The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6821-3 advisory.

    It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition,     leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or     possibly execute arbitrary code. (CVE-2023-6270)

    It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data     structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial     of service. (CVE-2023-7042)

    It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer     dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service.
    (CVE-2024-0841)

    Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race     condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of     service (system crash). (CVE-2024-22099)

    It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race     condition when stopping the device. A local attacker could possibly use this to cause a denial of service     (device unavailability). (CVE-2024-27432)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - RISC-V architecture;

    - x86 architecture;

    - ACPI drivers;

    - Block layer subsystem;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Cryptographic API;

    - DMA engine subsystem;

    - EFI core;

    - GPU drivers;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - MMC subsystem;

    - Network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - MediaTek PM domains;

    - Power supply drivers;

    - SPI subsystem;

    - Media staging drivers;

    - TCM subsystem;

    - USB subsystem;

    - Framebuffer layer;

    - AFS file system;

    - File systems infrastructure;

    - BTRFS file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - Network file system client;

    - NTFS3 file system;

    - Diskquota system;

    - SMB network file system;

    - BPF subsystem;

    - Netfilter;

    - TLS protocol;

    - io_uring subsystem;

    - Bluetooth subsystem;

    - Memory management;

    - Ethernet bridge;

    - Networking core;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - L2TP protocol;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - Sun RPC protocol;

    - Unix domain sockets;

    - Wireless networking;

    - USB sound devices; (CVE-2024-26877, CVE-2024-35829, CVE-2024-26737, CVE-2024-27075, CVE-2024-27414,     CVE-2024-27053, CVE-2024-26889, CVE-2024-26792, CVE-2024-26882, CVE-2024-26906, CVE-2024-26851,     CVE-2024-27037, CVE-2024-26782, CVE-2024-27388, CVE-2024-26748, CVE-2024-27419, CVE-2024-27034,     CVE-2023-52662, CVE-2024-27047, CVE-2024-26874, CVE-2024-26779, CVE-2024-26872, CVE-2024-26820,     CVE-2024-35811, CVE-2024-26771, CVE-2024-26733, CVE-2024-26903, CVE-2024-26736, CVE-2024-26870,     CVE-2024-26883, CVE-2024-27403, CVE-2024-26878, CVE-2024-26857, CVE-2023-52645, CVE-2024-26601,     CVE-2024-26891, CVE-2024-27028, CVE-2024-27054, CVE-2024-26804, CVE-2024-27405, CVE-2024-35830,     CVE-2024-26898, CVE-2024-26754, CVE-2024-26793, CVE-2024-26747, CVE-2024-26901, CVE-2023-52652,     CVE-2023-52650, CVE-2024-26651, CVE-2024-26816, CVE-2024-35845, CVE-2024-26862, CVE-2024-26884,     CVE-2024-26752, CVE-2024-26852, CVE-2023-52656, CVE-2024-26790, CVE-2024-26603, CVE-2024-27078,     CVE-2024-26802, CVE-2024-27045, CVE-2024-27024, CVE-2024-27073, CVE-2024-26585, CVE-2024-26894,     CVE-2024-26583, CVE-2024-27416, CVE-2024-27431, CVE-2024-35844, CVE-2024-26838, CVE-2024-27410,     CVE-2024-26915, CVE-2024-26772, CVE-2024-26897, CVE-2024-26798, CVE-2024-27415, CVE-2024-26855,     CVE-2024-26833, CVE-2024-26764, CVE-2024-26659, CVE-2024-26846, CVE-2024-26895, CVE-2023-52644,     CVE-2024-26751, CVE-2024-26880, CVE-2024-26863, CVE-2024-26809, CVE-2024-27052, CVE-2024-27051,     CVE-2024-26907, CVE-2024-27413, CVE-2024-26801, CVE-2023-52620, CVE-2024-26749, CVE-2024-26787,     CVE-2024-27046, CVE-2024-26803, CVE-2024-26744, CVE-2024-26879, CVE-2024-27432, CVE-2024-27412,     CVE-2024-26791, CVE-2024-26773, CVE-2023-52640, CVE-2024-26778, CVE-2024-26859, CVE-2024-27044,     CVE-2024-26788, CVE-2024-27077, CVE-2024-26750, CVE-2024-26861, CVE-2023-52434, CVE-2024-26774,     CVE-2024-26795, CVE-2024-26856, CVE-2024-27043, CVE-2024-27039, CVE-2024-26777, CVE-2024-27030,     CVE-2024-26584, CVE-2024-26735, CVE-2024-26805, CVE-2024-26766, CVE-2024-26763, CVE-2024-27065,     CVE-2023-52641, CVE-2024-27417, CVE-2023-52497, CVE-2023-52447, CVE-2024-26769, CVE-2024-26843,     CVE-2024-26881, CVE-2024-26688, CVE-2024-26743, CVE-2024-27038, CVE-2024-27390, CVE-2024-27436,     CVE-2024-26839, CVE-2024-27074, CVE-2024-26840, CVE-2024-27076, CVE-2024-26835, CVE-2024-26885,     CVE-2024-26776, CVE-2024-26845, CVE-2024-26875, CVE-2024-35828)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: net: phy: fix phy_get_internal_delay     accessing an empty array The phy_get_internal_delay function could try to access to an empty array in the     case that the driver is calling phy_get_internal_delay without defining delay_values and rx-internal-     delay-ps or tx-internal-delay-ps is defined to 0 in the device-tree. This will lead to unable to handle     kernel NULL pointer dereference at virtual address 0. To avoid this kernel oops, the test should be delay     >= 0. As there is already delay < 0 test just before, the test could only be size == 0. (CVE-2024-27047)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    ASoC: topology: Fix references to freed memory(CVE-2024-41069)

