The version of kernel installed on the remote host is prior to 5.10.218-206.860. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-062 advisory.

    2024-07-03: CVE-2024-36889 was added to this advisory.

    2024-07-03: CVE-2023-52585 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: flower: protect fl_walk() with rcu (CVE-2021-47402)

    A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to     host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX)     file locks. (CVE-2022-0480)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (CVE-2023-52585)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/psi: Fix use-after-free in ep_remove_wait_queue() (CVE-2023-52707)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-062)

medium Nessus Plugin ID 200921

Version 1.2

Version 1.1

Version 1.2 Jul 5, 2024, 2:41 PM CVE (set "CVE" coverage to "CVE-2021-47402,CVE-2022-0480,CVE-2023-52585,CVE-2023-52707,CVE-2024-36889") Detection (updated detection logic) Plugin metadata Plugin Feed: 202407051441
Version 1.1 Jun 25, 2024, 3:40 AM New Plugin Feed: 202406250340