The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-489:04 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system.  The     kernel handles the basic functions of the operating system:  memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2011-1593     Multiple integer overflows in the next_pidmap function in kernel/pid.c in     the Linux kernel before 2.6.38.4 allow local users to cause a denial of service     (system crash) via a crafted (1) getdents or (2) readdir system call.
    CVE-2011-1898     Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not     have interrupt remapping, allows guest OS users to gain host OS privileges by using DMA to generate MSI     interrupts by writing to the interrupt injection registers.
    CVE-2011-2492     The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data     structures, which allows local users to obtain potentially sensitive information from kernel memory via a     crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in     net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.
    CVE-2011-2689     The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the     size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of     service (BUG and system crash) by arranging for all resource groups to have too little free space.
    CVE-2011-2695     Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to     cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a     write operation involving a block number corresponding to the largest possible 32-bit unsigned     integer.
    CVE-2011-0999     mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge     page (THP) during the existence of a temporary stack for an exec system call, which allows local users to     cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted     application.
    CVE-2011-1010     Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2     allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a     malformed Mac OS partition table.
    CVE-2011-1082     fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data     structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to     cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes     epoll_create and epoll_ctl system calls.
    CVE-2011-1090     The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL     data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a     denial of service (panic) via a crafted attempt to set an ACL.
    CVE-2011-1163     The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly     handle an invalid number of partitions, which might allow local users to obtain potentially sensitive     information from kernel heap memory via vectors related to partition-table parsing.
    CVE-2011-1494     Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux     kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory     corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.
    CVE-2011-1495     drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and     (2) offset values before performing memory copy operations, which might allow local users to gain     privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel     memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
    CVE-2010-3296     The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5     does not properly initialize a certain structure member, which allows local users to obtain potentially     sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
    CVE-2010-4346     The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an     expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr     restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language     application.
    CVE-2010-4526     Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2     through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable     message to a socket that is already locked by a user, which causes the socket to be freed and triggers     list corruption, related to the sctp_wait_for_connect function.
    CVE-2011-0521     The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2     does not check the sign of a certain integer field, which allows local users to cause a denial of service     (memory corruption) or possibly have unspecified other impact via a negative value.
    CVE-2011-0695     Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in     Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand     request while other request handlers are still running, which triggers an invalid pointer dereference.
    CVE-2011-0710     The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before     2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of     an arbitrary process by reading a status file under /proc/.
    CVE-2010-4565     The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN)     implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename     containing a kernel memory address, which allows local users to obtain potentially sensitive information     about kernel memory use by listing this filename.
    CVE-2010-4649     Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux     kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have     unspecified other impact via a large value of a certain structure member.
    CVE-2011-0711     The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not     initialize a certain structure member, which allows local users to obtain potentially sensitive     information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.
    CVE-2011-0712     Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel     before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have     unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function     in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.
    CVE-2011-1013     Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct     Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in     the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and     consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a     crafted num_crtcs (aka vb_num) structure member in an ioctl argument.
    CVE-2011-1016     The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the     AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1)     Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.
    CVE-2011-1044     The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37     does not initialize a certain response buffer, which allows local users to obtain potentially sensitive     information from kernel memory via vectors that cause this buffer to be only partially filled, a different     vulnerability than CVE-2010-4649.
    CVE-2010-3858     The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN     is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment     for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service     (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.
    CVE-2011-1598     The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate     a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference)     or possibly have unspecified other impact via a crafted release operation.
    CVE-2011-1748     The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate     a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference)     or possibly have unspecified other impact via a crafted release operation.
    CVE-2010-4250     CVE-2010-4251     CVE-2010-4648     CVE-2010-4655     CVE-2010-4656     CVE-2011-0006     CVE-2011-0716     CVE-2011-0726     CVE-2011-1019     CVE-2011-1023     CVE-2011-1079     CVE-2011-1080     CVE-2011-1093     CVE-2011-1170     CVE-2011-1171     CVE-2011-1172     CVE-2011-1182     CVE-2011-1478     CVE-2011-1573     CVE-2011-1576     CVE-2011-1581     CVE-2011-1767     CVE-2011-1768     CVE-2011-1770     CVE-2011-1771     CVE-2011-1776     CVE-2011-2183     CVE-2011-2213     CVE-2011-2479     CVE-2011-2491     CVE-2011-2495     CVE-2011-2497     CVE-2011-2517     No information available at the time of writing, please refer to the CVE links below.
    Fixed bugs:
    Too many to list everything here, see the changelog     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3296     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3858     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4250     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4251     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4346     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4526     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4565     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4648     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4649     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4655     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4656     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0006     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0521     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0695     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0710     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0711     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0712     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0716     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0726     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0999     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1010     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1013     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1016     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1019     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1023     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1044     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1079     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1080     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1082     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1090     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1093     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1163     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1170     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1171     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1172     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1182     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1478     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1494     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1495     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1573     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1576     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1581     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1593     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1598     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1748     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1767     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1768     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1770     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1771     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1776     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1898     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2183     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2213     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2479     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2491     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2492     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2495     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2497     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2517     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2689     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2695

