The version of kernel installed on the remote host is prior to 5.10.184-175.749. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2023-037 advisory.

    A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and     anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel     memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their     privileges on the system. (CVE-2023-3117)

    Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()`     failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace     (CVE-2023-31248)

    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register     contents when CAP_NET_ADMIN is in any user or network namespace (CVE-2023-35001)

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to     achieve local privilege escalation.

    Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE.
    The vulnerability requires CAP_NET_ADMIN to be triggered.

    We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795. (CVE-2023-3610)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: do not ignore genmask when looking up chain by id (CVE-2023-53492)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2023-037 (ALASKERNEL-5.10-2023-037)

high Nessus Plugin ID 178532

Version 1.8