The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2643-1 advisory.

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c     (bsc#1188876).
    - CVE-2021-37576: Fixed an issue on the powerpc platform, where a KVM guest OS user could cause host OS     memory corruption via rtas_args.nargs (bsc#1188838).
    - CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory     corruption due to a use after free. This could lead to local escalation of privilege with System execution     privileges needed. (bsc#1176724).
    - CVE-2020-36386: Fixed a slab out-of-bounds read in hci_extended_inquiry_result_evt (bsc#1187038).
    - CVE-2021-22543: Fixed an improper handling of VM_IO|VM_PFNMAP vmas in KVM that allows users to start and     control a VM to read/write random pages of memory and can result in local privilege escalation.
    (bnc#1186482)
    - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to obtain full root     privileges. (bsc#1188062)
    - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local     provilege escalation. (bsc#1188116)
    - CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local     privilege escalation. (bsc#1187215)
    - CVE-2021-3612: Fixed an out-of-bounds memory write flaw which could allows a local user to crash the     system or possibly escalate their privileges on the system. (bsc#1187585)
    - CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation.
    (bsc#1187050)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2021:2643-1)

high Nessus Plugin ID 152481

Version 1.10

Version 1.8

Version 1.7

Version 1.6

Version 1.10 Jun 26, 2026, 4:08 PM CVSS metrics ("Cvssv4 score" set to 8.7) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L") Detection (updated detection logic) Plugin metadata Plugin Feed: 202606261608
Version 1.8 Jul 14, 2023, 2:18 AM Exploit attributes ("Exploit framework metasploit" set to "True". "Exploited by malware" set to "True") Plugin metadata Plugin Feed: 202307140218
Version 1.7 Jul 12, 2023, 5:37 PM Detection Plugin Feed: 202307121737
Version 1.6 Jan 17, 2023, 1:55 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301171355