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0542 advisory.

    - [net] limit socket backlog add operation to prevent possible DoS (Jiri Pirko) [694396] {CVE-2010-4251}
    - [scsi] mpt2sas: prevent heap overflows and unchecked (Tomas Henzl) [694023] {CVE-2011-1494     CVE-2011-1495}
    - [fs] epoll: prevent creating circular epoll structures (Don Howard) [681683] {CVE-2011-1082}
    - [fs] nfs: Ensure that NFS4 acl requests don't use slab in skb fraglist (Neil Horman) [682645]     {CVE-2011-1090}
    - [fs] partitions: Validate map_count in Mac partition tables (Danny Feng) [679286] {CVE-2011-1010}
    - [fs] Fix corrupted OSF partition table parsing (Danny Feng) [688025] {CVE-2011-1163}
    - [net] sctp: fix the INIT/INIT-ACK chunk length calculation (Thomas Graf) [690743] {CVE-2011-1573}
    - [net] CAN: Use inode instead of kernel address for /proc file (Danny Feng) [664561] {CVE-2010-4565}
    - [fs] inotify: fix double free/corruption of stuct user (Eric Paris) [656832] {CVE-2010-4250}
    - [net] bonding: fix incorrect tx queue offset (Andy Gospodarek) [695548] {CVE-2011-1581}
    - [tracing] t_start: reset FTRACE_ITER_HASH in case of seek/pread (Jiri Olsa) [631626] {CVE-2010-3079}
    - [net] ipv6: netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689351] {CVE-2011-1172}
    - [net] netfilter: ip_tables: fix infoleak to userspace (Jiri Pirko) [689334] {CVE-2011-1171}
    - [net] netfilter: arp_tables: fix infoleak to userspace (Jiri Pirko) [689325] {CVE-2011-1170}
    - [drm] radeon/kms: check AA resolve registers on r300 + regression fix (Dave Airlie) [680002]     {CVE-2011-1016}
    - [net] fix ebtables stack infoleak (Eugene Teo) [681323] {CVE-2011-1080}
    - [drm] fix unsigned vs signed comparison issue in modeset ctl ioctl (Don Howard) [679928] {CVE-2011-1013}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2016 advisory.

    - kernel: Fix unlimited socket backlog DoS {CVE-2010-4251}
    - rds: prevent BUG_ON triggering on congestion map updates {CVE-2011-1023}
    - epoll: prevent creating circular epoll structures {CVE-2011-1082}
    - fs: fix corrupted OSF partition table parsing {CVE-2011-1163}
    - fs: Increase OSF partition limit from 8 to 18 {CVE-2011-1163}
    - netfilter: arp_tables: fix infoleak to userspace {CVE-2011-1170}
    - netfilter: ip_tables: fix infoleak to userspace {CVE-2011-1171}
    - ipv6: netfilter: ip6_tables: fix infoleak to userspace {CVE-2011-1172}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

This update fixes the following security issues :

  - Multiple buffer overflow flaws were found in the Linux     kernel's Management Module Support for Message Passing     Technology (MPT) based controllers. A local,     unprivileged user could use these flaws to cause a     denial of service, an information leak, or escalate     their privileges. (CVE-2011-1494, CVE-2011-1495,     Important)

  - A flaw was found in the Linux kernel's Ethernet bonding     driver implementation. Packets coming in from network     devices that have more than 16 receive queues to a     bonding interface could cause a denial of service.
    (CVE-2011-1581, Important)

  - A flaw was found in the Linux kernel's networking     subsystem. If the number of packets received exceeded     the receiver's buffer limit, they were queued in a     backlog, consuming memory, instead of being discarded. A     remote attacker could abuse this flaw to cause a denial     of service (out-of-memory condition). (CVE-2010-4251,     Moderate)

