The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3586 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4     and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment     reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a     denial of service on the system. (CVE-2018-5391)

    * kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c (CVE-2017-18344)

    * kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact     (CVE-2018-10675)

    * kernel: Integer overflow in Linux's create_elf_tables function (CVE-2018-14634)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank Juha-Matti Tilli (Aalto University - Department of Communications and     Networking and Nokia Bell Labs) for reporting CVE-2018-5391 and Qualys Research Labs for reporting     CVE-2018-14634.

    Bug Fix(es):

    * The kernel-rt packages have been upgraded to the 3.10.0-693.43.1 source tree, which provides a number of     bug fixes over the previous version. (BZ#1632422)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : kernel-rt (RHSA-2018:3586)

high Nessus Plugin ID 119112

Version 1.14

Version 1.13

Version 1.12

Version 1.14 Jan 27, 2026, 5:22 AM CISA reference Plugin Feed: 202601270522
Version 1.13 Jun 3, 2024, 4:41 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202406031641
Version 1.12 Apr 28, 2024, 3:17 AM Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404280317