A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This     issue results from the improper management of a reference count. This may allow an attacker to create a     denial of service condition on the system. (CVE-2023-2019)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2019 advisory.

  - A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This     issue results from the improper management of a reference count. This May allow an attacker to create a     denial of service condition on the system. (CVE-2023-2019)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2231-1 advisory.

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to     achieve local privilege escalation (bsc#1210986).
    - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks     (bsc#1206992).
    - CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).
    - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could     use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
    - CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in     RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to     crash the system or escalation of privilege (bsc#1210629).
    - CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with     capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount     into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system     (bsc#1209615).
    - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
    - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
    - CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove     (bsc#1210329).
    - CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling     of events. This issue results from the improper management of a reference count and may lead to a denial     of service (bsc#1210454).
    - CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can     leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).
    - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
    - CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2140-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to     achieve local privilege escalation (bsc#1210986).
    - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks     (bsc#1206992).
    - CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).
    - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could     use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
    - CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in     RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to     crash the system or escalation of privilege (bsc#1210629).
    - CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with     capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount     into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system     (bsc#1209615).
    - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
    - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
    - CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove     (bsc#1210329).
    - CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling     of events. This issue results from the improper management of a reference count and may lead to a denial     of service (bsc#1210454).
    - CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can     leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).
    - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
    - CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2141-1 advisory.

    The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to     achieve local privilege escalation (bsc#1210986).
    - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks     (bsc#1206992).
    - CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).
    - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could     use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
    - CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in     RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to     crash the system or escalation of privilege (bsc#1210629).
    - CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with     capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount     into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system     (bsc#1209615).
    - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
    - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
    - CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove     (bsc#1210329).
    - CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling     of events. This issue results from the improper management of a reference count and may lead to a denial     of service (bsc#1210454).
    - CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can     leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).
    - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
    - CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
226448	Linux Distros Unpatched Vulnerability : CVE-2023-2019	Nessus	Misc.	medium
176624	CBL Mariner 2.0 Security Update: kernel (CVE-2023-2019)	Nessus	MarinerOS Local Security Checks	medium
176059	SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2023:2231-1)	Nessus	SuSE Local Security Checks	high
175547	SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2023:2140-1)	Nessus	SuSE Local Security Checks	high
175533	SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2023:2141-1)	Nessus	SuSE Local Security Checks	high
173106	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-070)	Nessus	Amazon Linux Local Security Checks	high
166118	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2022-008 (ALASKERNEL-5.15-2022-008)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2023-2019

medium

Tenable Plugins

medium

medium

high

high

high

high

high