The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5381-1 advisory.

    David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed     user register indices. A local attacker could use this to cause a denial of service or possibly execute     arbitrary code. (CVE-2022-1015)

    It was discovered that the block layer subsystem in the Linux kernel did not properly initialize memory in     some situations. A privileged local attacker could use this to expose sensitive information (kernel     memory). (CVE-2022-0494)

    It was discovered that the DMA subsystem in the Linux kernel did not properly ensure bounce buffers were     completely overwritten by the DMA device. A local attacker could use this to expose sensitive information     (kernel memory). (CVE-2022-0854)

    Jann Horn discovered that the FUSE file system in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-1011)

    David Bouman discovered that the netfilter subsystem in the Linux kernel did not initialize memory in some     situations. A local attacker could use this to expose sensitive information (kernel memory).
    (CVE-2022-1016)

    Hu Jiahui discovered that multiple race conditions existed in the Advanced Linux Sound Architecture (ALSA)     framework, leading to use-after-free vulnerabilities. A local attacker could use these to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-1048)

    It was discovered that the USB Gadget file system interface in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-24958)

    It was discovered that the ST21NFCA NFC driver in the Linux kernel did not properly validate the size of     certain data in EVT_TRANSACTION events. A physically proximate attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-26490)

    It was discovered that the USB SR9700 ethernet device driver for the Linux kernel did not properly     validate the length of requests from the device. A physically proximate attacker could possibly use this     to expose sensitive information (kernel memory). (CVE-2022-26966)

    It was discovered that the Xilinx USB2 device gadget driver in the Linux kernel did not properly validate     endpoint indices from the host. A physically proximate attacker could possibly use this to cause a denial     of service (system crash). (CVE-2022-27223)

     discovered that the 802.2 LLC type 2 driver in the Linux kernel did not properly perform     reference counting in some error conditions. A local attacker could use this to cause a denial of service.
    (CVE-2022-28356)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5381-1)

high Nessus Plugin ID 160026

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.7

Version 1.6

Version 1.5

Version 1.10 Sep 1, 2025, 10:01 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202509012201
Version 1.9 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.8 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.7 Oct 21, 2023, 3:09 AM CVSSv3 score source (set to "CVE-2022-27223") Detection Plugin metadata Plugin requirements Plugin Feed: 202310210309
Version 1.7 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856
Version 1.6 Jul 11, 2023, 1:48 AM Detection Plugin requirements Plugin Feed: 202307110148
Version 1.5 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901