The version of kernel installed on the remote host is prior to 5.15.165-110.161. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-051 advisory.

    2024-12-05: CVE-2024-41042 was added to this advisory.

    2024-09-26: CVE-2024-42302 was added to this advisory.

    2024-09-12: CVE-2024-43870 was added to this advisory.

    2024-09-12: CVE-2024-44934 was added to this advisory.

    2024-09-12: CVE-2024-43869 was added to this advisory.

    2024-09-12: CVE-2024-43873 was added to this advisory.

    2024-09-12: CVE-2024-44944 was added to this advisory.

    2024-09-12: CVE-2024-43871 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    tls: fix race between tx work scheduling and socket close

    Similarly to previous commit, the submitting thread (recvmsg/sendmsg)may exit as soon as the async crypto     handler calls complete().Reorder scheduling the work before calling complete().This seems more logical in     the first place, as it'sthe inverse order of what the submitting thread will do. (CVE-2024-26585)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: prefer nft_chain_validate (CVE-2024-41042)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (CVE-2024-42259)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (CVE-2024-42302)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix event leak upon exec and file release (CVE-2024-43869)

    In the Linux kernel, the following vulnerability has been resolved:

    perf: Fix event leak upon exit (CVE-2024-43870)

    In the Linux kernel, the following vulnerability has been resolved:

    devres: Fix memory leakage caused by driver API devm_free_percpu() (CVE-2024-43871)

    In the Linux kernel, the following vulnerability has been resolved:

    vhost/vsock: always initialize seqpacket_allow (CVE-2024-43873)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: mcast: wait for previous gc cycles when removing port (CVE-2024-44934)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ctnetlink: use helper function to calculate expect ID (CVE-2024-44944)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-051)

high Nessus Plugin ID 206819

Version 1.5