Updated kernel packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.

The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance (PI) futexes. A local, unprivileged user could use this flaw to escalate their privileges on the system. (CVE-2014-3153, Important)

* A use-after-free flaw was found in the way the ping_init_sock() function of the Linux kernel handled the group_info reference counter.
A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-2851, Important)

* Use-after-free and information leak flaws were found in the way the Linux kernel's floppy driver processed the FDRAWCMD IOCTL command. A local user with write access to /dev/fdX could use these flaws to escalate their privileges on the system. (CVE-2014-1737, CVE-2014-1738, Important)

* It was found that the aio_read_events_ring() function of the Linux kernel's Asynchronous I/O (AIO) subsystem did not properly sanitize the AIO ring head received from user space. A local, unprivileged user could use this flaw to disclose random parts of the (physical) memory belonging to the kernel and/or other processes. (CVE-2014-0206, Moderate)

* An out-of-bounds memory access flaw was found in the Netlink Attribute extension of the Berkeley Packet Filter (BPF) interpreter functionality in the Linux kernel's networking implementation. A local, unprivileged user could use this flaw to crash the system or leak kernel memory to user space via a specially crafted socket filter. (CVE-2014-3144, CVE-2014-3145, Moderate)

* An information leak flaw was found in the way the skb_zerocopy() function copied socket buffers (skb) that are backed by user-space buffers (for example vhost-net and Xen netback), potentially allowing an attacker to read data from those buffers. (CVE-2014-2568, Low)

Red Hat would like to thank Kees Cook of Google for reporting CVE-2014-3153 and Matthew Daley for reporting CVE-2014-1737 and CVE-2014-1738. Google acknowledges Pinkie Pie as the original reporter of CVE-2014-3153. The CVE-2014-0206 issue was discovered by Mateusz Guzik of Red Hat.

This update also fixes the following bugs :

* Due to incorrect calculation of Tx statistics in the qlcninc driver, running the 'ethtool -S ethX' command could trigger memory corruption.
As a consequence, running the sosreport tool, that uses this command, resulted in a kernel panic. The problem has been fixed by correcting the said statistics calculation. (BZ#1104972)

* When an attempt to create a file on the GFS2 file system failed due to a file system quota violation, the relevant VFS inode was not completely uninitialized. This could result in a list corruption error. This update resolves this problem by correctly uninitializing the VFS inode in this situation. (BZ#1097407)

* Due to a race condition in the kernel, the getcwd() system call could return '/' instead of the correct full path name when querying a path name of a file or directory. Paths returned in the '/proc' file system could also be incorrect. This problem was causing instability of various applications. The aforementioned race condition has been fixed and getcwd() now always returns the correct paths. (BZ#1099048)

In addition, this update adds the following enhancements :

* The kernel mutex code has been improved. The changes include improved queuing of the MCS spin locks, the MCS code optimization, introduction of the cancellable MCS spin locks, and improved handling of mutexes without wait locks. (BZ#1103631, BZ#1103629)

* The handling of the Virtual Memory Area (VMA) cache and huge page faults has been improved. (BZ#1103630)

All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements. The system must be rebooted for this update to take effect.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002366 advisory.

    Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1     allows local users to cause a denial of service (use-after-free and system crash) or possibly gain     privileges via a crafted application that leverages an improperly managed reference counter.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from kernel memory.
(CVE-2014-1738)

Matthew Daley reported a flaw in the handling of ioctl commands by the floppy disk driver in the Linux kernel. An unprivileged local user could exploit this flaw to gain administrative privileges if the floppy disk module is loaded. (CVE-2014-1737)

A flaw was discovered in the vhost-net subsystem of the Linux kernel.
Guest OS users could exploit this flaw to cause a denial of service (host OS crash). (CVE-2014-0055)

A flaw was discovered in the handling of network packets when mergeable buffers are disabled for virtual machines in the Linux kernel. Guest OS users may exploit this flaw to cause a denial of service (host OS crash) or possibly gain privilege on the host OS.
(CVE-2014-0077)

Nikolay Aleksandrov discovered a race condition in Linux kernel's IPv4 fragment handling code. Remote attackers could exploit this flaw to cause a denial of service (system crash) or possibly have other unspecified impact. (CVE-2014-0100)

A flaw was discovered in the Linux kernel's handling of the SCTP handshake. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2014-0101)

A flaw was discovered in the handling of routing information in Linux kernel's IPv6 stack. A remote attacker could exploit this flaw to cause a denial of service (memory consumption) via a flood of ICMPv6 router advertisement packets. (CVE-2014-2309)

