The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50193 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: x86/entry_32: Clear CPU buffers after     register restore in NMI return CPU buffers are currently cleared after call to exc_nmi, but before     register state is restored. This May be okay for MDS mitigation but not for RDFS. Because RDFS mitigation     requires CPU buffers to be cleared when registers don't have any sensitive data. Move CLEAR_CPU_BUFFERS     after RESTORE_ALL_NMI. (CVE-2024-50193)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
212813	CBL Mariner 2.0 Security Update: kernel (CVE-2024-50193)	Nessus	MarinerOS Local Security Checks	12/13/2024	12/13/2024	high
213191	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12887)	Nessus	Oracle Linux Local Security Checks	12/18/2024	12/18/2024	critical
213470	Debian dla-4008 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	1/3/2025	1/3/2025	critical

Detections

Analytics

Plugins Search

high

critical

critical