The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1782375682 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: bpf: Don't redirect packets with     invalid pkt_len Syzbot found an issue [1]: fq_codel_drop() try to drop a flow whitout any skbs, that is,     the flow->head is null. The root cause, as the [2] says, is because that bpf_prog_test_run_skb() run a bpf     prog which redirects empty skbs. So we should determine whether the length of the packet modified by bpf     prog or others like bpf_prog_test is valid before forwarding it directly. (CVE-2022-49975)

  - In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: debug: Fix potential buffer     overflow by snprintf() snprintf() returns the would-be-filled size when the string overflows the given     buffer size, hence using this value may result in the buffer overflow (although it's unrealistic). This     patch replaces with a safer version, scnprintf() for papering over such a potential issue.
    (CVE-2022-50051)

  - In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in     ext4_orphan_cleanup I caught a issue as follows:
    ================================================================== BUG: KASAN: use-after-free in
    __list_add_valid+0x28/0x1a0 Read of size 8 at addr ffff88814b13f378 by task mount/710 CPU: 1 PID: 710     Comm: mount Not tainted 6.1.0-rc3-next #370 Call Trace: <TASK> dump_stack_lvl+0x73/0x9f     print_report+0x25d/0x759 kasan_report+0xc0/0x120 __asan_load8+0x99/0x140 __list_add_valid+0x28/0x1a0     ext4_orphan_cleanup+0x564/0x9d0 [ext4] __ext4_fill_super+0x48e2/0x5300 [ext4] ext4_fill_super+0x19f/0x3a0     [ext4] get_tree_bdev+0x27b/0x450 ext4_get_tree+0x19/0x30 [ext4] vfs_get_tree+0x49/0x150     path_mount+0xaae/0x1350 do_mount+0xe2/0x110 __x64_sys_mount+0xf0/0x190 do_syscall_64+0x35/0x80     entry_SYSCALL_64_after_hwframe+0x63/0xcd </TASK> [...]     ================================================================== Above issue may happen as follows:
    ------------------------------------- ext4_fill_super ext4_orphan_cleanup --- loop1: assume last_orphan is     12 --- list_add(&EXT4_I(inode)->i_orphan, &EXT4_SB(sb)->s_orphan) ext4_truncate --> return 0     ext4_inode_attach_jinode --> return -ENOMEM iput(inode) --> free inode<12> --- loop2: last_orphan is still     12 --- list_add(&EXT4_I(inode)->i_orphan, &EXT4_SB(sb)->s_orphan); // use inode<12> and trigger UAF To     solve this issue, we need to propagate the return value of ext4_inode_attach_jinode() appropriately.
    (CVE-2022-50673)

  - In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in     apply_alternatives() Fei has reported that KASAN triggers during apply_alternatives() on a 5-level paging     machine: BUG: KASAN: out-of-bounds in rcu_is_watching() Read of size 4 at addr ff110003ee6419a0 by task     swapper/0/0 ... __asan_load4() rcu_is_watching() trace_hardirqs_on() text_poke_early()     apply_alternatives() ... On machines with 5-level paging, cpu_feature_enabled(X86_FEATURE_LA57) gets     patched. It includes KASAN code, where KASAN_SHADOW_START depends on __VIRTUAL_MASK_SHIFT, which is     defined with cpu_feature_enabled(). KASAN gets confused when apply_alternatives() patches the     KASAN_SHADOW_START users. A test patch that makes KASAN_SHADOW_START static, by replacing
    __VIRTUAL_MASK_SHIFT with 56, works around the issue. Fix it for real by disabling KASAN while the kernel     is patching alternatives. [ mingo: updated the changelog ] (CVE-2023-52504)

  - In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-     bounds for SMU7 For pptable structs that use flexible array sizes, use flexible arrays. (CVE-2023-52818)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1782375682)

high Nessus Plugin ID 361917

Version 1.2