The remote OracleVM system is missing necessary patches to address security updates:

    [4.1.12-124.89.4]- isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)  [Orabug: 36940405]     {CVE-2021-47284}- tracing: Restructure trace_clock_global() to never block (Steven Rostedt (VMware))     [Orabug: 36940388]  {CVE-2021-46939}- udf: Fix NULL pointer dereference in udf_symlink function (Arturo     Giusti)  [Orabug: 36806640]  {CVE-2021-47353}- media: pvrusb2: fix use after free on context disconnection     (Ricardo B. Marliere)  [Orabug: 36802294]  {CVE-2023-52445}- vt: fix memory overlapping when deleting     chars in the buffer (Yangxi Xiang)  [Orabug: 36802212]  {CVE-2022-48627}- tty: n_gsm: fix possible out-of-     bounds in gsm0_receive() (Daniel Starke)  [Orabug: 36678070]  {CVE-2024-36016}- netfilter: nftables:
    exthdr: fix 4-byte stack OOB write (Florian Westphal)  [Orabug: 36654631]  {CVE-2023-52628}- dm: call the     resume method on internal suspend (Mikulas Patocka)  [Orabug: 36544879]  {CVE-2024-26880}- net/bnx2x:
    Prevent access to a freed page in page_pool (Thinh Tran)  [Orabug: 36544783]  {CVE-2024-26859}- x86,     relocs: Ignore relocations in .notes section (Kees Cook)  [Orabug: 36531115]  {CVE-2024-26816}- netlink:
    Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)  [Orabug: 36531057]     {CVE-2024-26805}- fbdev: savage: Error out if pixclock equals zero (Fullway Wang)  [Orabug: 36530913]     {CVE-2024-26778}- ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)  [Orabug:
    36530519]  {CVE-2024-26704}- sr9800: Add check for usbnet_get_endpoints (Chen Ni)  [Orabug: 36530183]     {CVE-2024-26651}- llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)  [Orabug: 36530047]     {CVE-2024-26635}- netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter)  [Orabug:
    36192155]  {CVE-2023-6040}[4.1.12-124.89.3]- wifi: ath9k: Fix potential array-index-out-of-bounds read in     ath9k_htc_txstatus() (Minsuk Kang)  [Orabug: 36802321]  {CVE-2023-52594}- batman-adv: Avoid infinite loop     trying to resize local TT (Sven Eckelmann)  [Orabug: 36643464]  {CVE-2024-35982}- Bluetooth: Fix memory     leak in hci_req_sync_complete() (Dmitry Antipov)  [Orabug: 36643456]  {CVE-2024-35978}- VMCI: Fix memcpy()     run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli)  [Orabug: 36643323]  {CVE-2024-35944}-     fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov)  [Orabug: 36643194]     {CVE-2024-35922}[4.1.12-124.89.2]- scsi: libfc: Fix potential NULL pointer dereference in     fc_lport_ptp_setup() (Wenchao Hao)  [Orabug: 36901390]  {CVE-2023-52809}- net: usb: fix memory leak in     smsc75xx_bind (Pavel Skripkin)  [Orabug: 36802200]  {CVE-2021-47171}- i2c: i801: Don't generate an     interrupt on bus reset (Jean Delvare)  [Orabug: 36792714]  {CVE-2021-47153}- pid: take a reference when     initializing cad_pid (Mark Rutland)  [Orabug: 36792687]  {CVE-2021-47118}- drm/vmwgfx: Fix invalid reads     in fence signaled events (Zack Rusin)  [Orabug: 36691531]  {CVE-2024-36960}- firewire: ohci: mask bus     reset interrupts between ISR and bottom half (Adam Goldman)  [Orabug: 36683507]  {CVE-2024-36950}- scsi:
    bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap)  [Orabug: 36683370]     {CVE-2024-36919}- net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo)  [Orabug:
    36683115]  {CVE-2024-36883}- netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso)     [Orabug: 36654625]  {CVE-2023-52620}- team: fix null-ptr-deref when team device type is changed (Ziyang     Xuan)  [Orabug: 36654606]  {CVE-2023-52574}[4.1.12-124.89.1]- tcp: do not accept ACK of bytes we never     sent (Eric Dumazet)  [Orabug: 36806731]  {CVE-2023-52881}- net/usb: kalmia: Don't pass act_len in     usb_bulk_msg error path (Miko Larsson)  [Orabug: 36806698]  {CVE-2023-52703}- hwrng: core - Fix page fault     dead lock on mmap-ed hwrng (Herbert Xu)  [Orabug: 36806668]  {CVE-2023-52615}- mISDN: fix possible use-     after-free in HFC_cleanup() (Zou Wei)  [Orabug: 36806645]  {CVE-2021-47356}- net: ti: fix UAF in     tlan_remove_one (Pavel Skripkin)  [Orabug: 36806628]  {CVE-2021-47310}- net: cdc_eem: fix tx fixup skb     leak (Linyu Yuan)  [Orabug: 36806622]  {CVE-2021-47236}- usb: hub: Guard against accesses to uninitialized     BOS descriptors (Ricardo Canuelo)  [Orabug: 36802300]  {CVE-2023-52477}- USB: add quirk for devices with     broken LPM (Alan Stern)  [Orabug: 36802300]  {CVE-2023-52477}- Bluetooth: rfcomm: Fix null-ptr-deref in     rfcomm_check_security (Yuxuan Hu)  [Orabug: 36544991]  {CVE-2024-26903}- Bluetooth: Avoid potential use-     after-free in hci_error_reset (Ying Hsu)  [Orabug: 36531042]  {CVE-2024-26801}- ext4: avoid allocating     blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)  [Orabug: 36530881]  {CVE-2024-26772}-     inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet)  [Orabug: 36530348]  {CVE-2024-26679}-     ppp_async: limit MRU to 64K (Eric Dumazet)  [Orabug: 36530335]  {CVE-2024-26675}

