In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001294 advisory.

    In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of     numeric bounds in the BPF verifier permits out-of-bounds memory accesses because     adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3842:02 advisory.

    [Security Fix]
    - net/core/sock.c  sk_clone_lock()  (Type Confusion)

     (CVE-2018-9568)
    - fs/proc/base.c  proc_pid_stack() root


     (CVE-2018-17972)
    - kernel/bpf/verifier.c  adjust_scalar_min_max_vals() 32     BPF verifier

     (CVE-2018-18445)
    - userfaultfd ioctl(2)  UFFDIO_


    (CVE-2018-18397)
    - setsockopt(2)  fanout_add()  AF_PACKET     bind(2)     ( use-after-free)      (CVE-2018-18559)     CVEJVNhttp://jvndb.jvn.jp/

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002923 advisory.

    In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of     numeric bounds in the BPF verifier permits out-of-bounds memory accesses because     adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003018 advisory.

    In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of     numeric bounds in the BPF verifier permits out-of-bounds memory accesses because     adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for kernel is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es) :

* kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568)

* kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)

* kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) and Enhancement(s) :

* kernel fuse invalidates cached attributes during reads (BZ#1657921)

* [NetApp-FC-NVMe] RHEL7.6: nvme reset gets hung indefinitely (BZ#1659937)

* Memory reclaim deadlock calling __sock_create() after memalloc_noio_save() (BZ#1660392)

* hardened usercopy is causing crash (BZ#1660815)

* Backport: xfrm: policy: init locks early (BZ#1660887)

* AWS m5 instance type loses NVMe mounted volumes [was: Unable to Mount StatefulSet PV in AWS EBS] (BZ#1661947)

* RHEL 7.6 running on a VirtualBox guest with a GUI has a mouse problem (BZ# 1662848)

* Kernel bug report in cgroups on heavily contested 3.10 node (BZ#1663114)

* [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports (BZ#1663241)

* [Cavium 7.7 Feat] qla2xxx: Update to latest upstream. (BZ#1663508)

* Regression in lpfc and the CNE1000 (BE2 FCoE) adapters that no longer initialize (BZ#1664067)

* [csiostor] call trace after command: modprobe csiostor (BZ#1665370)

* libceph: fall back to sendmsg for slab pages (BZ#1665814)

* Deadlock between stop_one_cpu_nowait() and stop_two_cpus() (BZ#1667328)

* Soft lockups occur when the sd driver passes a device size of 1 sector to string_get_size() (BZ#1667989)

* [RHEL7.7] BUG: unable to handle kernel paging request at ffffffffffffffff (BZ#1668208)

* RHEL7.6 - powerpc/pseries: Disable CPU hotplug across migrations / powerpc/ rtas: Fix a potential race between CPU-Offline & Migration (LPM) (BZ# 1669044)

* blk-mq: fix corruption with direct issue (BZ#1670511)

* [RHEL7][patch] iscsi driver can block reboot/shutdown (BZ#1670680)

* [DELL EMC 7.6 BUG] Unable to create-namespace over Dell NVDIMM-N (BZ# 1671743)

* efi_bgrt_init fails to ioremap error during boot (BZ#1671745)

* Unable to mount a share on kernel- 3.10.0-957.el7. The share can be mounted on kernel-3.10.0-862.14.4.el7 (BZ#1672448)

* System crash with RIP nfs_readpage_async+0x43 -- BUG: unable to handle kernel NULL pointer dereference (BZ#1672510)

Users of kernel are advised to upgrade to these updated packages, which fix these bugs and add this enhancement.

Security Fix(es) :

  - kernel: Memory corruption due to incorrect socket     cloning (CVE-2018-9568)

  - kernel: Unprivileged users able to inspect kernel stacks     of arbitrary tasks (CVE-2018-17972)

  - kernel: Faulty computation of numberic bounds in the BPF     verifier (CVE-2018-18445)

Bug Fix(es) and Enhancement(s) :

  - kernel fuse invalidates cached attributes during reads

  - [NetApp-FC-NVMe] SL7.6: nvme reset gets hung     indefinitely

  - Memory reclaim deadlock calling __sock_create() after     memalloc_noio_save()

  - hardened usercopy is causing crash

  - Backport: xfrm: policy: init locks early

  - AWS m5 instance type loses NVMe mounted volumes [was:
    Unable to Mount StatefulSet PV in AWS EBS]

  - SL 7.6 running on a VirtualBox guest with a GUI has a     mouse problem

  - Kernel bug report in cgroups on heavily contested 3.10     node

  - [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports

  - [Cavium 7.7 Feat] qla2xxx: Update to latest upstream.