    bcache: fix variable length array abuse in btree_iter(CVE-2024-39482)

    bnx2x: Fix multiple UBSAN array-index-out-of-bounds(CVE-2024-42148)

    bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD(CVE-2024-42161)

    bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro(CVE-2024-42068)

    bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro(CVE-2024-42067)

    cachefiles: add consistency check for copen/cread(CVE-2024-41075)

    cachefiles: cyclic allocation of msg_id to avoid reuse(CVE-2024-41050)

    cachefiles: Set object to close if ondemand_id  0 in copen(CVE-2024-41074)

    cachefiles: wait for ondemand_object_worker to finish when dropping object(CVE-2024-41051)

    crypto: aead,cipher - zeroize key buffer after use(CVE-2024-42229)

    crypto: ecdh - explicitly zeroize private_key(CVE-2024-42098)

    crypto: hisilicon/debugfs - Fix debugfs uninit process issue(CVE-2024-42147)

    crypto: hisilicon/sec - Fix memory leak for sec resource release(CVE-2024-41002)

    drivers: core: synchronize really_probe() and dev_uevent(CVE-2024-39501)

    drm/ nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes(CVE-2024-41095)

    drm/ nouveau: fix null pointer dereference in nouveau_connector_get_modes(CVE-2024-42101)

    drm/ nouveau: fix off by one in BIOS boundary checking(CVE-2022-48732)

    drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)(CVE-2024-39497)

    enic: Validate length of nl attributes in enic_set_vf_port(CVE-2024-38659)

    ext4: fix error handling in ext4_fc_record_modified_inode()(CVE-2022-48712)

    filelock: Fix fcntl/close race recovery compat path(CVE-2024-41020)

    filelock: fix potential use-after-free in posix_lock_inode(CVE-2024-41049)

    filelock: Remove locks reliably when fcntl/close race is detected(CVE-2024-41012)

    Fix userfaultfd_api to return EINVAL as expected(CVE-2024-41027)

    ftruncate: pass a signed offset(CVE-2024-42084)

    ima: Avoid blocking in RCU read-side critical section(CVE-2024-40947)

    In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to     drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.(CVE-2024-23848)

    inet_diag: Initialize pad field in struct inet_diag_req_v2(CVE-2024-42106)

    Input: aiptek - properly check endpoint type(CVE-2022-48836)

    io_uring: fix possible deadlock in io_register_iowq_max_workers()(CVE-2024-41080)

    iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected(CVE-2024-26891)

    iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()(CVE-2022-48724)

    iommu: Fix potential use-after-free during probe(CVE-2022-48796)

    kernel:ima: Fix use-after-free on a dentry's dname.name(CVE-2024-39494)

    kernel:RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests(CVE-2021-47391)

    KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin(CVE-2024-40953)

    media: dvb-frontends: tda10048: Fix integer overflow(CVE-2024-42223)

    mm: avoid overflows in dirty throttling logic(CVE-2024-42131)

    net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket(CVE-2024-42246)

    net: hns3: fix kernel crash when 1588 is received on HIP08 devices(CVE-2024-26881)

    net: phy: fix phy_get_internal_delay accessing an empty array(CVE-2024-27047)

    net: USB: Fix wrong-direction WARNING in plusb.c(CVE-2023-52742)

    netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers(CVE-2024-42070)

    netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu(CVE-2024-36286)

    netfilter: tproxy: bail out if IP has been disabled on the device(CVE-2024-36270)

    net-sysfs: add check for netdevice being present to speed_show(CVE-2022-48850)

    null_blk: fix validation of block size(CVE-2024-41077)

    nvme-fabrics: use reserved tag for reg read/write command(CVE-2024-41082)

    nvmet: always initialize cqe.result(CVE-2024-41079)

    nvmet: fix a possible leak when destroy a ctrl during qp establishment(CVE-2024-42152)

    nvme-tcp: fix possible use-after-free in transport error_recovery work(CVE-2022-48789)

    of: module: prevent NULL pointer dereference in vsnprintf()(CVE-2024-35878)

    pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER(CVE-2024-42090)

    powerpc/powernv: Add a null pointer check in opal_powercap_init()(CVE-2023-52696)

    ppp: reject claimed-as-LCP but actually malformed packets(CVE-2024-41044)

    RDMA/restrack: Fix potential invalid address access(CVE-2024-42080)

    sched/deadline: Fix task_struct reference leak(CVE-2024-41023)

    scsi: qedf: Make qedf_execute_tmf() non-preemptible(CVE-2024-42124)

    skmsg: Skip zero length skb in sk_msg_recvmsg(CVE-2024-41048)

    tap: add missing verification for short frame(CVE-2024-41090)

    tcp_metrics: validate source addr length(CVE-2024-42154)

    tun: add missing verification for short frame(CVE-2024-41091)

    udp: do not accept non-tunnel GSO skbs landing in a tunnel(CVE-2024-35884)

    udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().(CVE-2024-41041)

    usb: atm: cxacru: fix endpoint checking in cxacru_bind()(CVE-2024-41097)

    usb: usbtmc: Fix bug in pipe direction for control transfers(CVE-2022-48834)

    x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD(CVE-2024-35801)

    x86: stop playing stack games in profile_pc()(CVE-2024-42096)

    xdp: Remove WARN() from __xdp_reg_mem_model(CVE-2024-42082)

    xfs: add bounds checking to xlog_recover_process_data(CVE-2024-41014)

    xfs: don't walk off the end of a directory data block(CVE-2024-41013)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.15.153-100.162. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-057 advisory.

    2025-01-21: CVE-2024-27025 was added to this advisory.

    2025-01-21: CVE-2024-26901 was added to this advisory.

    2025-01-21: CVE-2024-26898 was added to this advisory.

    2025-01-21: CVE-2024-26878 was added to this advisory.

    2025-01-21: CVE-2024-27388 was added to this advisory.

    2025-01-21: CVE-2024-36031 was added to this advisory.

    2025-01-21: CVE-2024-26816 was added to this advisory.

    2025-01-21: CVE-2023-52447 was added to this advisory.

    2025-01-21: CVE-2023-52656 was added to this advisory.

    2025-01-21: CVE-2024-26863 was added to this advisory.

    2025-01-21: CVE-2024-26809 was added to this advisory.

    2025-01-21: CVE-2024-26880 was added to this advisory.

    2025-01-21: CVE-2024-27390 was added to this advisory.

    2025-01-21: CVE-2024-26862 was added to this advisory.

    2025-01-21: CVE-2024-26861 was added to this advisory.

    2025-01-21: CVE-2024-27038 was added to this advisory.

    2025-01-21: CVE-2024-27065 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Defer the free of inner map when necessary

    When updating or deleting an inner map in map array or map htab, the mapmay still be accessed by non-     sleepable program or sleepable program.However bpf_map_fd_put_ptr() decreases the ref-counter of the inner     mapdirectly through bpf_map_put(), if the ref-counter is the last one(which is true for most cases), the     inner map will be freed byops->map_free() in a kworker. But for now, most .map_free() callbacksdon't use     synchronize_rcu() or its variants to wait for the elapse of aRCU grace period, so after the invocation of     ops->map_free completes,the bpf program which is accessing the inner map may incuruse-after-free problem.

