The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-134:04 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system. The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2014-3215     CVE-2014-3690     CVE-2014-7825     CVE-2014-7826     CVE-2014-8171     CVE-2014-8884     CVE-2014-9529     CVE-2014-9584     CVE-2015-1421     This update also fixes several bugs.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000710 advisory.

    The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of     service (deadlock) by spawning new processes within a memory-constrained cgroup.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-948:05 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system.  The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2010-5313     Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38     allows L2 guest OS users to cause a denial of service (L1 guest OS     crash) via a crafted instruction that triggers an L2 emulation failure     report, a similar issue to CVE-2014-7842.
    CVE-2013-7421     The Crypto API in the Linux kernel before 3.18.5 allows local users to     load arbitrary kernel modules via a bind system call for an AF_ALG     socket with a module name in the salg_name field, a different     vulnerability than CVE-2014-9644.
    CVE-2014-3647     arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel     through 3.17.2 does not properly perform RIP changes, which allows     guest OS users to cause a denial of service (guest OS crash) via a     crafted application.
    CVE-2014-7842     Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4     allows guest OS users to cause a denial of service (guest OS crash)     via a crafted application that performs an MMIO transaction or a PIO     transaction to trigger a guest userspace emulation error report, a     similar issue to CVE-2010-5313.
    CVE-2014-8171
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2014-9419     The __switch_to function in arch/x86/kernel/process_64.c in the Linux     kernel through 3.18.1 does not ensure that Thread Local Storage (TLS)     descriptors are loaded before proceeding with other steps, which makes     it easier for local users to bypass the ASLR protection mechanism via     a crafted application that reads a TLS base address.
    CVE-2014-9644     The Crypto API in the Linux kernel before 3.18.5 allows local users to     load arbitrary kernel modules via a bind system call for an AF_ALG     socket with a parenthesized module template expression in the     salg_name field, as demonstrated by the vfat(aes) expression, a     different vulnerability than CVE-2013-7421.
    CVE-2015-0239     The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel     before 3.18.5, when the guest OS lacks SYSENTER MSR initialization,     allows guest OS users to gain guest OS privileges or cause a denial of     service (guest OS crash) by triggering use of a 16-bit code segment     for emulation of a SYSENTER instruction.
    CVE-2015-2925     The prepend_path function in fs/dcache.c in the Linux kernel before     4.2.4 does not properly handle rename actions inside a bind mount,     which allows local users to bypass an intended container protection     mechanism by renaming a directory, related to a double-chroot     attack.
    CVE-2015-3339     Race condition in the prepare_binprm function in fs/exec.c in the     Linux kernel before 3.19.6 allows local users to gain privileges by     executing a setuid program at a time instant when a chown to root is     in progress, and the ownership is changed but the setuid bit is not     yet stripped.
    CVE-2015-4170
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-5283     The sctp_init function in net/sctp/protocol.c in the Linux kernel     before 4.2.3 has an incorrect sequence of protocol-initialization     steps, which allows local users to cause a denial of service (panic or     memory corruption) by creating SCTP sockets before all of the steps     have finished.
    CVE-2015-6526     The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c     in the Linux kernel before 4.0.2 on ppc64 platforms allows local users     to cause a denial of service (infinite loop) via a deep 64-bit     userspace backtrace.
    CVE-2015-7613     Race condition in the IPC object implementation in the Linux kernel     through 4.2.3 allows local users to gain privileges by triggering an     ipc_addid call that leads to uid and gid comparisons against     uninitialized data, related to msg.c, shm.c, and util.c.
    CVE-2015-7837
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001827 advisory.

    The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of     service (deadlock) by spawning new processes within a memory-constrained cgroup.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002255 advisory.

    The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of     service (deadlock) by spawning new processes within a memory-constrained cgroup.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found where the kernel truncated the value     used to indicate the size of a buffer which it would     later become zero using an untruncated value. This can     corrupt memory outside of the original     allocation.(CVE-2017-9725)

  - An industry-wide issue was found in the way many modern     microprocessor designs have implemented speculative     execution of instructions (a commonly used performance     optimization). There are three primary variants of the     issue which differ in the way the speculative execution     can be exploited. Variant CVE-2017-5753 triggers the     speculative execution by performing a bounds-check     bypass. It relies on the presence of a     precisely-defined instruction sequence in the     privileged code as well as the fact that memory     accesses may cause allocation into the microprocessor's     data cache even for speculatively executed instructions     that never actually commit (retire). As a result, an     unprivileged attacker could use this flaw to cross the     syscall boundary and read privileged memory by     conducting targeted cache side-channel     attacks.(CVE-2017-5753)

