The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:1566 advisory.

  - A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking     configuration (redirecting egress packets to ingress using TC action mirred) a local unprivileged user     could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a     retransmission, resulting in a denial of service condition. (CVE-2022-4269)

  - A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain     kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their     privileges on the system. (CVE-2022-4378)

  - A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel.
    SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result     in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit     56b88b50565cd8b946a2d00b0c83927b7ebb055e (CVE-2023-0266)

  - A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with     capabilities was found in the Linux kernel's OverlayFS subsystem in how a user copies a capable file from     a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges     on the system. (CVE-2023-0386)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 8 : kernel (RLSA-2023:1566)

high Nessus Plugin ID 173992

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.6 Jul 5, 2025, 5:28 PM New Plugin Feed: 202507051728
Version 1.5 Jun 18, 2025, 5:02 PM CISA reference Plugin Feed: 202506181702
Version 1.4 Jun 18, 2025, 1:36 AM CISA reference Plugin Feed: 202506180136
Version 1.3 Sep 27, 2024, 3:31 PM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202409271531
Version 1.2 Oct 4, 2023, 4:16 PM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202310041616
Version 1.1 Aug 23, 2023, 4:09 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202308231609
Version 1.0 Apr 6, 2023, 8:56 PM New Plugin Feed: 202304062056