    Fix the free of inner map by invoking bpf_map_free_deferred() after bothone RCU grace period and one tasks     trace RCU grace period if the innermap has been removed from the outer map before. The deferment     isaccomplished by using call_rcu() or call_rcu_tasks_trace() whenreleasing the last ref-counter of bpf     map. The newly-added rcu_headfield in bpf_map shares the same storage space with work field toreduce the     size of bpf_map. (CVE-2023-52447)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring: drop any code related to SCM_RIGHTS (CVE-2023-52656)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo: release elements in clone only from destroy path (CVE-2024-26809)

    In the Linux kernel, the following vulnerability has been resolved:

    x86, relocs: Ignore relocations in .notes section (CVE-2024-26816)

    In the Linux kernel, the following vulnerability has been resolved:

    wireguard: receive: annotate data-race around receiving_counter.counter (CVE-2024-26861)

    In the Linux kernel, the following vulnerability has been resolved:

    packet: annotate data-races around ignore_outgoing (CVE-2024-26862)

    In the Linux kernel, the following vulnerability has been resolved:

    hsr: Fix uninit-value access in hsr_get_node() (CVE-2024-26863)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)

    In the Linux kernel, the following vulnerability has been resolved:

    quota: Fix potential NULL pointer dereference (CVE-2024-26878)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: call the resume method on internal suspend (CVE-2024-26880)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (CVE-2024-26882)

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected (CVE-2024-26891)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (CVE-2024-26894)

    In the Linux kernel, the following vulnerability has been resolved:

    aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (CVE-2024-26898)

    In the Linux kernel, the following vulnerability has been resolved:

    do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)

    In the Linux kernel, the following vulnerability has been resolved:

    nbd: null check for nla_nest_start (CVE-2024-27025)

    In the Linux kernel, the following vulnerability has been resolved:

    clk: Fix clk_core_get NULL dereference (CVE-2024-27038)

    In the Linux kernel, the following vulnerability has been resolved:

    net: phy: fix phy_get_internal_delay accessing an empty array (CVE-2024-27047)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: do not compare internal table flags on updates (CVE-2024-27065)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() (CVE-2024-27390)

    In the Linux kernel, the following vulnerability has been resolved:

    keys: Fix overwrite of key expiration on instantiation (CVE-2024-36031)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6820-1 advisory.

    It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition,     leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or     possibly execute arbitrary code. (CVE-2023-6270)

    It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data     structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial     of service. (CVE-2023-7042)

    It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer     dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service.
    (CVE-2024-0841)

    It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux     kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker     could use this to cause a denial of service. (CVE-2024-21823)

    Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race     condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of     service (system crash). (CVE-2024-22099)

    It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race     condition when stopping the device. A local attacker could possibly use this to cause a denial of service     (device unavailability). (CVE-2024-27432)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - RISC-V architecture;

    - x86 architecture;

    - ACPI drivers;

    - Block layer subsystem;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Cryptographic API;

    - DMA engine subsystem;

    - EFI core;

    - GPU drivers;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - MMC subsystem;

    - Network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - MediaTek PM domains;

    - Power supply drivers;

    - SPI subsystem;

    - Media staging drivers;

    - TCM subsystem;

    - USB subsystem;

    - Framebuffer layer;

    - AFS file system;

    - File systems infrastructure;

    - BTRFS file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - Network file system client;

    - NTFS3 file system;

    - Diskquota system;

    - SMB network file system;

    - BPF subsystem;

    - Netfilter;

    - TLS protocol;

    - io_uring subsystem;

    - Bluetooth subsystem;

    - Memory management;

    - Ethernet bridge;

    - Networking core;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - L2TP protocol;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - Sun RPC protocol;

    - Unix domain sockets;

    - Wireless networking;

