In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.

An update for kernel is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es) :

* kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568)

* kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)

* kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) and Enhancement(s) :

* kernel fuse invalidates cached attributes during reads (BZ#1657921)

* [NetApp-FC-NVMe] RHEL7.6: nvme reset gets hung indefinitely (BZ#1659937)

* Memory reclaim deadlock calling __sock_create() after memalloc_noio_save() (BZ#1660392)

* hardened usercopy is causing crash (BZ#1660815)

* Backport: xfrm: policy: init locks early (BZ#1660887)

* AWS m5 instance type loses NVMe mounted volumes [was: Unable to Mount StatefulSet PV in AWS EBS] (BZ#1661947)

* RHEL 7.6 running on a VirtualBox guest with a GUI has a mouse problem (BZ# 1662848)

* Kernel bug report in cgroups on heavily contested 3.10 node (BZ#1663114)

* [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports (BZ#1663241)

* [Cavium 7.7 Feat] qla2xxx: Update to latest upstream. (BZ#1663508)

* Regression in lpfc and the CNE1000 (BE2 FCoE) adapters that no longer initialize (BZ#1664067)

* [csiostor] call trace after command: modprobe csiostor (BZ#1665370)

* libceph: fall back to sendmsg for slab pages (BZ#1665814)

* Deadlock between stop_one_cpu_nowait() and stop_two_cpus() (BZ#1667328)

* Soft lockups occur when the sd driver passes a device size of 1 sector to string_get_size() (BZ#1667989)

* [RHEL7.7] BUG: unable to handle kernel paging request at ffffffffffffffff (BZ#1668208)

* RHEL7.6 - powerpc/pseries: Disable CPU hotplug across migrations / powerpc/ rtas: Fix a potential race between CPU-Offline & Migration (LPM) (BZ# 1669044)

* blk-mq: fix corruption with direct issue (BZ#1670511)

* [RHEL7][patch] iscsi driver can block reboot/shutdown (BZ#1670680)

* [DELL EMC 7.6 BUG] Unable to create-namespace over Dell NVDIMM-N (BZ# 1671743)

* efi_bgrt_init fails to ioremap error during boot (BZ#1671745)

* Unable to mount a share on kernel- 3.10.0-957.el7. The share can be mounted on kernel-3.10.0-862.14.4.el7 (BZ#1672448)

* System crash with RIP nfs_readpage_async+0x43 -- BUG: unable to handle kernel NULL pointer dereference (BZ#1672510)

Users of kernel are advised to upgrade to these updated packages, which fix these bugs and add this enhancement.

Security Fix(es) :

  - kernel: Memory corruption due to incorrect socket     cloning (CVE-2018-9568)

  - kernel: Unprivileged users able to inspect kernel stacks     of arbitrary tasks (CVE-2018-17972)

  - kernel: Faulty computation of numberic bounds in the BPF     verifier (CVE-2018-18445)

Bug Fix(es) and Enhancement(s) :

  - kernel fuse invalidates cached attributes during reads

  - [NetApp-FC-NVMe] SL7.6: nvme reset gets hung     indefinitely

  - Memory reclaim deadlock calling __sock_create() after     memalloc_noio_save()

  - hardened usercopy is causing crash

  - Backport: xfrm: policy: init locks early

  - AWS m5 instance type loses NVMe mounted volumes [was:
    Unable to Mount StatefulSet PV in AWS EBS]

  - SL 7.6 running on a VirtualBox guest with a GUI has a     mouse problem

  - Kernel bug report in cgroups on heavily contested 3.10     node

  - [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports

  - [Cavium 7.7 Feat] qla2xxx: Update to latest upstream.

  - Regression in lpfc and the CNE1000 (BE2 FCoE) adapters     that no longer initialize

  - [csiostor] call trace after command: modprobe csiostor

  - libceph: fall back to sendmsg for slab pages

  - Deadlock between stop_one_cpu_nowait() and     stop_two_cpus()

  - Soft lockups occur when the sd driver passes a device     size of 1 sector to string_get_size()

  - [SL7.7] BUG: unable to handle kernel paging request at     ffffffffffffffff

  - SL7.6 - powerpc/pseries: Disable CPU hotplug across     migrations / powerpc/rtas: Fix a potential race between     CPU-Offline &amp; Migration (LPM)

  - blk-mq: fix corruption with direct issue

  - [SL7][patch] iscsi driver can block reboot/shutdown

  - [DELL EMC 7.6 BUG] Unable to create-namespace over Dell     NVDIMM-N

  - efi_bgrt_init fails to ioremap error during boot

  - Unable to mount a share on kernel- 3.10.0-957.el7. The     share can be mounted on kernel-3.10.0-862.14.4.el7

  - System crash with RIP nfs_readpage_async+0x43 -- BUG:
    unable to handle kernel NULL pointer dereference

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-0512 advisory.

