The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1249 advisory.

    - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}
    - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402]     {CVE-2024-26602}
    - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500]     {CVE-2024-1086}
    - igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181]     {CVE-2023-45871}
    - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
    - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742]     {CVE-2022-42896}
    - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742]     {CVE-2022-42896}
    - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}
    - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
    - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : kernel (ELSA-2024-1249)

high Nessus Plugin ID 192390

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Sep 22, 2024, 3:24 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202409220324
Version 1.2 May 31, 2024, 1:01 AM CISA reference Plugin Feed: 202405310101
Version 1.1 Apr 5, 2024, 1:58 PM Exploit attributes ("Exploited by malware" set to "True") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") Plugin Feed: 202404051358
Version 1.0 Mar 21, 2024, 2:00 PM New Plugin Feed: 202403211400