE-2021-45485,CVE-2021-45486,CVE-2022-0001,CVE-2022-0002,CVE-2022-0286,CVE-2022-0322,CVE-2022-1011,CVE-2021-21781,CVE-2021-26401,CVE-2021-29154") Detection (updated detection logic) Plugin metadata Plugin Feed: 202311071508