The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3324-1 advisory.

    The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2018-20784: Fixed a denial of service (infinite loop in update_blocked_averages) by mishandled leaf     cfs_rq in kernel/sched/fair.c (bsc#1126703).
    - CVE-2018-3639: Fixed Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1087082).
    - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
    - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
    - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming     CPU from suspend-to-RAM (bsc#1209779).
    - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning (bsc#1213287).
    - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially     access sensitive information (bsc#1213286).
    - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that     could allow a local user to cause a denial of service (bsc#1211867).
    - CVE-2023-3106: Fixed crash in XFRM_MSG_GETSA netlink handler (bsc#1213251).
    - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs     (bsc#1212502).
    - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local     attacker to escalate their privilege (bsc#1213059).
    - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
    - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
    - CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2023:3324-1)

critical Nessus Plugin ID 179914

Version 1.3

Version 1.2

Version 1.0

Version 1.3 Jun 27, 2026, 1:18 PM Plugin metadata Plugin Feed: 202606271318
Version 1.2 Jan 9, 2026, 4:08 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202601091608
Version 1.0 Aug 17, 2023, 8:04 AM New Plugin Feed: 202308170804