The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3508 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3508-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     July 27, 2023                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 4.19.289-1     CVE ID         : CVE-2023-1380 CVE-2023-2002 CVE-2023-2007 CVE-2023-2269                      CVE-2023-3090 CVE-2023-3111 CVE-2023-3141 CVE-2023-3268                      CVE-2023-3338 CVE-2023-20593 CVE-2023-31084 CVE-2023-32233                      CVE-2023-34256 CVE-2023-35788 CVE-2023-35823 CVE-2023-35824                      CVE-2023-35828

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    CVE-2023-1380

        Jisoo Jang reported a heap out-of-bounds read in the brcmfmac         Wi-Fi driver.  On systems using this driver, a local user could         exploit this to read sensitive information or to cause a denial of         service (crash).

    CVE-2023-2002

        Ruiahn Li reported an incorrect permissions check in the Bluetooth         subsystem.  A local user could exploit this to reconfigure local         Bluetooth interfaces, resulting in information leaks, spoofing, or         denial of service (loss of connection).

    CVE-2023-2007

        Lucas Leong (@_wmliang_) and Reno Robert of Trend Micro Zero Day         Initiative discovered a time-of-check-to-time-of-use flaw in the         dpt_i2o SCSI controller driver.  A local user with access to a         SCSI device using this driver could exploit this for privilege         escalation.

        This flaw has been mitigated by removing support for the I2OUSRCMD         operation.

    CVE-2023-2269

        Zheng Zhang reported that improper handling of locking in the         device mapper implementation may result in denial of service.

    CVE-2023-3090

        It was discovered that missing initialization in ipvlan networking         may lead to an out-of-bounds write vulnerability, resulting in         denial of service or potentially the execution of arbitrary code.

    CVE-2023-3111

        The TOTE Robot tool found a flaw in the Btrfs filesystem driver         that can lead to a use-after-free.  It's unclear whether an         unprivileged user can exploit this.

    CVE-2023-3141

        A flaw was discovered in the r592 memstick driver that could lead         to a use-after-free after the driver is removed or unbound from a         device.  The security impact of this is unclear.

    CVE-2023-3268

        It was discovered that an out-of-bounds memory access in relayfs         could result in denial of service or an information leak.

    CVE-2023-3338

        Ornaghi Davide discovered a flaw in the DECnet protocol         implementation which could lead to a null pointer dereference or         use-after-free.  A local user can exploit this to cause a denial         of service (crash or memory corruption) and probably for privilege         escalation.

        This flaw has been mitigated by removing the DECnet protocol         implementation.

    CVE-2023-20593

        Tavis Ormandy discovered that under specific microarchitectural         circumstances, a vector register in AMD Zen 2 CPUs may not be         written to 0 correctly.  This flaw allows an attacker to leak         sensitive information across concurrent processes, hyper threads         and virtualized guests.

        For details please refer to         <https://lock.cmpxchg8b.com/zenbleed.html> and         <https://github.com/google/security-research/security/advisories/GHSA-v6wh-rxpg-cmm8>.

        This issue can also be mitigated by a microcode update through the         amd64-microcode package or a system firmware (BIOS/UEFI) update.
        However, the initial microcode release by AMD only provides         updates for second generation EPYC CPUs.  Various Ryzen CPUs are         also affected, but no updates are available yet.

    CVE-2023-31084

        It was discovered that the DVB Core driver does not properly         handle locking of certain events, allowing a local user to cause a         denial of service.

    CVE-2023-32233

        Patryk Sondej and Piotr Krysiuk discovered a use-after-free flaw         in the Netfilter nf_tables implementation when processing batch         requests, which may result in local privilege escalation for a         user with the CAP_NET_ADMIN capability in any user or network         namespace.

    CVE-2023-34256

        The syzbot tool found a time-of-check-to-time-of-use flaw in the         ext4 filesystem driver.  An attacker able to mount a disk image or         device that they can also write to directly could exploit this to         cause an out-of-bounds read, possibly resulting in a leak of         sensitive information or denial of service (crash).