  - Regression in lpfc and the CNE1000 (BE2 FCoE) adapters     that no longer initialize

  - [csiostor] call trace after command: modprobe csiostor

  - libceph: fall back to sendmsg for slab pages

  - Deadlock between stop_one_cpu_nowait() and     stop_two_cpus()

  - Soft lockups occur when the sd driver passes a device     size of 1 sector to string_get_size()

  - [SL7.7] BUG: unable to handle kernel paging request at     ffffffffffffffff

  - SL7.6 - powerpc/pseries: Disable CPU hotplug across     migrations / powerpc/rtas: Fix a potential race between     CPU-Offline &amp; Migration (LPM)

  - blk-mq: fix corruption with direct issue

  - [SL7][patch] iscsi driver can block reboot/shutdown

  - [DELL EMC 7.6 BUG] Unable to create-namespace over Dell     NVDIMM-N

  - efi_bgrt_init fails to ioremap error during boot

  - Unable to mount a share on kernel- 3.10.0-957.el7. The     share can be mounted on kernel-3.10.0-862.14.4.el7

  - System crash with RIP nfs_readpage_async+0x43 -- BUG:
    unable to handle kernel NULL pointer dereference

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0512 advisory.

    - [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
    - [fs] proc: use 'unsigned int' for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
    - [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352]     {CVE-2018-9568}
    - [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387     1641388] {CVE-2018-18445}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0514 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568)

    * kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)

    * kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update to the RHEL7.6.z batch#3 source tree (BZ#1672406)

    Users of kernel-rt are advised to upgrade to these updated packages, which fix this bug.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0512 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568)

    * kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)

    * kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es) and Enhancement(s):

    * kernel fuse invalidates cached attributes during reads (BZ#1657921)

    * [NetApp-FC-NVMe] RHEL7.6: nvme reset gets hung indefinitely (BZ#1659937)

    * Memory reclaim deadlock calling __sock_create() after memalloc_noio_save() (BZ#1660392)

    * hardened usercopy is causing crash (BZ#1660815)

    * Backport: xfrm: policy: init locks early (BZ#1660887)

    * AWS m5 instance type loses NVMe mounted volumes [was: Unable to Mount StatefulSet PV in AWS EBS]     (BZ#1661947)

    * RHEL 7.6 running on a VirtualBox guest with a GUI has a mouse problem (BZ#1662848)

    * Kernel bug report in cgroups on heavily contested 3.10 node (BZ#1663114)

    * [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports (BZ#1663241)

    * [Cavium 7.7 Feat] qla2xxx: Update to latest upstream. (BZ#1663508)

    * Regression in lpfc and the CNE1000 (BE2 FCoE) adapters that no longer initialize (BZ#1664067)

    * [csiostor] call trace after command: modprobe csiostor (BZ#1665370)

    * libceph: fall back to sendmsg for slab pages (BZ#1665814)

    * Deadlock between stop_one_cpu_nowait() and stop_two_cpus() (BZ#1667328)

    * Soft lockups occur when the sd driver passes a device size of 1 sector to string_get_size() (BZ#1667989)

    * [RHEL7.7] BUG: unable to handle kernel paging request at ffffffffffffffff (BZ#1668208)

    * RHEL7.6 - powerpc/pseries: Disable CPU hotplug across migrations / powerpc/rtas: Fix a potential race     between CPU-Offline & Migration (LPM) (BZ#1669044)

    * blk-mq: fix corruption with direct issue (BZ#1670511)

    * [RHEL7][patch] iscsi driver can block reboot/shutdown (BZ#1670680)

    * [DELL EMC 7.6 BUG] Unable to create-namespace over Dell NVDIMM-N (BZ#1671743)

    * efi_bgrt_init fails to ioremap error during boot (BZ#1671745)

    * Unable to mount a share on kernel- 3.10.0-957.el7. The share can be mounted on     kernel-3.10.0-862.14.4.el7 (BZ#1672448)

    * System crash with RIP nfs_readpage_async+0x43 -- BUG: unable to handle kernel NULL pointer dereference     (BZ#1672510)

    Users of kernel are advised to upgrade to these updated packages, which fix these bugs and add this     enhancement.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2018-18445: A faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit right shifts (bnc#1112372).

