The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6740-1 advisory.

    Wei Chen discovered that a race condition existed in the TIPC protocol implementation in the Linux kernel,     leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of     service (system crash). (CVE-2023-1382)

    It was discovered that the virtio network implementation in the Linux kernel did not properly handle file     references in the host, leading to a use-after-free vulnerability. A local attacker could use this to     cause a denial of service (system crash) or possibly expose sensitive information (kernel memory).
    (CVE-2023-1838)

    Jose Oliveira and Rodrigo Branco discovered that the Spectre Variant 2 mitigations with prctl syscall were     insufficient in some situations. A local attacker could possibly use this to expose sensitive information.
    (CVE-2023-1998)

    Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the     Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing     credentials. A physically proximate attacker placed between two Bluetooth devices could use this to     subsequently impersonate one of the paired devices. (CVE-2023-24023)

    shanzhulig discovered that the DRM subsystem in the Linux kernel contained a race condition when     performing certain operation while handling driver unload, leading to a use-after-free vulnerability. A     local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2023-51043)

    It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-51779)

    It was discovered that the device mapper driver in the Linux kernel did not properly validate target size     during certain memory allocations. A local attacker could use this to cause a denial of service (system     crash). (CVE-2023-52429, CVE-2024-23851)

    Zhenghan Wang discovered that the generic ID allocator implementation in the Linux kernel did not properly     check for null bitmap when releasing IDs. A local attacker could use this to cause a denial of service     (system crash). (CVE-2023-6915)

    It was discovered that the SCTP protocol implementation in the Linux kernel contained a race condition     when handling lock acquisition in certain situations. A local attacker could possibly use this to cause a     denial of service (kernel deadlock). (CVE-2024-0639)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Architecture specifics;

    - EDAC drivers;

    - Media drivers;

    - JFS file system; (CVE-2023-52603, CVE-2023-52464, CVE-2023-52600, CVE-2023-52445, CVE-2023-52451)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6726-1 advisory.

    Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly     handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a     guest VM could possibly use this to cause a denial of service (host domain crash). (CVE-2023-46838)

    It was discovered that the IPv6 implementation of the Linux kernel did not properly manage route cache     memory usage. A remote attacker could use this to cause a denial of service (memory exhaustion).
    (CVE-2023-52340)

    It was discovered that the device mapper driver in the Linux kernel did not properly validate target size     during certain memory allocations. A local attacker could use this to cause a denial of service (system     crash). (CVE-2023-52429, CVE-2024-23851)

    Dan Carpenter discovered that the netfilter subsystem in the Linux kernel did not store data in properly     sized memory locations. A local user could use this to cause a denial of service (system crash).
    (CVE-2024-0607)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - Architecture specifics;

    - Cryptographic API;

    - Android drivers;

    - EDAC drivers;

    - GPU drivers;

    - Media drivers;

    - MTD block device drivers;

    - Network drivers;

    - NVME drivers;

    - TTY drivers;

    - Userspace I/O drivers;

    - F2FS file system;

    - GFS2 file system;

    - IPv6 Networking;

    - AppArmor security module; (CVE-2023-52464, CVE-2023-52448, CVE-2023-52457, CVE-2023-52443,     CVE-2023-52439, CVE-2023-52612, CVE-2024-26633, CVE-2024-26597, CVE-2023-52449, CVE-2023-52444,     CVE-2023-52609, CVE-2023-52469, CVE-2023-52445, CVE-2023-52451, CVE-2023-52470, CVE-2023-52454,     CVE-2023-52436, CVE-2023-52438)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6818-4 advisory.