Tenable has extracted the preceding description block directly from the OracleVM security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4352 advisory.

    * kernel: tls (CVE-2024-26585,CVE-2024-26584, CVE-2024-26583

    * kernel-rt: kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)

    * kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)

    * kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)

    * kernel-rt: kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)

    * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset CVE-2024-26801)

    * kernel: Squashfs: check the inode number is not the invalid value of zero  (CVE-2024-26982)

    * kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

    * kernel: wifi: mac80211: (CVE-2024-35789, CVE-2024-35838, CVE-2024-35845)

    * kernel: wifi: nl80211: reject iftype change with mesh ID change (CVE-2024-27410)

    * kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)

    * kernel:TCP-spoofed ghost ACKs and leak initial sequence number (CVE-2023-52881)

    * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)

    * kernel: ovl: fix leaked dentry (CVE-2021-46972)

    * kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)

    * kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)

    * kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)

    * kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)

    * kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)

    * kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)

    * kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)

    * kernel: net/usb: kalmia: avoid printing uninitialized value on error path (CVE-2023-52703)

    * kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic     msrs (CVE-2023-5090)

    * kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)

    * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)

    * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)

    * kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)

    * kernel: crypto: (CVE-2024-26974, CVE-2023-52813)

    * kernel: can: (CVE-2023-52878, CVE-2021-47456)

    * kernel: usb: (CVE-2023-52781, CVE-2023-52877)

    * kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)

    * kernel: usbnet: sanity check for maxpacket (CVE-2021-47495)

    * kernel: gro: fix ownership transfer (CVE-2024-35890)

    * kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)

    * kernel: tipc: fix kernel warning when sending SYN message (CVE-2023-52700)

    * kernel: net/mlx5/mlxsw: (CVE-2024-35960, CVE-2024-36007, CVE-2024-35855)

    * kernel: net/mlx5e: (CVE-2024-35959, CVE-2023-52626, CVE-2024-35835)

    * kernel: mlxsw: (CVE-2024-35854, CVE-2024-35853, CVE-2024-35852)

    * kernel: net: (CVE-2024-35958, CVE-2021-47311, CVE-2021-47236, CVE-2021-47310)

    * kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)

    * kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)

    * kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-40882)

    * [rhel8.9][cxgb4]BUG: using smp_processor_id() in preemptible [00000000] code: ethtool/54735 (JIRA:Rocky     Linux-8779)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4211 advisory.

    * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)

    * kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)

    * kernel: ovl: fix leaked entry (CVE-2021-46972)

    * kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)

    * kernel: gro: fix ownership transfer (CVE-2024-35890)

    * kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)

    * kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)

    * kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)

    * kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)

    * kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)

    * kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng [rhel-8] (CVE-2023-52615)

    * kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)

    * kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)

    * kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset [rhel-8] (CVE-2024-26801)

    * kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

    * kernel: netfilter: nf_tables: use timestamp to check for set element timeout [rhel-8.10]     (CVE-2024-27397)

    * kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)

    * kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)

    * kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)

    * kernel: tipc: fix kernel warning when sending SYN message [rhel-8] (CVE-2023-52700)

    * kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)

    * kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)

    * kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)

    * kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic     msrs (CVE-2023-5090)

    * kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)

    * kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)

    * kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)

    * kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)

    * kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804,     CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)

    * kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)

    * kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)

    * kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)

    * kernel: can: (CVE-2023-52878, CVE-2021-47456)

    * kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)

    * kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

    Bug Fix(es):

    * Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:Rocky Linux-29783)

    * Temporary values in FIPS integrity test should be zeroized [rhel-8.10.z] (JIRA:Rocky Linux-35361)

    * Rocky Linux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:Rocky Linux-36048)

    * [Rocky Linux8] blktests block/024 failed (JIRA:Rocky Linux-8130)

    * Rocky Linux8.9: EEH injections results  Error:  Power fault on Port 0 and other call     traces(Everest/1050/Shiner) (JIRA:Rocky Linux-14195)

    * Latency spikes with Matrox G200 graphic cards (JIRA:Rocky Linux-36172)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    IB/ipoib: Fix mcast list locking(CVE-2023-52587)

    netfilter: nftables: avoid overflows in nft_hash_buckets()(CVE-2021-46992)

    SUNRPC: Fix a suspicious RCU usage warning(CVE-2023-52623)

    l2tp: pass correct message length to ip6_append_data(CVE-2024-26752)

    net/sched: act_mirred: use the backlog for mirred ingress(CVE-2024-26740)

    RDMA/srp: Do not call scsi_done() from srp_abort()(CVE-2023-52515)

    hwrng: core - Fix page fault dead lock on mmap-ed hwrng(CVE-2023-52615)

    KVM: s390: fix setting of fpc register(CVE-2023-52597)

    In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race     condition between a nonblocking atomic commit and a driver unload.(CVE-2023-51043)

    uio: Fix use-after-free in uio_open(CVE-2023-52439)

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to     achieve local privilege escalation.The nft_verdict_init() function allows positive values as drop error     within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when     NF_DROP is issued with a drop error which resembles NF_ACCEPT.(CVE-2024-1086)

    ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure(CVE-2021-46953)

    drivers/amd/pm: fix a use-after-free in kv_parse_power_table(CVE-2023-52469)

    KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU(CVE-2021-47061)

    KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache(CVE-2024-26598)

    i2c: validate user data in compat ioctl(CVE-2021-46934)

    parisc: Clear stale IIR value on instruction access rights trap(CVE-2021-46928)

    net: hso: fix null-ptr-deref during tty device unregistration(CVE-2021-46904)

    net: hso: fix NULL-deref on disconnect regression(CVE-2021-46905)

    usb: hub: Guard against accesses to uninitialized BOS descriptors(CVE-2023-52477)