  - A buffer overflow was found in the Linux kernel's     isdn_net_newslave() function in the     /drivers/isdn/i4l/isdn_net.c file. An overflow happens     when the user-controlled buffer is copied into a local     buffer of constant size using strcpy() without a length     check.(CVE-2017-12762)

  - Modern operating systems implement virtualization of     physical memory to efficiently use available system     resources and provide inter-domain protection through     access control and isolation. The L1TF issue was found     in the way the x86 microprocessor designs have     implemented speculative execution of instructions (a     commonly used performance optimization) in combination     with handling of page-faults caused by terminated     virtual to physical address resolving process. As a     result, an unprivileged attacker could use this flaw to     read privileged memory of the kernel or other processes     and/or cross guest/host boundaries to read host memory     by conducting targeted cache side-channel     attacks.(CVE-2018-3646)

  - An industry-wide issue was found in the way many modern     microprocessor designs have implemented speculative     execution of instructions (a commonly used performance     optimization). There are three primary variants of the     issue which differ in the way the speculative execution     can be exploited. Variant CVE-2017-5715 triggers the     speculative execution by utilizing branch target     injection. It relies on the presence of a     precisely-defined instruction sequence in the     privileged code as well as the fact that memory     accesses may cause allocation into the microprocessor's     data cache even for speculatively executed instructions     that never actually commit (retire). As a result, an     unprivileged attacker could use this flaw to cross the     syscall and guest/host boundaries and read privileged     memory by conducting targeted cache side-channel     attacks.(CVE-2017-5715)

  - Modern operating systems implement virtualization of     physical memory to efficiently use available system     resources and provide inter-domain protection through     access control and isolation. The L1TF issue was found     in the way the x86 microprocessor designs have     implemented speculative execution of instructions (a     commonly used performance optimization) in combination     with handling of page-faults caused by terminated     virtual to physical address resolving process. As a     result, an unprivileged attacker could use this flaw to     read privileged memory of the kernel or other processes     and/or cross guest/host boundaries to read host memory     by conducting targeted cache side-channel     attacks.(CVE-2018-3620)

  - In hid_debug_events_read of drivers/hid/hid-debug.c,     there is a possible out of bounds write due to a     missing bounds check. This could lead to local     escalation of privilege with System execution     privileges needed. User interaction is not needed for     exploitation. Product: Android Versions: Android kernel     Android ID: A-71361580.(CVE-2018-9516)

  - Systems with microprocessors utilizing speculative     execution and speculative execution of memory reads     before the addresses of all prior memory writes are     known may allow unauthorized disclosure of information     to an attacker with local user access via a     side-channel analysis, aka Speculative Store Bypass     (SSB), Variant 4.(CVE-2018-3639)

  - It was found that the Linux kernel memory resource     controller's (memcg) handling of OOM (out of memory)     conditions could lead to deadlocks. An attacker able to     continuously spawn new processes within a single     memory-constrained cgroup during an OOM event could use     this flaw to lock up the system.(CVE-2014-8171)

  - In sk_clone_lock of sock.c, there is a possible memory     corruption due to type confusion. This could lead to     local escalation of privilege with no additional     execution privileges needed. User interaction is not     needed for exploitation. Product: Android. Versions:
    Android kernel. Android ID: A-113509306. References:
    Upstream kernel.(CVE-2018-9568)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0057 for details.

Updated kernel-rt packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel's file system implementation handled rename operations in which the source was inside and the destination was outside of a bind mount. A privileged user inside a container could use this flaw to escape the bind mount and, potentially, escalate their privileges on the system.
(CVE-2015-2925, Important)

* A race condition flaw was found in the way the Linux kernel's IPC subsystem initialized certain fields in an IPC object structure that were later used for permission checking before inserting the object into a globally visible list. A local, unprivileged user could potentially use this flaw to elevate their privileges on the system.
(CVE-2015-7613, Important)

* It was found that the Linux kernel memory resource controller's (memcg) handling of OOM (out of memory) conditions could lead to deadlocks. An attacker able to continuously spawn new processes within a single memory-constrained cgroup during an OOM event could use this flaw to lock up the system. (CVE-2014-8171, Moderate)

* A race condition flaw was found between the chown and execve system calls. When changing the owner of a setuid user binary to root, the race condition could momentarily make the binary setuid root. A local, unprivileged user could potentially use this flaw to escalate their privileges on the system. (CVE-2015-3339, Moderate)

* A flaw was discovered in the way the Linux kernel's TTY subsystem handled the tty shutdown phase. A local, unprivileged user could use this flaw to cause a denial of service on the system by holding a reference to the ldisc lock during tty shutdown, causing a deadlock.
(CVE-2015-4170, Moderate)

