The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7549 advisory.

    - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Mauro Carvalho Chehab)     {CVE-2022-45884}
    - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) {CVE-2023-1192}
    - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) {CVE-2023-5178}
    - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) {CVE-2023-3812}
    - bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) (Andrii     Nakryiko) {CVE-2023-2163}
    - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim)     {CVE-2022-45919}
    - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim} {CVE-2022-45886}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : kernel (ELSA-2023-7549)

high Nessus Plugin ID 186522

Version 1.7