The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5207 advisory.

    Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation,     denial of service or information leaks. CVE-2022-2585 A use-after-free flaw in the implementation of POSIX     CPU timers may result in denial of service or in local privilege escalation. CVE-2022-2586 A use-after-     free in the Netfilter subsystem may result in local privilege escalation for a user with the CAP_NET_ADMIN     capability in any user or network namespace. CVE-2022-2588 Zhenpeng Lin discovered a use-after-free flaw     in the cls_route filter implementation which may result in local privilege escalation for a user with the     CAP_NET_ADMIN capability in any user or network namespace. CVE-2022-26373 It was discovered that on     certain processors with Intel's Enhanced Indirect Branch Restricted Speculation (eIBRS) capabilities there     are exceptions to the documented properties in some situations, which may result in information     disclosure. Intel's explanation of the issue can be found at     https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-     guidance/post-barrier-return-stack-buffer-predictions.html CVE-2022-29900 Johannes Wikner and Kaveh Razavi     reported that for AMD/Hygon processors, mis-trained branch predictions for return instructions may allow     arbitrary speculative code execution under certain microarchitecture-dependent conditions. A list of     affected AMD CPU types can be found at https://www.amd.com/en/corporate/product-security/bulletin/amd-     sb-1037 CVE-2022-29901 Johannes Wikner and Kaveh Razavi reported that for Intel processors (Intel Core     generation 6, 7 and 8), protections against speculative branch target injection attacks were insufficient     in some circumstances, which may allow arbitrary speculative code execution under certain     microarchitecture-dependent conditions. More information can be found at     https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-     guidance/return-stack-buffer-underflow.html CVE-2022-36879 A flaw was discovered in xfrm_expand_policies     in the xfrm subsystem which can cause a reference count to be dropped twice. CVE-2022-36946 Domingo     Dirutigliano and Nicola Guerrera reported a memory corruption flaw in the Netfilter subsystem which may     result in denial of service. For the stable distribution (bullseye), these problems have been fixed in     version 5.10.136-1. We recommend that you upgrade your linux packages. For the detailed security status of     linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5207-1 : linux - security update

high Nessus Plugin ID 164150

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.9 Jan 24, 2025, 9:25 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202501242125
Version 1.8 Jun 26, 2024, 11:05 PM CISA reference Plugin Feed: 202406262305
Version 1.7 Mar 27, 2024, 7:16 PM Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version) Plugin Feed: 202403271916
Version 1.6 Jan 15, 2024, 2:36 PM CVSSv3 score source (changed from "CVE-2022-29901" to "CVE-2022-2588") CVSS metrics ("CVSSv3 score" set to 7.8. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on CVE-2022-2588, severity increased from "Medium" to "High") Plugin Feed: 202401151436
Version 1.5 Mar 21, 2023, 7:30 PM Plugin metadata Plugin Feed: 202303211930
Version 1.4 Jan 12, 2023, 6:19 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301121819
Version 1.3 Sep 29, 2022, 12:06 AM CVSS temporal metrics Exploit attributes Plugin Feed: 202209290006