The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50143 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in     udf_get_fileshortad Check for overflow when computing alen in udf_current_aext to mitigate later uninit-     value use in udf_get_fileshortad KMSAN bug[1]. After applying the patch reproducer did not trigger any     issue[2]. [1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df [2]     https://syzkaller.appspot.com/x/log.txt?x=10242227980000 (CVE-2024-50143)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
212877	CBL Mariner 2.0 Security Update: kernel (CVE-2024-50143)	Nessus	MarinerOS Local Security Checks	12/13/2024	12/13/2024	high
213056	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12884)	Nessus	Oracle Linux Local Security Checks	12/16/2024	12/17/2024	critical
213191	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12887)	Nessus	Oracle Linux Local Security Checks	12/18/2024	12/18/2024	critical

Detections

Analytics

Plugins Search

high

critical

critical