The version of kernel installed on the remote host is prior to 5.15.149-99.161. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-039 advisory.

    dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in     alloc_targets) allocate more than INT_MAX bytes, and crash, because of a missing check for struct     dm_ioctl.target_count. (CVE-2023-52429)

    In the Linux kernel, the following vulnerability has been resolved:

    net: prevent mss overflow in skb_segment()

    Once again syzbot is able to crash the kernel in skb_segment() [1]

    GSO_BY_FRAGS is a forbidden value, but unfortunately the followingcomputation in skb_segment() can reach     it quite easily :

    mss = mss * partial_segs;

    65535 = 3 * 5 * 17 * 257, so many initial values of mss can lead toa bad final result.

    Make sure to limit segmentation so that the new mss value is smallerthan GSO_BY_FRAGS.

    [1]

    general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP     KASANKASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077]CPU: 1 PID: 5079 Comm: syz-     executor993 Not tainted 6.7.0-rc4-syzkaller-00141-g1ae4cd3cbdd0 #0Hardware name: Google Google Compute     Engine/Google Compute Engine, BIOS Google 11/10/2023RIP: 0010:skb_segment+0x181d/0x3f30     net/core/skbuff.c:4551Code: 83 e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48     b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84     24 f8 00RSP: 0018:ffffc900043473d0 EFLAGS: 00010202RAX: dffffc0000000000 RBX: 0000000000010046 RCX:
    ffffffff886b1597RDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070RBP: ffffc90004347578     R08: 0000000000000005 R09: 000000000000ffffR10: 000000000000ffff R11: 0000000000000002 R12:
    ffff888063202ac0R13: 0000000000010000 R14: 000000000000ffff R15: 0000000000000046FS:
    0000555556e7e380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000CS: 0010 DS: 0000 ES: 0000 CR0:
    0000000080050033CR2: 0000000020010000 CR3: 0000000027ee2000 CR4: 00000000003506f0DR0: 0000000000000000     DR1: 0000000000000000 DR2: 0000000000000000DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
    0000000000000400Call Trace:<TASK>udp6_ufo_fragment+0xa0e/0xd00     net/ipv6/udp_offload.c:109ipv6_gso_segment+0x534/0x17e0     net/ipv6/ip6_offload.c:120skb_mac_gso_segment+0x290/0x610 net/core/gso.c:53__skb_gso_segment+0x339/0x710     net/core/gso.c:124skb_gso_segment include/net/gso.h:83 [inline]validate_xmit_skb+0x36c/0xeb0     net/core/dev.c:3626__dev_queue_xmit+0x6f3/0x3d60 net/core/dev.c:4338dev_queue_xmit     include/linux/netdevice.h:3134 [inline]packet_xmit+0x257/0x380 net/packet/af_packet.c:276packet_snd     net/packet/af_packet.c:3087 [inline]packet_sendmsg+0x24c6/0x5220     net/packet/af_packet.c:3119sock_sendmsg_nosec net/socket.c:730 [inline]__sock_sendmsg+0xd5/0x180     net/socket.c:745__sys_sendto+0x255/0x340 net/socket.c:2190__do_sys_sendto net/socket.c:2202     [inline]__se_sys_sendto net/socket.c:2198 [inline]__x64_sys_sendto+0xe0/0x1b0     net/socket.c:2198do_syscall_x64 arch/x86/entry/common.c:52 [inline]do_syscall_64+0x40/0x110     arch/x86/entry/common.c:83entry_SYSCALL_64_after_hwframe+0x63/0x6bRIP: 0033:0x7f8692032aa9Code: 28 00 00     00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c     24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48RSP: 002b:00007fff8d685418     EFLAGS: 00000246 ORIG_RAX: 000000000000002cRAX: ffffffffffffffda RBX: 0000000000000003 RCX:
    00007f8692032aa9RDX: 0000000000010048 RSI: 00000000200000c0 RDI: 0000000000000003RBP: 00000000000f4240     R08: 0000000020000540 R09: 0000000000000014R10: 0000000000000000 R11: 0000000000000246 R12:
    00007fff8d685480R13: 0000000000000001 R14: 00007fff8d685480 R15: 0000000000000003</TASK>Modules linked     in:---[ end trace 0000000000000000 ]---RIP: 0010:skb_segment+0x181d/0x3f30 net/core/skbuff.c:4551Code: 83     e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48     89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84 24 f8 00RSP:
    0018:ffffc900043473d0 EFLAGS: 00010202RAX: dffffc0000000000 RBX: 0000000000010046 RCX:
    ffffffff886b1597RDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070RBP: ffffc90004347578 R0
    ---truncated--- (CVE-2023-52435)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: Don't unref the same fb many times by mistake due to deadlock handling (CVE-2023-52486)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489)