    CVE-2023-35788

        Hangyu Hua discovered an out-of-bounds write vulnerability in the         Flower classifier which may result in denial of service or the         execution of arbitrary code.

    CVE-2023-35823

        A flaw was discovered in the saa7134 media driver that could lead         to a use-after-free after the driver is removed or unbound from a         device.  The security impact of this is unclear.

    CVE-2023-35824

        A flaw was discovered in the dm1105 media driver that could lead         to a use-after-free after the driver is removed or unbound from a         device.  The security impact of this is unclear.

    CVE-2023-35828

        A flaw was discovered in the renesas_udc USB device-mode driver         that could lead to a use-after-free after the driver is removed or         unbound from a device.  The security impact of this is unclear.

        This driver is not enabled in Debian's official kernel         configurations.

    For Debian 10 buster, these problems have been fixed in version     4.19.289-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6416-3 advisory.

    It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash     collisions in connection lookup table. A remote attacker could use this to cause a denial of service     (excessive CPU consumption). (CVE-2023-1206)

    Daniel Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD processors utilising     speculative execution and branch prediction may allow unauthorised memory reads via a speculative side-     channel attack. A local attacker could use this to expose sensitive information, including kernel memory.
    (CVE-2023-20569)

    It was discovered that the IPv6 RPL protocol implementation in the Linux kernel did not properly handle     user-supplied data. A remote attacker could use this to cause a denial of service (system crash).
    (CVE-2023-2156)

    Davide Ornaghi discovered that the DECnet network protocol implementation in the Linux kernel contained a     null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. Please note that kernel support for the DECnet has been     removed to resolve this CVE. (CVE-2023-3338)

    Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate     command payload size, leading to a out-of-bounds read vulnerability. A remote attacker could possibly use     this to cause a denial of service (system crash). (CVE-2023-38432)

    It was discovered that the NFC implementation in the Linux kernel contained a use-after-free vulnerability     when performing peer-to-peer communication in certain conditions. A privileged attacker could use this to     cause a denial of service (system crash) or possibly expose sensitive information (kernel memory).
    (CVE-2023-3863)

    Laurence Wit discovered that the KSMBD implementation in the Linux kernel did not properly validate a     buffer size in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker could     use this to cause a denial of service (system crash) or possibly expose sensitive information.
    (CVE-2023-3865)

    Laurence Wit discovered that the KSMBD implementation in the Linux kernel contained a null pointer     dereference vulnerability when handling handling chained requests. A remote attacker could use this to     cause a denial of service (system crash). (CVE-2023-3866)

    It was discovered that the Siano USB MDTV receiver device driver in the Linux kernel did not properly     handle device initialization failures in certain situations, leading to a use-after-free vulnerability. A     physically proximate attacker could use this cause a denial of service (system crash). (CVE-2023-4132)

    Andy Nguyen discovered that the KVM implementation for AMD processors in the Linux kernel with Secure     Encrypted Virtualization (SEV) contained a race condition when accessing the GHCB page. A local attacker     in a SEV guest VM could possibly use this to cause a denial of service (host system crash).
    (CVE-2023-4155)

    It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A     local attacker could use this to cause a denial of service (system crash). (CVE-2023-4194)

    Maxim Suhanov discovered that the exFAT file system implementation in the Linux kernel did not properly     check a file name length, leading to an out- of-bounds write vulnerability. An attacker could use this to     construct a malicious exFAT image that, when mounted and operated on, could cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2023-4273)

    Thelford Williams discovered that the Ceph file system messenger protocol implementation in the Linux     kernel did not properly validate frame segment length in certain situation, leading to a buffer overflow     vulnerability. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-44466)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5480 advisory.

    Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation,     denial of service or information leaks. CVE-2022-4269 William Zhao discovered that a flaw in the Traffic     Control (TC) subsystem when using a specific networking configuration (redirecting egress packets to     ingress using TC action mirred), may allow a local unprivileged user to cause a denial of service     (triggering a CPU soft lockup). CVE-2022-39189 Jann Horn discovered that TLB flush operations are     mishandled in the KVM subsystem in certain KVM_VCPU_PREEMPTED situations, which may allow an unprivileged     guest user to compromise the guest kernel. CVE-2023-1206 It was discovered that the networking stack     permits attackers to force hash collisions in the IPv6 connection lookup table, which may result in denial     of service (significant increase in the cost of lookups, increased CPU utilization). CVE-2023-1380 Jisoo     Jang reported a heap out-of-bounds read in the brcmfmac Wi-Fi driver. On systems using this driver, a     local user could exploit this to read sensitive information or to cause a denial of service. CVE-2023-2002     Ruiahn Li reported an incorrect permissions check in the Bluetooth subsystem. A local user could exploit     this to reconfigure local Bluetooth interfaces, resulting in information leaks, spoofing, or denial of     service (loss of connection). CVE-2023-2007 Lucas Leong and Reno Robert discovered a time-of-check-to-     time-of-use flaw in the dpt_i2o SCSI controller driver. A local user with access to a SCSI device using     this driver could exploit this for privilege escalation. This flaw has been mitigated by removing support     for the I2OUSRCMD operation. CVE-2023-2124 Kyle Zeng, Akshay Ajayan and Fish Wang discovered that missing     metadata validation may result in denial of service or potential privilege escalation if a corrupted XFS     disk image is mounted. CVE-2023-2269 Zheng Zhang reported that improper handling of locking in the device     mapper implementation may result in denial of service. CVE-2023-2898 It was discovered that missing     sanitising in the f2fs file system may result in denial of service if a malformed file system is accessed.
    CVE-2023-3090 It was discovered that missing initialization in ipvlan networking may lead to an out-of-     bounds write vulnerability, resulting in denial of service or potentially the execution of arbitrary code.
    CVE-2023-3111 The TOTE Robot tool found a flaw in the Btrfs filesystem driver that can lead to a use-     after-free. It's unclear whether an unprivileged user can exploit this. CVE-2023-3212 Yang Lan discovered     that missing validation in the GFS2 filesystem could result in denial of service via a NULL pointer     dereference when mounting a malformed GFS2 filesystem. CVE-2023-3268 It was discovered that an out-of-     bounds memory access in relayfs could result in denial of service or an information leak. CVE-2023-3338     Davide Ornaghi discovered a flaw in the DECnet protocol implementation which could lead to a null pointer     dereference or use-after-free. A local user can exploit this to cause a denial of service (crash or memory     corruption) and probably for privilege escalation. This flaw has been mitigated by removing the DECnet     protocol implementation. CVE-2023-3389 Querijn Voet discovered a use-after-free in the io_uring subsystem,     which may result in denial of service or privilege escalation. CVE-2023-3611 It was discovered that an     out-of-bounds write in the traffic control subsystem for the Quick Fair Queueing scheduler (QFQ) may     result in denial of service or privilege escalation. CVE-2023-3609, CVE-2023-3776, CVE-2023-4128 It was     discovered that a use-after-free in the cls_fw, cls_u32, cls_route and network classifiers may result in     denial of service or potential local privilege escalation. CVE-2023-3863 It was discovered that a use-     after-free in the NFC implementation may result in denial of service, an information leak or potential     local privilege escalation. CVE-2023-4004 It was discovered that a use-after-free in Netfilter's     implementation of PIPAPO (PIle PAcket POlicies) may result in denial of service or potential local     privilege escalation for a user with the CAP_NET_ADMIN capability in any user or network namespace.
    CVE-2023-4132 A use-after-free in the driver for Siano SMS1xxx based MDTV receivers may result in local     denial of service. CVE-2023-4147 Kevin Rich discovered a use-after-free in Netfilter when adding a rule     with NFTA_RULE_CHAIN_ID, which may result in local privilege escalation for a user with the CAP_NET_ADMIN     capability in any user or network namespace. CVE-2023-4194 A type confusion in the implementation of     TUN/TAP network devices may allow a local user to bypass network filters. CVE-2023-4273 Maxim Suhanov     discovered a stack overflow in the exFAT driver, which may result in local denial of service via a     malformed file system. CVE-2023-20588 Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Koepf and     Oleksii Oleksenko discovered that on some AMD CPUs with the Zen1 micro architecture an integer division by     zero may leave stale quotient data from a previous division, resulting in a potential leak of sensitive     data. CVE-2023-21255 A use-after-free was discovered in the Android binder driver, which may result in     local privilege escalation on systems where the binder driver is loaded. CVE-2023-21400 Ye Zhang and     Nicolas Wu discovered a double-free in the io_uring subsystem, which may result in denial of service or     privilege escalation. CVE-2023-31084 It was discovered that the DVB Core driver does not properly handle     locking of certain events, allowing a local user to cause a denial of service. CVE-2023-34319 Ross     Lagerwall discovered a buffer overrun in Xen's netback driver which may allow a Xen guest to cause denial     of service to the virtualisation host by sending malformed packets. CVE-2023-35788 Hangyu Hua discovered     that an off-by-one in the Flower traffic classifier may result in local denial of service or the execution     of privilege escalation. CVE-2023-40283 A use-after-free was discovered in Bluetooth L2CAP socket     handling. For the oldstable distribution (bullseye), these problems have been fixed in version 5.10.191-1.
    We recommend that you upgrade your linux packages. For the detailed security status of linux please refer     to its security tracker page at: https://security-tracker.debian.org/tracker/linux

