The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1705927642 advisory.

  - It was discovered that a nft object or expression could reference a nft set on a different nft table,     leading to a use-after-free once that table was deleted. (CVE-2022-2586)

  - It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old     filter from the hashtable before freeing it if its handle had the value 0. (CVE-2022-2588)

  - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not allow     SET_ID to refer to another table When doing lookups for sets on the same batch by using its ID, a set from     a different table can be used. Then, when the table is removed, a reference to the set may be kept after     the set is freed, leading to a potential use-after-free. When looking for sets by ID, use the table that     was used for the lookup by name, and only return sets belonging to that same table. This fixes     CVE-2022-2586, also reported as ZDI-CAN-17470. (CVE-2022-50213)

  - Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register     contents when CAP_NET_ADMIN is in any user or network namespace (CVE-2023-35001)

  - An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux     Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
    (CVE-2023-6606)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1705927642)

high Nessus Plugin ID 366969

Version 1.2