The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2892-1 advisory.

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
    - CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633).
    - CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
    - CVE-2021-47619: i40e: Fix queues reservation for XDP (bsc#1226645).
    - CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
    - CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705).
    - CVE-2024-42223: media: dvb-frontends: tda10048: Fix integer overflow (bsc#1228726)
    - CVE-2024-42119: drm/amd/display: Skip finding free audio for unknown engine_id (bsc#1228584)
    - CVE-2024-42120: drm/amd/display: Check pipe offset before setting vblank (bsc#1228588)
    - CVE-2024-41095: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (bsc#1228662)
    - CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
    - CVE-2024-41072: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (bsc#1228626).
    - CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565).
    - CVE-2024-40995: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).
    - CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530).
    - CVE-2024-41066: ibmvnic: add tx check to prevent skb leak (bsc#1228640).
    - CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
    - CVE-2024-41089: drm/nouveau/dispnv04: fix null pointer dereference in (bsc#1228658)
    - CVE-2024-41060: drm/radeon: check bo_va->bo is non-NULL before using it (bsc#1228567)
    - CVE-2022-48829: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (bsc#1228055).
    - CVE-2022-48828: NFSD: Fix ia_size underflow (bsc#1228054).
    - CVE-2022-48827: NFSD: Fix the behavior of READ near OFFSET_MAX (bsc#1228037).
    - CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655).
    - CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing     (bsc#1228625).
    - CVE-2024-41064: powerpc/eeh: avoid possible crash when edev->pdev changes (bsc#1228599).
    - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
    - CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617).
    - CVE-2024-40978: scsi: qedi: Fix crash while reading debugfs attribute (bsc#1227929).
    - CVE-2022-48792: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (bsc#1228013).
    - CVE-2022-48823: scsi: qedf: Fix refcount issue when LOGO is received during TMF (bsc#1228045).
    - CVE-2024-41076: NFSv4: Fix memory leak in nfs4_set_security_label (bsc#1228649).
    - CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()     (bsc#1227866).
    - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
    - CVE-2024-40987: drm/amdgpu: fix UBSAN warning in kv_dpm.c (bsc#1228235)
    - CVE-2022-48826: drm/vc4: Fix deadlock on DSI device attach error (bsc#1227975)
    - CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
    - CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409).
    - CVE-2024-41016: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
    - CVE-2024-41063: bluetooth: hci_core: cancel all works upon hci_unregister_dev() (bsc#1228580).
    - CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers     (bsc#1228470).
    - CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581).
    - CVE-2021-47405: HID: usbhid: free raw_report buffers in usbhid_stop (bsc#1225238).
    - CVE-2024-40988: drm/radeon: fix UBSAN warning in kv_dpm.c (bsc#1227957)
    - CVE-2024-40932: drm/exynos/vidi: fix memory leak in .get_modes() (bsc#1227828)
    - CVE-2021-47403: ipack: ipoctal: fix module reference leak (bsc#1225241).
    - CVE-2021-47388: mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1225214).
    - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
    - CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
    - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
    - CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
    - CVE-2024-35837: net: mvpp2: clear BM pool before initialization (bsc#1224500).
    - CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
    - CVE-2022-48804: vt_ioctl: fix array_index_nospec in vt_setactivate (bsc#1227968).
    - CVE-2024-40967: serial: imx: Introduce timeout when waiting on transmitter empty (bsc#1227891).
    - CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
    - CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
    - CVE-2021-47582: usb: core: Do not hold the device lock while sleeping in do_proc_control()     (bsc#1226559).
    - CVE-2024-40982: ssb: fix potential NULL pointer dereference in ssb_device_uevent() (bsc#1227865).
    - CVE-2021-47468: isdn: mISDN: Fix sleeping function called from invalid context (bsc#1225346).
    - CVE-2021-47395: mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (bsc#1225326).
    - CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path     (bsc#1227936).
    - CVE-2023-52594: Fixed potential array-index-out-of-bounds read in ath9k_htc_txstatus() (bsc#1221045).
    - CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
    - CVE-2021-47580: scsi: scsi_debug: Fix type in min_t to avoid stack OOB (bsc#1226550).
    - CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
    - CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
    - CVE-2022-48811: ibmvnic: do not release napi in __ibmvnic_open() (bsc#1227928).
    - CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
    - CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
    - CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
    - CVE-2024-40941: wifi: iwlwifi: mvm: do not read past the mfuart notifcation (bsc#1227771).
    - CVE-2022-48860: ethernet: Fix error handling in xemaclite_of_probe (bsc#1228008)
    - CVE-2022-48863: mISDN: Fix memory leak in dsp_pipeline_build() (bsc#1228063).
    - CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
    - CVE-2024-39499: vmci: prevent speculation leaks by sanitizing event in event_deliver() (bsc#1227725)
    - CVE-2024-39509: HID: core: remove unnecessary WARN_ON() in implement() (bsc#1227733)
    - CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
    - CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
    - CVE-2024-40959: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (bsc#1227884).
    - CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
    - CVE-2021-47441: mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1225224)
    - CVE-2021-47194: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (bsc#1222829)
    - CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
    - CVE-2022-48775: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj (bsc#1227924).
    - CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
    - CVE-2024-40929: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (bsc#1227774).
    - CVE-2024-40912: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (bsc#1227790).
    - CVE-2024-40942: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (bsc#1227770).
    - CVE-2022-48857: NFC: port100: fix use-after-free in port100_send_complete (bsc#1228005).
    - CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
    - CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
    - CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-26830: Fixed i40e to not allow untrusted VF to remove administratively set MAC (bsc#1223012).
    - CVE-2021-47516: nfp: Fix memory leak in nfp_cpp_area_cache_add() (bsc#1225427).
    - CVE-2021-47501: i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (bsc#1225361).
    - CVE-2024-39501: drivers: core: synchronize really_probe() and dev_uevent() (bsc#1227754).
    - CVE-2023-52743: ice: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1225003)
    - CVE-2021-47542: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()     (bsc#1225455)
    - CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
    - CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
    - CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
    - CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
    - CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
    - CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
    - CVE-2021-47597: inet_diag: fix kernel-infoleak for UDP sockets (bsc#1226553).
    - CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626).
    - CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783).
    - CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
    - CVE-2023-52619: Fixed possible crash when setting number of cpus to an odd number in pstore/ram     (bsc#1221618).
    - CVE-2024-26659: Fixed wrong handling of isoc Babble and Buffer Overrun events in xhci (bsc#1222317).
    - CVE-2024-35978: Bluetooth: Fix memory leak in hci_req_sync_complete() (bsc#1224571).
    - CVE-2023-52669: crypto: s390/aes - Fix buffer overread in CTR mode (bsc#1224637).
    - CVE-2023-52615: Fixed page fault dead lock on mmap-ed hwrng (bsc#1221614).
    - CVE-2023-52612: Fixed req->dst buffer overflow in crypto/scomp (bsc#1221616).
    - CVE-2024-35995: ACPI: CPPC: Use access_width over bit_width for system memory accesses (bsc#1224557).
    - CVE-2023-52623: Fixed suspicious RCU usage in SUNRPC (bsc#1222060).
    - CVE-2021-47295: net: sched: fix memory leak in tcindex_partial_destroy_work (bsc#1224975)
    - CVE-2024-38630: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (bsc#1226908).
    - CVE-2021-47559: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (bsc#1225396).

