The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7337 advisory.

    - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}
    - x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
    - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227]     {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini)     [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227]     {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900     CVE-2022-29901}
    - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227]     {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900     CVE-2022-29901}
    - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900     CVE-2022-29901}
    - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900     CVE-2022-29901}
    - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900     CVE-2022-29901}
    - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227]     {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227]     {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816     CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
    - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825     CVE-2022-29900 CVE-2022-29901}
    - net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : kernel (ELSA-2022-7337)

high Nessus Plugin ID 166937

Version 1.6