The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48788 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free     in transport error_recovery work While nvme_rdma_submit_async_event_work is checking the ctrl and queue     state before preparing the AER command and scheduling io_work, in order to fully prevent a race where this     check is not reliable the error recovery work must flush async_event_work before continuing to destroy the     admin queue after setting the ctrl state to RESETTING such that there is no race .submit_async_event and     the error recovery handler itself changing the ctrl state. (CVE-2022-48788)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
205362	CBL Mariner 2.0 Security Update: kernel (CVE-2022-48788)	Nessus	MarinerOS Local Security Checks	2024/8/11	2024/8/11	high
205493	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2894-1)	Nessus	SuSE Local Security Checks	2024/8/14	2024/8/14	high

検出

プラグインの検索

high

high