The version of kernel installed on the remote host is prior to 5.4.241-150.347. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2023-044 advisory.

  - A double-free flaw was found in the Linux kernel's TUN/TAP device driver functionality in how a user     registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw     allows a local user to crash or potentially escalate their privileges on the system. (CVE-2022-4744)

  - A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race     problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 (net: sched: fix race     condition in qdisc_graft()) not applied yet, then kernel could be affected. (CVE-2023-0590)

  - An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores     an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or     potentially escalate their privileges on the system. (CVE-2023-2124)

  - do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading     to a race condition (with a resultant use-after-free or NULL pointer dereference). (CVE-2023-28466)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2023-044)

high Nessus Plugin ID 174976

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.5 Oct 23, 2023, 4:39 PM CVSSv2 score source (changed from "CVE-2022-4744" to "CVE-2023-2124") Plugin Feed: 202310231639
Version 1.3 Aug 14, 2023, 10:00 PM Plugin metadata CVE (set "CVE" coverage to "CVE-2022-4744,CVE-2023-0590,CVE-2023-2124,CVE-2023-2194,CVE-2023-28466,CVE-2023-33203") Detection Plugin Feed: 202308142200
Version 1.2 Aug 2, 2023, 10:14 PM Plugin metadata Plugin Feed: 202308022214
Version 1.1 May 2, 2023, 2:03 PM Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202305021403
Version 1.0 May 2, 2023, 1:03 AM New Plugin Feed: 202305020103