The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0897 advisory.

  - A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability     is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the     component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this     issue. The identifier VDB-211045 was assigned to this vulnerability. (CVE-2022-3545)

  - A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in     progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to     crash the system or leak internal kernel information. (CVE-2022-41858)

  - A memory corruption flaw was found in the Linux kernel's human interface device (HID) subsystem in how a     user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their     privileges on the system. (CVE-2023-1073)

  - A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network     subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the     system, and could even lead to a kernel information leak problem. (CVE-2023-1838)

  - A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux.
    ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to     crash the system or potentially cause a denial of service. (CVE-2023-2166)

  - A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux     Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem     to crash the system or escalation of privilege. (CVE-2023-2176)

  - An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before     6.4.10. There is a use-after-free because the children of an sk are mishandled. (CVE-2023-40283)

  - An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel     before 6.5.3. A buffer size may not be adequate for frames larger than the MTU. (CVE-2023-45871)

  - A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control)     component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve     (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call     vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling     pointer that can cause a use-after-free. We recommend upgrading past commit     b3d26c5702c7d6c45456326e56d2ccf3f103e60f. (CVE-2023-4623)

  - An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access     to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES     emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege     escalation). This depends on a race condition through which userspace can replace an instruction before     the #VC handler reads it. (CVE-2023-46813)

  - A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to     achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending     network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug     and lack of error checking in agg_dequeue(). We recommend upgrading past commit     8fc134fee27f2263988ae38920bc03da416b03d8. (CVE-2023-4921)

  - A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf)     component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an     event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory     locations outside of the allocated buffer. We recommend upgrading past commit     32671e3799ca2e4590773fd0e63aaa4229e50c06. (CVE-2023-5717)

  - A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious     actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL     pointer dereference in the NVMe driver and causing kernel panic and a denial of service. (CVE-2023-6356)

  - A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious     actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL     pointer dereference in the NVMe driver, causing kernel panic and a denial of service. (CVE-2023-6535,     CVE-2023-6536)

  - An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux     Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
    (CVE-2023-6606)

  - An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux     Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
    (CVE-2023-6610)

  - A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to     achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set     walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-     after-free. We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a. (CVE-2023-6817)

  - An out-of-bounds memory write flaw was found in the Linux kernel's Transport Layer Security functionality     in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user     to crash or potentially escalate their privileges on the system. (CVE-2024-0646)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0897 advisory.

    - net: tls, update curr on splice as well (Sabrina Dubroca) [RHEL-22091 RHEL-19065] {CVE-2024-0646}
    - smb: client: fix potential OOB in smb2_dump_detail() (Scott Mayhew) [RHEL-21672 RHEL-19144]     {CVE-2023-6610}
    - smb: client: fix potential OOB in cifs_dump_detail() (Scott Mayhew) [RHEL-21672 RHEL-19144]     {CVE-2023-6610}
    - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) [RHEL-22299 RHEL-22637     RHEL-22641 RHEL-19155 RHEL-19161 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
    - nvmet-tcp: remove boilerplate code (Maurizio Lombardi) [RHEL-22299 RHEL-22637 RHEL-22641 RHEL-19155     RHEL-19161 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
    - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) [RHEL-22299 RHEL-22637 RHEL-22641     RHEL-19155 RHEL-19161 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
    - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [RHEL-22299     RHEL-22637 RHEL-22641 RHEL-19155 RHEL-19161 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
    - netfilter: nft_set_pipapo: skip inactive elements during set walk (Florian Westphal) [RHEL-20698     RHEL-19721] {CVE-2023-6817}
    - smb: client: fix OOB in smbCalcSize() (Scott Mayhew) [RHEL-21662 RHEL-18990] {CVE-2023-6606}
    - HID: check empty report_list in hid_validate_values() (Desnes Nunes) [RHEL-19274 RHEL-19237]     {CVE-2023-1073}
    - x86/sev: Check for user-space IOIO pointing to kernel space (Wander Lairson Costa) [RHEL-18014     RHEL-14978] {CVE-2023-46813}
    - x86/sev: Check IOBM for IOIO exceptions from user-space (Wander Lairson Costa) [RHEL-18014 RHEL-14978]     {CVE-2023-46813}
    - x86/sev: Disable MMIO emulation from user mode (Wander Lairson Costa) [RHEL-18014 RHEL-14978]     {CVE-2023-46813}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4347-1 advisory.

