The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0819 advisory.

  - kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)

  - kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container     breakout (CVE-2021-4154)

  - kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)

  - kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)

  - kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)

  - kernel: improper initialization of the flags member of the new pipe_buffer (CVE-2022-0847)

  - kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : kernel-rt (RHSA-2022:0819)

high Nessus Plugin ID 158808

Version 1.14

Version 1.13

Version 1.12

Version 1.14 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404281425
Version 1.13 Jan 23, 2023, 9:47 PM Logic Changes (Added support for repository relative URLs) Plugin Feed: 202301232147
Version 1.12 Jan 16, 2023, 4:07 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301161607