It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-836 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978)

    In the Linux kernel, the following vulnerability has been resolved:

    usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (CVE-2024-39298)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring: check for non-NULL file pointer in io_file_can_poll() (CVE-2024-39371)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (CVE-2024-39474)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: zoned: fix use-after-free due to race with dev replace (CVE-2024-39496)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (CVE-2024-39503)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: core: remove unnecessary WARN_ON() in implement() (CVE-2024-39509)

    In the Linux kernel, the following vulnerability has been resolved:

    cachefiles: remove requests from xarray during flushing requests (CVE-2024-40900)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CVE-2024-40901)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (CVE-2024-40921)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/i915/dpt: Make DPT object unshrinkable (CVE-2024-40924)

    In the Linux kernel, the following vulnerability has been resolved:

    xhci: Handle TD clearing for multiple streams case (CVE-2024-40927)

    In the Linux kernel, the following vulnerability has been resolved:

    cachefiles: flush all requests after setting CACHEFILES_DEAD (CVE-2024-40935)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (CVE-2024-40953)

    In the Linux kernel, the following vulnerability has been resolved:

    net: do not leave a dangling sk pointer, when socket creation fails (CVE-2024-40954)

    In the Linux kernel, the following vulnerability has been resolved:

    seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957)

    In the Linux kernel, the following vulnerability has been resolved:

    netns: Make get_net_ns() handle zero refcount net (CVE-2024-40958)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: prevent possible NULL deref in fib6_nh_init() (CVE-2024-40961)

    In the Linux kernel, the following vulnerability has been resolved:

    tty: add the option to have a tty reject a new ldisc (CVE-2024-40966)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPICA: Revert ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine. (CVE-2024-40984)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Disassociate vcpus from redistributor region on teardown (CVE-2024-40989)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Avoid splat in pskb_pull_reason (CVE-2024-40996)

    In the Linux kernel, the following vulnerability has been resolved:

    block/ioctl: prefer different overflow check (CVE-2024-41000)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/sqpoll: work around a potential audit memory leak (CVE-2024-41001)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-836)

high Nessus Plugin ID 215037

Version 1.5

Version 1.2

Version 1.1

Version 1.5 Jun 10, 2025, 9:35 AM CVE (set "CVE" coverage to "CVE-2024-36978,CVE-2024-38619,CVE-2024-39298,CVE-2024-39371,CVE-2024-39474,CVE-2024-39496,CVE-2024-39503,CVE-2024-39509,CVE-2024-40900,CVE-2024-40901,CVE-2024-40921,CVE-2024-40924,CVE-2024-40927,CVE-2024-40935,CVE-2024-40953,CVE-2024-40954,CVE-2024-40957,CVE-2024-40958,CVE-2024-40960,CVE-2024-40961,CVE-2024-40966,CVE-2024-40984,CVE-2024-40989,CVE-2024-40995,CVE-2024-40996,CVE-2024-41000,CVE-2024-41001") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202506100935
Version 1.2 Mar 1, 2025, 8:12 AM CVE (set "CVE" coverage to "CVE-2024-36978,CVE-2024-39496,CVE-2024-41000") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 score source (changed from "CVE-2024-36978" to "CVE-2024-41000") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202503010812
Version 1.1 Feb 6, 2025, 12:53 AM New Plugin Feed: 202502060053