The version of kernel installed on the remote host is prior to 5.4.272-185.370. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2024-089 advisory.

    2025-01-21: CVE-2024-26851 was added to this advisory.

    2025-01-21: CVE-2024-27024 was added to this advisory.

    2025-01-21: CVE-2024-26820 was added to this advisory.

    2025-01-21: CVE-2024-26857 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (CVE-2024-26820)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_conntrack_h323: Add protection for bmp length out of range (CVE-2024-26851)

    In the Linux kernel, the following vulnerability has been resolved:

    net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (CVE-2024-26852)

    In the Linux kernel, the following vulnerability has been resolved:

    geneve: make sure to pull inner header in geneve_rx() (CVE-2024-26857)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: fix WARNING in rds_conn_connect_if_down (CVE-2024-27024)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2024-089)

high Nessus Plugin ID 213348

Version 1.2

Version 1.1

Version 1.2 Jan 22, 2025, 6:57 AM CVE (set "CVE" coverage to "CVE-2024-26820,CVE-2024-26851,CVE-2024-26852,CVE-2024-26857,CVE-2024-27024") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 score source (changed from "CVE-2024-26852" to "CVE-2024-27024") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202501220657
Version 1.1 Dec 24, 2024, 3:17 AM New Plugin Feed: 202412240317