* A NULL pointer dereference flaw was found in the SCTP implementation. A local user could use this flaw to cause a denial of service on the system by triggering a kernel panic when creating multiple sockets in parallel while the system did not have the SCTP module loaded. (CVE-2015-5283, Moderate)

* A flaw was found in the way the Linux kernel's Crypto subsystem handled automatic loading of kernel modules. A local user could use this flaw to load any installed kernel module, and thus increase the attack surface of the running kernel. (CVE-2013-7421, CVE-2014-9644, Low)

* An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage (TLS) during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process.
(CVE-2014-9419, Low)

* A flaw was found in the way the Linux kernel handled the securelevel functionality after performing a kexec operation. A local attacker could use this flaw to bypass the security mechanism of the securelevel/secureboot combination. (CVE-2015-7837, Low)

Red Hat would like to thank Linn Crosetto of HP for reporting the CVE-2015-7837 issue. The CVE-2015-5283 issue was discovered by Ji Jianwen from Red Hat engineering.

The kernel-rt packages have been upgraded to version 3.10.0-326.rt56.204, which provides a number of bug fixes and enhancements. (BZ#1201915, BZ#1211724)

This update also fixes several bugs and adds multiple enhancements.
Refer to the following Red Hat Knowledgebase article for information on the most significant of these changes :

https://access.redhat.com/articles/2055783

All kernel-rt users are advised to upgrade to these updated packages, which correct these issues and add these enhancements. The system must be rebooted for this update to take effect.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0068 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    * A use-after-free flaw was found in the way the Linux kernel's key     management subsystem handled keyring object reference counting in certain     error path of the join_session_keyring() function. A local, unprivileged     user could use this flaw to escalate their privileges on the system.
    (CVE-2016-0728, Important)

    Red Hat would like to thank the Perception Point research team for     reporting this issue.

    All kernel-rt users are advised to upgrade to these updated packages, which     contain a backported patch to correct this issue. The system must be     rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

* A flaw was found in the way the Linux kernel's file system implementation handled rename operations in which the source was inside and the destination was outside of a bind mount. A privileged user inside a container could use this flaw to escape the bind mount and, potentially, escalate their privileges on the system.
(CVE-2015-2925, Important)

* A race condition flaw was found in the way the Linux kernel's IPC subsystem initialized certain fields in an IPC object structure that were later used for permission checking before inserting the object into a globally visible list. A local, unprivileged user could potentially use this flaw to elevate their privileges on the system.
(CVE-2015-7613, Important)

* It was found that reporting emulation failures to user space could lead to either a local (CVE-2014-7842) or a L2->L1 (CVE-2010-5313) denial of service. In the case of a local denial of service, an attacker must have access to the MMIO area or be able to access an I/O port. (CVE-2010-5313, CVE-2014-7842, Moderate)

* A flaw was found in the way the Linux kernel's KVM subsystem handled non-canonical addresses when emulating instructions that change the RIP (for example, branches or calls). A guest user with access to an I/O or MMIO region could use this flaw to crash the guest.
(CVE-2014-3647, Moderate)

* It was found that the Linux kernel memory resource controller's (memcg) handling of OOM (out of memory) conditions could lead to deadlocks. An attacker could use this flaw to lock up the system.
(CVE-2014-8171, Moderate)

* A race condition flaw was found between the chown and execve system calls. A local, unprivileged user could potentially use this flaw to escalate their privileges on the system. (CVE-2015-3339, Moderate)

* A flaw was discovered in the way the Linux kernel's TTY subsystem handled the tty shutdown phase. A local, unprivileged user could use this flaw to cause a denial of service on the system. (CVE-2015-4170, Moderate)

* A NULL pointer dereference flaw was found in the SCTP implementation. A local user could use this flaw to cause a denial of service on the system by triggering a kernel panic when creating multiple sockets in parallel while the system did not have the SCTP module loaded. (CVE-2015-5283, Moderate)

* A flaw was found in the way the Linux kernel's perf subsystem retrieved userlevel stack traces on PowerPC systems. A local, unprivileged user could use this flaw to cause a denial of service on the system. (CVE-2015-6526, Moderate)

* A flaw was found in the way the Linux kernel's Crypto subsystem handled automatic loading of kernel modules. A local user could use this flaw to load any installed kernel module, and thus increase the attack surface of the running kernel. (CVE-2013-7421, CVE-2014-9644, Low)

* An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage (TLS) during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process.
(CVE-2014-9419, Low)

* It was found that the Linux kernel KVM subsystem's sysenter instruction emulation was not sufficient. An unprivileged guest user could use this flaw to escalate their privileges by tricking the hypervisor to emulate a SYSENTER instruction in 16-bit mode, if the guest OS did not initialize the SYSENTER model-specific registers (MSRs). Note: Certified guest operating systems for Scientific Linux with KVM do initialize the SYSENTER MSRs and are thus not vulnerable to this issue when running on a KVM hypervisor. (CVE-2015-0239, Low)