    - USB sound devices; (CVE-2024-26776, CVE-2024-26802, CVE-2024-26790, CVE-2024-27388, CVE-2024-27077,     CVE-2024-26884, CVE-2024-26779, CVE-2024-26897, CVE-2024-27045, CVE-2024-26851, CVE-2024-27065,     CVE-2024-26843, CVE-2024-26743, CVE-2024-27052, CVE-2024-26855, CVE-2024-27436, CVE-2024-27078,     CVE-2024-26898, CVE-2024-27405, CVE-2024-26894, CVE-2024-26584, CVE-2024-26915, CVE-2024-26763,     CVE-2024-27047, CVE-2024-26809, CVE-2024-26883, CVE-2024-26901, CVE-2024-27412, CVE-2024-26803,     CVE-2024-26751, CVE-2024-35829, CVE-2024-27432, CVE-2023-52447, CVE-2024-26748, CVE-2024-27051,     CVE-2023-52434, CVE-2024-26749, CVE-2024-27034, CVE-2024-27390, CVE-2024-26879, CVE-2024-26859,     CVE-2024-26835, CVE-2024-26861, CVE-2024-27030, CVE-2024-27415, CVE-2023-52656, CVE-2024-26773,     CVE-2024-27043, CVE-2024-26601, CVE-2024-27073, CVE-2024-26782, CVE-2024-27413, CVE-2024-26880,     CVE-2024-26793, CVE-2024-26766, CVE-2024-26750, CVE-2024-26852, CVE-2024-26805, CVE-2024-35830,     CVE-2024-26798, CVE-2023-52644, CVE-2024-26787, CVE-2024-26846, CVE-2024-26857, CVE-2024-26752,     CVE-2024-26792, CVE-2023-52641, CVE-2024-26771, CVE-2024-26736, CVE-2024-27417, CVE-2024-26840,     CVE-2024-26838, CVE-2024-26820, CVE-2024-26778, CVE-2024-26688, CVE-2024-27403, CVE-2024-26862,     CVE-2024-27038, CVE-2024-26839, CVE-2024-26889, CVE-2024-26774, CVE-2024-26907, CVE-2023-52645,     CVE-2024-27431, CVE-2024-27410, CVE-2024-27416, CVE-2024-26795, CVE-2023-52497, CVE-2024-27419,     CVE-2024-26744, CVE-2024-26833, CVE-2024-26735, CVE-2024-26651, CVE-2024-27074, CVE-2023-52652,     CVE-2024-27044, CVE-2024-26733, CVE-2024-26659, CVE-2024-35811, CVE-2024-27053, CVE-2024-27037,     CVE-2023-52620, CVE-2024-26882, CVE-2024-35828, CVE-2024-26856, CVE-2024-26881, CVE-2024-27075,     CVE-2024-26583, CVE-2023-52662, CVE-2024-26788, CVE-2024-26903, CVE-2024-26870, CVE-2024-26777,     CVE-2024-26874, CVE-2024-26906, CVE-2024-26872, CVE-2024-26895, CVE-2024-26845, CVE-2024-27024,     CVE-2024-27076, CVE-2024-26603, CVE-2024-27054, CVE-2024-26754, CVE-2024-35844, CVE-2024-26764,     CVE-2024-26885, CVE-2024-26772, CVE-2024-26804, CVE-2024-26585, CVE-2024-26791, CVE-2024-27414,     CVE-2024-26878, CVE-2024-26816, CVE-2024-27046, CVE-2024-26891, CVE-2024-26875, CVE-2024-26747,     CVE-2024-26863, CVE-2023-52640, CVE-2023-52650, CVE-2024-27039, CVE-2024-26877, CVE-2024-26801,     CVE-2024-35845, CVE-2024-26769, CVE-2024-27028, CVE-2024-26737)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6871-1 advisory.

    It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition,     leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or     possibly execute arbitrary code. (CVE-2023-6270)

    It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data     structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial     of service. (CVE-2023-7042)

    It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer     dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service.
    (CVE-2024-0841)

    It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux     kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker     could use this to cause a denial of service. (CVE-2024-21823)

    Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race     condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of     service (system crash). (CVE-2024-22099)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM32 architecture;

    - RISC-V architecture;

    - x86 architecture;

    - ACPI drivers;

    - Block layer subsystem;

    - Clock framework and drivers;

    - CPU frequency scaling framework;

    - Cryptographic API;

    - DMA engine subsystem;

    - EFI core;

    - GPU drivers;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Multiple devices driver;

    - Media drivers;

    - MMC subsystem;

    - Network drivers;

    - NTB driver;

    - NVME drivers;

    - PCI subsystem;

    - MediaTek PM domains;

    - Power supply drivers;

    - SPI subsystem;

    - Media staging drivers;

    - TCM subsystem;

    - USB subsystem;

    - Framebuffer layer;

    - AFS file system;

    - File systems infrastructure;

    - BTRFS file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - Network file system client;

    - NTFS3 file system;

    - Diskquota system;

    - SMB network file system;

    - BPF subsystem;

    - Netfilter;

    - TLS protocol;

    - io_uring subsystem;

    - Bluetooth subsystem;

    - Memory management;

    - Ethernet bridge;

    - Networking core;

    - HSR network protocol;

    - IPv4 networking;

    - IPv6 networking;

    - L2TP protocol;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netlink;

    - NET/ROM layer;

    - Packet sockets;

    - RDS protocol;

    - Sun RPC protocol;

    - Unix domain sockets;

    - Wireless networking;

