The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3007-1 advisory.

  - Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local     users to cause a denial of service (disk corruption) by writing to a page that is associated with a     different user's file after unsynchronized hole punching and page-fault handling. (CVE-2015-8839)

  - The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows     local users to gain privileges or cause a denial of service (stack memory consumption) via vectors     involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling. (CVE-2016-1583)

  - The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2     incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from     kernel memory by reading packet data. (CVE-2016-2117)

  - The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically     proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted     endpoints value in a USB device descriptor. (CVE-2016-2187)

  - Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which     allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to access a     hugetlbfs mapped area. (CVE-2016-3961)

  - The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a     certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by     reading a message. (CVE-2016-4485)

  - The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not     initialize a certain data structure, which allows local users to obtain sensitive information from kernel     stack memory by reading a Netlink message. (CVE-2016-4486)

  - The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users     to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted     application on (1) a system with more than 32 Gb of memory, related to the program reference count or (2)     a 1 Tb system, related to the map reference count. (CVE-2016-4558)

  - The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system     call, which allows local users to cause a denial of service (kernel memory write operation) or possibly     have unspecified other impact via a uAPI interface. (CVE-2016-4565)

  - fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a     certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer     dereference and OOPS) via a crafted series of mount system calls. (CVE-2016-4581)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3007-1)

high Nessus Plugin ID 91569

Version 2.11

Version 2.10

Version 2.10

Version 2.11 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 2.10 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856
Version 2.10 Oct 21, 2023, 3:09 AM CVSSv2 score source (set to "CVE-2016-4565") Detection Plugin metadata Plugin Feed: 202310210309