The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-22999 advisory.

  - In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the     dwc3_qcom_create_urs_usb_platdev return value (expects it to be NULL in the error case, whereas it is     actually an error pointer). (CVE-2023-22999)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
173474	CBL Mariner 2.0 Security Update: kernel (CVE-2023-22999)	Nessus	MarinerOS Local Security Checks	3/28/2023	2/10/2025	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	4/10/2025	critical

Detections

Analytics

Plugins Search

medium

critical