The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8974 advisory.

  - kernel: KVM: cmpxchg_gpte can write to pfns outside the userspace region (CVE-2022-1158)

  - hw: cpu: incomplete clean-up of multi-core shared buffers (aka SBDR) (CVE-2022-21123)

  - hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)

  - hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW) (CVE-2022-21166)

  - CVE-2022-29900 hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions     (CVE-2022-23816)

  - hw: cpu: AMD: Branch Type Confusion (non-retbleed) (CVE-2022-23825)

  - hw: cpu: Intel: Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)

  - kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)

  - kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)

  - CVE-2022-23816  hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions     (CVE-2022-29900)

  - hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)

  - kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : kernel-rt (RHSA-2022:8974)

high Nessus Plugin ID 168709

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.5 Feb 3, 2023, 4:48 AM Logic Changes (Added support for repository relative URLs) Plugin Feed: 202302030448
Version 1.4 Dec 14, 2022, 9:49 PM Reference Plugin Feed: 202212142149
Version 1.3 Dec 14, 2022, 1:51 PM Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202212141351
Version 1.2 Dec 14, 2022, 5:50 AM New Plugin Feed: 202212140550