The version of kernel installed on the remote host is prior to 5.10.118-111.515. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-014 advisory.

    2024-02-01: CVE-2022-48619 was added to this advisory.

    2024-02-01: CVE-2022-20568 was added to this advisory.

    2023-08-31: CVE-2023-4459 was added to this advisory.

    2023-08-31: CVE-2023-4387 was added to this advisory.

    2023-08-31: CVE-2022-23222 was added to this advisory.

    A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in     the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or     CAP_SYS_RAWIO) to create issues with confidentiality. (CVE-2022-0494)

    A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMA_FROM_DEVICE.
    This flaw allows a local user to read random memory from the kernel space. (CVE-2022-0854)

    perf: Fix sys_perf_event_open() race against self (CVE-2022-1729)

    io_uring: always use original task when preparing req identity (CVE-2022-1786)

    In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could     lead to local escalation of privilege with no additional execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-220738351References:
    Upstream kernel (CVE-2022-20568)

    A flaw was found in the Linux kernel's adjust_ptr_min_max_vals in the kernel/bpf/verifier.c function. In     this flaw, a missing sanity check for *_OR_NULL pointer types that perform pointer arithmetic may cause a     kernel information leak issue. (CVE-2022-23222)

    An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of     actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size()     function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This     flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2022-2639)

    The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets     are in the intended state. (CVE-2022-28893)

    Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to     cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14     and later versions. (CVE-2022-29581)

    An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause     a denial of service (panic) because input_set_capability mishandles the situation in which an event code     falls outside of a bitmap. (CVE-2022-48619)

    A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network     subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the     system, and could even lead to a kernel information leak problem. (CVE-2023-1838)

    A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in     VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash     the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a     kernel information leak problem. (CVE-2023-4387)

    A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in     the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with     normal user privilege to cause a denial of service due to a missing sanity check during cleanup.
    (CVE-2023-4459)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-014)

high Nessus Plugin ID 162002

Version 1.8

Version 1.7

Version 1.6

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.8 Dec 12, 2024, 9:55 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202412120955
Version 1.7 Feb 7, 2024, 4:20 PM Exploit attributes ("Exploit framework core" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available". "Exploited by malware" set to "True") Plugin Feed: 202402071620
Version 1.6 Feb 6, 2024, 12:33 PM CVE (set "CVE" coverage to "CVE-2022-0494,CVE-2022-0854,CVE-2022-1729,CVE-2022-1786,CVE-2022-20568,CVE-2022-23222,CVE-2022-2639,CVE-2022-28893,CVE-2022-29581,CVE-2022-48619,CVE-2023-1838,CVE-2023-4387,CVE-2023-4459") Detection (updated detection logic) Exploit attributes ("Exploit framework core" changed from "True" to none. "Exploited by malware" changed from "True" to none. "Exploitability ease" changed from "Exploits are available" to "No known exploits are available") Plugin metadata Plugin Feed: 202402061233
Version 1.6 Feb 7, 2024, 2:22 PM Exploit attributes ("Exploit framework core" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202402071422
Version 1.5 Feb 6, 2024, 10:48 AM CVE (set "CVE" coverage to "CVE-2022-0494,CVE-2022-0854,CVE-2022-1729,CVE-2022-1786,CVE-2022-20568,CVE-2022-23222,CVE-2022-2639,CVE-2022-28893,CVE-2022-29581,CVE-2022-48619,CVE-2023-1838,CVE-2023-4387,CVE-2023-4459") Detection (updated detection logic) Exploit attributes ("Exploit framework core" changed from "True" to none) Exploit attributes ("Exploitability ease" changed from "Exploits are available" to "No known exploits are available") Exploit attributes ("Exploited by malware" changed from "True" to none) Plugin metadata Plugin Feed: 202402061048
Version 1.4 May 2, 2023, 10:03 PM Regenerated based on advisory update Plugin Feed: 202305022203
Version 1.3 Apr 18, 2023, 10:03 AM Regenerated based on advisory update Plugin Feed: 202304181003