* A flaw was found in the way the Linux kernel handled the securelevel functionality after performing a kexec operation. A local attacker could use this flaw to bypass the security mechanism of the securelevel/secureboot combination. (CVE-2015-7837, Low)

Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 7. This is the second regular update.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel's file system implementation handled rename operations in which the source was inside and the destination was outside of a bind mount. A privileged user inside a container could use this flaw to escape the bind mount and, potentially, escalate their privileges on the system.
(CVE-2015-2925, Important)

* A race condition flaw was found in the way the Linux kernel's IPC subsystem initialized certain fields in an IPC object structure that were later used for permission checking before inserting the object into a globally visible list. A local, unprivileged user could potentially use this flaw to elevate their privileges on the system.
(CVE-2015-7613, Important)

* It was found that reporting emulation failures to user space could lead to either a local (CVE-2014-7842) or a L2->L1 (CVE-2010-5313) denial of service. In the case of a local denial of service, an attacker must have access to the MMIO area or be able to access an I/O port. (CVE-2010-5313, CVE-2014-7842, Moderate)

* A flaw was found in the way the Linux kernel's KVM subsystem handled non-canonical addresses when emulating instructions that change the RIP (for example, branches or calls). A guest user with access to an I/O or MMIO region could use this flaw to crash the guest.
(CVE-2014-3647, Moderate)

* It was found that the Linux kernel memory resource controller's (memcg) handling of OOM (out of memory) conditions could lead to deadlocks. An attacker could use this flaw to lock up the system.
(CVE-2014-8171, Moderate)

* A race condition flaw was found between the chown and execve system calls. A local, unprivileged user could potentially use this flaw to escalate their privileges on the system. (CVE-2015-3339, Moderate)

* A flaw was discovered in the way the Linux kernel's TTY subsystem handled the tty shutdown phase. A local, unprivileged user could use this flaw to cause a denial of service on the system. (CVE-2015-4170, Moderate)

* A NULL pointer dereference flaw was found in the SCTP implementation. A local user could use this flaw to cause a denial of service on the system by triggering a kernel panic when creating multiple sockets in parallel while the system did not have the SCTP module loaded. (CVE-2015-5283, Moderate)

* A flaw was found in the way the Linux kernel's perf subsystem retrieved userlevel stack traces on PowerPC systems. A local, unprivileged user could use this flaw to cause a denial of service on the system. (CVE-2015-6526, Moderate)

* A flaw was found in the way the Linux kernel's Crypto subsystem handled automatic loading of kernel modules. A local user could use this flaw to load any installed kernel module, and thus increase the attack surface of the running kernel. (CVE-2013-7421, CVE-2014-9644, Low)

* An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage (TLS) during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process.
(CVE-2014-9419, Low)

* It was found that the Linux kernel KVM subsystem's sysenter instruction emulation was not sufficient. An unprivileged guest user could use this flaw to escalate their privileges by tricking the hypervisor to emulate a SYSENTER instruction in 16-bit mode, if the guest OS did not initialize the SYSENTER model-specific registers (MSRs). Note: Certified guest operating systems for Red Hat Enterprise Linux with KVM do initialize the SYSENTER MSRs and are thus not vulnerable to this issue when running on a KVM hypervisor.
(CVE-2015-0239, Low)

* A flaw was found in the way the Linux kernel handled the securelevel functionality after performing a kexec operation. A local attacker could use this flaw to bypass the security mechanism of the securelevel/secureboot combination. (CVE-2015-7837, Low)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2152 advisory.

    - [kernel] Initialize msg/shm IPC objects before doing ipc_addid() (Lennert Buytenhek) [1271507]     {CVE-2015-7613}
    - [fs] vfs: Test for and handle paths that are unreachable from their mnt_root ('Eric W. Biederman')     [1209371] {CVE-2015-2925}
    - [fs] dcache: Handle escaped paths in prepend_path ('Eric W. Biederman') [1209371] {CVE-2015-2925}
    - [net] sctp: fix race on protocol/netns initialization (Marcelo Leitner) [1251807] {CVE-2015-5283}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2152 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    * A flaw was found in the way the Linux kernel's file system implementation     handled rename operations in which the source was inside and the     destination was outside of a bind mount. A privileged user inside a     container could use this flaw to escape the bind mount and, potentially,     escalate their privileges on the system. (CVE-2015-2925, Important)

    * A race condition flaw was found in the way the Linux kernel's IPC     subsystem initialized certain fields in an IPC object structure that were     later used for permission checking before inserting the object into a     globally visible list. A local, unprivileged user could potentially use     this flaw to elevate their privileges on the system. (CVE-2015-7613,     Important)