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS.
    (bsc#1210778)
    - CVE-2023-45862: Fixed an issue in the ENE UB6250 reader driver whwere an object could potentially extend     beyond the end of an allocation causing. (bsc#1216051)
    - CVE-2023-34324: Fixed a possible deadlock in Linux kernel event handling. (bsc#1215745).
    - CVE-2023-39189: Fixed a flaw in the Netfilter subsystem that could allow a local privileged     (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.
    (bsc#1216046)
    - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861).
    - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860).
    - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858).
    - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service     (bsc#1215467).
    - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table which could be exploited     by network adjacent attackers, increasing CPU usage by 95% (bsc#1212703).
    - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be     exploited to achieve local privilege escalation (bsc#1215275).
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215117).
    - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to     achieve local privilege escalation (bsc#1215115).
    - CVE-2020-36766: Fixed a potential information leak in in the CEC driver (bsc#1215299).
    - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash     the system (bsc#1210169).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).
    - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1268 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001,ZDI-CAN-20721)

    * hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982,Downfall)

    * kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue     overhead (CVE-2023-3611)

    * kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment     (CVE-2023-38409)

    * kernel: net/sched: sch_hfsc UAF (CVE-2023-4623)

    * kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip   (CVE-2022-41858)

    * kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545)

    * kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)

    * kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)

    * kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)

    * kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436)

    * kernel: inactive elements in nft_pipapo_walk (CVE-2023-6817)

    * kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as     destination (CVE-2024-0646)

    * kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in     batch requests (CVE-2023-3390)

    * kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096)

    * kernel: use-after-free in sch_qfq network scheduler (CVE-2023-4921)

    Bug Fix(es):

    * kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment     (JIRA:RHEL-1203)

    * How to reduce or prevent thousands of kworker/events_freezable_power_efficient threads being created     every time multipath -ll is run (JIRA:RHEL-15054)

    * kernel: net/sched: sch_hfsc UAF (JIRA:RHEL-16461)

    * [SanityOnly][kernel]BUG: sleeping function called from invalid context at     kernel/locking/spinlock_rt.c:35 at: sock_map_update_elem_sys+0x85/0x2a0 (JIRA:RHEL-6126)

    * kernel: hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (JIRA:RHEL-9246)

    * ipoib mcast lockup fix (JIRA:RHEL-19695)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1269 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch     requests (CVE-2023-3390)

    * net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue overhead     (CVE-2023-3611)

    * net/sched: sch_hfsc UAF (CVE-2023-4623)

    * use-after-free in sch_qfq network scheduler (CVE-2023-4921)

    * use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)

    * inactive elements in nft_pipapo_walk (CVE-2023-6817)

    * out-of-bounds write in qfq_change_class function (CVE-2023-31436)

    * nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)

    * IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)

    * ktls overwrites readonly memory pages when using function splice with a ktls socket as destination     (CVE-2024-0646)

    * nfp: use-after-free in area_cache_get() (CVE-2022-3545)

    * vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096)

    * Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)

    * null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858)

    * fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment (CVE-2023-38409)

    * use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3710 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3710-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     January 10, 2024                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 4.19.304-1     CVE ID         : CVE-2021-44879 CVE-2023-0590 CVE-2023-1077 CVE-2023-1206                      CVE-2023-1989 CVE-2023-3212 CVE-2023-3390 CVE-2023-3609                      CVE-2023-3611 CVE-2023-3772 CVE-2023-3776 CVE-2023-4206                      CVE-2023-4207 CVE-2023-4208 CVE-2023-4244 CVE-2023-4622                      CVE-2023-4623 CVE-2023-4921 CVE-2023-5717 CVE-2023-6606                      CVE-2023-6931 CVE-2023-6932 CVE-2023-25775 CVE-2023-34319                      CVE-2023-34324 CVE-2023-35001 CVE-2023-39189 CVE-2023-39192                      CVE-2023-39193 CVE-2023-39194 CVE-2023-40283 CVE-2023-42753                      CVE-2023-42754 CVE-2023-42755 CVE-2023-45863 CVE-2023-45871                      CVE-2023-51780 CVE-2023-51781 CVE-2023-51782

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    CVE-2021-44879

        Wenqing Liu reported a NULL pointer dereference in the f2fs         implementation. An attacker able to mount a specially crafted image         can take advantage of this flaw for denial of service.

