arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The offset2lib patch as used in the Linux Kernel     contains a vulnerability that allows a PIE binary to be     execve()'ed with 1GB of arguments or environmental     strings then the stack occupies the address 0x80000000     and the PIE binary is mapped above 0x40000000     nullifying the protection of the offset2lib patch. This     affects Linux Kernel version 4.11.5 and earlier. This     is a different issue than CVE-2017-1000371. This issue     appears to be limited to i386 based     systems.(CVE-2017-1000370i1/4%0

  - Integer overflow in the LZ4 algorithm implementation,     as used in Yann Collet LZ4 before r118 and in the     lz4_uncompress function in lib/lz4/lz4_decompress.c in     the Linux kernel before 3.15.2, on 32-bit platforms     might allow context-dependent attackers to cause a     denial of service (memory corruption) or possibly have     unspecified other impact via a crafted Literal Run that     would be improperly handled by programs not complying     with an API limitation, a different vulnerability than     CVE-2014-4715.(CVE-2014-4611i1/4%0

  - The replace_map_fd_with_map_ptr function in     kernel/bpf/verifier.c in the Linux kernel before 4.5.5     does not properly maintain an fd data structure, which     allows local users to gain privileges or cause a denial     of service (use-after-free) via crafted BPF     instructions that reference an incorrect file     descriptor.(CVE-2016-4557i1/4%0

  - The usb_destroy_configuration() function, in     'drivers/usb/core/config.c' in the USB core subsystem,     in the Linux kernel through 4.14.5 does not consider     the maximum number of configurations and interfaces     before attempting to release resources. This allows     local users to cause a denial of service, due to     out-of-bounds write access, or possibly have     unspecified other impact via a crafted USB device. Due     to the nature of the flaw, privilege escalation cannot     be fully ruled out, although we believe it is     unlikely.(CVE-2017-17558i1/4%0

  - The cdrom_ioctl_media_changed function in     drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6     allows local attackers to use a incorrect bounds check     in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read     out kernel memory.(CVE-2018-10940i1/4%0

  - It was found that the parse_rock_ridge_inode_internal()     function of the Linux kernel's ISOFS implementation did     not correctly check relocated directories when     processing Rock Ridge child link (CL) tags. An attacker     with physical access to the system could use a     specially crafted ISO image to crash the system or,     potentially, escalate their privileges on the     system.(CVE-2014-5471i1/4%0

  - A flaw was found in the Linux kernel's implementation     of Unix sockets. A server polling for client-socket     data could put the peer socket on a wait list the peer     socket could then close the connection, making the     reference on the wait list no longer valid. This could     lead to bypassing the permissions on a Unix socket and     packets being injected into the stream, and could also     panic the machine (denial of service).(CVE-2013-7446i1/4%0

  - The do_check function in kernel/bpf/verifier.c in the     Linux kernel before 4.11.1 does not make the     allow_ptr_leaks value available for restricting the     output of the print_bpf_insn function, which allows     local users to obtain sensitive address information via     crafted bpf system calls.(CVE-2017-9150i1/4%0

  - The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x     and 4.x, as used in Qualcomm Innovation Center (QuIC)     Android contributions for MSM devices and other     products, does not verify authorization for private SET     IOCTL calls, which allows attackers to gain privileges     via a crafted application, related to     wlan_hdd_hostapd.c and     wlan_hdd_wext.c.(CVE-2015-0571i1/4%0

  - arch/arm64/kvm/guest.c in KVM in the Linux kernel     before 4.18.12 on the arm64 platform mishandles the     KVM_SET_ON_REG ioctl. This is exploitable by attackers     who can create virtual machines. An attacker can     arbitrarily redirect the hypervisor flow of control     (with full register control). An attacker can also     cause a denial of service (hypervisor panic) via an     illegal exception return. This occurs because of     insufficient restrictions on userspace access to the     core register file, and because PSTATE.M validation     does not prevent unintended execution     modes.(CVE-2018-18021i1/4%0

  - A resource-exhaustion vulnerability was found in the     kernel, where an unprivileged process could allocate     and accumulate far more file descriptors than the     process' limit. A local, unauthenticated user could     exploit this flaw by sending file descriptors over a     Unix socket and then closing them to keep the process'     fd count low, thereby creating kernel-memory or     file-descriptors exhaustion (denial of     service).(CVE-2016-2550i1/4%0

  - The Linux kernel before 3.12.4 updates certain length     values before ensuring that associated data structures     have been initialized, which allows local users to     obtain sensitive information from kernel stack memory     via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system     call, related to net/ipv4/ping.c, net/ipv4/raw.c,     net/ipv4/udp.c, net/ipv6/raw.c, and     net/ipv6/udp.c.(CVE-2013-7263i1/4%0

  - It is possible for a single process to cause an OOM     condition by filling large pipes with data that are     never read. A typical process filling 4096 pipes with 1     MB of data will use 4 GB of memory and there can be     multiple such processes, up to a     per-user-limit.(CVE-2016-2847i1/4%0