    In the Linux kernel, the following vulnerability has been resolved:

    dmaengine: fix NULL pointer in channel unregistration function (CVE-2023-52492)

    In the Linux kernel, the following vulnerability has been resolved:

    PM: sleep: Fix possible deadlocks in core system-wide PM code (CVE-2023-52498)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: fix deadlock or deadcode of misusing dget() (CVE-2023-52583)

    In the Linux kernel, the following vulnerability has been resolved:

    PM / devfreq: Fix buffer overflow in trans_stat_show (CVE-2023-52614)

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init (CVE-2023-52616)

    In the Linux kernel, the following vulnerability has been resolved:

    pstore/ram: Fix crash when setting number of cpus to an odd number (CVE-2023-52619)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: Fix a suspicious RCU usage warning (CVE-2023-52623)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Fix an NULL dereference bug (CVE-2023-52631)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)

    In the Linux kernel, the following vulnerability has been resolved:

    pipe: wakeup wr_wait after setting max_usage (CVE-2023-52672)

    A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not     properly initialize memory in messages passed between virtual guests and the host operating system in the     vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel     memory contents when reading from the /dev/vhost-net device file. (CVE-2024-0340)

    A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a     recursive operation of code push recursively calls into the code block. The OVS module does not validate     the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a     crash or other related issues. (CVE-2024-1151)

    A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting     speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit     this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative     executable code paths. (CVE-2024-2193)

    In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion     failure and crash because a subvolume can be read out too soon after its root item is inserted upon     subvolume creation. (CVE-2024-23850)

    copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than     INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to     ctl_ioctl. (CVE-2024-23851)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_rbtree: skip end interval element from gc

    rbtree lazy gc on insert might collect an end interval element that hasbeen just added in this     transactions, skip end interval elements thatare not yet active. (CVE-2024-26581)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/membarrier: reduce the ability to hammer on sys_membarrier

    On some systems, sys_membarrier can be very expensive, causing overallslowdowns for everything.  So put a     lock on the path in order toserialize the accesses to prevent the ability for this to be called attoo high     of a frequency and saturate the machine. (CVE-2024-26602)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)

    In the Linux kernel, the following vulnerability has been resolved:

    llc: call sock_orphan() at release time (CVE-2024-26625)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (CVE-2024-26627)

    In the Linux kernel, the following vulnerability has been resolved:

    llc: Drop support for ETH_P_TR_802_2. (CVE-2024-26635)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: add sanity checks to rx zerocopy (CVE-2024-26640)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (CVE-2024-26641)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (CVE-2024-26644)

    In the Linux kernel, the following vulnerability has been resolved:

    tunnels: fix out of bounds access when building IPv6 PMTU error (CVE-2024-26665)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-mq: fix IO hang from sbitmap wakeup race (CVE-2024-26671)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)

    In the Linux kernel, the following vulnerability has been resolved:

    af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. (CVE-2024-26676)

    In the Linux kernel, the following vulnerability has been resolved:

    inet: read sk->sk_family once in inet_recv_error() (CVE-2024-26679)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: prevent use-after-free in encode_cap_msg() (CVE-2024-26689)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (CVE-2024-26696)

    In the Linux kernel, the following vulnerability has been resolved:

    hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (CVE-2024-26698)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix double-free of blocks due to wrong extents moved_len (CVE-2024-26704)

    In the Linux kernel, the following vulnerability has been resolved:

    net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() (CVE-2024-26707)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not ASSERT() if the newly created subvolume already got read (CVE-2024-26727)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (CVE-2024-26808)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix data re-injection from stale subflow (CVE-2024-26826)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: fix performance regression in swap operation (CVE-2024-26910)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing/trigger: Fix to return error if failed to alloc snapshot (CVE-2024-26920)

    In the Linux kernel, the following vulnerability has been resolved:

    ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (CVE-2024-26972)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: fix a double-free in arfs_create_groups (CVE-2024-35835)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (CVE-2024-50017)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6819-2 advisory.