    * It was found that reporting emulation failures to user space could lead     to either a local (CVE-2014-7842) or a L2->L1 (CVE-2010-5313) denial of     service. In the case of a local denial of service, an attacker must have     access to the MMIO area or be able to access an I/O port. (CVE-2010-5313,     CVE-2014-7842, Moderate)

    * A flaw was found in the way the Linux kernel's KVM subsystem handled     non-canonical addresses when emulating instructions that change the RIP     (for example, branches or calls). A guest user with access to an I/O or     MMIO region could use this flaw to crash the guest. (CVE-2014-3647,     Moderate)

    * It was found that the Linux kernel memory resource controller's (memcg)     handling of OOM (out of memory) conditions could lead to deadlocks.
    An attacker could use this flaw to lock up the system. (CVE-2014-8171,     Moderate)

    * A race condition flaw was found between the chown and execve system     calls. A local, unprivileged user could potentially use this flaw to     escalate their privileges on the system. (CVE-2015-3339, Moderate)

    * A flaw was discovered in the way the Linux kernel's TTY subsystem handled     the tty shutdown phase. A local, unprivileged user could use this flaw to     cause a denial of service on the system. (CVE-2015-4170, Moderate)

    * A NULL pointer dereference flaw was found in the SCTP implementation.
    A local user could use this flaw to cause a denial of service on the system     by triggering a kernel panic when creating multiple sockets in parallel     while the system did not have the SCTP module loaded. (CVE-2015-5283,     Moderate)

    * A flaw was found in the way the Linux kernel's perf subsystem retrieved     userlevel stack traces on PowerPC systems. A local, unprivileged user could     use this flaw to cause a denial of service on the system. (CVE-2015-6526,     Moderate)

    * A flaw was found in the way the Linux kernel's Crypto subsystem handled     automatic loading of kernel modules. A local user could use this flaw to     load any installed kernel module, and thus increase the attack surface of     the running kernel. (CVE-2013-7421, CVE-2014-9644, Low)

    * An information leak flaw was found in the way the Linux kernel changed     certain segment registers and thread-local storage (TLS) during a context     switch. A local, unprivileged user could use this flaw to leak the user     space TLS base address of an arbitrary process. (CVE-2014-9419, Low)

    * It was found that the Linux kernel KVM subsystem's sysenter instruction     emulation was not sufficient. An unprivileged guest user could use this     flaw to escalate their privileges by tricking the hypervisor to emulate a     SYSENTER instruction in 16-bit mode, if the guest OS did not initialize the     SYSENTER model-specific registers (MSRs). Note: Certified guest operating     systems for Red Hat Enterprise Linux with KVM do initialize the SYSENTER     MSRs and are thus not vulnerable to this issue when running on a KVM     hypervisor. (CVE-2015-0239, Low)

    * A flaw was found in the way the Linux kernel handled the securelevel     functionality after performing a kexec operation. A local attacker could     use this flaw to bypass the security mechanism of the     securelevel/secureboot combination. (CVE-2015-7837, Low)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates in kernel-uek.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - crypto: aesni

  - fix memory usage in GCM decryption (Stephan Mueller)     [Orabug: 21077385] (CVE-2015-3331)

  - xen/pciback: Don't disable PCI_COMMAND on PCI device     reset. (Konrad Rzeszutek Wilk) [Orabug: 20807438]     (CVE-2015-2150)

  - xen-blkfront: fix accounting of reqs when migrating     (Roger Pau Monne) [Orabug: 20860817]

  - Doc/cpu-hotplug: Specify race-free way to register CPU     hotplug callbacks (Srivatsa S. Bhat) [Orabug: 20917697]

  - net/iucv/iucv.c: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - net/core/flow.c: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - mm, vmstat: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697] 

  - profile: Fix CPU hotplug callback registration (Srivatsa     S. Bhat) 

  - trace, ring-buffer: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - hwmon, via-cputemp: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) 

  - hwmon, coretemp: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - octeon, watchdog: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - oprofile, nmi-timer: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - intel-idle: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - drivers/base/topology.c: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - acpi-cpufreq: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - scsi, fcoe: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697] 

  - scsi, bnx2fc: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - scsi, bnx2i: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - arm64, debug-monitors: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - arm64, hw_breakpoint.c: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, kvm: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, oprofile, nmi: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, pci, amd-bus: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, hpet: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, intel, cacheinfo: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, amd, ibs: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, therm_throt.c: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, mce: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, intel, uncore: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, vsyscall: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, cpuid: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - x86, msr: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - powerpc, sysfs: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) 

  - sparc, sysfs: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - s390, smp: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - s390, cacheinfo: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) 