CVE-2018-18386: drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bnc#1094825).

CVE-2017-18224: fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allowed local users to cause a denial of service (BUG) by modifying a certain e_cpos field (bnc#1084831).

CVE-2017-16533: The usbhid_parse function in drivers/hid/usbhid/hid-core.c allowed local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066674).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-3 advisory.

    USN-3847-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the     corresponding updates for the Linux kernel for Microsoft Azure Cloud systems for Ubuntu 14.04 LTS.

    It was discovered that a race condition existed in the raw MIDI driver for the Linux kernel, leading to a     double free vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2018-10902)

    It was discovered that an integer overrun vulnerability existed in the POSIX timers implementation in the     Linux kernel. A local attacker could use this to cause a denial of service. (CVE-2018-12896)

    Noam Rathaus discovered that a use-after-free vulnerability existed in the Infiniband implementation in     the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2018-14734)

    It was discovered that the YUREX USB device driver for the Linux kernel did not properly restrict user     space reads or writes. A physically proximate attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2018-16276)

    It was discovered that the BPF verifier in the Linux kernel did not correctly compute numeric bounds in     some situations. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2018-18445)

    Kanda Motohiro discovered that writing extended attributes to an XFS file system in the Linux kernel in     certain situations could cause an error condition to occur. A local attacker could use this to cause a     denial of service. (CVE-2018-18690)

    It was discovered that an integer overflow vulnerability existed in the CDROM driver of the Linux kernel.
    A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-18710)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-2 advisory.

    USN-3847-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu     16.04 LTS.

    It was discovered that a race condition existed in the raw MIDI driver for the Linux kernel, leading to a     double free vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2018-10902)

    It was discovered that an integer overrun vulnerability existed in the POSIX timers implementation in the     Linux kernel. A local attacker could use this to cause a denial of service. (CVE-2018-12896)

    Noam Rathaus discovered that a use-after-free vulnerability existed in the Infiniband implementation in     the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2018-14734)

    It was discovered that the YUREX USB device driver for the Linux kernel did not properly restrict user     space reads or writes. A physically proximate attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2018-16276)

    It was discovered that the BPF verifier in the Linux kernel did not correctly compute numeric bounds in     some situations. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2018-18445)

    Kanda Motohiro discovered that writing extended attributes to an XFS file system in the Linux kernel in     certain situations could cause an error condition to occur. A local attacker could use this to cause a     denial of service. (CVE-2018-18690)

    It was discovered that an integer overflow vulnerability existed in the CDROM driver of the Linux kernel.
    A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-18710)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-1 advisory.

    It was discovered that a race condition existed in the raw MIDI driver for the Linux kernel, leading to a     double free vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2018-10902)

    It was discovered that an integer overrun vulnerability existed in the POSIX timers implementation in the     Linux kernel. A local attacker could use this to cause a denial of service. (CVE-2018-12896)

    Noam Rathaus discovered that a use-after-free vulnerability existed in the Infiniband implementation in     the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2018-14734)

    It was discovered that the YUREX USB device driver for the Linux kernel did not properly restrict user     space reads or writes. A physically proximate attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2018-16276)

    It was discovered that the BPF verifier in the Linux kernel did not correctly compute numeric bounds in     some situations. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2018-18445)

    Kanda Motohiro discovered that writing extended attributes to an XFS file system in the Linux kernel in     certain situations could cause an error condition to occur. A local attacker could use this to cause a     denial of service. (CVE-2018-18690)

    It was discovered that an integer overflow vulnerability existed in the CDROM driver of the Linux kernel.
    A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-18710)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2018-19824: A local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c (bnc#1118152).

CVE-2018-18281: The mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removed entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry could remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. (bnc#1113769).

CVE-2018-18710: An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658 (bnc#1113751).

CVE-2018-18445: Faulty computation of numeric bounds in the BPF verifier permitted out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit right shifts (bnc#1112372).

