NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5db5954a5e advisory.

  - NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth     modules) allows Overflow Buffers. This vulnerability is associated with program files     /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2. (CVE-2024-22099)

  - In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in     tomoyo_write_control() Since tomoyo_write_control() updates head->write_buf when write() of long lines is     requested, we need to fetch head->write_buf after head->io_sem is held. Otherwise, concurrent write()     requests can cause use-after-free-write and double-free problems. (CVE-2024-26622)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f797f1540e advisory.

  - NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth     modules) allows Overflow Buffers. This vulnerability is associated with program files     /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2. (CVE-2024-22099)

  - In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in     tomoyo_write_control() Since tomoyo_write_control() updates head->write_buf when write() of long lines is     requested, we need to fetch head->write_buf after head->io_sem is held. Otherwise, concurrent write()     requests can cause use-after-free-write and double-free problems. (CVE-2024-26622)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
197174	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:1659-1)	Nessus	SuSE Local Security Checks	high
197173	SUSE SLES15 Security Update : kernel (SUSE-SU-2024:1650-1)	Nessus	SuSE Local Security Checks	high
197057	SUSE SLES12 Security Update : kernel (SUSE-SU-2024:1646-1)	Nessus	SuSE Local Security Checks	high
197056	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:1644-1)	Nessus	SuSE Local Security Checks	high
197055	SUSE SLES12 Security Update : kernel (SUSE-SU-2024:1643-1)	Nessus	SuSE Local Security Checks	high
197051	SUSE SLES15 Security Update : kernel (SUSE-SU-2024:1641-1)	Nessus	SuSE Local Security Checks	high
197048	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2024:1648-1)	Nessus	SuSE Local Security Checks	high
197045	SUSE SLES15 Security Update : kernel (SUSE-SU-2024:1642-1)	Nessus	SuSE Local Security Checks	high
195025	Debian dsa-5681 : affs-modules-5.10.0-29-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high
194976	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:1490-1)	Nessus	SuSE Local Security Checks	high
194886	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:1480-1)	Nessus	SuSE Local Security Checks	high
194745	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:1466-1)	Nessus	SuSE Local Security Checks	high
194454	SUSE SLES15 Security Update : kernel (SUSE-SU-2024:1454-1)	Nessus	SuSE Local Security Checks	high
193454	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:1322-1)	Nessus	SuSE Local Security Checks	high
193309	Debian dsa-5658 : affs-modules-6.1.0-11-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high
191954	Fedora 38 : kernel (2024-5db5954a5e)	Nessus	Fedora Local Security Checks	medium
191953	Fedora 39 : kernel (2024-f797f1540e)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2024-22099

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

medium