An error was discovered in the Linux kernel's DCCP protocol support. A remote attacked could exploit this flaw to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2014-2523)

Max Sydorenko discovered a race condition in the Atheros 9k wireless driver in the Linux kernel. This race could be exploited by remote attackers to cause a denial of service (system crash). (CVE-2014-2672)

Adhemerval Zanella Neto discovered a flaw the in the Transactional Memory (TM) implementation for powerpc based machine. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-2673)

An error was discovered in the Reliable Datagram Sockets (RDS) protocol stack in the Linux kernel. A local user could exploit this flaw to cause a denial of service (system crash) or possibly have unspecified other impact. (CVE-2014-2678)

Yaara Rozenblum discovered a race condition in the Linux kernel's Generic IEEE 802.11 Networking Stack (mac80211). Remote attackers could exploit this flaw to cause a denial of service (system crash).
(CVE-2014-2706)

A flaw was discovered in the Linux kernel's ping sockets. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain privileges via a crafted application. (CVE-2014-2851).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0981 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    * A use-after-free flaw was found in the way the ping_init_sock() function     of the Linux kernel handled the group_info reference counter. A local,     unprivileged user could use this flaw to crash the system or, potentially,     escalate their privileges on the system. (CVE-2014-2851, Important)

    * A NULL pointer dereference flaw was found in the way the     futex_wait_requeue_pi() function of the Linux kernel's futex subsystem     handled the requeuing of certain Priority Inheritance (PI) futexes.
    A local, unprivileged user could use this flaw to crash the system.
    (CVE-2012-6647, Moderate)

    * A NULL pointer dereference flaw was found in the rds_ib_laddr_check()     function in the Linux kernel's implementation of Reliable Datagram Sockets     (RDS). A local, unprivileged user could use this flaw to crash the system.
    (CVE-2013-7339, Moderate)

    * It was found that a remote attacker could use a race condition flaw in     the ath_tx_aggr_sleep() function to crash the system by creating large     network traffic on the system's Atheros 9k wireless network adapter.
    (CVE-2014-2672, Moderate)

    * A NULL pointer dereference flaw was found in the rds_iw_laddr_check()     function in the Linux kernel's implementation of Reliable Datagram Sockets     (RDS). A local, unprivileged user could use this flaw to crash the system.
    (CVE-2014-2678, Moderate)

    * A race condition flaw was found in the way the Linux kernel's mac80211     subsystem implementation handled synchronization between TX and STA wake-up     code paths. A remote attacker could use this flaw to crash the system.
    (CVE-2014-2706, Moderate)

    * An out-of-bounds memory access flaw was found in the Netlink Attribute     extension of the Berkeley Packet Filter (BPF) interpreter functionality in     the Linux kernel's networking implementation. A local, unprivileged user     could use this flaw to crash the system or leak kernel memory to user space     via a specially crafted socket filter. (CVE-2014-3144, CVE-2014-3145,     Moderate)

    This update also fixes several bugs and adds one enhancement.
    Documentation for these changes will be available shortly from the     Technical Notes document linked to in the References section.

    All kernel users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues and add this     enhancement. The system must be rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.4 Extended Update Support.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A use-after-free flaw was found in the way the ping_init_sock() function of the Linux kernel handled the group_info reference counter.
A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-2851, Important)

* A NULL pointer dereference flaw was found in the rds_ib_laddr_check() function in the Linux kernel's implementation of Reliable Datagram Sockets (RDS). A local, unprivileged user could use this flaw to crash the system. (CVE-2013-7339, Moderate)

* It was found that a remote attacker could use a race condition flaw in the ath_tx_aggr_sleep() function to crash the system by creating large network traffic on the system's Atheros 9k wireless network adapter. (CVE-2014-2672, Moderate)

* A NULL pointer dereference flaw was found in the rds_iw_laddr_check() function in the Linux kernel's implementation of Reliable Datagram Sockets (RDS). A local, unprivileged user could use this flaw to crash the system. (CVE-2014-2678, Moderate)

* A race condition flaw was found in the way the Linux kernel's mac80211 subsystem implementation handled synchronization between TX and STA wake-up code paths. A remote attacker could use this flaw to crash the system. (CVE-2014-2706, Moderate)

This update also fixes the following bugs :

* The Completely Fair Scheduler (CFS) did not verify whether the CFS period timer is running while throttling tasks on the CFS run queue.
Therefore under certain circumstances, the CFS run queue became stuck because the CFS period timer was inactive and could not be restarted.
To fix this problem, the CFS now restarts the CFS period timer inside the throttling function if it is inactive. (BZ#1120666)