    - USB sound devices; (CVE-2024-26901, CVE-2024-35844, CVE-2024-27024, CVE-2024-26835, CVE-2024-26879,     CVE-2024-26846, CVE-2024-35829, CVE-2024-26804, CVE-2024-26802, CVE-2024-27039, CVE-2024-27075,     CVE-2024-27076, CVE-2024-26863, CVE-2024-27046, CVE-2024-26776, CVE-2024-26875, CVE-2024-26885,     CVE-2024-26583, CVE-2024-26777, CVE-2024-26803, CVE-2024-27047, CVE-2024-26748, CVE-2024-27044,     CVE-2024-27416, CVE-2024-26906, CVE-2024-27405, CVE-2024-26749, CVE-2024-27436, CVE-2024-26895,     CVE-2023-52662, CVE-2024-26772, CVE-2023-52645, CVE-2024-26787, CVE-2024-26788, CVE-2023-52497,     CVE-2024-26795, CVE-2024-26763, CVE-2024-27414, CVE-2024-26870, CVE-2024-27412, CVE-2024-27078,     CVE-2024-27388, CVE-2024-26894, CVE-2023-52641, CVE-2024-27053, CVE-2024-26584, CVE-2024-26752,     CVE-2024-35845, CVE-2024-26884, CVE-2024-26782, CVE-2024-26859, CVE-2024-26809, CVE-2024-27038,     CVE-2024-26897, CVE-2024-26750, CVE-2023-52644, CVE-2024-26848, CVE-2024-26833, CVE-2024-26801,     CVE-2024-26872, CVE-2023-52620, CVE-2023-52652, CVE-2024-26839, CVE-2024-26851, CVE-2024-26805,     CVE-2024-26659, CVE-2024-26791, CVE-2023-52640, CVE-2024-26883, CVE-2024-26737, CVE-2024-27028,     CVE-2024-26603, CVE-2024-27073, CVE-2024-26792, CVE-2024-35830, CVE-2024-26585, CVE-2024-27045,     CVE-2024-26880, CVE-2024-27074, CVE-2023-52434, CVE-2024-26778, CVE-2024-26754, CVE-2024-27034,     CVE-2024-35828, CVE-2024-26643, CVE-2024-26774, CVE-2024-26878, CVE-2024-26733, CVE-2024-27043,     CVE-2023-52656, CVE-2024-26816, CVE-2024-26907, CVE-2024-26838, CVE-2024-26651, CVE-2024-26790,     CVE-2024-26840, CVE-2024-26751, CVE-2024-27410, CVE-2023-52447, CVE-2024-27431, CVE-2024-26861,     CVE-2024-27077, CVE-2024-26779, CVE-2024-27054, CVE-2024-26601, CVE-2024-26874, CVE-2024-26764,     CVE-2023-52650, CVE-2024-26843, CVE-2024-26856, CVE-2024-26820, CVE-2024-26903, CVE-2024-27037,     CVE-2024-26798, CVE-2024-27415, CVE-2024-27419, CVE-2024-26736, CVE-2024-27403, CVE-2024-27432,     CVE-2024-26735, CVE-2024-26793, CVE-2024-26881, CVE-2024-26889, CVE-2024-27052, CVE-2024-26766,     CVE-2024-26882, CVE-2024-27417, CVE-2024-26688, CVE-2024-26747, CVE-2024-26877, CVE-2024-26744,     CVE-2024-27051, CVE-2024-26743, CVE-2024-26857, CVE-2024-26855, CVE-2024-26852, CVE-2024-26771,     CVE-2024-26891, CVE-2024-27030, CVE-2024-26769, CVE-2024-27413, CVE-2024-26898, CVE-2024-26915,     CVE-2024-26845, CVE-2024-27065, CVE-2024-26924, CVE-2024-26862, CVE-2024-27390, CVE-2024-26773)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
200373	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6821-3)	Nessus	Ubuntu Local Security Checks	2024/6/11	2024/8/27	high
250049	Linux Distros Unpatched Vulnerability : CVE-2024-27047	Nessus	Misc.	2025/8/15	2026/11/12	medium
210249	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2806)	Nessus	Huawei Local Security Checks	2024/11/4	2025/9/25	high
213341	Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-057)	Nessus	Amazon Linux Local Security Checks	2024/12/23	2026/1/26	high
200223	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6820-1)	Nessus	Ubuntu Local Security Checks	2024/6/7	2024/8/27	high
201863	Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-6871-1)	Nessus	Ubuntu Local Security Checks	2024/7/4	2025/9/24	high

検出

プラグインの検索

high

medium

high

high

high

high