The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6537-1 advisory.

    Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero     erasesize during device attachment. A local privileged attacker could use this to cause a denial of     service (system crash). (CVE-2023-31085)

    Lucas Leong discovered that the netfilter subsystem in the Linux kernel did not properly validate some     attributes passed from userspace. A local attacker could use this to cause a denial of service (system     crash) or possibly expose sensitive information (kernel memory). (CVE-2023-39189)

    Bien Pham discovered that the netfiler subsystem in the Linux kernel contained a race condition, leading     to a use-after-free vulnerability. A local user could use this to cause a denial of service (system crash)     or possibly execute arbitrary code. (CVE-2023-4244)

    Kyle Zeng discovered that the IPv4 implementation in the Linux kernel did not properly handle socket     buffers (skb) when performing IP routing in certain circumstances, leading to a null pointer dereference     vulnerability. A privileged attacker could use this to cause a denial of service (system crash).
    (CVE-2023-42754)

    Yikebaer Aizezi discovered that the ext4 file system implementation in the Linux kernel contained a use-     after-free vulnerability when handling inode extent metadata. An attacker could use this to construct a     malicious ext4 file system image that, when mounted, could cause a denial of service (system crash).
    (CVE-2023-45898)

    Maxim Levitsky discovered that the KVM nested virtualization (SVM) implementation for AMD processors in     the Linux kernel did not properly handle x2AVIC MSRs. An attacker in a guest VM could use this to cause a     denial of service (host kernel crash). (CVE-2023-5090)

    Jason Wang discovered that the virtio ring implementation in the Linux kernel did not properly handle iov     buffers in some situations. A local attacker in a guest VM could use this to cause a denial of service     (host system crash). (CVE-2023-5158)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly handle queue     initialization failures in certain situations, leading to a use-after-free vulnerability. A remote     attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2023-5178)

    It was discovered that the SMB network file sharing protocol implementation in the Linux kernel did not     properly handle certain error conditions, leading to a use-after-free vulnerability. A local attacker     could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2023-5345)

    Murray McAllister discovered that the VMware Virtual GPU DRM driver in the Linux kernel did not properly     handle memory objects when storing surfaces, leading to a use-after-free vulnerability. A local attacker     in a guest VM could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2023-5633)

    Budimir Markovic discovered that the perf subsystem in the Linux kernel did not properly handle event     groups, leading to an out-of-bounds write vulnerability. A local attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2023-5717)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 23.10 : Linux kernel (GCP) vulnerabilities (USN-6537-1)

high Nessus Plugin ID 186622

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.0

Version 1.4 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.3 Jun 19, 2024, 9:24 AM CVSS metrics ("CVSSv2 score" set to 9.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202406190924
Version 1.2 Jan 17, 2024, 2:38 PM CVSS metrics ("CVSSv2 score" set to 10.0. "CVSSv3 score" set to 9.8. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202401171438
Version 1.1 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin Feed: 202401100845
Version 1.0 Dec 7, 2023, 12:08 AM New Plugin Feed: 202312070008
Version 1.0 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin Feed: 202401091856