  - An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through     4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a     local attacker to exploit racy stack unwinding and leak kernel task stack contents. (CVE-2018-17972)

  - In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead     to local escalation of privilege with no additional execution privileges needed. User interaction is not     needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References:
    Upstream kernel. (CVE-2018-9568)

  - In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of     numeric bounds in the BPF verifier permits out-of-bounds memory accesses because     adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts. (CVE-2018-18445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for kernel-rt is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es) :

* kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568)

* kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)

* kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) :

* kernel-rt: update to the RHEL7.6.z batch#3 source tree (BZ#1672406)

Users of kernel-rt are advised to upgrade to these updated packages, which fix this bug.

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2018-18445: A faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit right shifts (bnc#1112372).

CVE-2018-18386: drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bnc#1094825).

CVE-2017-18224: fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allowed local users to cause a denial of service (BUG) by modifying a certain e_cpos field (bnc#1084831).

CVE-2017-16533: The usbhid_parse function in drivers/hid/usbhid/hid-core.c allowed local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066674).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-3 advisory.

  - It was found that the raw midi kernel driver does not protect against concurrent access which leads to a     double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part     of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for     privilege escalation. (CVE-2018-10902)

  - An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-     timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval     and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This     basically makes the accounting values, which are visible to user space via timer_getoverrun(2) and     siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer     overflow) via crafted mmap, futex, timer_create, and timer_settime system calls. (CVE-2018-12896)

  - drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a     certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial     of service (use-after-free). (CVE-2018-14734)

  - An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local     attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to     crash the kernel or potentially escalate privileges. (CVE-2018-16276)

  - In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of     numeric bounds in the BPF verifier permits out-of-bounds memory accesses because     adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts. (CVE-2018-18445)

  - In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make     this filesystem non-operational until the next mount by triggering an unchecked error condition during an     xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles     ATTR_REPLACE operations with conversion of an attr from short to long form. (CVE-2018-18690)

  - An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc     in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from     unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and     CVE-2018-16658. (CVE-2018-18710)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-2 advisory.

  - It was found that the raw midi kernel driver does not protect against concurrent access which leads to a     double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part     of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for     privilege escalation. (CVE-2018-10902)

  - An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-     timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval     and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This     basically makes the accounting values, which are visible to user space via timer_getoverrun(2) and     siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer     overflow) via crafted mmap, futex, timer_create, and timer_settime system calls. (CVE-2018-12896)

  - drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a     certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial     of service (use-after-free). (CVE-2018-14734)

  - An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local     attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to     crash the kernel or potentially escalate privileges. (CVE-2018-16276)

  - In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of     numeric bounds in the BPF verifier permits out-of-bounds memory accesses because     adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts. (CVE-2018-18445)

  - In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make     this filesystem non-operational until the next mount by triggering an unchecked error condition during an     xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles     ATTR_REPLACE operations with conversion of an attr from short to long form. (CVE-2018-18690)

  - An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc     in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from     unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and     CVE-2018-16658. (CVE-2018-18710)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-1 advisory.

  - It was found that the raw midi kernel driver does not protect against concurrent access which leads to a     double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part     of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for     privilege escalation. (CVE-2018-10902)

  - An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-     timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval     and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This     basically makes the accounting values, which are visible to user space via timer_getoverrun(2) and     siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer     overflow) via crafted mmap, futex, timer_create, and timer_settime system calls. (CVE-2018-12896)

  - drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a     certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial     of service (use-after-free). (CVE-2018-14734)

  - An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local     attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to     crash the kernel or potentially escalate privileges. (CVE-2018-16276)

  - In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of     numeric bounds in the BPF verifier permits out-of-bounds memory accesses because     adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts. (CVE-2018-18445)

  - In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make     this filesystem non-operational until the next mount by triggering an unchecked error condition during an     xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles     ATTR_REPLACE operations with conversion of an attr from short to long form. (CVE-2018-18690)

  - An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc     in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from     unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and     CVE-2018-16658. (CVE-2018-18710)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2018-19824: A local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c (bnc#1118152).

CVE-2018-18281: The mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removed entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry could remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. (bnc#1113769).

CVE-2018-18710: An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658 (bnc#1113751).