  - arm, hw-breakpoint: Fix CPU hotplug callback     registration (Srivatsa S. Bhat) [Orabug: 20917697]

  - ia64, err-inject: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - ia64, topology: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - ia64, palinfo: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - CPU hotplug, perf: Fix CPU hotplug callback registration     (Srivatsa S. Bhat) [Orabug: 20917697]

  - CPU hotplug: Provide lockless versions of callback     registration functions (Srivatsa S. Bhat) [Orabug:
    20917697]

  - isofs: Fix unchecked printing of ER records (Jan Kara)     [Orabug: 20930551] (CVE-2014-9584)

  - KEYS: close race between key lookup and freeing (Sasha     Levin) [Orabug: 20930548] (CVE-2014-9529)     (CVE-2014-9529)

  - mm: memcg: do not allow task about to OOM kill to bypass     the limit (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - mm: memcg: do not declare OOM from __GFP_NOFAIL     allocations (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - fs: buffer: move allocation failure loop into the     allocator (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - mm: memcg: handle non-error OOM situations more     gracefully (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - mm: memcg: do not trap chargers with full callstack on     OOM (Johannes Weiner) [Orabug: 20930539] (CVE-2014-8171)

  - mm: memcg: rework and document OOM waiting and wakeup     (Johannes Weiner) [Orabug: 20930539] (CVE-2014-8171)

  - mm: memcg: enable memcg OOM killer only for user faults     (Johannes Weiner) [Orabug: 20930539] (CVE-2014-8171)

  - x86: finish user fault error path with fatal signal     (Johannes Weiner) [Orabug: 20930539] (CVE-2014-8171)

  - arch: mm: pass userspace fault flag to generic fault     handler (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - selinux: Permit bounded transitions under NO_NEW_PRIVS     or NOSUID. (Stephen Smalley) [Orabug: 20930501]     (CVE-2014-3215)

  - IB/core: Prevent integer overflow in ib_umem_get address     arithmetic (Shachar Raindel) [Orabug: 20799875]     (CVE-2014-8159) (CVE-2014-8159)

The remote OracleVM system is missing necessary patches to address critical security updates :

  - isofs: Fix unchecked printing of ER records (Jan Kara)     [Orabug: 20930551] (CVE-2014-9584)

  - KEYS: close race between key lookup and freeing (Sasha     Levin) [Orabug: 20930548] (CVE-2014-9529)     (CVE-2014-9529)

  - mm: memcg: do not allow task about to OOM kill to bypass     the limit (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - mm: memcg: do not declare OOM from __GFP_NOFAIL     allocations (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - fs: buffer: move allocation failure loop into the     allocator (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - mm: memcg: handle non-error OOM situations more     gracefully (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - mm: memcg: do not trap chargers with full callstack on     OOM (Johannes Weiner) [Orabug: 20930539] (CVE-2014-8171)

  - mm: memcg: rework and document OOM waiting and wakeup     (Johannes Weiner) [Orabug: 20930539] (CVE-2014-8171)

  - mm: memcg: enable memcg OOM killer only for user faults     (Johannes Weiner) [Orabug: 20930539] (CVE-2014-8171)

  - x86: finish user fault error path with fatal signal     (Johannes Weiner) [Orabug: 20930539] (CVE-2014-8171)

  - arch: mm: pass userspace fault flag to generic fault     handler (Johannes Weiner) [Orabug: 20930539]     (CVE-2014-8171)

  - selinux: Permit bounded transitions under NO_NEW_PRIVS     or NOSUID. (Stephen Smalley) [Orabug: 20930501]     (CVE-2014-3215)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3032 advisory.

    - isofs: Fix unchecked printing of ER records (Jan Kara)  [Orabug: 20930551]  {CVE-2014-9584}
    - KEYS: close race between key lookup and freeing (Sasha Levin)  [Orabug: 20930548]  {CVE-2014-9529}     {CVE-2014-9529}
    - mm: memcg: do not allow task about to OOM kill to bypass the limit (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}
    - mm: memcg: do not declare OOM from __GFP_NOFAIL allocations (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}
    - fs: buffer: move allocation failure loop into the allocator (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}
    - mm: memcg: handle non-error OOM situations more gracefully (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}
    - mm: memcg: do not trap chargers with full callstack on OOM (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}
    - mm: memcg: rework and document OOM waiting and wakeup (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}
    - mm: memcg: enable memcg OOM killer only for user faults (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}
    - x86: finish user fault error path with fatal signal (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}
    - arch: mm: pass userspace fault flag to generic fault handler (Johannes Weiner)  [Orabug: 20930539]     {CVE-2014-8171}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way seunshare, a utility for running executables under a different security context, used the capng_lock functionality of the libcap-ng library. The subsequent invocation of suid root binaries that relied on the fact that the setuid() system call, among others, also sets the saved set-user-ID when dropping the binaries' process privileges, could allow a local, unprivileged user to potentially escalate their privileges on the system. Note: the fix for this issue is the kernel part of the overall fix, and introduces the PR_SET_NO_NEW_PRIVS functionality and the related SELinux exec transitions support. (CVE-2014-3215, Important)