CVE-2018-18386: drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bnc#1094825).

CVE-2017-18224: fs/ocfs2/aops.c omitted use of a semaphore and consequently had a race condition for access to the extent tree during read operations in DIRECT mode, which allowed local users to cause a denial of service (BUG) by modifying a certain e_cpos field (bnc#1084831).

CVE-2017-16533: The usbhid_parse function in drivers/hid/usbhid/hid-core.c allowed local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066674).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jann Horn discovered that the procfs file system implementation in the Linux kernel did not properly restrict the ability to inspect the kernel stack of an arbitrary task. A local attacker could use this to expose sensitive information. (CVE-2018-17972)

Jann Horn discovered that the mremap() system call in the Linux kernel did not properly flush the TLB when completing, potentially leaving access to a physical page after it has been released to the page allocator. A local attacker could use this to cause a denial of service (system crash), expose sensitive information, or possibly execute arbitrary code. (CVE-2018-18281)

It was discovered that the BPF verifier in the Linux kernel did not correctly compute numeric bounds in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-18445)

Daniel Dadap discovered that the module loading implementation in the Linux kernel did not properly enforce signed module loading when booted with UEFI Secure Boot in some situations. A local privileged attacker could use this to execute untrusted code in the kernel.
(CVE-2018-18653)

Jann Horn discovered that the Linux kernel mishandles mapping UID or GID ranges inside nested user namespaces in some situations. A local attacker could use this to bypass access controls on resources outside the namespace. (CVE-2018-18955)

Philipp Wendler discovered that the overlayfs implementation in the Linux kernel did not properly verify the directory contents permissions from within a unprivileged user namespace. A local attacker could use this to expose sensitive information (protected file names). (CVE-2018-6559).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The SUSE Linux Enterprise 12 SP4 kernel for Azure was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2018-18710: An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658 (bnc#1113751).

CVE-2018-18445: Faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit right shifts (bnc#1112372).

CVE-2018-18386: drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bnc#1094825).

CVE-2017-18224: fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allowed local users to cause a denial of service (BUG) by modifying a certain e_cpos field (bnc#1084831).

CVE-2017-16533: The usbhid_parse function in drivers/hid/usbhid/hid-core.c allowed local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066674).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
290820	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001294)	Nessus	Unity Linux Local Security Checks	high
289933	MiracleLinux 7 : kernel-3.10.0-957.10.1.el7 (AXSA:2019-3842:02)	Nessus	Miracle Linux Local Security Checks	high
287305	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002923)	Nessus	Unity Linux Local Security Checks	high
286955	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003018)	Nessus	Unity Linux Local Security Checks	high
123366	openSUSE Security Update : the Linux Kernel (openSUSE-2019-893)	Nessus	SuSE Local Security Checks	high
122954	CentOS 7 : kernel (CESA-2019:0512)	Nessus	CentOS Local Security Checks	high
122887	Scientific Linux Security Update : kernel on SL7.x x86_64 (20190314)	Nessus	Scientific Linux Local Security Checks	high
122864	Oracle Linux 7 : kernel (ELSA-2019-0512)	Nessus	Oracle Linux Local Security Checks	high
122843	RHEL 7 : kernel-rt (RHSA-2019:0514)	Nessus	Red Hat Local Security Checks	high
122842	RHEL 7 : kernel (RHSA-2019:0512)	Nessus	Red Hat Local Security Checks	high
120151	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:3589-1)	Nessus	SuSE Local Security Checks	high
119829	Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3847-3)	Nessus	Ubuntu Local Security Checks	high
119828	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3847-2)	Nessus	Ubuntu Local Security Checks	high
119827	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3847-1)	Nessus	Ubuntu Local Security Checks	high
119647	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:4069-1)	Nessus	SuSE Local Security Checks	high
119338	Ubuntu 18.10 : linux, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities (USN-3835-1)	Nessus	Ubuntu Local Security Checks	high
119302	Ubuntu 18.10 : Linux kernel (AWS) vulnerabilities (USN-3832-1)	Nessus	Ubuntu Local Security Checks	high
119286	SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3934-1)	Nessus	SuSE Local Security Checks	high
118818	openSUSE Security Update : the Linux Kernel (openSUSE-2018-1342)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2018-18445

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high