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C     PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a     denial of service (system crash). (CVE-2023-6356, CVE-2023-6535, CVE-2023-6536)

    Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-     bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system     crash). (CVE-2024-23849)

    It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to     a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a     denial of service (system crash). (CVE-2024-24860)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - Core kernel;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Drivers core;

    - Power management core;

    - Bus devices;

    - Device frequency scaling framework;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCMI message protocol;

    - GPU drivers;

    - IIO ADC drivers;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Media drivers;

    - Multifunction device drivers;

    - MTD block device drivers;

    - Network drivers;

    - NVME drivers;

    - Device tree and open firmware driver;

    - PCI driver for MicroSemi Switchtec;

    - Power supply drivers;

    - RPMSG subsystem;

    - SCSI drivers;

    - QCOM SoC drivers;

    - SPMI drivers;

    - Thermal drivers;

    - TTY drivers;

    - VFIO drivers;

    - BTRFS file system;

    - Ceph distributed file system;

    - EFI Variable file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system server daemon;

    - File systems infrastructure;

    - Pstore file system;

    - ReiserFS file system;

    - SMB network file system;

    - BPF subsystem;

    - Memory management;

    - TLS protocol;

    - Ethernet bridge;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NetLabel subsystem;

    - Network traffic control;

    - SMC sockets;

    - Sun RPC protocol;

    - AppArmor security module;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - USB sound devices; (CVE-2023-52612, CVE-2024-26808, CVE-2023-52691, CVE-2023-52618, CVE-2023-52463,     CVE-2023-52447, CVE-2024-26668, CVE-2023-52454, CVE-2024-26670, CVE-2024-26646, CVE-2023-52472,     CVE-2024-26586, CVE-2023-52681, CVE-2023-52453, CVE-2023-52611, CVE-2023-52622, CVE-2024-26641,     CVE-2023-52616, CVE-2024-26592, CVE-2023-52606, CVE-2024-26620, CVE-2023-52692, CVE-2024-26669,     CVE-2023-52623, CVE-2023-52588, CVE-2024-26616, CVE-2024-26610, CVE-2024-35839, CVE-2023-52490,     CVE-2023-52672, CVE-2024-26612, CVE-2023-52617, CVE-2023-52697, CVE-2024-26644, CVE-2023-52458,     CVE-2023-52598, CVE-2024-35841, CVE-2023-52664, CVE-2023-52635, CVE-2023-52676, CVE-2023-52669,     CVE-2024-26632, CVE-2023-52486, CVE-2024-26625, CVE-2023-52608, CVE-2024-26634, CVE-2023-52599,     CVE-2024-26618, CVE-2024-26640, CVE-2023-52489, CVE-2023-52675, CVE-2023-52678, CVE-2024-26583,     CVE-2023-52693, CVE-2023-52498, CVE-2024-26649, CVE-2023-52670, CVE-2023-52473, CVE-2023-52449,     CVE-2023-52667, CVE-2023-52467, CVE-2023-52686, CVE-2024-26633, CVE-2023-52666, CVE-2024-35840,     CVE-2024-26629, CVE-2024-26595, CVE-2023-52593, CVE-2023-52687, CVE-2023-52465, CVE-2024-26627,     CVE-2023-52493, CVE-2023-52491, CVE-2024-26636, CVE-2024-26584, CVE-2023-52587, CVE-2023-52597,     CVE-2023-52462, CVE-2023-52633, CVE-2023-52696, CVE-2024-26585, CVE-2023-52589, CVE-2023-52456,     CVE-2023-52470, CVE-2024-35838, CVE-2024-26645, CVE-2023-52591, CVE-2023-52464, CVE-2023-52609,     CVE-2024-26608, CVE-2023-52450, CVE-2023-52584, CVE-2023-52469, CVE-2023-52583, CVE-2023-52451,     CVE-2023-52495, CVE-2023-52626, CVE-2023-52595, CVE-2023-52680, CVE-2023-52632, CVE-2024-26582,     CVE-2024-35837, CVE-2023-52494, CVE-2023-52614, CVE-2023-52443, CVE-2023-52698, CVE-2023-52448,     CVE-2024-26615, CVE-2023-52452, CVE-2023-52492, CVE-2024-26647, CVE-2023-52468, CVE-2023-52594,     CVE-2023-52621, CVE-2024-26638, CVE-2024-26594, CVE-2024-26673, CVE-2023-52457, CVE-2023-52677,     CVE-2023-52607, CVE-2024-26623, CVE-2023-52488, CVE-2023-52497, CVE-2023-52445, CVE-2024-26607,     CVE-2023-52610, CVE-2024-35842, CVE-2023-52690, CVE-2023-52683, CVE-2023-52444, CVE-2024-26671,     CVE-2023-52455, CVE-2023-52679, CVE-2024-26598, CVE-2023-52674, CVE-2023-52627, CVE-2023-52619,     CVE-2023-52487, CVE-2023-52446, CVE-2024-35835, CVE-2023-52682, CVE-2023-52685, CVE-2023-52694,     CVE-2024-26631)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6766-3 advisory.

