The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5603 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and     cls_route (CVE-2023-4128)

    * kernel: nf_tables: use-after-free in nft_chain_lookup_byid() (CVE-2023-31248)

    * kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)

    * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)

    * kernel: hash collisions in the IPv6 connection lookup table (CVE-2023-1206)

    * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

    * kernel: fbcon: shift-out-of-bounds in fbcon_set_font() (CVE-2023-3161)

    * kernel: denial of service problem in net/unix/diag.c (CVE-2023-28327)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest RHEL-9.0.z12 Batch (BZ#2232645)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : kernel-rt (RHSA-2023:5603)

high Nessus Plugin ID 182840

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.1

Version 1.0

Version 1.4 Nov 7, 2024, 5:29 PM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H") Plugin metadata Plugin Feed: 202411071729
Version 1.3 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404281425
Version 1.2 Jan 26, 2024, 11:18 PM Plugin metadata Plugin Feed: 202401262318
Version 1.1 Nov 15, 2023, 2:17 PM CVSSv2 score source (changed from "CVE-2023-4128" to "CVE-2023-35788") Plugin Feed: 202311151417
Version 1.1 Jan 26, 2024, 9:00 PM Plugin metadata Plugin Feed: 202401262100
Version 1.0 Oct 11, 2023, 12:06 AM New Plugin Feed: 202310110006