AlmaLinux 8 : kernel (ALSA-2021:3057)

high Nessus Plugin ID 157716


The remote AlmaLinux host is missing one or more security updates.


The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:3057 advisory.

- An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation. (CVE-2021-22543)

- A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.
This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space (CVE-2021-22555)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 157716

File Name: alma_linux_ALSA-2021-3057.nasl

Version: 1.7

Type: local

Published: 2/9/2022

Updated: 8/15/2022

Risk Information


Risk Factor: Critical

Score: 9.7


Risk Factor: Medium

Base Score: 6.9

Temporal Score: 6

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: E:H/RL:OF/RC:C

CVSS Score Source: CVE-2021-3609


Risk Factor: High

Base Score: 7.8

Temporal Score: 7.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: E:H/RL:O/RC:C

CVSS Score Source: CVE-2021-22555

Vulnerability Information

CPE: p-cpe:2.3:a:alma:linux:kernel-debug:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-tools-libs-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-debug-core:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-modules:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-debug-modules:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-tools:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-debug-modules-extra:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-debug-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-abi-stablelists:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-modules-extra:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:python3-perf:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-headers:*:*:*:*:*:*:*, cpe:2.3:o:alma:linux:8:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-core:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-devel:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:perf:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:bpftool:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-tools-libs:*:*:*:*:*:*:*, p-cpe:2.3:a:alma:linux:kernel-cross-headers:*:*:*:*:*:*:*

Required KB Items: Host/local_checks_enabled, Host/AlmaLinux/release, Host/AlmaLinux/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 8/10/2021

Vulnerability Publication Date: 4/20/2021

Exploitable With


Metasploit (Netfilter x_tables Heap OOB Write Privilege Escalation)

Reference Information

CVE: CVE-2021-3609, CVE-2021-22543, CVE-2021-22555

ALSA: 2021:3057