    It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during     recursive action operations under certain conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2024-1151)

    Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux     kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were     insufficient for Intel processors. A local attacker could potentially use this to expose sensitive     information. (CVE-2024-2201)

    Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-     bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system     crash). (CVE-2024-23849)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - PowerPC architecture;

    - S390 architecture;

    - Core kernel;

    - Block layer subsystem;

    - Android drivers;

    - Power management core;

    - Bus devices;

    - Hardware random number generator core;

    - Cryptographic API;

    - Device frequency;

    - DMA engine subsystem;

    - ARM SCMI message protocol;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - I2C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - IIO Magnetometer sensors drivers;

    - InfiniBand drivers;

    - Media drivers;

    - Network drivers;

    - PCI driver for MicroSemi Switchtec;

    - PHY drivers;

    - SCSI drivers;

    - DesignWare USB3 driver;

    - BTRFS file system;

    - Ceph distributed file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - NILFS2 file system;

    - NTFS3 file system;

    - Pstore file system;

    - SMB network file system;

    - Memory management;

    - CAN network layer;

    - Networking core;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - Multipath TCP;

    - Netfilter;

    - NFC subsystem;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - Realtek audio codecs; (CVE-2023-52594, CVE-2023-52601, CVE-2024-26826, CVE-2023-52622, CVE-2024-26665,     CVE-2023-52493, CVE-2023-52633, CVE-2024-26684, CVE-2024-26663, CVE-2023-52618, CVE-2023-52588,     CVE-2023-52637, CVE-2024-26825, CVE-2023-52606, CVE-2024-26594, CVE-2024-26625, CVE-2024-26720,     CVE-2024-26614, CVE-2023-52627, CVE-2023-52602, CVE-2024-26673, CVE-2024-26685, CVE-2023-52638,     CVE-2023-52498, CVE-2023-52619, CVE-2024-26910, CVE-2024-26689, CVE-2023-52583, CVE-2024-26676,     CVE-2024-26671, CVE-2024-26704, CVE-2024-26608, CVE-2024-26610, CVE-2024-26592, CVE-2023-52599,     CVE-2023-52595, CVE-2024-26660, CVE-2023-52617, CVE-2024-26645, CVE-2023-52486, CVE-2023-52631,     CVE-2023-52607, CVE-2023-52608, CVE-2024-26722, CVE-2024-26615, CVE-2023-52615, CVE-2024-26636,     CVE-2023-52642, CVE-2023-52587, CVE-2024-26712, CVE-2024-26675, CVE-2023-52614, CVE-2024-26606,     CVE-2024-26916, CVE-2024-26600, CVE-2024-26679, CVE-2024-26829, CVE-2024-26641, CVE-2023-52623,     CVE-2024-26627, CVE-2024-26696, CVE-2024-26640, CVE-2024-26635, CVE-2023-52491, CVE-2024-26664,     CVE-2024-26602, CVE-2023-52604, CVE-2024-26717, CVE-2023-52643, CVE-2024-26593, CVE-2023-52598,     CVE-2024-26668, CVE-2023-52435, CVE-2023-52597, CVE-2024-26715, CVE-2024-26707, CVE-2023-52635,     CVE-2024-26695, CVE-2024-26698, CVE-2023-52494, CVE-2024-26920, CVE-2024-26808, CVE-2023-52616,     CVE-2023-52492, CVE-2024-26702, CVE-2024-26644, CVE-2023-52489, CVE-2024-26697)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The version of kernel installed on the remote host is prior to 5.10.210-201.852. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-053 advisory.

    dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in     alloc_targets) allocate more than INT_MAX bytes, and crash, because of a missing check for struct     dm_ioctl.target_count. (CVE-2023-52429)

    In the Linux kernel, the following vulnerability has been resolved:

    net: prevent mss overflow in skb_segment()

    Once again syzbot is able to crash the kernel in skb_segment() [1]

    GSO_BY_FRAGS is a forbidden value, but unfortunately the followingcomputation in skb_segment() can reach     it quite easily :

    mss = mss * partial_segs;

    65535 = 3 * 5 * 17 * 257, so many initial values of mss can lead toa bad final result.

    Make sure to limit segmentation so that the new mss value is smallerthan GSO_BY_FRAGS.

