The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0090-1 advisory.

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices     aka 'Kr00k'. (bsc#1167162)
    - CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could     happen if removing device. (bsc#1179599)
    - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc. (bsc#1193731)
    - CVE-2021-0935: Fixed out of bounds write due to a use after free which could lead to local escalation of     privilege with System execution privileges needed in ip6_xmit. (bsc#1192032)
    - CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in hugetlbfs.
    (bsc#1192946)
    - CVE-2021-28711: Fixed a rogue backends that could cause DoS of guests via high frequency events by     hardening blkfront against event channel storms. (bsc#1193440)
    - CVE-2021-28712: Fixed a rogue backends that could cause DoS of guests via high frequency events by     hardening netfront against event channel storms. (bsc#1193440)
    - CVE-2021-28713: Fixed a rogue backends that could cause DoS of guests via high frequency events by     hardening hvc_xen against event channel storms. (bsc#1193440)
    - CVE-2021-28714: Fixed an issue where a guest could force Linux netback driver to hog large amounts of     kernel memory by fixing rx queue stall detection. (bsc#1193442)
    - CVE-2021-28715: Fixed an issue where a guest could force Linux netback driver to hog large amounts of     kernel memory by do not queueing unlimited number of packages. (bsc#1193442)
    - CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper     input validation. (bsc#1192877)
    - CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce     a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845)
    - CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to     cause a denial of service. (bsc#1192847)
    - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source     addresses. (bsc#1194094)
    - CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c.
    (bsc#1194087)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2022:0090-1)

high Nessus Plugin ID 156777

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.10 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.9 Jul 14, 2023, 8:58 AM Plugin metadata Plugin Feed: 202307140858
Version 1.8 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.7 Mar 10, 2023, 5:10 PM Logic Changes (Added support for additional SUSE Platforms) Plugin Feed: 202303101710