* A previous change to the SCSI code fixed a race condition that could occur when removing a SCSI device. However, that change caused performance degradation because it used a certain function from the block layer code that was returning different values compared with later versions of the kernel. This update alters the SCSI code to properly utilize the values returned by the block layer code.
(BZ#1117581)

* If a statically defined gateway became unreachable and its corresponding neighbor entry entered a FAILED state, the gateway stayed in the FAILED state even after it became reachable again. This prevented routing of the traffic through that gateway. This update allows probing such a gateway automatically and routing the traffic through the gateway again once it becomes reachable. (BZ#1115262)

* A miscalculation in the 'radix_tree' swap encoding corrupted swap area indexes bigger than 8 by truncating lower bits of swap entries.
Consequently, systems with more than 8 swap areas could trigger a bogus OOM scenario when swapping out to such a swap area. This update fixes this problem by reducing a return value of the SWP_TYPE_SHIFT() function and removing a broken function call from the read_swap_header() function. (BZ#1099727)

* The automatic route cache rebuilding feature could incorrectly compute the length of a route hash chain if the cache contained multiple entries with the same key but a different TOS, mark, or OIF bit. Consequently, the feature could reach the rebuild limit and disable the routing cache on the system. This problem is fixed by using a helper function that avoids counting such duplicate routes.
(BZ#1113823)

* When booting a guest in the Hyper-V environment and enough of Programmable Interval Timer (PIT) interrupts were lost or not injected into the guest on time, the kernel panicked and the guest failed to boot. This problem has been fixed by bypassing the relevant PIT check when the guest is running under the Hyper-V environment. (BZ#1112225)

All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-490:04 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system.  The     kernel handles the basic functions of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2012-6647     The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that     calls have two different futex addresses, which allows local users to cause a denial of service (NULL     pointer dereference and system crash) or possibly have unspecified other impact via a crafted     FUTEX_WAIT_REQUEUE_PI command.
    CVE-2013-7339     The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to     cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other     impact via a bind system call for an RDS socket on a system that lacks RDS transports.
    CVE-2014-2672     Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux     kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via a large     amount of network traffic that triggers certain list deletions.
    CVE-2014-2678     The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to     cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other     impact via a bind system call for an RDS socket on a system that lacks RDS transports.
    CVE-2014-2706     Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to     cause a denial of service (system crash) via network traffic that improperly interacts with the     WLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and tx.c.
    CVE-2014-2851     Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1     allows local users to cause a denial of service (use-after-free and system crash) or possibly gain     privileges via a crafted application that leverages an improperly managed reference counter.
    CVE-2014-3144     The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter     function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length     value is sufficiently large, which allows local users to cause a denial of service (integer underflow and     system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr and
    __skb_get_nlattr_nest functions before the vulnerability was announced.
    CVE-2014-3145     The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in     the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users     to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected     code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.
    CVE-2014-4699     The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value     for the saved RIP address in the case of a system call that does not use IRET, which allows local users to     leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted     application that makes ptrace and fork system calls.
    CVE-2014-4943     The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain     privileges by leveraging data-structure differences between an l2tp socket and an inet socket.
    Fixed bugs:
    See changelog.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0057 for details.

The Linux kernel was updated to fix security issues and bugs.

Security issues fixed: CVE-2014-3153: The futex_requeue function in kernel/futex.c in the Linux kernel did not ensure that calls have two different futex addresses, which allowed local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

CVE-2014-3144: The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel did not check whether a certain length value is sufficiently large, which allowed local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the
__skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.

CVE-2014-3145: The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel used the reverse order in a certain subtraction, which allowed local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the
__skb_get_nlattr_nest function before the vulnerability was announced.

CVE-2014-0077: drivers/vhost/net.c in the Linux kernel, when mergeable buffers are disabled, did not properly validate packet lengths, which allowed guest OS users to cause a denial of service (memory corruption and host OS crash) or possibly gain privileges on the host OS via crafted packets, related to the handle_rx and get_rx_bufs functions.

CVE-2014-0055: The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package did not properly handle vhost_get_vq_desc errors, which allowed guest OS users to cause a denial of service (host OS crash) via unspecified vectors.

CVE-2014-2678: The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.

CVE-2013-7339: The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.

CVE-2014-2851: Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel allowed local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.

  - ext4: Fix buffer double free in ext4_alloc_branch()     (bnc#880599 bnc#876981).

