The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1720468480 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free     Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit     to avoid the use after free. [wsa: added comment to the code, added Fixes tag] (CVE-2019-25162)

  - An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer     overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community     argue that the integer overflow does not lead to a security issue in this case. (CVE-2020-13974)

  - Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an     unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without     knowledge of the PIN. (CVE-2020-26555)

  - A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could     happen if removing device (that is not common to remove video card physically without power-off, but same     happens if unbind the driver). (CVE-2020-27820)

  - There is a flaw reported in the Linux kernel in versions before 5.9 in     drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue     results from the lack of validating the existence of an object prior to performing operations on the     object. An attacker with a local account with a root privilege, can leverage this vulnerability to     escalate privileges and execute code in the context of the kernel. (CVE-2021-20292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1720468480)

low Nessus Plugin ID 360764

Version 1.2

Version 1.1

Version 1.2 Oct 20, 2026, 4:30 AM CVE (set "CVE" coverage to "CVE-2019-25162,CVE-2020-13974,CVE-2020-26555,CVE-2020-27820,CVE-2021-0129,CVE-2021-3178,CVE-2021-3609,CVE-2021-3612,CVE-2021-3640,CVE-2021-3659,CVE-2021-3679,CVE-2021-3923,CVE-2021-4149,CVE-2021-4157,CVE-2021-4159,CVE-2021-20292,CVE-2021-20321,CVE-2021-20322,CVE-2021-28964,CVE-2021-28971,CVE-2021-30178,CVE-2021-31916,CVE-2021-34693,CVE-2021-37159,CVE-2021-38160,CVE-2021-40490,CVE-2021-41864,CVE-2021-43389,CVE-2021-43975,CVE-2021-43976,CVE-2021-4439,CVE-2021-45485,CVE-2021-45868,CVE-2021-46906,CVE-2021-46932,CVE-2021-46936,CVE-2021-47118,CVE-2021-47153,CVE-2021-47171,CVE-2021-47194,CVE-2022-0812,CVE-2022-0850,CVE-2022-1011,CVE-2022-1016,CVE-2022-1353,CVE-2022-1419,CVE-2022-1652,CVE-2022-1679,CVE-2022-3424,CVE-2022-3565,CVE-2022-3566,CVE-2022-3629,CVE-2022-4095,CVE-2022-21499,CVE-2022-25265,CVE-2022-26365,CVE-2022-28390,CVE-2022-33740,CVE-2022-33741,CVE-2022-41858,CVE-2022-42719,CVE-2022-45934,CVE-2022-48947,CVE-2022-49956,CVE-2022-50067,CVE-2022-50179,CVE-2023-1077,CVE-2023-1118,CVE-2023-1380,CVE-2023-1513,CVE-2023-1829,CVE-2023-1838,CVE-2023-1989,CVE-2023-2124,CVE-2023-3111,CVE-2023-3141,CVE-2023-3268,CVE-2023-3567,CVE-2023-4387,CVE-2023-4623,CVE-2023-6606,CVE-2023-6610,CVE-2023-6931,CVE-2023-6932,CVE-2024-0584,CVE-2023-35824,CVE-2023-39197,CVE-2023-40283,CVE-2023-42753,CVE-2023-51042,CVE-2023-51043,CVE-2023-51780,CVE-2023-52435,CVE-2023-52445,CVE-2023-52752,CVE-2023-52973,CVE-2023-53145,CVE-2023-53213,CVE-2023-53333,CVE-2023-6270,CVE-2024-26898") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610200430
Version 1.1 Oct 1, 2026, 9:59 PM New Plugin Feed: 202610012159