    The following non-security bugs were fixed:

    - Fix spurious WARNING caused by a qxl driver patch (bsc#1227213,bsc#1227191)
    - Btrfs: incremental send, fix emission of invalid clone operations (bsc#1228030).
    - Btrfs: send, improve clone range (bsc#1228030).
    - KVM: PPC: Book3S HV: Do not take kvm->lock around kvm_for_each_vcpu (bsc#1065729).
    - KVM: PPC: Book3S HV: remove extraneous asterisk from rm_host_ipi_action() comment (bsc#1065729).
    - KVM: PPC: Book3S PR: Exiting split hack mode needs to fixup both PC and LR (bsc#1065729).
    - KVM: PPC: Book3S: Fix some RCU-list locks (git-fixes).
    - KVM: PPC: Book3S: Only report KVM_CAP_SPAPR_TCE_VFIO on powernv machines (bsc#1065729).
    - KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list (bsc#1065729).
    - KVM: PPC: Inform the userspace about TCE update failures (bsc#1065729).
    - KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE (bsc#1065729).
    - PCI: Fix resource double counting on remove & rescan (git-fixes).
    - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (git-fixes).
    - Tools: hv: kvp: eliminate 'may be used uninitialized' warning (git-fixes).
    - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (git-fixes).
    - btrfs: fix 64bit compat send ioctl arguments not initializing version member (bsc#1228030).
    - btrfs: fix send ioctl on 32bit with 64bit kernel (bsc#1228030).
    - btrfs: remove unused members dir_path from recorded_ref (bsc#1228030).
    - btrfs: send: add new command FILEATTR for file attributes (bsc#1228030).
    - btrfs: send: add stream v2 definitions (bsc#1228030).
    - btrfs: send: always use the rbtree based inode ref management infrastructure (bsc#1228030).
    - btrfs: send: avoid copying file data (bsc#1228030).
    - btrfs: send: explicitly number commands and attributes (bsc#1228030).
    - btrfs: send: fix failures when processing inodes with no links (bsc#1228030).
    - btrfs: send: fix send failure of a subcase of orphan inodes (bsc#1228030).
    - btrfs: send: fix sending link commands for existing file paths (bsc#1228030).
    - btrfs: send: get rid of i_size logic in send_write() (bsc#1228030).
    - btrfs: send: introduce recorded_ref_alloc and recorded_ref_free (bsc#1228030).
    - btrfs: send: prepare for v2 protocol (bsc#1228030).
    - btrfs: send: refactor arguments of get_inode_info() (bsc#1228030).
    - btrfs: send: remove stale code when checking for shared extents (bsc#1228030).
    - btrfs: send: remove unused found_type parameter to lookup_dir_item_inode() (bsc#1228030).
    - btrfs: send: remove unused send_ctx::{total,cmd}_send_size (bsc#1228030).
    - btrfs: send: use boolean types for current inode status (bsc#1228030).
    - btrfs: silence maybe-uninitialized warning in clone_range (bsc#1228030).
    - drm/vc4: dsi: Only register our component once a DSI device is (bsc#1227975)
    - hv_netvsc: rndis_filter needs to select NLS (git-fixes).
    - ipv6: sr: fix incorrect unregister order (git-fixes).
    - net: mana: Fix the extra HZ in mana_hwc_send_request (git-fixes).
    - net: mana: select PAGE_POOL (git-fixes).
    - net_sched: add a temporary refcnt for struct tcindex_data (bsc#1224975).
    - net_sched: fix a memory leak in cls_tcindex (bsc#1224975).
    - net_sched: fix a missing refcnt in tcindex_init() (bsc#1224975).
    - net_sched: hold rtnl lock in tcindex_partial_destroy_work() (bsc#1224975)
    - nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
    - ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
    - ocfs2: remove redundant assignment to variable free_space (bsc#1228409).
    - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
    - scsi: qla2xxx: Avoid possible run-time warning with long model_num (bsc#1228850).
    - scsi: qla2xxx: Complete command early within lock (bsc#1228850).
    - scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
    - scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
    - scsi: qla2xxx: During vport delete send async logout explicitly (bsc#1228850).
    - scsi: qla2xxx: Fix debugfs output for fw_resource_count (bsc#1228850).
    - scsi: qla2xxx: Fix flash read failure (bsc#1228850).
    - scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
    - scsi: qla2xxx: Fix optrom version displayed in FDMI (bsc#1228850).
    - scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
    - scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple' (bsc#1228850).
    - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (bsc#1228850).
    - scsi: qla2xxx: Unable to act on RSCN for port online (bsc#1228850).
    - scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
    - scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
    - scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
    - signal: Introduce clear_siginfo (git-fixes).
    - string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850).
    - tools lib: Fix builds when glibc contains strlcpy() (git-fixes).
    - tools: hv: fix KVP and VSS daemons exit code (git-fixes).
    - usb: add a hcd_uses_dma helper (git-fixes).
    - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (git-fixes).
    - usb: musb: da8xx: fix a resource leak in probe() (git-fixes).
    - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes).
    - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (git-fixes).
    - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (git-fixes).
    - xfs: check that dir block entries do not off the end of the buffer (git-fixes).
    - xfs: refactor xfs_verifier_error and xfs_buf_ioerror (git-fixes).
    - xfs: remove XFS_WANT_CORRUPTED_RETURN from dir3 data verifiers (git-fixes).
    - xhci: Poll for U0 after disabling USB2 LPM (git-fixes).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5257 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

