The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3349-1 advisory.

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).
    - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
    - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
    - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
    - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
    - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially     access sensitive information (bsc#1213286).
    - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that     could allow a local user to cause a denial of service (bsc#1211867).
    - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local     attacker to escalate their privilege (bsc#1213059).
    - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning (bsc#1213287).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2023:3349-1)

high Nessus Plugin ID 179970

Version 1.3

Version 1.2

Version 1.0

Version 1.3 Jun 27, 2026, 1:18 PM Plugin metadata Plugin Feed: 202606271318
Version 1.2 Jan 9, 2026, 4:08 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202601091608
Version 1.0 Aug 18, 2023, 6:11 PM New Plugin Feed: 202308181811