    [1]

    general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP     KASANKASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077]CPU: 1 PID: 5079 Comm: syz-     executor993 Not tainted 6.7.0-rc4-syzkaller-00141-g1ae4cd3cbdd0 #0Hardware name: Google Google Compute     Engine/Google Compute Engine, BIOS Google 11/10/2023RIP: 0010:skb_segment+0x181d/0x3f30     net/core/skbuff.c:4551Code: 83 e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48     b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84     24 f8 00RSP: 0018:ffffc900043473d0 EFLAGS: 00010202RAX: dffffc0000000000 RBX: 0000000000010046 RCX:
    ffffffff886b1597RDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070RBP: ffffc90004347578     R08: 0000000000000005 R09: 000000000000ffffR10: 000000000000ffff R11: 0000000000000002 R12:
    ffff888063202ac0R13: 0000000000010000 R14: 000000000000ffff R15: 0000000000000046FS:
    0000555556e7e380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000CS: 0010 DS: 0000 ES: 0000 CR0:
    0000000080050033CR2: 0000000020010000 CR3: 0000000027ee2000 CR4: 00000000003506f0DR0: 0000000000000000     DR1: 0000000000000000 DR2: 0000000000000000DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
    0000000000000400Call Trace:<TASK>udp6_ufo_fragment+0xa0e/0xd00     net/ipv6/udp_offload.c:109ipv6_gso_segment+0x534/0x17e0     net/ipv6/ip6_offload.c:120skb_mac_gso_segment+0x290/0x610 net/core/gso.c:53__skb_gso_segment+0x339/0x710     net/core/gso.c:124skb_gso_segment include/net/gso.h:83 [inline]validate_xmit_skb+0x36c/0xeb0     net/core/dev.c:3626__dev_queue_xmit+0x6f3/0x3d60 net/core/dev.c:4338dev_queue_xmit     include/linux/netdevice.h:3134 [inline]packet_xmit+0x257/0x380 net/packet/af_packet.c:276packet_snd     net/packet/af_packet.c:3087 [inline]packet_sendmsg+0x24c6/0x5220     net/packet/af_packet.c:3119sock_sendmsg_nosec net/socket.c:730 [inline]__sock_sendmsg+0xd5/0x180     net/socket.c:745__sys_sendto+0x255/0x340 net/socket.c:2190__do_sys_sendto net/socket.c:2202     [inline]__se_sys_sendto net/socket.c:2198 [inline]__x64_sys_sendto+0xe0/0x1b0     net/socket.c:2198do_syscall_x64 arch/x86/entry/common.c:52 [inline]do_syscall_64+0x40/0x110     arch/x86/entry/common.c:83entry_SYSCALL_64_after_hwframe+0x63/0x6bRIP: 0033:0x7f8692032aa9Code: 28 00 00     00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c     24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48RSP: 002b:00007fff8d685418     EFLAGS: 00000246 ORIG_RAX: 000000000000002cRAX: ffffffffffffffda RBX: 0000000000000003 RCX:
    00007f8692032aa9RDX: 0000000000010048 RSI: 00000000200000c0 RDI: 0000000000000003RBP: 00000000000f4240     R08: 0000000020000540 R09: 0000000000000014R10: 0000000000000000 R11: 0000000000000246 R12:
    00007fff8d685480R13: 0000000000000001 R14: 00007fff8d685480 R15: 0000000000000003</TASK>Modules linked     in:---[ end trace 0000000000000000 ]---RIP: 0010:skb_segment+0x181d/0x3f30 net/core/skbuff.c:4551Code: 83     e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48     89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84 24 f8 00RSP:
    0018:ffffc900043473d0 EFLAGS: 00010202RAX: dffffc0000000000 RBX: 0000000000010046 RCX:
    ffffffff886b1597RDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070RBP: ffffc90004347578 R0
    ---truncated--- (CVE-2023-52435)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: Don't unref the same fb many times by mistake due to deadlock handling (CVE-2023-52486)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489)

    In the Linux kernel, the following vulnerability has been resolved:

    dmaengine: fix NULL pointer in channel unregistration function (CVE-2023-52492)

    In the Linux kernel, the following vulnerability has been resolved:

    PM: sleep: Fix possible deadlocks in core system-wide PM code (CVE-2023-52498)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: fix deadlock or deadcode of misusing dget() (CVE-2023-52583)

    In the Linux kernel, the following vulnerability has been resolved:

    IB/ipoib: Fix mcast list locking (CVE-2023-52587)

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init (CVE-2023-52616)

