The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5492 advisory.

    Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation,     denial of service or information leaks. CVE-2023-1206 It was discovered that the networking stack permits     attackers to force hash collisions in the IPv6 connection lookup table, which may result in denial of     service (significant increase in the cost of lookups, increased CPU utilization). CVE-2023-1989 Zheng Wang     reported a race condition in the btsdio Bluetooth adapter driver that can lead to a use-after-free. An     attacker able to insert and remove SDIO devices can use this to cause a denial of service (crash or memory     corruption) or possibly to run arbitrary code in the kernel. CVE-2023-2430 Xingyuan Mo discovered that the     io_uring subsystem did not properly handle locking when the target ring is configured with IOPOLL, which     may result in denial of service. CVE-2023-2898 It was discovered that missing sanitising in the f2fs file     system may result in denial of service if a malformed file system is accessed. CVE-2023-3611 It was     discovered that an out-of-bounds write in the traffic control subsystem for the Quick Fair Queueing     scheduler (QFQ) may result in denial of service or privilege escalation. CVE-2023-3772 Lin Ma discovered a     NULL pointer dereference flaw in the XFRM subsystem which may result in denial of service. CVE-2023-3773     Lin Ma discovered a flaw in the XFRM subsystem, which may result in denial of service for a user with the     CAP_NET_ADMIN capability in any user or network namespace. CVE-2023-3776, CVE-2023-4128, CVE-2023-4206,     CVE-2023-4207, CVE-2023-4208 It was discovered that a use-after-free in the cls_fw, cls_u32 and cls_route     network classifiers may result in denial of service or potential local privilege escalation. CVE-2023-3777     Kevin Rich discovered a use-after-free in Netfilter when flushing table rules, which may result in local     privilege escalation for a user with the CAP_NET_ADMIN capability in any user or network namespace.
    CVE-2023-3863 It was discovered that a use-after-free in the NFC implementation may result in denial of     service, an information leak or potential local privilege escalation. CVE-2023-4004 It was discovered that     a use-after-free in Netfilter's implementation of PIPAPO (PIle PAcket POlicies) may result in denial of     service or potential local privilege escalation for a user with the CAP_NET_ADMIN capability in any user     or network namespace. CVE-2023-4015 Kevin Rich discovered a use-after-free in Netfilter when handling     bound chain deactivation in certain circumstances, may result in denial of service or potential local     privilege escalation for a user with the CAP_NET_ADMIN capability in any user or network namespace.
    CVE-2023-4132 A use-after-free in the driver for Siano SMS1xxx based MDTV receivers may result in local     denial of service. CVE-2023-4147 Kevin Rich discovered a use-after-free in Netfilter when adding a rule     with NFTA_RULE_CHAIN_ID, which may result in local privilege escalation for a user with the CAP_NET_ADMIN     capability in any user or network namespace. CVE-2023-4155 Andy Nguyen discovered a flaw in the KVM     subsystem allowing a KVM guest using EV-ES or SEV-SNP to cause a denial of service. CVE-2023-4194 A type     confusion in the implementation of TUN/TAP network devices may allow a local user to bypass network     filters. CVE-2023-4273 Maxim Suhanov discovered a stack overflow in the exFAT driver, which may result in     local denial of service via a malformed file system. CVE-2023-4569 lonial con discovered flaw in the     Netfilter subsystem, which may allow a local attacker to cause a double-deactivations of catchall     elements, which results in a memory leak. CVE-2023-4622 Bing-Jhong Billy Jheng discovered a use-after-free     within the Unix domain sockets component, which may result in local privilege escalation. CVE-2023-20588     Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Koepf and Oleksii Oleksenko discovered that on some     AMD CPUs with the Zen1 micro architecture an integer division by zero may leave stale quotient data from a     previous division, resulting in a potential leak of sensitive data. CVE-2023-34319 Ross Lagerwall     discovered a buffer overrun in Xen's netback driver which may allow a Xen guest to cause denial of service     to the virtualisation host my sending malformed packets. CVE-2023-40283 A use-after-free was discovered in     Bluetooth L2CAP socket handling. For the stable distribution (bookworm), these problems have been fixed in     version 6.1.52-1. This update is released without armel builds. Changes in the new stable series import     cause a substantial increase of the compressed image for marvell flavour. This issue will be addressed in     a future linux update. We recommend that you upgrade your linux packages. For the detailed security status     of linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5492-1 : linux - security update

critical Nessus Plugin ID 181209

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.5 Jan 27, 2025, 7:07 AM CVSSv2 score source (changed from "CVE-2023-20588" to "CVE-2023-4208") CVSSv3 score source (changed from "CVE-2023-4208" to none) Plugin Feed: 202501270707
Version 1.4 Jan 24, 2025, 9:25 PM CVSS metrics ("CVSSv2 score" set to 6.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H") CVSSv2 severity (based on CVE-2023-20588, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202501242125
Version 1.3 Mar 27, 2024, 7:16 PM Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version) Plugin Feed: 202403271916
Version 1.2 Dec 25, 2023, 2:08 PM CVSSv3 score source (changed from "CVE-2023-4622" to "CVE-2023-4208") Plugin Feed: 202312251408
Version 1.1 Dec 5, 2023, 2:37 PM CVSSv3 score source (changed from "CVE-2023-4147" to "CVE-2023-4622") Plugin Feed: 202312051437
Version 1.0 Sep 10, 2023, 2:07 PM New Plugin Feed: 202309101407