An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL pointer dereference for certain accesses to the SynIC Hyper-V context, aka CID-919f4ebc5987.

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1720468480 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free     Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit     to avoid the use after free. [wsa: added comment to the code, added Fixes tag] (CVE-2019-25162)

  - An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer     overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community     argue that the integer overflow does not lead to a security issue in this case. (CVE-2020-13974)

  - Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an     unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without     knowledge of the PIN. (CVE-2020-26555)

  - A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could     happen if removing device (that is not common to remove video card physically without power-off, but same     happens if unbind the driver). (CVE-2020-27820)

  - Improper access control in BlueZ may allow an authenticated user to potentially enable information     disclosure via adjacent access. (CVE-2021-0129)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL     pointer dereference for certain accesses to the SynIC Hyper-V context, aka CID-919f4ebc5987.
    (CVE-2021-30178)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-57a7ba61f8 advisory.

  - An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL     pointer dereference for certain accesses to the SynIC Hyper-V context, aka CID-919f4ebc5987.
    (CVE-2021-30178)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e71c033f88 advisory.

  - BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements,     allowing them to execute arbitrary code within the kernel context. This affects     arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c. (CVE-2021-29154)

  - An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL     pointer dereference for certain accesses to the SynIC Hyper-V context, aka CID-919f4ebc5987.
    (CVE-2021-30178)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
360764	CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1720468480)	Nessus	CentOS Local Security Checks	Local	low
292383	MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.1.el7.AXS7 (AXSA:2024-8651:24)	Nessus	Miracle Linux Local Security Checks	Local	high
247005	Linux Distros Unpatched Vulnerability : CVE-2021-30178	Nessus	Misc.	Local	medium
148741	Fedora 32 : kernel (2021-57a7ba61f8)	Nessus	Fedora Local Security Checks	Local	medium
148723	Fedora 33 : kernel (2021-e71c033f88)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2021-30178

medium

Tenable Plugins

low

high

medium

medium

high