The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-2 advisory.

    USN-3847-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu     16.04 LTS.

    It was discovered that a race condition existed in the raw MIDI driver for the Linux kernel, leading to a     double free vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2018-10902)

    It was discovered that an integer overrun vulnerability existed in the POSIX timers implementation in the     Linux kernel. A local attacker could use this to cause a denial of service. (CVE-2018-12896)

    Noam Rathaus discovered that a use-after-free vulnerability existed in the Infiniband implementation in     the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2018-14734)

    It was discovered that the YUREX USB device driver for the Linux kernel did not properly restrict user     space reads or writes. A physically proximate attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2018-16276)

    It was discovered that the BPF verifier in the Linux kernel did not correctly compute numeric bounds in     some situations. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2018-18445)

    Kanda Motohiro discovered that writing extended attributes to an XFS file system in the Linux kernel in     certain situations could cause an error condition to occur. A local attacker could use this to cause a     denial of service. (CVE-2018-18690)

    It was discovered that an integer overflow vulnerability existed in the CDROM driver of the Linux kernel.
    A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-18710)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-3 advisory.

    USN-3847-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the     corresponding updates for the Linux kernel for Microsoft Azure Cloud systems for Ubuntu 14.04 LTS.

    It was discovered that a race condition existed in the raw MIDI driver for the Linux kernel, leading to a     double free vulnerability. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2018-10902)

    It was discovered that an integer overrun vulnerability existed in the POSIX timers implementation in the     Linux kernel. A local attacker could use this to cause a denial of service. (CVE-2018-12896)

    Noam Rathaus discovered that a use-after-free vulnerability existed in the Infiniband implementation in     the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2018-14734)

    It was discovered that the YUREX USB device driver for the Linux kernel did not properly restrict user     space reads or writes. A physically proximate attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2018-16276)

    It was discovered that the BPF verifier in the Linux kernel did not correctly compute numeric bounds in     some situations. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2018-18445)

    Kanda Motohiro discovered that writing extended attributes to an XFS file system in the Linux kernel in     certain situations could cause an error condition to occur. A local attacker could use this to cause a     denial of service. (CVE-2018-18690)

    It was discovered that an integer overflow vulnerability existed in the CDROM driver of the Linux kernel.
    A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-18710)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0514 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568)

    * kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)

    * kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update to the RHEL7.6.z batch#3 source tree (BZ#1672406)

    Users of kernel-rt are advised to upgrade to these updated packages, which fix this bug.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - kernel: Memory corruption due to incorrect socket     cloning (CVE-2018-9568)

  - kernel: Unprivileged users able to inspect kernel stacks     of arbitrary tasks (CVE-2018-17972)

  - kernel: Faulty computation of numberic bounds in the BPF     verifier (CVE-2018-18445)

Bug Fix(es) and Enhancement(s) :

  - kernel fuse invalidates cached attributes during reads

  - [NetApp-FC-NVMe] SL7.6: nvme reset gets hung     indefinitely

  - Memory reclaim deadlock calling __sock_create() after     memalloc_noio_save()

  - hardened usercopy is causing crash

  - Backport: xfrm: policy: init locks early

  - AWS m5 instance type loses NVMe mounted volumes [was:
    Unable to Mount StatefulSet PV in AWS EBS]

  - SL 7.6 running on a VirtualBox guest with a GUI has a     mouse problem

  - Kernel bug report in cgroups on heavily contested 3.10     node

  - [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports

  - [Cavium 7.7 Feat] qla2xxx: Update to latest upstream.

  - Regression in lpfc and the CNE1000 (BE2 FCoE) adapters     that no longer initialize

  - [csiostor] call trace after command: modprobe csiostor

  - libceph: fall back to sendmsg for slab pages

  - Deadlock between stop_one_cpu_nowait() and     stop_two_cpus()

  - Soft lockups occur when the sd driver passes a device     size of 1 sector to string_get_size()

  - [SL7.7] BUG: unable to handle kernel paging request at     ffffffffffffffff

  - SL7.6 - powerpc/pseries: Disable CPU hotplug across     migrations / powerpc/rtas: Fix a potential race between     CPU-Offline &amp; Migration (LPM)

  - blk-mq: fix corruption with direct issue

  - [SL7][patch] iscsi driver can block reboot/shutdown

  - [DELL EMC 7.6 BUG] Unable to create-namespace over Dell     NVDIMM-N

  - efi_bgrt_init fails to ioremap error during boot

  - Unable to mount a share on kernel- 3.10.0-957.el7. The     share can be mounted on kernel-3.10.0-862.14.4.el7

