The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4541 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c     (CVE-2022-42896)

    * kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege     escalation (CVE-2023-1281)

    * kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)

    * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance     Events (CVE-2023-2235)

    * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)

    * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Addding the building of i915 driver to 8.8 (BZ#2208276)

    * kernel-rt: update RT source tree to the RHEL-8.8.z2 source tree (BZ#2215026)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4517 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c     (CVE-2022-42896)

    * kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege     escalation (CVE-2023-1281)

    * kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)

    * kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance     Events (CVE-2023-2235)

    * kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)

    * kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * simultaneous writes to a page on xfs can result in zero-byte data (BZ#2184101)

    * RHEL 8.4 - kernel: fix __clear_user() inline assembly constraints (BZ#2192602)

    * LPAR is crashed by Phyp when doing DLPAR CPU operations (BZ#2193375)

    * ice: ptp4l cpu usage spikes (BZ#2203285)

    * Kernel - Significant performance drop for getrandom system call when FIPS is enabled (compared to RHEL     8.x for all x < 6.z) (BZ#2208127)

    * macvlan: backports from upstream (BZ#2209686)

    * Intel 8.9 BUG VROC: Pull VMD secondary bus reset patch (BZ#2211198)

    * Incorrect target abort handling causes iscsi deadlock (BZ#2211494)

    * swap deadlock when attempt to charge a page to a cgroup stalls waiting on I/O plugged on another task in     swap code (BZ#2211513)

    * BUG_ON kernel BUG at mm/rmap.c:1041! in __page_set_anon_rmap() when vma->anon_vma==NULL (BZ#2211658)

    * RHEL 8.9: IPMI updates and bug fixes (BZ#2211667)

    * RHEL 8.6 opening console with mkvterm on novalink terminal fails due to drmgr reporting failure (L3:)     (BZ#2212373)

    * RHEL 8.8 - P10 DD2.0: Wrong numa_node is assigned to vpmem device (BZ#2212451)

    * RHEL 8.8 beta: Occasional stall during initialization of ipmi_msghandler (BZ#2213189)

    * ESXi RHEL 8: Haswell generation CPU are impacted with performance due to IBRS (BZ#2213366)

    * xen: fix section mismatch error with xen_callback_vector() and alloc_intr_gate() (BZ#2214281)

    * jitter: Fix RCT/APT health test during initialization (BZ#2215079)

    * aacraid misses interrupts when a CPU is disabled resulting in scsi timeouts and the adapter being     unusable until reboot. (BZ#2216498)

    * Hyper-V RHEL 8: Fix VM crash/hang Issues due to fast VF add/remove events (BZ#2216543)

    * rbd: avoid fast-diff corruption in snapshot-based mirroring [8.9] (BZ#2216769)

    * Regression of 3b8cc6298724 (blk-cgroup: Optimize blkcg_rstat_flush()) (BZ#2220810)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:4541 advisory.

  - There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect     and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively)     remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within     proximity of the victim. We recommend upgrading past commit https://www.google.com/url     https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4     https://www.google.com/url (CVE-2022-42896)

  - Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege     Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-     after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this     vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git     commit ee059170b1f7e94e55fa6cadee544e176a6e59c2. (CVE-2023-1281)

  - A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited     to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate     filters in case of a perfect hashes while deleting the underlying structure which can later lead to double     freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.
    We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28. (CVE-2023-1829)

  - An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores     an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or     potentially escalate their privileges on the system. (CVE-2023-2124)

  - An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The     userspace data->block[0] variable was not capped to a number between 0-255 and was used as the size of a     memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to     crash the system or potentially achieve code execution. (CVE-2023-2194)

  - A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve     local privilege escalation. The perf_group_detach function did not check the event's siblings'     attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call     list_del_event() on before detaching from their group, making it possible to use a dangling pointer     causing a use-after-free vulnerability. We recommend upgrading past commit     fd0815f632c24878e325821943edccc7fde947a2. (CVE-2023-2235)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3784-1 advisory.

  - A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited     to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate     filters in case of a perfect hashes while deleting the underlying structure which can later lead to double     freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.
    We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28. (CVE-2023-1829)

  - Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()`     failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace     (CVE-2023-31248)

  - A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to     achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return     an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can     control the reference counter and set it to zero, they can cause the reference to be freed, leading to a     use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
    (CVE-2023-3609)

  - A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to     achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an     error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can     control the reference counter and set it to zero, they can cause the reference to be freed, leading to a     use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
    (CVE-2023-3776)

  - A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation     of the file name reconstruction function, which is responsible for reading file name entries from a     directory index and merging file name parts belonging to one file into a single long file name. Since the     file name characters are copied into a stack variable, a local privileged attacker could use this flaw to     overflow the kernel stack. (CVE-2023-4273)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4541 advisory.

  - There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect     and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively)     remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within     proximity of the victim. We recommend upgrading past commit https://www.google.com/url     https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4     https://www.google.com/url (CVE-2022-42896)

  - Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege     Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-     after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this     vulnerability to elevate its privileges to root. This issue affects Linux Kernel: from 4.14 before git     commit ee059170b1f7e94e55fa6cadee544e176a6e59c2. (CVE-2023-1281)

  - A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited     to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate     filters in case of a perfect hashes while deleting the underlying structure which can later lead to double     freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.
    We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28. (CVE-2023-1829)

  - An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores     an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or     potentially escalate their privileges on the system. (CVE-2023-2124)

  - An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The     userspace data->block[0] variable was not capped to a number between 0-255 and was used as the size of a     memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to     crash the system or potentially achieve code execution. (CVE-2023-2194)

  - A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve     local privilege escalation. The perf_group_detach function did not check the event's siblings'     attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call     list_del_event() on before detaching from their group, making it possible to use a dangling pointer     causing a use-after-free vulnerability. We recommend upgrading past commit     fd0815f632c24878e325821943edccc7fde947a2. (CVE-2023-2235)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
179438	RHEL 8 : kernel-rt (RHSA-2023:4541)	Nessus	Red Hat Local Security Checks	8/8/2023	11/7/2024	high
179452	RHEL 8 : kernel (RHSA-2023:4517)	Nessus	Red Hat Local Security Checks	8/8/2023	8/15/2025	high
179702	AlmaLinux 8 : kernel-rt (ALSA-2023:4541)	Nessus	Alma Linux Local Security Checks	8/11/2023	2/1/2024	high
181908	SUSE SLES15 Security Update : kernel RT (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2023:3784-1)	Nessus	SuSE Local Security Checks	9/27/2023	11/2/2023	high
183080	Rocky Linux 8 : kernel-rt (RLSA-2023:4541)	Nessus	Rocky Linux Local Security Checks	10/14/2023	2/1/2024	high
236373	Alibaba Cloud Linux 3 : 0136: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0136)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	9/23/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high