The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9852 advisory.

    - media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav)  [Orabug: 31225377]  {CVE-2017-16537}
    - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914703]  {CVE-2020-14390}
    - inet: use bigger hash table for IP ID generation (Eric Dumazet)  [Orabug: 33778986]  {CVE-2021-45486}
    - media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)  [Orabug: 32759975]     {CVE-2021-30002}
    - futex: Remove requirement for lock_page() in get_futex_key() (Mel Gorman)  [Orabug: 29048998]     {CVE-2018-9422}
    - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (Zekun Shen)  [Orabug: 33784271]  {CVE-2021-43976}
    - af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566754]  {CVE-2022-3028}
    - ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)  [Orabug: 34579226]     {CVE-2022-0850}
    - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jann Horn)  [Orabug: 34594265]     {CVE-2022-2964}
    - KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (Eric Biggers)  [Orabug: 27902747]     {CVE-2017-7472}
    - KEYS: prevent creating a different user's keyrings (Eric Biggers)  [Orabug: 29013653]  {CVE-2017-18270}
    - scsi: sg: add sg_remove_request in sg_write (Wu Bo)  [Orabug: 31350699]  {CVE-2020-12770}
    - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua)  [Orabug:
    34503626]  {CVE-2022-36879}
    - ext4: verify dir block before splitting it (Jan Kara)  [Orabug: 34555416]  {CVE-2022-1184}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9852)

high Nessus Plugin ID 165663

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.6 Oct 23, 2024, 10:51 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202410232251
Version 1.5 Oct 22, 2024, 9:14 PM Plugin metadata Detection (updated detection logic) CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSS metrics ("Cvssv4 score" set to 0.0) Plugin Feed: 202410222114
Version 1.4 Mar 23, 2023, 8:46 PM Plugin requirements Plugin Feed: 202303232046
Version 1.3 Oct 6, 2022, 3:53 PM Exploit attributes Plugin Feed: 202210061553