The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6766-1 advisory.

  - In the Linux kernel, the following vulnerability has been resolved:     ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between     the handling of a new TCP connection and its disconnection. It leads to     UAF on `struct tcp_transport` in ksmbd_tcp_new_connection() function.
    (CVE-2024-26592)

  - In the Linux kernel, the following vulnerability has been resolved:     i2c: i801: Fix block process call transactions According to the Intel     datasheets, software must reset the block buffer index twice for block     process call transactions: once before writing the outgoing data to     the buffer, and once again before reading the incoming data from the     buffer. The driver is currently missing the second reset, causing the     wrong portion of the block buffer to be read. (CVE-2024-26593)

  - In the Linux kernel, the following vulnerability has been resolved:
    ksmbd: validate mech token in session setup If client send invalid mech     token in session setup request, ksmbd validate and make the error if it     is invalid. (CVE-2024-26594)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6766-1)

high Nessus Plugin ID 195134

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.5 Jan 22, 2025, 9:41 AM CVSSv2 score source (changed from "CVE-2024-26625" to "CVE-2024-26704") Plugin Feed: 202501220941
Version 1.4 Jan 8, 2025, 10:03 AM CVSSv2 score source (changed from "CVE-2024-26610" to "CVE-2024-26625") Plugin Feed: 202501081003
Version 1.3 Dec 13, 2024, 9:53 AM CVSSv2 score source (changed from "CVE-2024-26592" to "CVE-2024-26610") Plugin Feed: 202412130953
Version 1.2 Oct 2, 2024, 9:20 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202410020920
Version 1.1 Jun 24, 2024, 11:25 AM Plugin metadata (better description) Plugin Feed: 202406241125
Version 1.0 May 8, 2024, 2:27 AM New Plugin Feed: 202405080227