  - System crash with RIP nfs_readpage_async+0x43 -- BUG:
    unable to handle kernel NULL pointer dereference

An update for kernel is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es) :

* kernel: Memory corruption due to incorrect socket cloning (CVE-2018-9568)

* kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)

* kernel: Faulty computation of numberic bounds in the BPF verifier (CVE-2018-18445)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) and Enhancement(s) :

* kernel fuse invalidates cached attributes during reads (BZ#1657921)

* [NetApp-FC-NVMe] RHEL7.6: nvme reset gets hung indefinitely (BZ#1659937)

* Memory reclaim deadlock calling __sock_create() after memalloc_noio_save() (BZ#1660392)

* hardened usercopy is causing crash (BZ#1660815)

* Backport: xfrm: policy: init locks early (BZ#1660887)

* AWS m5 instance type loses NVMe mounted volumes [was: Unable to Mount StatefulSet PV in AWS EBS] (BZ#1661947)

* RHEL 7.6 running on a VirtualBox guest with a GUI has a mouse problem (BZ# 1662848)

* Kernel bug report in cgroups on heavily contested 3.10 node (BZ#1663114)

* [PCIe] SHPC probe crash on Non-ACPI/Non-SHPC ports (BZ#1663241)

* [Cavium 7.7 Feat] qla2xxx: Update to latest upstream. (BZ#1663508)

* Regression in lpfc and the CNE1000 (BE2 FCoE) adapters that no longer initialize (BZ#1664067)

* [csiostor] call trace after command: modprobe csiostor (BZ#1665370)

* libceph: fall back to sendmsg for slab pages (BZ#1665814)

* Deadlock between stop_one_cpu_nowait() and stop_two_cpus() (BZ#1667328)

* Soft lockups occur when the sd driver passes a device size of 1 sector to string_get_size() (BZ#1667989)

* [RHEL7.7] BUG: unable to handle kernel paging request at ffffffffffffffff (BZ#1668208)

* RHEL7.6 - powerpc/pseries: Disable CPU hotplug across migrations / powerpc/ rtas: Fix a potential race between CPU-Offline & Migration (LPM) (BZ# 1669044)

* blk-mq: fix corruption with direct issue (BZ#1670511)

* [RHEL7][patch] iscsi driver can block reboot/shutdown (BZ#1670680)

* [DELL EMC 7.6 BUG] Unable to create-namespace over Dell NVDIMM-N (BZ# 1671743)

* efi_bgrt_init fails to ioremap error during boot (BZ#1671745)

* Unable to mount a share on kernel- 3.10.0-957.el7. The share can be mounted on kernel-3.10.0-862.14.4.el7 (BZ#1672448)

* System crash with RIP nfs_readpage_async+0x43 -- BUG: unable to handle kernel NULL pointer dereference (BZ#1672510)

Users of kernel are advised to upgrade to these updated packages, which fix these bugs and add this enhancement.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002923 advisory.

    In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of     numeric bounds in the BPF verifier permits out-of-bounds memory accesses because     adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The SUSE Linux Enterprise 12 SP4 kernel for Azure was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2018-18710: An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658 (bnc#1113751).

CVE-2018-18445: Faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit right shifts (bnc#1112372).

CVE-2018-18386: drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bnc#1094825).

CVE-2017-18224: fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allowed local users to cause a denial of service (BUG) by modifying a certain e_cpos field (bnc#1084831).

CVE-2017-16533: The usbhid_parse function in drivers/hid/usbhid/hid-core.c allowed local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device (bnc#1066674).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
119828	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3847-2)	Nessus	Ubuntu Local Security Checks	12/21/2018	8/28/2024	high
119829	Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3847-3)	Nessus	Ubuntu Local Security Checks	12/21/2018	8/28/2024	high
122843	RHEL 7 : kernel-rt (RHSA-2019:0514)	Nessus	Red Hat Local Security Checks	3/14/2019	11/6/2024	high
122887	Scientific Linux Security Update : kernel on SL7.x x86_64 (20190314)	Nessus	Scientific Linux Local Security Checks	3/18/2019	6/13/2024	high
122954	CentOS 7 : kernel (CESA-2019:0512)	Nessus	CentOS Local Security Checks	3/20/2019	6/13/2024	high
287305	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002923)	Nessus	Unity Linux Local Security Checks	1/15/2026	1/16/2026	high
119286	SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3934-1)	Nessus	SuSE Local Security Checks	11/29/2018	7/18/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high