    EDAC/thunderx: Fix possible out-of-bounds string access(CVE-2023-52464)

    cifs: Return correct error code from smb2_get_enc_key(CVE-2021-46960)

    openvswitch: fix stack OOB read while fragmenting IPv4 packets(CVE-2021-46955)

    ceph: fix deadlock or deadcode of misusing dget()(CVE-2023-52583)

    ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook(CVE-2021-47006)

    block: add check that partition length needs to be aligned with block size(CVE-2023-52458)

    locking/qrwlock: Fix ordering in queued_write_lock_slowpath()(CVE-2021-46921)

    The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can     be consumed easily, e.g., leading to a denial of service (network is unreachable errors) when IPv6 packets     are sent in a loop via a raw socket.(CVE-2023-52340)

    pstore/ram: Fix crash when setting number of cpus to an odd number(CVE-2023-52619)

    NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds(CVE-2021-46952)

    ext4: always panic when errors=panic is specified(CVE-2021-46945)

    net: fix possible store tearing in neigh_periodic_work()(CVE-2023-52522)

    net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send(CVE-2021-47013)

    bnxt_en: Fix RX consumer index logic in the error path.(CVE-2021-47015)

    net: Only allow init netns to set default tcp cong to a restricted algo(CVE-2021-47010)

    net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg(CVE-2023-52528)

    A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan()     function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or     denial of service issue.(CVE-2024-24855)

    ext4: avoid online resizing failures due to oversized flex bg(CVE-2023-52622)

    nvme-loop: fix memory leak in nvme_loop_create_ctrl()(CVE-2021-47074)

    userfaultfd: release page in error path to avoid BUG_ON(CVE-2021-46988)

    A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This     flaw allows a local user to cause an information leak problem while freeing the old quota file names     before a potential failure, leading to a use-after-free.(CVE-2024-0775)

    Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows     Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from     5.10.0-60.18.0 before 5.10.0-183.0.0.(CVE-2021-33631)

    NFS: Fix an Oopsable condition in __nfs_pageio_add_request()(CVE-2021-47167)

    crypto: scomp - fix req-dst buffer overflow(CVE-2023-52612)

    sched/membarrier: reduce the ability to hammer on sys_membarrier(CVE-2024-26602)

    Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid,     raid5 modules) allows Forced Integer Overflow.(CVE-2024-23307)

    dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails(CVE-2021-46938)

    NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()(CVE-2021-47166)

    drm: Don't unref the same fb many times by mistake due to deadlock handling(CVE-2023-52486)

    A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval()     function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes     are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every     iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local     user to cause a denial of service or potentially break NetFilter functionality.(CVE-2024-0607)

    blk-mq: fix IO hang from sbitmap wakeup race(CVE-2024-26671)

    i2c: Fix a potential use after free(CVE-2019-25162)

    drm: bridge/panel: Cleanup connector on bridge detach(CVE-2021-47063)

    bus: qcom: Put child node before return(CVE-2021-47054)

    A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a     recursive operation of code push recursively calls into the code block. The OVS module does not validate     the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a     crash or other related issues.(CVE-2024-1151)

    net: prevent mss overflow in skb_segment()(CVE-2023-52435)

    RDMA/rxe: Return CQE error if invalid lkey was supplied(CVE-2021-47076)

    ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()(CVE-2023-52527)

    netfilter: nft_limit: avoid possible divide error in nft_limit_init(CVE-2021-46915)

    ipv6: sr: fix possible use-after-free and null-ptr-deref(CVE-2024-26735)

    netfilter: nf_tables: disallow anonymous set with timeout flag(CVE-2024-26642)

    drm/amdgpu: Fix a use-after-free(CVE-2021-47142)

    tcp: add sanity checks to rx zerocopy(CVE-2024-26640)

