The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3336-1 advisory.

    This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
    - CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
    - CVE-2022-48662: Fixed GPF in i915_perf_open_ioctl (bsc#1223521).
    - CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
    - CVE-2024-35950: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
    - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
    - CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
    - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
    - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
    - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : kernel RT (Live Patch 13 for SLE 15 SP5) (SUSE-SU-2024:3336-1)

high Nessus Plugin ID 207503

Version 1.2

Version 1.1

Version 1.2 Dec 16, 2024, 6:32 AM CVSSv2 score source (changed from "CVE-2022-48662" to "CVE-2024-26610") Plugin Feed: 202412160632
Version 1.1 Sep 20, 2024, 9:11 AM New Plugin Feed: 202409200911