* A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system.
(CVE-2015-1421, Important)

* It was found that the Linux kernel's KVM implementation did not ensure that the host CR4 control register value remained unchanged across VM entries on the same virtual CPU. A local, unprivileged user could use this flaw to cause a denial of service on the system.
(CVE-2014-3690, Moderate)

* An out-of-bounds memory access flaw was found in the syscall tracing functionality of the Linux kernel's perf subsystem. A local, unprivileged user could use this flaw to crash the system.
(CVE-2014-7825, Moderate)

* An out-of-bounds memory access flaw was found in the syscall tracing functionality of the Linux kernel's ftrace subsystem. On a system with ftrace syscall tracing enabled, a local, unprivileged user could use this flaw to crash the system, or escalate their privileges.
(CVE-2014-7826, Moderate)

* It was found that the Linux kernel memory resource controller's (memcg) handling of OOM (out of memory) conditions could lead to deadlocks. An attacker able to continuously spawn new processes within a single memory-constrained cgroup during an OOM event could use this flaw to lock up the system. (CVE-2014-8171, Moderate)

* A race condition flaw was found in the way the Linux kernel keys management subsystem performed key garbage collection. A local attacker could attempt accessing a key while it was being garbage collected, which would cause the system to crash. (CVE-2014-9529, Moderate)

* A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system.
(CVE-2014-8884, Low)

* An information leak flaw was found in the way the Linux kernel's ISO9660 file system implementation accessed data on an ISO9660 image with RockRidge Extension Reference (ER) records. An attacker with physical access to the system could use this flaw to disclose up to 255 bytes of kernel memory. (CVE-2014-9584, Low)

Red Hat would like to thank Andy Lutomirski for reporting CVE-2014-3215 and CVE-2014-3690, Robert Swiecki for reporting CVE-2014-7825 and CVE-2014-7826, and Carl Henrik Lunde for reporting CVE-2014-9584. The CVE-2015-1421 issue was discovered by Sun Baoliang of Red Hat.

This update also fixes several bugs. Documentation for these changes is available from the Technical Notes document linked to in the References section.

All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect.

* A flaw was found in the way seunshare, a utility for running executables under a different security context, used the capng_lock functionality of the libcap-ng library. The subsequent invocation of suid root binaries that relied on the fact that the setuid() system call, among others, also sets the saved set-user-ID when dropping the binaries' process privileges, could allow a local, unprivileged user to potentially escalate their privileges on the system. Note: the fix for this issue is the kernel part of the overall fix, and introduces the PR_SET_NO_NEW_PRIVS functionality and the related SELinux exec transitions support. (CVE-2014-3215, Important)

* A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system.
(CVE-2015-1421, Important)

* It was found that the Linux kernel's KVM implementation did not ensure that the host CR4 control register value remained unchanged across VM entries on the same virtual CPU. A local, unprivileged user could use this flaw to cause a denial of service on the system.
(CVE-2014-3690, Moderate)

* An out-of-bounds memory access flaw was found in the syscall tracing functionality of the Linux kernel's perf subsystem. A local, unprivileged user could use this flaw to crash the system.
(CVE-2014-7825, Moderate)

* An out-of-bounds memory access flaw was found in the syscall tracing functionality of the Linux kernel's ftrace subsystem. On a system with ftrace syscall tracing enabled, a local, unprivileged user could use this flaw to crash the system, or escalate their privileges.
(CVE-2014-7826, Moderate)

* It was found that the Linux kernel memory resource controller's (memcg) handling of OOM (out of memory) conditions could lead to deadlocks. An attacker able to continuously spawn new processes within a single memory- constrained cgroup during an OOM event could use this flaw to lock up the system. (CVE-2014-8171, Moderate)

* A race condition flaw was found in the way the Linux kernel keys management subsystem performed key garbage collection. A local attacker could attempt accessing a key while it was being garbage collected, which would cause the system to crash. (CVE-2014-9529, Moderate)

* A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system.
(CVE-2014-8884, Low)

* An information leak flaw was found in the way the Linux kernel's ISO9660 file system implementation accessed data on an ISO9660 image with RockRidge Extension Reference (ER) records. An attacker with physical access to the system could use this flaw to disclose up to 255 bytes of kernel memory. (CVE-2014-9584, Low)

The system must be rebooted for this update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0864 advisory.

    - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181173     1179327] {CVE-2014-8159}
    - [security] keys: close race between key lookup and freeing (Radomir Vrbovsky) [1179849 1179850]     {CVE-2014-9529}
    - [net] sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann) [1196587     1135425] {CVE-2015-1421}
    - [x86] kvm: vmx: invalid host cr4 handling across vm entries (Jacob Tanenbaum) [1153326 1153327]     {CVE-2014-3690}
    - [fs] isofs: Fix unchecked printing of ER records (Radomir Vrbovsky) [1180481 1180492] {CVE-2014-9584}
    - [media] ttusb-dec: buffer overflow in ioctl (Alexander Gordeev) [1170971 1167115] {CVE-2014-8884}
    - [kernel] trace: insufficient syscall number validation in perf and ftrace subsystems (Jacob Tanenbaum)     [1161567 1161568] {CVE-2014-7826 CVE-2014-7825}
    - [mm] memcg: do not allow task about to OOM kill to bypass the limit (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [mm] memcg: do not declare OOM from __GFP_NOFAIL allocations (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [fs] buffer: move allocation failure loop into the allocator (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [mm] memcg: handle non-error OOM situations more gracefully (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [mm] memcg: do not trap chargers with full callstack on OOM (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [mm] memcg: rework and document OOM waiting and wakeup (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [mm] memcg: enable memcg OOM killer only for user faults (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [x86] mm: finish user fault error path with fatal signal (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [mm] pass userspace fault flag to generic fault handler (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [s390] mm: do not invoke OOM killer on kernel fault OOM (Johannes Weiner) [1198110 1088334]     {CVE-2014-8171}
    - [powerpc] mm: remove obsolete init OOM protection (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
    - [powerpc] mm: invoke oom-killer from remaining unconverted page fault handlers (Johannes Weiner)     [1198110 1088334] {CVE-2014-8171}
    - [security] selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID (Denys Vlasenko) [1104567     1104568] {CVE-2014-3215}
    - [security] Add PR_<GET, SET>_NO_NEW_PRIVS to prevent execve from granting privs (Denys Vlasenko)     [1104567 1104568] {CVE-2014-3215}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
291473	MiracleLinux 4 : kernel-2.6.32-504.16.2.el6 (AXSA:2015-134:04)	Nessus	Miracle Linux Local Security Checks	high
290295	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000710)	Nessus	Unity Linux Local Security Checks	medium
289925	MiracleLinux 7 : kernel-3.10.0-327.el7 (AXSA:2015-948:05)	Nessus	Miracle Linux Local Security Checks	medium
286709	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001827)	Nessus	Unity Linux Local Security Checks	medium
284893	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002255)	Nessus	Unity Linux Local Security Checks	medium
124836	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1515)	Nessus	Huawei Local Security Checks	critical
99163	OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0057) (Dirty COW)	Nessus	OracleVM Local Security Checks	critical
88571	RHEL 7 : kernel-rt (RHSA-2015:2411)	Nessus	Red Hat Local Security Checks	medium
88405	RHEL 6 : kernel-rt (RHSA-2016:0068)	Nessus	Red Hat Local Security Checks	high
87559	Scientific Linux Security Update : kernel on SL7.x x86_64 (20151119)	Nessus	Scientific Linux Local Security Checks	medium
87135	CentOS 7 : kernel (CESA-2015:2152)	Nessus	CentOS Local Security Checks	high
87090	Oracle Linux 7 : kernel (ELSA-2015-2152)	Nessus	Oracle Linux Local Security Checks	medium
86972	RHEL 7 : kernel (RHSA-2015:2152)	Nessus	Red Hat Local Security Checks	high
85188	OracleVM 3.3 : kernel-uek (OVMSA-2015-0109)	Nessus	OracleVM Local Security Checks	critical
83485	OracleVM 3.3 : kernel-uek (OVMSA-2015-0060)	Nessus	OracleVM Local Security Checks	medium
83108	OracleVM 3.3 : kernel-uek (OVMSA-2015-0056)	Nessus	OracleVM Local Security Checks	medium
83045	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3032)	Nessus	Oracle Linux Local Security Checks	medium
82999	CentOS 6 : kernel (CESA-2015:0864)	Nessus	CentOS Local Security Checks	high
82988	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20150421)	Nessus	Scientific Linux Local Security Checks	high
82985	RHEL 6 : kernel (RHSA-2015:0864)	Nessus	Red Hat Local Security Checks	high
82981	Oracle Linux 6 : kernel (ELSA-2015-0864)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2014-8171

medium

Tenable Plugins

high

medium

medium

medium

medium

critical

critical

medium

high

medium

high

medium

high

critical

medium

medium

medium

high

high

high

high