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 ESM / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6417-1 advisory.

    It was discovered that the eBPF implementation in the Linux kernel contained a race condition around read-     only maps. A privileged attacker could use this to modify read-only maps. (CVE-2021-4001)

    It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash     collisions in connection lookup table. A remote attacker could use this to cause a denial of service     (excessive CPU consumption). (CVE-2023-1206)

    Yang Lan discovered that the GFS2 file system implementation in the Linux kernel could attempt to     dereference a null pointer in some situations. An attacker could use this to construct a malicious GFS2     image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2023-3212)

    Davide Ornaghi discovered that the DECnet network protocol implementation in the Linux kernel contained a     null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. Please note that kernel support for the DECnet has been     removed to resolve this CVE. (CVE-2023-3338)

    It was discovered that the NFC implementation in the Linux kernel contained a use-after-free vulnerability     when performing peer-to-peer communication in certain conditions. A privileged attacker could use this to     cause a denial of service (system crash) or possibly expose sensitive information (kernel memory).
    (CVE-2023-3863)

    It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A     local attacker could use this to cause a denial of service (system crash). (CVE-2023-4194)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue     could allow a remote user to crash the system. (CVE-2023-3338)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
178958	Debian dla-3508 : hyperv-daemons - security update	Nessus	Debian Local Security Checks	7/28/2023	1/22/2025	critical
183426	Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-6416-3)	Nessus	Ubuntu Local Security Checks	10/19/2023	8/27/2024	critical
180016	Debian DSA-5480-1 : linux - security update	Nessus	Debian Local Security Checks	8/22/2023	9/24/2025	high
182578	Ubuntu 18.04 ESM / 20.04 LTS : Linux kernel vulnerabilities (USN-6417-1)	Nessus	Ubuntu Local Security Checks	10/5/2023	8/27/2024	medium
247137	Linux Distros Unpatched Vulnerability : CVE-2023-3338	Nessus	Misc.	8/10/2025	7/17/2026	medium

Detections

Analytics

Plugins Search

critical

critical

high

medium

medium