    CVE-2023-0590

        Dmitry Vyukov discovered a race condition in the network scheduler         core that that can lead to a use-after-free.  A local user with         the CAP_NET_ADMIN capability in any user or network namespace         could exploit this to cause a denial of service (crash or memory         corruption) or possibly for privilege escalation.

    CVE-2023-1077

        Pietro Borrello reported a type confusion flaw in the task         scheduler.  A local user might be able to exploit this to cause a         denial of service (crash or memory corruption) or possibly for         privilege escalation.

    CVE-2023-1206

        It was discovered that the networking stack permits attackers to         force hash collisions in the IPv6 connection lookup table, which         may result in denial of service (significant increase in the cost         of lookups, increased CPU utilization).

    CVE-2023-1989

        Zheng Wang reported a race condition in the btsdio Bluetooth         adapter driver that can lead to a use-after-free.  An attacker         able to insert and remove SDIO devices can use this to cause a         denial of service (crash or memory corruption) or possibly to run         arbitrary code in the kernel.

    CVE-2023-3212

        Yang Lan discovered that missing validation in the GFS2 filesystem         could result in denial of service via a NULL pointer dereference         when mounting a malformed GFS2 filesystem.

    CVE-2023-3390

        A use-after-free flaw in the netfilter subsystem caused by         incorrect error path handling may result in denial of service or         privilege escalation.

    CVE-2023-3609, CVE-2023-3776, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208

        It was discovered that a use-after-free in the cls_fw, cls_u32,         cls_route and network classifiers may result in denial of service         or potential local privilege escalation.

    CVE-2023-3611

        It was discovered that an out-of-bounds write in the traffic         control subsystem for the Quick Fair Queueing scheduler (QFQ) may         result in denial of service or privilege escalation.

    CVE-2023-3772

        Lin Ma discovered a NULL pointer dereference flaw in the XFRM         subsystem which may result in denial of service.

    CVE-2023-4244

        A race condition was found in the nftables subsystem that could         lead to a use-after-free.  A local user could exploit this to         cause a denial of service (crash), information leak, or possibly         for privilege escalation.

    CVE-2023-4622

        Bing-Jhong Billy Jheng discovered a use-after-free within the Unix         domain sockets component, which may result in local privilege         escalation.

    CVE-2023-4623

        Budimir Markovic reported a missing configuration check in the         sch_hfsc network scheduler that could lead to a use-after-free or         other problems.  A local user with the CAP_NET_ADMIN capability in         any user or network namespace could exploit this to cause a denial         of service (crash or memory corruption) or possibly for privilege         escalation.

    CVE-2023-4921

        valis reported flaws in the sch_qfq network scheduler that could         lead to a use-after-free.  A local user with the CAP_NET_ADMIN         capability in any user or network namespace could exploit this to         cause a denial of service (crash or memory corruption) or possibly         for privilege escalation.

    CVE-2023-5717

        Budimir Markovic reported a heap out-of-bounds write vulnerability         in the Linux kernel's Performance Events system caused by improper         handling of event groups, which may result in denial of service or         privilege escalation. The default settings in Debian prevent         exploitation unless more permissive settings have been applied in         the kernel.perf_event_paranoid sysctl.

    CVE-2023-6606

        j51569436 reported a potential out-of-bounds read in the CIFS         filesystem implementation.  If a CIFS filesystem is mounted from a         malicious server, the server could possibly exploit this to cause         a denial of service (crash).

    CVE-2023-6931

        Budimir Markovic reported a heap out-of-bounds write vulnerability         in the Linux kernel's Performance Events system which may result in         denial of service or privilege escalation. The default settings in         Debian prevent exploitation unless more permissive settings have         been applied in the kernel.perf_event_paranoid sysctl.

    CVE-2023-6932

        A use-after-free vulnerability in the IPv4 IGMP implementation may         result in denial of service or privilege escalation.

    CVE-2023-25775

        Ivan D Barrera, Christopher Bednarz, Mustafa Ismail and Shiraz         Saleem discovered that improper access control in the Intel Ethernet         Controller RDMA driver may result in privilege escalation.

    CVE-2023-34319

        Ross Lagerwall discovered a buffer overrun in Xen's netback driver         which may allow a Xen guest to cause denial of service to the         virtualisation host by sending malformed packets.