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C     PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a     denial of service (system crash). (CVE-2023-6356, CVE-2023-6535, CVE-2023-6536)

    It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux     kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker     could use this to cause a denial of service. (CVE-2024-21823)

    Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-     bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system     crash). (CVE-2024-23849)

    It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to     a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a     denial of service (system crash). (CVE-2024-24860)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - PowerPC architecture;

    - RISC-V architecture;

    - S390 architecture;

    - Core kernel;

    - x86 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - ACPI drivers;

    - Android drivers;

    - Drivers core;

    - Power management core;

    - Bus devices;

    - Device frequency scaling framework;

    - DMA engine subsystem;

    - EDAC drivers;

    - ARM SCMI message protocol;

    - GPU drivers;

    - IIO ADC drivers;

    - InfiniBand drivers;

    - IOMMU subsystem;

    - Media drivers;

    - Multifunction device drivers;

    - MTD block device drivers;

    - Network drivers;

    - NVME drivers;

    - Device tree and open firmware driver;

    - PCI driver for MicroSemi Switchtec;

    - Power supply drivers;

    - RPMSG subsystem;

    - SCSI drivers;

    - QCOM SoC drivers;

    - SPMI drivers;

    - Thermal drivers;

    - TTY drivers;

    - VFIO drivers;

    - BTRFS file system;

    - Ceph distributed file system;

    - EFI Variable file system;

    - EROFS file system;

    - Ext4 file system;

    - F2FS file system;

    - GFS2 file system;

    - JFS file system;

    - Network file systems library;

    - Network file system server daemon;

    - File systems infrastructure;

    - Pstore file system;

    - ReiserFS file system;

    - SMB network file system;

    - BPF subsystem;

    - Memory management;

    - TLS protocol;

    - Ethernet bridge;

    - Networking core;

    - IPv4 networking;

    - IPv6 networking;

    - Logical Link layer;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Netfilter;

    - NetLabel subsystem;

    - Network traffic control;

    - SMC sockets;

    - Sun RPC protocol;

    - AppArmor security module;

    - Intel ASoC drivers;

    - MediaTek ASoC drivers;

    - USB sound devices; (CVE-2023-52598, CVE-2023-52676, CVE-2023-52609, CVE-2024-26620, CVE-2023-52487,     CVE-2023-52465, CVE-2023-52473, CVE-2023-52467, CVE-2024-26583, CVE-2023-52669, CVE-2023-52664,     CVE-2023-52449, CVE-2023-52614, CVE-2024-26595, CVE-2023-52611, CVE-2023-52696, CVE-2023-52591,     CVE-2023-52491, CVE-2024-35839, CVE-2023-52679, CVE-2024-26607, CVE-2023-52587, CVE-2023-52469,     CVE-2023-52608, CVE-2023-52617, CVE-2023-52698, CVE-2024-26673, CVE-2024-35835, CVE-2024-26808,     CVE-2024-26668, CVE-2023-52626, CVE-2023-52621, CVE-2024-35837, CVE-2023-52489, CVE-2023-52597,     CVE-2024-26649, CVE-2024-26615, CVE-2024-35838, CVE-2023-52693, CVE-2023-52497, CVE-2024-35842,     CVE-2024-26618, CVE-2024-26610, CVE-2024-26631, CVE-2024-26644, CVE-2024-26627, CVE-2023-52677,     CVE-2023-52472, CVE-2023-52627, CVE-2023-52486, CVE-2023-52632, CVE-2023-52494, CVE-2023-52468,     CVE-2024-26634, CVE-2023-52588, CVE-2024-26646, CVE-2024-26584, CVE-2023-52443, CVE-2023-52691,     CVE-2024-26612, CVE-2023-52595, CVE-2024-26592, CVE-2024-26623, CVE-2023-52492, CVE-2024-26670,     CVE-2023-52583, CVE-2023-52681, CVE-2023-52635, CVE-2023-52457, CVE-2023-52445, CVE-2024-26629,     CVE-2024-26594, CVE-2023-52675, CVE-2023-52488, CVE-2023-52446, CVE-2024-26625, CVE-2023-52697,     CVE-2023-52453, CVE-2023-52498, CVE-2023-52686, CVE-2023-52593, CVE-2023-52612, CVE-2023-52687,     CVE-2023-52470, CVE-2023-52455, CVE-2023-52444, CVE-2024-26608, CVE-2024-26633, CVE-2024-26645,     CVE-2023-52451, CVE-2023-52456, CVE-2024-26640, CVE-2023-52670, CVE-2023-52589, CVE-2024-26598,     CVE-2024-35841, CVE-2024-26647, CVE-2024-26636, CVE-2023-52680, CVE-2023-52616, CVE-2023-52685,     CVE-2024-26582, CVE-2024-26638, CVE-2023-52694, CVE-2024-35840, CVE-2023-52448, CVE-2023-52623,     CVE-2023-52462, CVE-2023-52452, CVE-2024-26641, CVE-2023-52683, CVE-2023-52682, CVE-2023-52594,     CVE-2023-52490, CVE-2023-52493, CVE-2023-52633, CVE-2023-52606, CVE-2024-26669, CVE-2023-52584,     CVE-2024-26585, CVE-2023-52610, CVE-2023-52672, CVE-2023-52450, CVE-2023-52666, CVE-2023-52458,     CVE-2023-52622, CVE-2023-52674, CVE-2023-52619, CVE-2024-26586, CVE-2023-52667, CVE-2024-26616,     CVE-2023-52463, CVE-2024-26632, CVE-2023-52447, CVE-2023-52692, CVE-2023-52678, CVE-2023-52607,     CVE-2023-52618, CVE-2023-52464, CVE-2024-26671, CVE-2023-52599, CVE-2023-52454, CVE-2023-52495,     CVE-2023-52690)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3627 advisory.

