The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kernel: out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c (CVE-2019-19816)

  - Kernel: use-after-free in btf_dump_name_dups in tools/lib/bpf/btf_dump.c (CVE-2022-3534)

  - drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel before 4.16 allows local users to cause a denial     of service (ata qc leak) by triggering certain failure conditions. NOTE: a third party disputes the     relevance of this report because the failure can only occur for physically proximate attackers who unplug     SAS Host Bus Adapter cables (CVE-2018-10021)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Ubuntu 22.04 LTS / 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6502-1 advisory.

    Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA     driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote     attacker could possibly use this to execute arbitrary code. (CVE-2023-25775)

    Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero     erasesize during device attachment. A local privileged attacker could use this to cause a denial of     service (system crash). (CVE-2023-31085)

    Manfred Rudigier discovered that the Intel(R) PCI-Express Gigabit (igb) Ethernet driver in the Linux     kernel did not properly validate received frames that are larger than the set MTU size, leading to a     buffer overflow vulnerability. An attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2023-45871)

    Maxim Levitsky discovered that the KVM nested virtualization (SVM) implementation for AMD processors in     the Linux kernel did not properly handle x2AVIC MSRs. An attacker in a guest VM could use this to cause a     denial of service (host kernel crash). (CVE-2023-5090)

    It was discovered that the SMB network file sharing protocol implementation in the Linux kernel did not     properly handle certain error conditions, leading to a use-after-free vulnerability. A local attacker     could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2023-5345)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
199272	RHEL 8 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/22/2024	high
186081	Ubuntu 22.04 LTS / 23.04 : Linux kernel vulnerabilities (USN-6502-1)	Nessus	Ubuntu Local Security Checks	11/21/2023	8/27/2024	critical

Detections

Analytics

Plugins Search

high

critical