    CVE-2023-34324

        Marek Marczykowski-Gorecki reported a possible deadlock in the Xen         guests event channel code which may allow a malicious guest         administrator to cause a denial of service.

    CVE-2023-35001

        Tanguy DUBROCA discovered an out-of-bounds reads and write flaw in         the Netfilter nf_tables implementation when processing an         nft_byteorder expression, which may result in local privilege         escalation for a user with the CAP_NET_ADMIN capability in any         user or network namespace.

    CVE-2023-39189, CVE-2023-39192, CVE-2023-39193

        Lucas Leong of Trend Micro Zero Day Initiative reported missing         bounds checks in the nfnetlink_osf, xt_u32, and xt_sctp netfilter         modules.  A local user with the CAP_NET_ADMIN capability in any         user or network namespace could exploit these to leak sensitive         information from the kernel or for denial of service (crash).

    CVE-2023-39194

        Lucas Leong of Trend Micro Zero Day Initiative reported a missing         bounds check in the xfrm (IPsec) subsystem.  A local user with the         CAP_NET_ADMIN capability in any user or network namespace could         exploit this to leak sensitive information from the kernel or for         denial of service (crash).

    CVE-2023-40283

        A use-after-free was discovered in Bluetooth L2CAP socket         handling.

    CVE-2023-42753

        Kyle Zeng discovered an off-by-one error in the netfilter ipset         subsystem which could lead to out-of-bounds memory access.  A         local user with the CAP_NET_ADMIN capability in any user or         network namespace could exploit this to cause a denial of service         (memory corruption or crash) and possibly for privilege         escalation.

    CVE-2023-42754

        Kyle Zeng discovered a flaw in the IPv4 implementation which could         lead to a null pointer deference.  A local user could exploit this         for denial of service (crash).

    CVE-2023-42755

        Kyle Zeng discovered missing configuration validation in the         cls_rsvp network classifier which could lead to out-of-bounds         reads.  A local user with the CAP_NET_ADMIN capability in any user         or network namespace could exploit this to cause a denial of         service (crash) or to leak sensitive information.

        This flaw has been mitigated by removing the cls_rsvp classifier.

    CVE-2023-45863

        A race condition in library routines for handling generic kernel         objects may result in an out-of-bounds write in the         fill_kobj_path() function.

    CVE-2023-45871

        Manfred Rudigier reported a flaw in the igb network driver for         Intel Gigabit Ethernet interfaces.  When the rx-all feature was         enabled on such a network interface, an attacker on the same         network segment could send packets that would overflow a receive         buffer, leading to a denial of service (crash or memory         corruption) or possibly remote code execution.

    CVE-2023-51780

        It was discovered that a race condition in the ATM (Asynchronous         Transfer Mode) subsystem may lead to a use-after-free.

    CVE-2023-51781

        It was discovered that a race condition in the Appletalk subsystem         may lead to a use-after-free.

    CVE-2023-51782

        It was discovered that a race condition in the Amateur Radio X.25         PLP (Rose) support may lead to a use-after-free. This module is not         auto-loaded on Debian systems, so this issue only affects systems         where it is explicitly loaded.

    For Debian 10 buster, these problems have been fixed in version     4.19.304-1.  This update additionally includes many more bug fixes     from stable updates 4.19.290-4.19.304 inclusive.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
190904	AlmaLinux 8 : kernel (ALSA-2024:0897)	Nessus	Alma Linux Local Security Checks	2/22/2024	2/22/2024	high
191697	Oracle Linux 8 : kernel (ELSA-2024-0897)	Nessus	Oracle Linux Local Security Checks	3/7/2024	9/9/2025	high
184345	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:4347-1)	Nessus	SuSE Local Security Checks	11/3/2023	9/24/2025	high
191910	RHEL 8 : kernel (RHSA-2024:1268)	Nessus	Red Hat Local Security Checks	3/12/2024	3/31/2025	critical
191911	RHEL 8 : kernel-rt (RHSA-2024:1269)	Nessus	Red Hat Local Security Checks	3/12/2024	3/31/2025	critical
203724	Photon OS 3.0: Linux PHSA-2023-3.0-0644	Nessus	PhotonOS Local Security Checks	7/24/2024	8/21/2025	high
189094	Debian dla-3710 : hyperv-daemons - security update	Nessus	Debian Local Security Checks	1/16/2024	3/31/2025	critical

Detections

Analytics

Plugins Search

high

high

high

critical

critical

high

critical