The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0448 advisory.

  - kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545)

  - kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858)

  - kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192)

  - kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162)

  - kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe     (CVE-2023-2163)

  - kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166)

  - kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)

  - kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race (CVE-2023-3567)

  - kernel: use-after-free in netfilter: nf_tables (CVE-2023-3777)

  - kernel: use after free in nft_immediate_deactivate (CVE-2023-4015)

  - kernel: use after free in unix_stream_sendpage (CVE-2023-4622)

  - kernel: net/sched: sch_hfsc UAF (CVE-2023-4623)

  - kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller     than its child's sibling_list (CVE-2023-5717)

  - kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c     (CVE-2023-6679)

  - hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

  - kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment     (CVE-2023-38409)

  - kernel: eBPF: insufficient stack type checks in dynptr (CVE-2023-39191)

  - kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)

  - kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)

  - kernel: SEV-ES local priv escalation (CVE-2023-46813)

  - kernel: mm/slab_common: slab_caches list corruption after kmem_cache_destroy() (CVE-2023-52562)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : kernel (RHSA-2024:0448)

high Nessus Plugin ID 189552

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Apr 30, 2024, 4:14 PM CVE (set "CVE" coverage to "CVE-2022-3545,CVE-2022-41858,CVE-2023-1192,CVE-2023-2162,CVE-2023-2163,CVE-2023-2166,CVE-2023-2176,CVE-2023-3567,CVE-2023-3777,CVE-2023-4015,CVE-2023-4622,CVE-2023-4623,CVE-2023-5717,CVE-2023-6679,CVE-2023-20569,CVE-2023-38409,CVE-2023-39191,CVE-2023-40283,CVE-2023-45871,CVE-2023-46813,CVE-2023-52562") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404301614
Version 1.1 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202404281425
Version 1.0 Jan 26, 2024, 12:01 AM New Plugin Feed: 202401260001