The version of kernel installed on the remote host is prior to 5.10.215-203.850. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-056 advisory.

    2024-07-03: CVE-2024-26643 was added to this advisory.

    2024-07-03: CVE-2024-26642 was added to this advisory.

    2024-07-03: CVE-2023-52458 was added to this advisory.

    2024-07-03: CVE-2024-25739 was added to this advisory.

    2024-07-03: CVE-2023-52620 was added to this advisory.

    2024-06-06: CVE-2024-35809 was added to this advisory.

    2024-06-06: CVE-2023-52482 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    block: add check that partition length needs to be aligned with block size

    Before calling add partition or resize partition, there is no checkon whether the length is aligned with     the logical block size.If the logical block size of the disk is larger than 512 bytes,then the partition     size maybe not the multiple of the logical block size,and when the last sector is read, bio_truncate()     will adjust the bio size,resulting in an IO error if the size of the read command is smaller thanthe     logical block size.If integrity data is supported, this will alsoresult in a null pointer dereference when     calling bio_integrity_free. (CVE-2023-52458)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/srso: Add SRSO mitigation for Hygon processors (CVE-2023-52482)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620)

    create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero     bytes, and crash, because of a missing check for ubi->leb_size. (CVE-2024-25739)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path

    The commit mutex should not be released during the critical sectionbetween nft_gc_seq_begin() and     nft_gc_seq_end(), otherwise, async GCworker could collect expired objects and get the released commit     lockwithin the same GC sequence.

    nf_tables_module_autoload() temporarily releases the mutex to loadmodule dependencies, then it goes back     to replay the transaction again.Move it at the end of the abort phase after nft_gc_seq_end() is called.
    (CVE-2024-26925)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI/PM: Drain runtime-idle callbacks before driver removal (CVE-2024-35809)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-056)

medium Nessus Plugin ID 197525

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Jul 5, 2024, 2:41 PM CVE (set "CVE" coverage to "CVE-2023-52458,CVE-2023-52482,CVE-2023-52620,CVE-2024-25739,CVE-2024-26642,CVE-2024-26643,CVE-2024-26925,CVE-2024-35809") CVSS metrics ("CVSSv2 score" set to 4.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") CVSSv2 score source (changed from "CVE-2023-52482" to "CVE-2024-25739") CVSSv2 severity (based on CVE-2024-25739, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202407051441
Version 1.1 Jun 8, 2024, 3:36 AM CVE (set "CVE" coverage to "CVE-2023-52482,CVE-2024-26925,CVE-2024-35809") CVSS metrics ("CVSSv2 score" set to 3.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:N/A:N") CVSS metrics ("CVSSv3 score" set to 5.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N") CVSSv2 score source (changed from "CVE-2024-26925" to "CVE-2023-52482") CVSSv2 severity (based on CVE-2023-52482, severity decreased from "Medium" to "Low") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202406080336
Version 1.0 May 21, 2024, 3:13 AM New Plugin Feed: 202405210313