    In the Linux kernel, the following vulnerability has been resolved:

    pstore/ram: Fix crash when setting number of cpus to an odd number (CVE-2023-52619)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: Fix a suspicious RCU usage warning (CVE-2023-52623)

    In the Linux kernel, the following vulnerability has been resolved:

    PM / devfreq: Synchronize devfreq_monitor_[start/stop] (CVE-2023-52635)

    In the Linux kernel, the following vulnerability has been resolved:

    can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (CVE-2023-52637)

    In the Linux kernel, the following vulnerability has been resolved:

    media: rc: bpf attach/detach requires write permission (CVE-2023-52642)

    In the Linux kernel, the following vulnerability has been resolved:

    pipe: wakeup wr_wait after setting max_usage (CVE-2023-52672)

    A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function     improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing     between the free on the struct and the access through the `skbtxq` global queue. This could lead to a     denial of service condition or potential code execution. (CVE-2023-6270)

    A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not     properly initialize memory in messages passed between virtual guests and the host operating system in the     vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel     memory contents when reading from the /dev/vhost-net device file. (CVE-2024-0340)

    A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a     recursive operation of code push recursively calls into the code block. The OVS module does not validate     the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a     crash or other related issues. (CVE-2024-1151)

    A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting     speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit     this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative     executable code paths. (CVE-2024-2193)

    In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion     failure and crash because a subvolume can be read out too soon after its root item is inserted upon     subvolume creation. (CVE-2024-23850)

    copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than     INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to     ctl_ioctl. (CVE-2024-23851)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_rbtree: skip end interval element from gc

    rbtree lazy gc on insert might collect an end interval element that hasbeen just added in this     transactions, skip end interval elements thatare not yet active. (CVE-2024-26581)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/membarrier: reduce the ability to hammer on sys_membarrier

    On some systems, sys_membarrier can be very expensive, causing overallslowdowns for everything.  So put a     lock on the path in order toserialize the accesses to prevent the ability for this to be called attoo high     of a frequency and saturate the machine. (CVE-2024-26602)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)

    In the Linux kernel, the following vulnerability has been resolved:

    llc: call sock_orphan() at release time (CVE-2024-26625)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (CVE-2024-26627)

    In the Linux kernel, the following vulnerability has been resolved:

    llc: Drop support for ETH_P_TR_802_2. (CVE-2024-26635)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: add sanity checks to rx zerocopy (CVE-2024-26640)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (CVE-2024-26641)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (CVE-2024-26644)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (CVE-2024-26663)

    In the Linux kernel, the following vulnerability has been resolved:

    tunnels: fix out of bounds access when building IPv6 PMTU error (CVE-2024-26665)

    In the Linux kernel, the following vulnerability has been resolved:

    blk-mq: fix IO hang from sbitmap wakeup race (CVE-2024-26671)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)

    In the Linux kernel, the following vulnerability has been resolved:

    ppp_async: limit MRU to 64K (CVE-2024-26675)

    In the Linux kernel, the following vulnerability has been resolved:

    inet: read sk->sk_family once in inet_recv_error() (CVE-2024-26679)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix potential bug in end_buffer_async_write (CVE-2024-26685)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: prevent use-after-free in encode_cap_msg() (CVE-2024-26689)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (CVE-2024-26696)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix data corruption in dsync block recovery for small block sizes (CVE-2024-26697)

    In the Linux kernel, the following vulnerability has been resolved:

    hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (CVE-2024-26698)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix double-free of blocks due to wrong extents moved_len (CVE-2024-26704)

    In the Linux kernel, the following vulnerability has been resolved:

    net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() (CVE-2024-26707)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (CVE-2024-26720)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not ASSERT() if the newly created subvolume already got read (CVE-2024-26727)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (CVE-2024-26808)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: fix performance regression in swap operation (CVE-2024-26910)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: Revert scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (CVE-2024-26917)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing/trigger: Fix to return error if failed to alloc snapshot (CVE-2024-26920)

    In the Linux kernel, the following vulnerability has been resolved:

    ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (CVE-2024-26972)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5e: fix a double-free in arfs_create_groups (CVE-2024-35835)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (CVE-2024-50017)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (CVE-2025-38670)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6828-1 advisory.

    Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition     during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could     possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

    It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition,     leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or     possibly execute arbitrary code. (CVE-2023-6270)

    It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data     structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial     of service. (CVE-2023-7042)

    It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer     dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service.
    (CVE-2024-0841)

    It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during     recursive action operations under certain conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2024-1151)

    Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux     kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were     insufficient for Intel processors. A local attacker could potentially use this to expose sensitive     information. (CVE-2024-2201)

    Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race     condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of     service (system crash). (CVE-2024-22099)

    Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-     bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system     crash). (CVE-2024-23849)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - Core kernel;

    - x86 architecture;

    - Block layer subsystem;

    - ACPI drivers;

    - Android drivers;

    - Power management core;

    - Bus devices;

    - Hardware random number generator core;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Cryptographic API;

    - Device frequency scaling framework;

    - DMA engine subsystem;

    - ARM SCMI message protocol;

    - EFI core;

    - GPU drivers;

    - HID subsystem;

    - Hardware monitoring drivers;

    - I2C subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - IIO Magnetometer sensors drivers;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - MMC subsystem;

    - Network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - PCI driver for MicroSemi Switchtec;

    - PHY drivers;

    - MediaTek PM domains;

    - Power supply drivers;

    - SCSI drivers;

    - SPI subsystem;

    - Media staging drivers;

    - TCM subsystem;

    - USB subsystem;

    - DesignWare USB3 driver;

    - Framebuffer layer;

    - AFS file system;

    - File systems infrastructure;

    - BTRFS file system;

    - Ceph distributed file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - JFS file system;

    - Network file system client;

    - NILFS2 file system;

    - NTFS3 file system;

    - Pstore file system;

    - Diskquota system;

    - SMB network file system;

    - BPF subsystem;

    - Memory management;

    - Netfilter;

    - TLS protocol;

    - io_uring subsystem;

    - Bluetooth subsystem;

    - Ethernet bridge;

    - CAN network layer;

    - Networking core;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - L2TP protocol;

    - Logical Link layer;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netlink;

    - NET/ROM layer;

    - NFC subsystem;

    - Packet sockets;

    - RDS protocol;

    - SMC sockets;

    - Sun RPC protocol;

    - TIPC protocol;

    - Unix domain sockets;

    - Wireless networking;

    - Tomoyo security module;

    - Realtek audio codecs;

