The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2004 advisory.

    - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}
    - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458]     {CVE-2023-4623}
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
    - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
    - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682]     {CVE-2023-2002}
    - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682]     {CVE-2023-2002}
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
    - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
    - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402]     {CVE-2024-26602}
    - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682]     {CVE-2023-2002}
    - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682]     {CVE-2023-2002}
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : kernel (ELSA-2024-2004)

critical Nessus Plugin ID 193813

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Sep 23, 2024, 7:12 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") Plugin Feed: 202409230712
Version 1.1 Sep 22, 2024, 3:24 AM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H") Plugin metadata Plugin Feed: 202409220324
Version 1.0 Apr 25, 2024, 12:03 AM New Plugin Feed: 202404250003