  - The __get_user_asm_ex macro in     arch/x86/include/asm/uaccess.h in the Linux kernel     before 4.7.5 does not initialize a certain integer     variable, which allows local users to obtain sensitive     information from kernel stack memory by triggering     failure of a get_user_ex call.(CVE-2016-9178i1/4%0

  - It was found that the x86 ISA (Instruction Set     Architecture) is prone to a denial of service attack     inside a virtualized environment in the form of an     infinite loop in the microcode due to the way     (sequential) delivering of benign exceptions such as     #DB (debug exception) is handled. A privileged user     inside a guest could use this flaw to create denial of     service conditions on the host kernel.(CVE-2015-8104i1/4%0

  - The Direct Rendering Manager (DRM) subsystem in the     Linux kernel through 4.x mishandles requests for     Graphics Execution Manager (GEM) objects, which allows     context-dependent attackers to cause a denial of     service (memory consumption) via an application that     processes graphics data, as demonstrated by JavaScript     code that creates many CANVAS elements for rendering by     Chrome or Firefox.(CVE-2013-7445i1/4%0

  - A flaw was found in the Linux kernel which does not     initialize certain data structures used by DMA transfer     on ARM64 based systems. This could allow local users to     obtain sensitive information from kernel memory by     triggering a dma_mmap call and reconstructing the     data.(CVE-2015-8950i1/4%0

  - A race condition was found in the Linux kernel before     version 4.11-rc1 in 'fs/timerfd.c' file which allows a     local user to cause a kernel list corruption or     use-after-free via simultaneous operations with a file     descriptor which leverage improper 'might_cancel'     queuing. An unprivileged local user could use this flaw     to cause a denial of service of the system. Due to the     nature of the flaw, privilege escalation cannot be     fully ruled out, although we believe it is     unlikely.(CVE-2017-10661i1/4%0

  - The sg_ioctl() function in 'drivers/scsi/sg.c' in the     Linux kernel, from version 4.12-rc1 to 4.14-rc2, allows     local users to obtain sensitive information from     uninitialized kernel heap-memory locations via an     SG_GET_REQUEST_TABLE ioctl call for     '/dev/sg0'.(CVE-2017-14991i1/4%0

  - A race condition in the ip4_datagram_release_cb     function in net/ipv4/datagram.c in the Linux kernel     allows local users to gain privileges or cause a denial     of service (use-after-free) by leveraging incorrect     expectations about locking during multithreaded access     to internal data structures for IPv4 UDP     sockets.(CVE-2014-9914i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3931-2 advisory.

  - An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The     xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which     allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen,     64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges.
    (CVE-2018-14678)

  - arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the     KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can     arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also     cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of     insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation     does not prevent unintended execution modes. (CVE-2018-18021)

  - In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by     supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in     sound/usb/card.c. (CVE-2018-19824)

  - A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before     5.1-rc1. (CVE-2019-3459)

  - A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel     before 5.1-rc1. (CVE-2019-3460)

  - In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference     counting because of a race condition, leading to a use-after-free. (CVE-2019-6974)

  - The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. (CVE-2019-7221)

  - The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. (CVE-2019-7222)

  - kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on     pointer arithmetic in various cases, including cases of different branches with different state or limits     to sanitize, leading to side-channel attacks. (CVE-2019-7308)

  - In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for     a certain structure member, which leads to a use-after-free in sockfs_setattr. (CVE-2019-8912)

  - A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows     attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
    (CVE-2019-8980)

  - In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum     address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP     platforms. This is related to a capability check for the wrong task. (CVE-2019-9213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3931-1 advisory.

  - An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The     xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which     allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen,     64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges.
    (CVE-2018-14678)

  - arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the     KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can     arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also     cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of     insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation     does not prevent unintended execution modes. (CVE-2018-18021)

  - In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by     supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in     sound/usb/card.c. (CVE-2018-19824)

  - A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before     5.1-rc1. (CVE-2019-3459)

  - A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel     before 5.1-rc1. (CVE-2019-3460)

  - In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference     counting because of a race condition, leading to a use-after-free. (CVE-2019-6974)

  - The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. (CVE-2019-7221)

  - The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. (CVE-2019-7222)

  - kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on     pointer arithmetic in various cases, including cases of different branches with different state or limits     to sanitize, leading to side-channel attacks. (CVE-2019-7308)

  - In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for     a certain structure member, which leads to a use-after-free in sockfs_setattr. (CVE-2019-8912)

  - A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows     attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
    (CVE-2019-8980)

  - In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum     address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP     platforms. This is related to a capability check for the wrong task. (CVE-2019-9213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New kernel packages are available for Slackware 14.2 to fix security issues.

The 4.18.12 update contains a number of important fixes across the tree

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 4.18.12 update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3656 advisory.

  - kernel: Use-after-free in the vmacache_flush_all function resulting in a possible privilege escalation     (CVE-2018-17182)

  - kernel: Privilege escalation on arm64 via KVM hypervisor (CVE-2018-18021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3821-2 advisory.

  - Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and     writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system     crash and a denial of service. (CVE-2018-10880)

  - The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an     integer overflow via a large relative timeout because ktime_add_safe is not used. (CVE-2018-13053)

  - An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-     bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted     f2fs image. (CVE-2018-13096)

  - An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in
    __del_reloc_root() in fs/btrfs/relocation.c when mounting a crafted btrfs image, related to removing reloc     rb_trees when reloc control has not been initialized. (CVE-2018-14609)

  - An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic     in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+     filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.
    (CVE-2018-14617)

  - An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through     4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a     local attacker to exploit racy stack unwinding and leak kernel task stack contents. (CVE-2018-17972)

  - arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the     KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can     arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also     cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of     insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation     does not prevent unintended execution modes. (CVE-2018-18021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3821-1 advisory.

  - Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and     writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system     crash and a denial of service. (CVE-2018-10880)

  - The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an     integer overflow via a large relative timeout because ktime_add_safe is not used. (CVE-2018-13053)

  - An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-     bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted     f2fs image. (CVE-2018-13096)

  - An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in
    __del_reloc_root() in fs/btrfs/relocation.c when mounting a crafted btrfs image, related to removing reloc     rb_trees when reloc control has not been initialized. (CVE-2018-14609)

  - An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic     in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+     filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.
    (CVE-2018-14617)

  - An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through     4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a     local attacker to exploit racy stack unwinding and leak kernel task stack contents. (CVE-2018-17972)

  - arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the     KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can     arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also     cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of     insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation     does not prevent unintended execution modes. (CVE-2018-18021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4270 advisory.

  - An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in     mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly     gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
    (CVE-2018-17182)

  - drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a     certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial     of service (use-after-free). (CVE-2018-14734)

  - The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel before 4.18.1     does not always fill RSB upon a context switch, which makes it easier for attackers to conduct userspace-     userspace spectreRSB attacks. (CVE-2018-15572)

  - An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android     kernel. Android ID A-65023233. (CVE-2017-13168)

  - An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in     write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification     that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in     fs/btrfs/extent-tree.c. (CVE-2018-14610)

  - An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in     try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in     btrfs_check_chunk_valid in fs/btrfs/volumes.c. (CVE-2018-14611)

  - arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the     KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can     arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also     cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of     insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation     does not prevent unintended execution modes. (CVE-2018-18021)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel. An attacker with a local account can trick the stack unwinder code to leak stack contents to userspace.
The fix allows only root to inspect the kernel stack of an arbitrary task.(CVE-2018-17972)

A vulnerability was discovered in the Linux kernel that allows an attacker to escalate privileges with using a 64-bit ARM architecture.
A local attacker with permission to create KVM-based virtual machines can both panic the hypervisor by triggering an illegal exception return (resulting in a DoS) and to redirect execution elsewhere within the hypervisor with full register control, instead of causing a return to the guest.(CVE-2018-18021)

The 4.18.12 update contains a number of important fixes across the tree

----

The 4.18.11 update contains a number of important fixes across the tree

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

  - CVE-2018-15471 (XSA-270)     Felix Wilhelm of Google Project Zero discovered a flaw     in the hash handling of the xen-netback Linux kernel     module. A malicious or buggy frontend may cause the     (usually privileged) backend to make out of bounds     memory accesses, potentially resulting in privilege     escalation, denial of service, or information leaks.

  - CVE-2018-18021     It was discovered that the KVM subsystem on the arm64     platform does not properly handle the KVM_SET_ON_REG     ioctl. An attacker who can create KVM based virtual     machines can take advantage of this flaw for denial of     service (hypervisor panic) or privilege escalation     (arbitrarily redirect the hypervisor flow of control     with full register control).

ID	Name	Product	Family	Severity
124989	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1536)	Nessus	Huawei Local Security Checks	high
123679	Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3931-2)	Nessus	Ubuntu Local Security Checks	high
123678	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3931-1)	Nessus	Ubuntu Local Security Checks	high
121505	Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-030-01)	Nessus	Slackware Local Security Checks	high
120904	Fedora 29 : kernel / kernel-headers (2018-f392ab8c84)	Nessus	Fedora Local Security Checks	high
120848	Fedora 28 : kernel / kernel-headers (2018-ddbaca855e)	Nessus	Fedora Local Security Checks	high
119170	RHEL 7 : kernel-alt (RHSA-2018:3656)	Nessus	Red Hat Local Security Checks	high
118972	Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3821-2)	Nessus	Ubuntu Local Security Checks	high
118971	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3821-1)	Nessus	Ubuntu Local Security Checks	high
118861	Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4270)	Nessus	Oracle Linux Local Security Checks	high
118832	Amazon Linux 2 : kernel (ALAS-2018-1100)	Nessus	Amazon Linux Local Security Checks	high
118804	Amazon Linux AMI : kernel (ALAS-2018-1100)	Nessus	Amazon Linux Local Security Checks	high
118047	Fedora 27 : kernel / kernel-headers (2018-94315e9a6b)	Nessus	Fedora Local Security Checks	high
118023	Debian DSA-4313-1 : linux - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2018-18021

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high