  - patches.fixes/firewire-01-net-fix-use-after-free.patch,     patches.fixes/firewire-02-ohci-fix-probe-failure-with-ag     ere-lsi-controllers.patch,     patches.fixes/firewire-03-dont-use-prepare_delayed_work.
    patch: Add missing bug reference (bnc#881697).

  - firewire: don't use PREPARE_DELAYED_WORK.

  - firewire: ohci: fix probe failure with Agere/LSI     controllers.

  - firewire: net: fix use after free.

  - USB: OHCI: fix problem with global suspend on ATI     controllers (bnc#868315).

  - mm: revert 'page-writeback.c: subtract min_free_kbytes     from dirtyable memory' (bnc#879792).

  - usb: musb: tusb6010: Use musb->tusb_revision instead of     tusb_get_revision call (bnc#872715).

  - usb: musb: tusb6010: Add tusb_revision to struct musb to     store the revision (bnc#872715).

  - ALSA: hda - Fix onboard audio on Intel H97/Z97 chipsets     (bnc#880613).

  - floppy: do not corrupt bio.bi_flags when reading block 0     (bnc#879258).

  - reiserfs: call truncate_setsize under tailpack mutex     (bnc#878115).

  - Update Xen config files: Set compatibility level back to     4.1 (bnc#851338).

  - Update config files. Guillaume GARDET reported a broken     build due to CONFIG_USB_SERIAL_GENERIC being modular

  - memcg: deprecate memory.force_empty knob (bnc#878274).

  - nfsd: when reusing an existing repcache entry, unhash it     first (bnc#877721).

  - Enable Socketcan again for i386 and x86_64 (bnc#858067)

  - xhci: extend quirk for Renesas cards (bnc#877713).

  - xhci: Fix resume issues on Renesas chips in Samsung     laptops (bnc#877713).

  - mm: try_to_unmap_cluster() should lock_page() before     mlocking (bnc#876102, CVE-2014-3122).

  - drm/i915, HD-audio: Don't continue probing when     nomodeset is given (bnc#882648).

  - x86/mm/numa: Fix 32-bit kernel NUMA boot (bnc#881727).

The Linux kernel was updated to fix security issues and bugs :

Security issues fixed: CVE-2014-3153: The futex_requeue function in kernel/futex.c in the Linux kernel did not ensure that calls have two different futex addresses, which allowed local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

CVE-2014-0077: drivers/vhost/net.c in the Linux kernel, when mergeable buffers are disabled, did not properly validate packet lengths, which allowed guest OS users to cause a denial of service (memory corruption and host OS crash) or possibly gain privileges on the host OS via crafted packets, related to the handle_rx and get_rx_bufs functions.

CVE-2014-0055: The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package did not properly handle vhost_get_vq_desc errors, which allowed guest OS users to cause a denial of service (host OS crash) via unspecified vectors.

CVE-2014-2678: The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.

CVE-2013-7339: The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.

CVE-2014-2851: Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel allowed local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.

CVE-2014-3122: The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel did not properly consider which pages must be locked, which allowed local users to cause a denial of service (system crash) by triggering a memory-usage pattern that requires removal of page-table mappings.

Bugs fixed :

  - memcg: deprecate memory.force_empty knob (bnc#878274).

ID	名前	製品	ファミリー	公開日	更新日	深刻度
76901	RHEL 7 : kernel (RHSA-2014:0786)	Nessus	Red Hat Local Security Checks	2014/7/30	2022/5/25	high
287291	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002366)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/15	high
74215	Ubuntu 13.10 : linux vulnerabilities (USN-2228-1)	Nessus	Ubuntu Local Security Checks	2014/5/28	2021/1/19	critical
76908	RHEL 6 : kernel (RHSA-2014:0981)	Nessus	Red Hat Local Security Checks	2014/7/30	2025/4/15	medium
79043	RHEL 6 : kernel (RHSA-2014:1101)	Nessus	Red Hat Local Security Checks	2014/11/8	2021/1/14	high
289073	MiracleLinux 4 : kernel-2.6.32-431.23.3.el6 (AXSA:2014-490:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/2/10	high
99163	OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0057) (Dirty COW)	Nessus	OracleVM Local Security Checks	2017/4/3	2025/12/26	critical
76228	openSUSE Security Update : kernel (openSUSE-SU-2014:0840-1)	Nessus	SuSE Local Security Checks	2014/6/26	2022/5/25	high
76342	openSUSE Security Update : kernel (openSUSE-SU-2014:0856-1)	Nessus	SuSE Local Security Checks	2014/7/2	2022/5/25	high

検出

プラグインの検索

high

high

critical

medium

high

high

critical

high

high