Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

An update of the linux package has been released.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5161 advisory.

    Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation,     denial of service or information leaks. CVE-2022-0494 The scsi_ioctl() was susceptible to an information     leak only exploitable by users with CAP_SYS_ADMIN or CAP_SYS_RAWIO capabilities. CVE-2022-0854 Ali Haider     discovered a potential information leak in the DMA subsystem. On systems where the swiotlb feature is     needed, this might allow a local user to read sensitive information. CVE-2022-1012 The randomisation when     calculating port offsets in the IP implementation was enhanced. CVE-2022-1729 Norbert Slusarek discovered     a race condition in the perf subsystem which could result in local privilege escalation to root. The     default settings in Debian prevent exploitation unless more permissive settings have been applied in the     kernel.perf_event_paranoid sysctl. CVE-2022-1786 Kyle Zeng discovered a use-after-free in the io_uring     subsystem which way result in local privilege escalation to root. CVE-2022-1789 / CVE-2022-1852 Yongkang     Jia, Gaoning Pan and Qiuhao Li discovered two NULL pointer dereferences in KVM's CPU instruction handling,     resulting in denial of service. CVE-2022-1966 Aaron Adams discovered a use-after-free in Netfilter which     may result in local privilege escalation to root. CVE-2022-1972 Ziming Zhang discovered an out-of-bound     write in Netfilter which may result in local privilege escalation to root. CVE-2022-1974 / CVE-2022-1975     Duoming Zhou discovered that the NFC netlink interface was suspectible to denial of service.
    CVE-2022-21499 It was discovered that the kernel debugger could be used to bypass UEFI Secure Boot     restrictions. CVE-2022-28893 Felix Fu discovered a use-after-free in the implementation of the Remote     Procedure Call (SunRPC) protocol, which could result in denial of service or an information leak. For the     stable distribution (bullseye), these problems have been fixed in version 5.10.120-1. We recommend that     you upgrade your linux packages. For the detailed security status of linux please refer to its security     tracker page at: https://security-tracker.debian.org/tracker/linux

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
203749	Photon OS 3.0: Linux PHSA-2022-3.0-0409	Nessus	PhotonOS Local Security Checks	high
203411	Photon OS 4.0: Linux PHSA-2022-4.0-0195	Nessus	PhotonOS Local Security Checks	high
173106	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-070)	Nessus	Amazon Linux Local Security Checks	high
162159	Debian DSA-5161-1 : linux - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2022-1966

No Score

Tenable Plugins

high

high

high

high