  - A flaw was found in the Linux kernel's Transparent Huge     Pages (THP) implementation. A local, unprivileged user     could abuse this flaw to allow the user stack (when it     is using huge pages) to grow and cause a denial of     service. (CVE-2011-0999, Moderate)

  - A flaw was found in the transmit methods (xmit) for the     loopback and InfiniBand transports in the Linux kernel's     Reliable Datagram Sockets (RDS) implementation. A local,     unprivileged user could use this flaw to cause a denial     of service. (CVE-2011-1023, Moderate)

  - A flaw in the Linux kernel's Event Poll (epoll)     implementation could allow a local, unprivileged user to     cause a denial of service. (CVE-2011-1082, Moderate)

  - An inconsistency was found in the interaction between     the Linux kernel's method for allocating NFSv4 (Network     File System version 4) ACL data and the method by which     it was freed. This inconsistency led to a kernel panic     which could be triggered by a local, unprivileged user     with files owned by said user on an NFSv4 share.
    (CVE-2011-1090, Moderate)

  - A missing validation check was found in the Linux     kernel's mac_partition() implementation, used for     supporting file systems created on Mac OS operating     systems. A local attacker could use this flaw to cause a     denial of service by mounting a disk that contains     specially crafted partitions. (CVE-2011-1010, Low)

  - A buffer overflow flaw in the DEC Alpha OSF partition     implementation in the Linux kernel could allow a local     attacker to cause an information leak by mounting a disk     that contains specially crafted partition tables.
    (CVE-2011-1163, Low)

  - Missing validations of null-terminated string data     structure elements in the do_replace(),     compat_do_replace(), do_ipt_get_ctl(),     do_ip6t_get_ctl(), and do_arpt_get_ctl() functions could     allow a local user who has the CAP_NET_ADMIN capability     to cause an information leak. (CVE-2011-1170,     CVE-2011-1171, CVE-2011-1172, Low)

This update also fixes several hundred bugs and adds enhancements.

The system must be rebooted for this update to take effect.

This update fixes the following reports for OFED :

  - 704914: Fixed NFS client over TCP hangs due to packet     loss.

  - 693243: Fixed issue with building lustre against     ofed-devel.

  - 706175: Fix crash on accessing /proc/net/sdpstats

  - 722030: Cannot load ib_ipath

  - 703752: Prevent BUG_ON triggering on congestion

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0542 advisory.

  - kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory (CVE-2010-3881)

  - kernel: unlimited socket backlog DoS (CVE-2010-4251, CVE-2010-4805)

  - kernel: thp: prevent hugepages during args/env copying into the user stack (CVE-2011-0999)

  - kernel: fs/partitions: Validate map_count in Mac partition tables (CVE-2011-1010)

  - kernel: BUG_ON() in rds_send_xmit() (CVE-2011-1023)

  - kernel: potential kernel deadlock when creating circular epoll file structures (CVE-2011-1082)

  - kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab (CVE-2011-1090)

  - kernel: fs/partitions: Corrupted OSF partition table infoleak (CVE-2011-1163)

  - kernel: ipv4: netfilter: arp_tables: fix infoleak to userspace (CVE-2011-1170)

  - kernel: ipv4: netfilter: ip_tables: fix infoleak to userspace (CVE-2011-1171)

  - kernel: ipv6: netfilter: ip6_tables: fix infoleak to userspace (CVE-2011-1172)

  - kernel: drivers/scsi/mpt2sas: prevent heap overflows (CVE-2011-1494, CVE-2011-1495)

  - kernel: bonding: Incorrect TX queue offset (CVE-2011-1581)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
284480	MiracleLinux 4 : kernel-2.6.32-131.12.1.el6 (AXSA:2011-489:04)	Nessus	Miracle Linux Local Security Checks	high
181049	Oracle Linux 6 : kernel (ELSA-2011-0542)	Nessus	Oracle Linux Local Security Checks	high
68417	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2016)	Nessus	Oracle Linux Local Security Checks	high
61041	Scientific Linux Security Update : kernel on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
57123	SuSE 11.1 Security Update : OFED (SAT Patch Number 5384)	Nessus	SuSE Local Security Checks	medium
54590	RHEL 6 : Red Hat Enterprise Linux 6.1 kernel (RHSA-2011:0542)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2011-1023

medium

Tenable Plugins

high

high

high

medium

medium

high