The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7344-1 advisory.

    Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2024-23848)

    Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap     overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted,     could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - GPIO subsystem;

    - GPU drivers;

    - Media drivers;

    - Network drivers;

    - SCSI subsystem;

    - Direct Digital Synthesis drivers;

    - TTY drivers;

    - 9P distributed file system;

    - JFS file system;

    - NILFS2 file system;

    - File systems infrastructure;

    - BPF subsystem;

    - Netfilter;

    - Memory management;

    - Amateur Radio drivers;

    - B.A.T.M.A.N. meshing protocol;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Open vSwitch;

    - Network traffic control;

    - TIPC protocol;

    - Wireless networking; (CVE-2024-50134, CVE-2024-40981, CVE-2022-48772, CVE-2024-43900, CVE-2023-52488,     CVE-2024-49902, CVE-2023-52880, CVE-2024-50229, CVE-2024-43892, CVE-2024-42068, CVE-2024-40910,     CVE-2024-26685, CVE-2024-43863, CVE-2024-53104, CVE-2024-41064, CVE-2023-52799, CVE-2024-42070,     CVE-2024-35896, CVE-2024-44931, CVE-2024-40943, CVE-2024-36952, CVE-2024-38558, CVE-2024-50171,     CVE-2023-52522, CVE-2024-36964, CVE-2024-53156, CVE-2024-41063, CVE-2024-50117, CVE-2023-52818,     CVE-2024-43893, CVE-2024-50233, CVE-2024-44938, CVE-2024-36886, CVE-2024-38567, CVE-2024-53164,     CVE-2024-50148, CVE-2024-40911)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7344-1)

high Nessus Plugin ID 232629

Version 1.1