    - USB sound devices; (CVE-2024-26910, CVE-2024-27074, CVE-2023-52494, CVE-2023-52594, CVE-2024-26915,     CVE-2024-26766, CVE-2023-52489, CVE-2024-35845, CVE-2024-26846, CVE-2024-26898, CVE-2024-26897,     CVE-2024-26826, CVE-2024-26798, CVE-2023-52662, CVE-2024-26856, CVE-2023-52608, CVE-2024-26782,     CVE-2024-27047, CVE-2024-27390, CVE-2024-26610, CVE-2024-26804, CVE-2023-52638, CVE-2024-26771,     CVE-2024-26752, CVE-2024-26585, CVE-2024-26645, CVE-2024-26715, CVE-2024-27028, CVE-2024-26809,     CVE-2024-26880, CVE-2024-27432, CVE-2024-27065, CVE-2024-26717, CVE-2023-52616, CVE-2024-26748,     CVE-2024-26795, CVE-2024-26671, CVE-2024-26743, CVE-2024-27412, CVE-2024-26802, CVE-2024-26733,     CVE-2024-26736, CVE-2023-52618, CVE-2024-27046, CVE-2024-26688, CVE-2024-26679, CVE-2024-26769,     CVE-2024-27051, CVE-2024-26603, CVE-2024-26744, CVE-2023-52434, CVE-2024-26697, CVE-2024-27075,     CVE-2023-52583, CVE-2024-26583, CVE-2024-27403, CVE-2024-26907, CVE-2024-26636, CVE-2024-27410,     CVE-2023-52530, CVE-2024-26840, CVE-2024-26851, CVE-2024-26862, CVE-2023-52640, CVE-2024-35829,     CVE-2024-26906, CVE-2024-26777, CVE-2024-27419, CVE-2024-26664, CVE-2024-26627, CVE-2024-26859,     CVE-2023-52486, CVE-2023-52652, CVE-2024-26835, CVE-2024-35844, CVE-2024-26702, CVE-2024-26635,     CVE-2024-26704, CVE-2023-52633, CVE-2024-26816, CVE-2024-26894, CVE-2024-26778, CVE-2023-52599,     CVE-2024-35828, CVE-2024-26776, CVE-2023-52493, CVE-2024-26845, CVE-2024-26594, CVE-2024-26885,     CVE-2024-26829, CVE-2023-52645, CVE-2024-26695, CVE-2023-52615, CVE-2024-26651, CVE-2024-26843,     CVE-2023-52606, CVE-2024-26675, CVE-2024-26874, CVE-2024-26883, CVE-2024-26772, CVE-2024-26673,     CVE-2024-26737, CVE-2023-52631, CVE-2024-26640, CVE-2023-52598, CVE-2024-26735, CVE-2024-26895,     CVE-2024-26592, CVE-2023-52492, CVE-2024-26861, CVE-2023-52644, CVE-2024-26920, CVE-2024-26877,     CVE-2024-26863, CVE-2024-26720, CVE-2024-26722, CVE-2024-27045, CVE-2024-27038, CVE-2024-26763,     CVE-2024-26833, CVE-2024-27417, CVE-2024-26916, CVE-2024-26857, CVE-2024-26875, CVE-2024-26606,     CVE-2024-27024, CVE-2024-26615, CVE-2023-52614, CVE-2023-52641, CVE-2024-26600, CVE-2024-27043,     CVE-2023-52635, CVE-2024-26787, CVE-2024-26622, CVE-2024-27413, CVE-2024-26791, CVE-2023-52622,     CVE-2023-52491, CVE-2023-52604, CVE-2024-27037, CVE-2024-26881, CVE-2024-26754, CVE-2024-26659,     CVE-2024-26663, CVE-2024-26747, CVE-2023-52602, CVE-2024-26712, CVE-2024-26839, CVE-2024-26749,     CVE-2024-26764, CVE-2024-26820, CVE-2024-26882, CVE-2024-27039, CVE-2024-27078, CVE-2024-26889,     CVE-2024-26870, CVE-2024-26788, CVE-2024-26602, CVE-2024-26903, CVE-2024-27044, CVE-2024-27073,     CVE-2023-52601, CVE-2023-52595, CVE-2024-26707, CVE-2024-27415, CVE-2023-52637, CVE-2024-26660,     CVE-2024-27414, CVE-2024-27054, CVE-2023-52497, CVE-2024-26801, CVE-2023-52435, CVE-2023-52620,     CVE-2023-52627, CVE-2024-26698, CVE-2023-52597, CVE-2024-27077, CVE-2023-52650, CVE-2024-26750,     CVE-2024-26852, CVE-2024-27053, CVE-2023-52656, CVE-2024-26625, CVE-2024-26779, CVE-2024-27431,     CVE-2024-26751, CVE-2024-26684, CVE-2024-26803, CVE-2024-26593, CVE-2023-52642, CVE-2023-52447,     CVE-2024-26790, CVE-2024-26825, CVE-2024-26668, CVE-2023-52607, CVE-2024-26872, CVE-2024-27030,     CVE-2023-52643, CVE-2024-26901, CVE-2024-35830, CVE-2024-26855, CVE-2023-52588, CVE-2023-52587,     CVE-2024-26891, CVE-2024-26644, CVE-2024-26884, CVE-2024-26793, CVE-2024-26805, CVE-2024-26584,     CVE-2024-27405, CVE-2023-52623, CVE-2024-26608, CVE-2024-26878, CVE-2024-27388, CVE-2024-27416,     CVE-2024-26685, CVE-2024-27034, CVE-2024-26879, CVE-2024-26614, CVE-2024-26792, CVE-2023-52617,     CVE-2024-26773, CVE-2024-26665, CVE-2024-26641, CVE-2023-52619, CVE-2024-35811, CVE-2024-27052,     CVE-2024-27076, CVE-2024-26838, CVE-2024-26808, CVE-2024-26696, CVE-2024-26676, CVE-2024-26689,     CVE-2024-26774, CVE-2024-26601, CVE-2023-52498, CVE-2024-27436)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
191612	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-039)	Nessus	Amazon Linux Local Security Checks	2024/3/6	2026/1/26	high
200374	Ubuntu 23.10 : Linux kernel vulnerabilities (USN-6819-2)	Nessus	Ubuntu Local Security Checks	2024/6/11	2025/9/24	high
197517	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6766-3)	Nessus	Ubuntu Local Security Checks	2024/5/20	2025/9/24	high
205968	EulerOS Virtualization 2.11.1 : kernel (EulerOS-SA-2024-2178)	Nessus	Huawei Local Security Checks	2024/8/21	2025/9/25	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/9/15	high
192738	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2024-053 (ALASKERNEL-5.10-2024-053)	Nessus	Amazon Linux Local Security Checks	2024/4/1	2026/2/9	high
200372	Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6828-1)	Nessus	Ubuntu Local Security Checks	2024/6/11	2025/9/24	high
200965	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-1816)	Nessus	Huawei Local Security Checks	2024/6/25	2025/9/25	high

検出

プラグインの検索

high

high

high

high

high

high

high

high