The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48841 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in     ice_update_vsi_tx_ring_stats() It is possible to do NULL pointer dereference in routine that updates Tx     ring stats. Currently only stats and bytes are updated when ring pointer is valid, but later on ring is     accessed to propagate gathered Tx stats onto VSI stats. Change the existing logic to move to next ring     when ring is NULL. (CVE-2022-48841)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
205371	CBL Mariner 2.0 Security Update: kernel (CVE-2022-48841)	Nessus	MarinerOS Local Security Checks	8/11/2024	8/11/2024	medium
205493	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2894-1)	Nessus	SuSE Local Security Checks	8/14/2024	8/14/2024	high

Detections

Analytics

Plugins Search

medium

high