    USB: usbfs: Don't WARN about excessively large memory allocations(CVE-2021-47170)

    net: usb: fix memory leak in smsc75xx_bind(CVE-2021-47171)

    tracing: Ensure visibility when inserting an element into tracing_map(CVE-2024-26645)

    mld: fix panic in mld_newpack()(CVE-2021-47146)

    llc: Drop support for ETH_P_TR_802_2.(CVE-2024-26635)

    inet: read sk-sk_family once in inet_recv_error()(CVE-2024-26679)

    asix: fix uninit-value in asix_mdio_read()(CVE-2021-47101)

    mac80211: fix locking in ieee80211_start_ap error path(CVE-2021-47091)

    ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()(CVE-2024-26633)

    ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()(CVE-2024-26772)

    wifi: mac80211: fix race condition on enabling fast-xmit(CVE-2024-26779)

    NFS: fix an incorrect limit in filelayout_decode_layout()(CVE-2021-47168)

    net: ip_tunnel: prevent perpetual headroom growth(CVE-2024-26804)

    mm/swap: fix race when skipping swapcache(CVE-2024-26759)

    mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again(CVE-2024-26720)

    ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()(CVE-2024-26773)

    dm-crypt: don't modify the data when using authenticated encryption(CVE-2024-26763)

    netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter(CVE-2024-26805)

    net/tls: Fix use-after-free after the TLS device goes down and up(CVE-2021-47131)

    netfilter: nf_tables: disallow timeout for anonymous sets(CVE-2023-52620)

    vt: fix memory overlapping when deleting chars in the buffer(CVE-2022-48627)

    wifi: mac80211: fix potential key use-after-free(CVE-2023-52530)

    net: bridge: use DEV_STATS_INC()(CVE-2023-52578)

    RDMA/rxe: Clear all QP fields if creation failed(CVE-2021-47078)

    Input: appletouch - initialize work before device registration(CVE-2021-46932)

    In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has     a fence use-after-free.(CVE-2023-51042)

    An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause     a denial of service (panic) because input_set_capability mishandles the situation in which an event code     falls outside of a bitmap.(CVE-2022-48619)

    vsock/virtio: free queued packets when closing socket(CVE-2021-47024)

    net: fix use-after-free in tw_timer_handler(CVE-2021-46936)

    scsi: qedf: Add pointer checks in qedf_update_link_speed()(CVE-2021-47077)

    scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()(CVE-2021-47203)

    HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect(CVE-2023-52478)

    arp: Prevent overflow in arp_req_get().(CVE-2024-26733)

    RDMA/qedr: Fix qedr_create_user_qp error flow(CVE-2024-26743)

    RDMA/srpt: Support specifying the srpt_service_guid parameter(CVE-2024-26744)

    ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()(CVE-2024-26641)

    fs/proc: do_task_stat: use sig-stats_lock to gather the threads/children stats(CVE-2024-26686)

    ppp_async: limit MRU to 64K(CVE-2024-26675)

    create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero     bytes, and crash, because of a missing check for ubi-leb_size.(CVE-2024-25739)

    KVM: Stop looking for coalesced MMIO zones if the bus is destroyed(CVE-2021-47060)

    net/sched: act_mirred: don't override retval if we already lost the skb(CVE-2024-26739)

    HID: usbhid: fix info leak in hid_submit_ctrl(CVE-2021-46906)

    bpf: Fix hashtab overflow check on 32-bit arches(CVE-2024-26884)

    drm/amd/amdgpu: fix refcount leak(CVE-2021-47144)

    tracing: Restructure trace_clock_global() to never block(CVE-2021-46939)

    netfilter: nft_limit: reject configurations that cause integer overflow(CVE-2024-26668)

    ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()(CVE-2024-26894)

    ext4: fix double-free of blocks due to wrong extents moved_len(CVE-2024-26704)

    netfilter: nf_conntrack_h323: Add protection for bmp length out of range(CVE-2024-26851)

    vfio/pci: Lock external INTx masking ops(CVE-2024-26810)

    cfg80211: call cfg80211_stop_ap when switch from P2P_GO type(CVE-2021-47194)

    vfio/pci: Disable auto-enable of exclusive INTx IRQ(CVE-2024-27437)

