The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3414 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

    * kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)

    * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)

    * kernel: netfilter: nftables: exthdr: fix 4-byte stack OOB write (CVE-2023-52628)

    * kernel: Use-after-free in nft_verdict_dump due to a race between set GC and transaction (CVE-2023-4244)

    * kernel: inactive elements in nft_pipapo_walk (CVE-2023-6817)

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest RHEL-9.0.z Batch 17 (JIRA:RHEL-32673)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : kernel-rt (RHSA-2024:3414)

high Nessus Plugin ID 197981

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Nov 7, 2024, 5:29 PM CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata CVSS metrics ("Cvssv4 score" set to 0.0) Plugin Feed: 202411071729
Version 1.3 May 31, 2024, 1:01 AM CISA reference Plugin Feed: 202405310101
Version 1.2 May 29, 2024, 10:26 AM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202405291026
Version 1.1 May 28, 2024, 11:48 PM New Plugin Feed: 202405282348