CVE-2018-18445: Faulty computation of numeric bounds in the BPF verifier permitted out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit right shifts (bnc#1112372).

CVE-2018-18386: drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bnc#1094825).

CVE-2017-18224: fs/ocfs2/aops.c omitted use of a semaphore and consequently had a race condition for access to the extent tree during read operations in DIRECT mode, which allowed local users to cause a denial of service (BUG) by modifying a certain e_cpos field (bnc#1084831).

CVE-2017-16533: The usbhid_parse function in drivers/hid/usbhid/hid-core.c allowed local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066674).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4304 advisory.

  - In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow     properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android     releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
    (CVE-2018-5848)

  - The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows     local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a     crafted xfs image. (CVE-2018-10322)

  - An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc     in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from     unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and     CVE-2018-16658. (CVE-2018-18710)

  - An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel     through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM     ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the     location of kernel code and data and bypass kernel security protections such as KASLR. (CVE-2018-7755)

  - The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8     does not validate certain resource availability, which allows local users to cause a denial of service     (NULL pointer dereference). (CVE-2018-8043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Jann Horn discovered that the procfs file system implementation in the Linux kernel did not properly restrict the ability to inspect the kernel stack of an arbitrary task. A local attacker could use this to expose sensitive information. (CVE-2018-17972)

Jann Horn discovered that the mremap() system call in the Linux kernel did not properly flush the TLB when completing, potentially leaving access to a physical page after it has been released to the page allocator. A local attacker could use this to cause a denial of service (system crash), expose sensitive information, or possibly execute arbitrary code. (CVE-2018-18281)

It was discovered that the BPF verifier in the Linux kernel did not correctly compute numeric bounds in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-18445)

Daniel Dadap discovered that the module loading implementation in the Linux kernel did not properly enforce signed module loading when booted with UEFI Secure Boot in some situations. A local privileged attacker could use this to execute untrusted code in the kernel.
(CVE-2018-18653)

Jann Horn discovered that the Linux kernel mishandles mapping UID or GID ranges inside nested user namespaces in some situations. A local attacker could use this to bypass access controls on resources outside the namespace. (CVE-2018-18955)

Philipp Wendler discovered that the overlayfs implementation in the Linux kernel did not properly verify the directory contents permissions from within a unprivileged user namespace. A local attacker could use this to expose sensitive information (protected file names). (CVE-2018-6559).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The SUSE Linux Enterprise 12 SP4 kernel for Azure was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2018-18710: An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658 (bnc#1113751).

CVE-2018-18445: Faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit right shifts (bnc#1112372).

CVE-2018-18386: drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bnc#1094825).

CVE-2017-18224: fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allowed local users to cause a denial of service (BUG) by modifying a certain e_cpos field (bnc#1084831).

CVE-2017-16533: The usbhid_parse function in drivers/hid/usbhid/hid-core.c allowed local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066674).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
123366	openSUSE Security Update : the Linux Kernel (openSUSE-2019-893)	Nessus	SuSE Local Security Checks	high
122954	CentOS 7 : kernel (CESA-2019:0512)	Nessus	CentOS Local Security Checks	high
122887	Scientific Linux Security Update : kernel on SL7.x x86_64 (20190314)	Nessus	Scientific Linux Local Security Checks	high
122864	Oracle Linux 7 : kernel (ELSA-2019-0512)	Nessus	Oracle Linux Local Security Checks	high
122843	RHEL 7 : kernel-rt (RHSA-2019:0514)	Nessus	Red Hat Local Security Checks	high
122842	RHEL 7 : kernel (RHSA-2019:0512)	Nessus	Red Hat Local Security Checks	high
120151	SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:3589-1)	Nessus	SuSE Local Security Checks	high
119829	Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3847-3)	Nessus	Ubuntu Local Security Checks	high
119828	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3847-2)	Nessus	Ubuntu Local Security Checks	high
119827	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3847-1)	Nessus	Ubuntu Local Security Checks	high
119647	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:4069-1)	Nessus	SuSE Local Security Checks	high
119638	Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4304)	Nessus	Oracle Linux Local Security Checks	high
119338	Ubuntu 18.10 : linux, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities (USN-3835-1)	Nessus	Ubuntu Local Security Checks	high
119302	Ubuntu 18.10 : Linux kernel (AWS) vulnerabilities (USN-3832-1)	Nessus	Ubuntu Local Security Checks	high
119286	SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3934-1)	Nessus	SuSE Local Security Checks	high
118818	openSUSE Security Update : the Linux Kernel (openSUSE-2018-1342)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2018-18445

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high