The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6766-2 advisory.

  - In the Linux kernel, the following vulnerability has been resolved:     ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between     the handling of a new TCP connection and its disconnection. It leads     to UAF on `struct tcp_transport` in ksmbd_tcp_new_connection()     function. (CVE-2024-26592)  
  - In the Linux kernel, the following vulnerability has been resolved:
    i2c: i801: Fix block process call transactions According to the     Intel datasheets, software must reset the block buffer index twice     for block process call transactions: once before writing the     outgoing data to the buffer, and once again before reading the     incoming data from the buffer. The driver is currently missing     the second reset, causing the wrong portion of the block buffer     to be read. (CVE-2024-26593)

  - In the Linux kernel, the following vulnerability has been resolved:
    ksmbd: validate mech token in session setup If client send invalid     mech token in session setup request, ksmbd validate and make the     error if it is invalid. (CVE-2024-26594)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6766-2)

high Nessus Plugin ID 197101

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.5 Jan 15, 2025, 7:16 AM CVSSv2 score source (changed from "CVE-2024-26625" to "CVE-2024-26704") Plugin Feed: 202501150716
Version 1.4 Jan 8, 2025, 10:03 AM CVSSv2 score source (changed from "CVE-2024-26610" to "CVE-2024-26625") Plugin Feed: 202501081003
Version 1.3 Dec 13, 2024, 9:53 AM CVSSv2 score source (changed from "CVE-2024-26592" to "CVE-2024-26610") Plugin Feed: 202412130953
Version 1.2 Oct 2, 2024, 9:20 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202410020920
Version 1.1 Jul 5, 2024, 4:58 PM Plugin metadata (description) Plugin Feed: 202407051658
Version 1.0 May 16, 2024, 12:59 AM New Plugin Feed: 202405160059