The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3099:05 advisory.

    * kernel: improper initialization of the flags member of the new pipe_buffer (CVE-2022-0847)
      * kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920)
      * kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container     breakout (CVE-2021-4154)
      * kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330)
      * kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435)
      * kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492)
      * kernel: missing check in ioctl allows kernel memory read/write (CVE-2022-0516)
      * kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 8 : kernel-4.18.0-348.20.1.el8_5 (AXSA:2022-3099:05)

high Nessus Plugin ID 291653

Version 1.2