The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0188 advisory.

  - A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size     increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS     filesystem otherwise not accessible to them. (CVE-2021-4155)

  - A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem     Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in     case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local     user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to     legacy handling) could use this flaw to escalate their privileges on the system. (CVE-2022-0185)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 8 : kernel (RLSA-2022:0188)

high Nessus Plugin ID 184921

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Aug 21, 2024, 9:41 PM CISA reference Plugin Feed: 202408212141
Version 1.1 Nov 8, 2023, 3:41 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202311081541
Version 1.0 Nov 7, 2023, 5:17 PM New Plugin Feed: 202311071717