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever     (CVE-2024-26603)

    * kernel: use after free in i2c (CVE-2019-25162)

    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)

    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)

    * kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)

    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)

    * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)

    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)

    * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)

    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)

    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)

    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout     (CVE-2024-26643)

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

    * kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)

    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)

    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)

    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)

    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)

    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)

    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)

    * kernel: USB: core: Fix deadlock in port disable sysfs attribute (CVE-2024-26933)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-34640)

    * kernel-rt: epoll_wait not reporting catching all events to application (JIRA:Rocky Linux-23022)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3627 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever     (CVE-2024-26603)

    * kernel: use after free in i2c (CVE-2019-25162)

    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)

    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)

    * kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)

    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)

    * kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)

    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)

    * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)

    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)

    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)

    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout     (CVE-2024-26643)

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

    * kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)

    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)

    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)

    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)

    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)

    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)

    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)

    * kernel: USB: core: Fix deadlock in port disable sysfs attribute (CVE-2024-26933)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest RHEL-8.10.z kernel (JIRA:RHEL-34640)

    * kernel-rt: epoll_wait not reporting catching all events to application (JIRA:RHEL-23022)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3618 advisory.

    - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439}
    - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013}
    - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150]     {CVE-2024-27048}
    - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140]     {CVE-2024-27052}
    - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130]     {CVE-2024-27056}
    - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866]     {CVE-2024-26892}
    - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos     Martinez) [RHEL-34189] {CVE-2024-26897}
    - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547]     {CVE-2024-26693}
    - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694}
    - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos     Martinez) [RHEL-29089] {CVE-2023-52594}
    - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093]     {CVE-2023-52595}
    - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610}
    - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014}
    - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311]     {CVE-2021-47171}
    - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171}
    - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter)     [RHEL-30076] {CVE-2024-26643}
    - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080]     {CVE-2024-26642}
    - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307}
    - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919}
    - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213]     {CVE-2022-48669}
    - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122]     {CVE-2024-27059}
    - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934}
    - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964}
    - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076]     {CVE-2024-26993}
    - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659}
    - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297]     {CVE-2024-26659}
    - USB: core: Fix deadlock in port disable sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933}
    - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933}
    - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087]     {CVE-2024-25744}
    - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
    - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087]     {CVE-2024-25744}
    - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087]     {CVE-2024-25744}
    - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
    - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
    - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
    - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598}
    - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746]     {CVE-2024-26615}
    - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664]     {CVE-2024-26779}
    - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585]     {CVE-2021-47055}
    - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055}
    - pid: take a reference when initializing  (Waiman Long) [RHEL-29420] {CVE-2021-47118}
    - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153}
    - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224]     {CVE-2024-26872}
    - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108]     {CVE-2024-26973}
    - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186]     {CVE-2024-26901}
    - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590]     {CVE-2021-47185}
    - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744}
    - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743}
    - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664}
    - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
    - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989]     {CVE-2023-52578}
    - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
    - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610}
    - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez)     [RHEL-28015] {CVE-2023-52528     }
    - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118]     {CVE-2023-52607}
    - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606}
    - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986]     {CVE-2023-52477}
    - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565}
    - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445}
    - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593}
    - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254]     {CVE-2020-36777}
    - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162}
    - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934}
    - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520}
    - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340}
    - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513}
    - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779]     {CVE-2022-48627}
    - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669]     {CVE-2024-26603}
    - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782}
    - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240}
    - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114]     {CVE-2023-6240}
    - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3618 advisory.