    * kernel: KVM: s390: vsie: fix race during shadow creation (CVE-2023-52639)

    * kernel: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain     (CVE-2024-26808)

    * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

    * kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by     untrusted application (CVE-2024-21823)

    * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

    * kernel: xen-netfront: Add missing skb_mark_for_recycle (CVE-2024-27393)

    * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)

    * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)

    * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897)

    * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)

    * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978)

    * kernel: net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CVE-2021-47624)

    * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)

    * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)

    * kernel: KEV - Beaky Buzzard (CVE-2024-36971)

    Bug Fix(es):

    * updating nvme firmware, '# nvme list' output does not reflect the new firmware version without     rebooting.  (JIRA:RHEL-46809)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5731 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5731-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 16, 2024                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2023-52760 CVE-2024-25741 CVE-2024-27397 CVE-2024-36894                      CVE-2024-36973 CVE-2024-36978 CVE-2024-37078 CVE-2024-38619                      CVE-2024-39298 CVE-2024-39371 CVE-2024-39469 CVE-2024-39474                      CVE-2024-39484 CVE-2024-39487 CVE-2024-39494 CVE-2024-39495                      CVE-2024-39496 CVE-2024-39499 CVE-2024-39500 CVE-2024-39501                      CVE-2024-39502 CVE-2024-39503 CVE-2024-39505 CVE-2024-39506                      CVE-2024-39507 CVE-2024-39509 CVE-2024-39510 CVE-2024-40899                      CVE-2024-40900 CVE-2024-40901 CVE-2024-40902 CVE-2024-40903                      CVE-2024-40904 CVE-2024-40905 CVE-2024-40906 CVE-2024-40908                      CVE-2024-40910 CVE-2024-40911 CVE-2024-40912 CVE-2024-40913                      CVE-2024-40914 CVE-2024-40915 CVE-2024-40916 CVE-2024-40919                      CVE-2024-40920 CVE-2024-40921 CVE-2024-40924 CVE-2024-40927                      CVE-2024-40929 CVE-2024-40931 CVE-2024-40932 CVE-2024-40934                      CVE-2024-40935 CVE-2024-40937 CVE-2024-40938 CVE-2024-40939                      CVE-2024-40940 CVE-2024-40941 CVE-2024-40942 CVE-2024-40943                      CVE-2024-40947 CVE-2024-40948 CVE-2024-40953 CVE-2024-40954                      CVE-2024-40956 CVE-2024-40957 CVE-2024-40958 CVE-2024-40959                      CVE-2024-40960 CVE-2024-40961 CVE-2024-40963 CVE-2024-40966                      CVE-2024-40967 CVE-2024-40968 CVE-2024-40970 CVE-2024-40971                      CVE-2024-40974 CVE-2024-40976 CVE-2024-40977 CVE-2024-40978                      CVE-2024-40980 CVE-2024-40981 CVE-2024-40983 CVE-2024-40984                      CVE-2024-40987 CVE-2024-40988 CVE-2024-40989 CVE-2024-40990                      CVE-2024-40993 CVE-2024-40994 CVE-2024-40995 CVE-2024-40996                      CVE-2024-41000 CVE-2024-41001 CVE-2024-41002 CVE-2024-41004                      CVE-2024-41005 CVE-2024-41006

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.99-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5256 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

    * kernel: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain     (CVE-2024-26808)

    * kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

    * kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by     untrusted application (CVE-2024-21823)

    * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

    * kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)

    * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)

    * kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897)

    * kernel: net: CVE-2024-36971 kernel: UAF in network route management (CVE-2024-36971)

    * kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)

    * kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978)

    * kernel: net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CVE-2021-47624)

    * kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)

    * kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest RHEL-9.0.z Batch 19 (JIRA:RHEL-45540)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5730 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5730-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 15, 2024                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2022-43945 CVE-2022-48772 CVE-2024-25741 CVE-2024-26629                      CVE-2024-27019 CVE-2024-31076 CVE-2024-33621 CVE-2024-33847                      CVE-2024-34027 CVE-2024-35247 CVE-2024-36014 CVE-2024-36015                      CVE-2024-36016 CVE-2024-36270 CVE-2024-36286 CVE-2024-36288                      CVE-2024-36489 CVE-2024-36894 CVE-2024-36971 CVE-2024-36974                      CVE-2024-36978 CVE-2024-37078 CVE-2024-37353 CVE-2024-37356                      CVE-2024-38381 CVE-2024-38546 CVE-2024-38547 CVE-2024-38548                      CVE-2024-38549 CVE-2024-38552 CVE-2024-38555 CVE-2024-38558                      CVE-2024-38559 CVE-2024-38560 CVE-2024-38565 CVE-2024-38567                      CVE-2024-38578 CVE-2024-38579 CVE-2024-38582 CVE-2024-38583                      CVE-2024-38586 CVE-2024-38587 CVE-2024-38589 CVE-2024-38590                      CVE-2024-38596 CVE-2024-38597 CVE-2024-38598 CVE-2024-38599                      CVE-2024-38601 CVE-2024-38605 CVE-2024-38607 CVE-2024-38612                      CVE-2024-38613 CVE-2024-38615 CVE-2024-38618 CVE-2024-38619                      CVE-2024-38621 CVE-2024-38627 CVE-2024-38633 CVE-2024-38634                      CVE-2024-38635 CVE-2024-38637 CVE-2024-38659 CVE-2024-38661                      CVE-2024-38662 CVE-2024-38780 CVE-2024-39276 CVE-2024-39292                      CVE-2024-39301 CVE-2024-39467 CVE-2024-39468 CVE-2024-39469                      CVE-2024-39471 CVE-2024-39475 CVE-2024-39476 CVE-2024-39480                      CVE-2024-39482 CVE-2024-39484 CVE-2024-39488 CVE-2024-39489                      CVE-2024-39493 CVE-2024-39495 CVE-2024-39499 CVE-2024-39501                      CVE-2024-39502 CVE-2024-39503 CVE-2024-39505 CVE-2024-39506                      CVE-2024-39509 CVE-2024-40901 CVE-2024-40902 CVE-2024-40904                      CVE-2024-40905 CVE-2024-40912 CVE-2024-40916 CVE-2024-40929                      CVE-2024-40931 CVE-2024-40932 CVE-2024-40934 CVE-2024-40941                      CVE-2024-40942 CVE-2024-40943 CVE-2024-40945 CVE-2024-40958                      CVE-2024-40959 CVE-2024-40960 CVE-2024-40961 CVE-2024-40963                      CVE-2024-40968 CVE-2024-40971 CVE-2024-40974 CVE-2024-40976                      CVE-2024-40978 CVE-2024-40980 CVE-2024-40981 CVE-2024-40983                      CVE-2024-40984 CVE-2024-40987 CVE-2024-40988 CVE-2024-40990                      CVE-2024-40993 CVE-2024-40995 CVE-2024-41000 CVE-2024-41004                      CVE-2024-41005 CVE-2024-41006

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the oldstable distribution (bullseye), these problems have been fixed     in version 5.10.221-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
205494	SUSE SLES12 Security Update : kernel (SUSE-SU-2024:2892-1)	Nessus	SuSE Local Security Checks	8/14/2024	8/14/2024	high
205467	RHEL 9 : kernel (RHSA-2024:5257)	Nessus	Red Hat Local Security Checks	8/13/2024	8/13/2024	high
202501	Debian dsa-5731 : affs-modules-6.1.0-21-4kc-malta-di - security update	Nessus	Debian Local Security Checks	7/16/2024	7/25/2024	high
205403	RHEL 9 : kernel-rt (RHSA-2024:5256)	Nessus	Red Hat Local Security Checks	8/13/2024	8/13/2024	high
202458	Debian dsa-5730 : affs-modules-5.10.0-29-4kc-malta-di - security update	Nessus	Debian Local Security Checks	7/16/2024	8/7/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high