    RDMA/srpt: Do not register event handler until srpt device is fully setup(CVE-2024-26872)

    cachefiles: fix memory leak in cachefiles_add_cache()(CVE-2024-26840)

    drm/amdgpu: Reset IH OVERFLOW_CLEAR bit(CVE-2024-26915)

    vfio/platform: Create persistent IRQ handlers(CVE-2024-26813)

    net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()(CVE-2024-26882)

    net/bnx2x: Prevent access to a freed page in page_pool(CVE-2024-26859)

    vfio/pci: Create persistent INTx handler(CVE-2024-26812)

    team: fix null-ptr-deref when team device type is changed(CVE-2023-52574)

    drm/amdgpu: validate the parameters of bo mapping operations more clearly(CVE-2024-26922)

    cifs: fix underflow in parse_server_interfaces()(CVE-2024-26828)

    do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak(CVE-2024-26901)

    scsi: core: Fix scsi_mode_sense() buffer length handling(CVE-2021-47182)

    A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in     drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue could be exploited to trigger a     denial of service.(CVE-2023-7042)

    net: qualcomm: rmnet: fix global oob in rmnet_policy(CVE-2024-26597)

    tun: avoid double free in tun_free_netdev(CVE-2021-47082)

    scsi: target: core: Add TMF to tmr_list handling(CVE-2024-26845)

    bpf: Fix stackmap overflow check on 32-bit arches(CVE-2024-26883)

    tcp: make sure init the accept_queue's spinlocks once(CVE-2024-26614)

    wifi: rt2x00: restart beacon queue when hardware reset(CVE-2023-52595)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9315 advisory.

    - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
    - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}
    - dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
    - dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508]     {CVE-2024-38629}
    - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
    - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
    - net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628]     {CVE-2024-43864}
    - net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
    - net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}
    - ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
    - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037]     {CVE-2024-38586}
    - KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197]     {CVE-2024-45005}
    - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Jose Ignacio Tornos     Martinez) [RHEL-55579] {CVE-2024-43879}
    - wifi: mac80211: fix NULL dereference at band check in starting tx ba session (Jose Ignacio Tornos     Martinez) [RHEL-56191] {CVE-2024-43911}
    - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (Jose Ignacio Tornos Martinez)     [RHEL-54805] {CVE-2024-43842}
    - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51559] {CVE-2024-42079}
    - x86/mm: Fix pti_clone_pgtable() alignment assumption (Rafael Aquini) [RHEL-57170] {CVE-2024-44965}
    - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (CKI Backport     Bot) [RHEL-47822] {CVE-2024-40919}
    - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44369]     {CVE-2024-36270}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
206615	OracleVM 3.4 : kernel-uek (OVMSA-2024-0011)	Nessus	OracleVM Local Security Checks	9/4/2024	1/15/2025	high
202379	Rocky Linux 8 : kernel-rt (RLSA-2024:4352)	Nessus	Rocky Linux Local Security Checks	7/15/2024	12/31/2024	high
202388	Rocky Linux 8 : kernel (RLSA-2024:4211)	Nessus	Rocky Linux Local Security Checks	7/15/2024	12/31/2024	high
205827	EulerOS Virtualization 2.10.0 : kernel (EulerOS-SA-2024-2120)	Nessus	Huawei Local Security Checks	8/19/2024	2/17/2025	high
205844	EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2024-2140)	Nessus	Huawei Local Security Checks	8/19/2024	2/17/2025	high
207620	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2024-2476)	Nessus	Huawei Local Security Checks	9/24/2024	9/25/2024	high
211575	Oracle Linux 9 : kernel (ELSA-2024-9315)	Nessus	Oracle Linux Local Security Checks	11/19/2024	11/19/2024	high
200960	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-1837)	Nessus	Huawei Local Security Checks	6/25/2024	10/2/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high