The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6767-2 advisory.

    Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-     bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system     crash). (CVE-2024-23849)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - S390 architecture;

    - Block layer subsystem;

    - Android drivers;

    - Hardware random number generator core;

    - GPU drivers;

    - Hardware monitoring drivers;

    - I2C subsystem;

    - IIO Magnetometer sensors drivers;

    - InfiniBand drivers;

    - Network drivers;

    - PCI driver for MicroSemi Switchtec;

    - PHY drivers;

    - Ceph distributed file system;

    - Ext4 file system;

    - JFS file system;

    - NILFS2 file system;

    - Pstore file system;

    - Core kernel;

    - Memory management;

    - CAN network layer;

    - Networking core;

    - IPv4 networking;

    - Logical Link layer;

    - Netfilter;

    - NFC subsystem;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Realtek audio codecs; (CVE-2024-26696, CVE-2023-52583, CVE-2024-26720, CVE-2023-52615, CVE-2023-52599,     CVE-2023-52587, CVE-2024-26635, CVE-2024-26704, CVE-2024-26625, CVE-2024-26825, CVE-2023-52622,     CVE-2023-52435, CVE-2023-52617, CVE-2023-52598, CVE-2024-26645, CVE-2023-52619, CVE-2024-26593,     CVE-2024-26685, CVE-2023-52602, CVE-2023-52486, CVE-2024-26697, CVE-2024-26675, CVE-2024-26600,     CVE-2023-52604, CVE-2024-26664, CVE-2024-26606, CVE-2023-52594, CVE-2024-26671, CVE-2024-26598,     CVE-2024-26673, CVE-2024-26920, CVE-2024-26722, CVE-2023-52601, CVE-2024-26602, CVE-2023-52637,     CVE-2023-52623, CVE-2024-26702, CVE-2023-52597, CVE-2024-26684, CVE-2023-52606, CVE-2024-26679,     CVE-2024-26663, CVE-2024-26910, CVE-2024-26615, CVE-2023-52595, CVE-2023-52607, CVE-2024-26636)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-6767-2)

high Nessus Plugin ID 196947

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Jan 15, 2025, 7:16 AM CVSSv2 score source (changed from "CVE-2024-26625" to "CVE-2024-26704") Plugin Feed: 202501150716
Version 1.3 Jan 8, 2025, 10:03 AM CVSSv2 score source (changed from "CVE-2024-26598" to "CVE-2024-26625") Plugin Feed: 202501081003
Version 1.2 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202408281943
Version 1.1 Jul 10, 2024, 6:14 PM Plugin metadata Plugin Feed: 202407101814
Version 1.0 May 14, 2024, 11:03 PM New Plugin Feed: 202405142303