    * kernel: Marvin vulnerability side-channel leakage in the RSA decryption     operation (CVE-2023-6240)

    * kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()     (CVE-2024-0340)

    * kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

    * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

    * kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

    * kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer     that cause loop forever (CVE-2024-26603)

    * kernel: use after free in i2c (CVE-2019-25162)

    * kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

    * kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()     (CVE-2020-36777)

    * kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors     (CVE-2023-52477)

    * kernel: mtd: require write permissions for locking and badblock ioctls     (CVE-2021-47055)

    * kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump     (CVE-2024-26615)

    * kernel: vt: fix memory overlapping when deleting chars in the buffer     (CVE-2022-48627)

    * kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

    * kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu()     (CVE-2023-52565)

    * kernel: net: bridge: data races indata-races in br_handle_frame_finish()     (CVE-2023-52578)

    * kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg     (CVE-2023-52528)

    * kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

    * kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

    * kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)

    * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags     (CVE-2023-52610)

    * kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set     with timeout (CVE-2024-26643)

    * kernel: netfilter: nf_tables: disallow anonymous set with timeout flag     (CVE-2024-26642)

    * kernel: i2c: i801: Don't generate an interrupt on bus reset     (CVE-2021-47153)

    * kernel: xhci: handle isoc Babble and Buffer Overrun events properly     (CVE-2024-26659)

    * kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

    * kernel: wifi: mac80211: fix race condition on enabling fast-xmit     (CVE-2024-26779)

    * kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter     (CVE-2024-26744)

    * kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

    * kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc     (CVE-2021-47185)

    * kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak     (CVE-2024-26901)

    * kernel: RDMA/srpt: Do not register event handler until srpt device is fully     setup (CVE-2024-26872)

    * kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

    * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

    * kernel: USB: core: Fix deadlock in usb_deauthorize_interface()     (CVE-2024-26934)

    * kernel: USB: core: Fix deadlock in port disable sysfs attribute     (CVE-2024-26933)

    * kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()     (CVE-2024-26993)

    * kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

    * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command     (CVE-2024-27059)

    * kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)

    * kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)

    * kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)

    * kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)

    * kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()     (CVE-2023-52594)

    * kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
193593	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-6740-1)	Nessus	Ubuntu Local Security Checks	2024/4/19	2024/12/13	high
193081	Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6726-1)	Nessus	Ubuntu Local Security Checks	2024/4/9	2025/3/17	high
236061	Alibaba Cloud Linux 3 : 0149: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2024:0149)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
200707	Ubuntu 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-6818-4)	Nessus	Ubuntu Local Security Checks	2024/6/19	2025/9/24	high
198105	EulerOS Virtualization 2.11.0 : kernel (EulerOS-SA-2024-1735)	Nessus	Huawei Local Security Checks	2024/5/29	2025/9/26	high
200568	Rocky Linux 8 : kernel-rt (RLSA-2024:3627)	Nessus	Rocky Linux Local Security Checks	2024/6/14	2024/9/9	high
210815	RHEL 9 : kernel (RHSA-2024:9315)	Nessus	Red Hat Local Security Checks	2024/11/12	2025/10/28	high
200116	RHEL 8 : kernel-rt (RHSA-2024:3627)	Nessus	Red Hat Local Security Checks	2024/6/5	2024/11/7	high
200159	Oracle Linux 8 : kernel (ELSA-2024-3618)	Nessus	Oracle Linux Local Security Checks	2024/6/6	2025/9/9	high
200609	Rocky Linux 8 : kernel update (Moderate) (RLSA-2024:3618)	Nessus	Rocky Linux Local Security Checks	2024/6/14	2024/9/9	high

検出

プラグインの検索

high

high

critical

high

high

high

high

high

high

high