The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0334 advisory.

  - kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)

  - kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

  - kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

  - kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)

  - kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)

  - kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

RHEL 9 : kernel (RHSA-2023:0334)

high Nessus Plugin ID 170404

Version 1.1

Version 1.0

Version 1.1 Jan 24, 2023, 7:02 PM Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available")
Version 1.0 Jan 23, 2023, 11:46 PM New