The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5658 advisory.

    -----BEGIN PGP SIGNED MESSAGE-----     Hash: SHA512

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5658-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     April 13, 2024                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2023-2176 CVE-2023-6270 CVE-2023-7042 CVE-2023-28746                      CVE-2023-47233 CVE-2023-52429 CVE-2023-52434 CVE-2023-52435                      CVE-2023-52583 CVE-2023-52584 CVE-2023-52587 CVE-2023-52588                      CVE-2023-52589 CVE-2023-52593 CVE-2023-52594 CVE-2023-52595                      CVE-2023-52597 CVE-2023-52598 CVE-2023-52599 CVE-2023-52600                      CVE-2023-52601 CVE-2023-52602 CVE-2023-52603 CVE-2023-52604                      CVE-2023-52606 CVE-2023-52607 CVE-2023-52616 CVE-2023-52617                      CVE-2023-52618 CVE-2023-52619 CVE-2023-52620 CVE-2023-52621                      CVE-2023-52622 CVE-2023-52623 CVE-2023-52630 CVE-2023-52631                      CVE-2023-52632 CVE-2023-52633 CVE-2023-52635 CVE-2023-52637                      CVE-2023-52638 CVE-2023-52639 CVE-2023-52640 CVE-2023-52641                      CVE-2024-0340 CVE-2024-0841 CVE-2024-1151 CVE-2024-2201                      CVE-2024-22099 CVE-2024-23850 CVE-2024-23851 CVE-2024-24857                      CVE-2024-24858 CVE-2024-26581 CVE-2024-26582 CVE-2024-26583                      CVE-2024-26584 CVE-2024-26585 CVE-2024-26586 CVE-2024-26590                      CVE-2024-26593 CVE-2024-26600 CVE-2024-26601 CVE-2024-26602                      CVE-2024-26603 CVE-2024-26606 CVE-2024-26621 CVE-2024-26622                      CVE-2024-26625 CVE-2024-26626 CVE-2024-26627 CVE-2024-26629                      CVE-2024-26639 CVE-2024-26640 CVE-2024-26641 CVE-2024-26642                      CVE-2024-26643 CVE-2024-26651 CVE-2024-26654 CVE-2024-26659                      CVE-2024-26660 CVE-2024-26663 CVE-2024-26664 CVE-2024-26665                      CVE-2024-26667 CVE-2024-26671 CVE-2024-26673 CVE-2024-26675                      CVE-2024-26676 CVE-2024-26679 CVE-2024-26680 CVE-2024-26681                      CVE-2024-26684 CVE-2024-26685 CVE-2024-26686 CVE-2024-26687                      CVE-2024-26688 CVE-2024-26689 CVE-2024-26695 CVE-2024-26696                      CVE-2024-26697 CVE-2024-26698 CVE-2024-26700 CVE-2024-26702                      CVE-2024-26704 CVE-2024-26706 CVE-2024-26707 CVE-2024-26710                      CVE-2024-26712 CVE-2024-26714 CVE-2024-26715 CVE-2024-26717                      CVE-2024-26718 CVE-2024-26720 CVE-2024-26722 CVE-2024-26723                      CVE-2024-26726 CVE-2024-26727 CVE-2024-26731 CVE-2024-26733                      CVE-2024-26735 CVE-2024-26736 CVE-2024-26737 CVE-2024-26741                      CVE-2024-26742 CVE-2024-26743 CVE-2024-26744 CVE-2024-26745                      CVE-2024-26747 CVE-2024-26748 CVE-2024-26749 CVE-2024-26750                      CVE-2024-26751 CVE-2024-26752 CVE-2024-26753 CVE-2024-26754                      CVE-2024-26759 CVE-2024-26760 CVE-2024-26761 CVE-2024-26763                      CVE-2024-26764 CVE-2024-26765 CVE-2024-26766 CVE-2024-26769                      CVE-2024-26771 CVE-2024-26772 CVE-2024-26773 CVE-2024-26774                      CVE-2024-26775 CVE-2024-26776 CVE-2024-26777 CVE-2024-26778                      CVE-2024-26779 CVE-2024-26780 CVE-2024-26781 CVE-2024-26782                      CVE-2024-26787 CVE-2024-26788 CVE-2024-26789 CVE-2024-26790                      CVE-2024-26791 CVE-2024-26792 CVE-2024-26793 CVE-2024-26795                      CVE-2024-26798 CVE-2024-26800 CVE-2024-26801 CVE-2024-26802                      CVE-2024-26803 CVE-2024-26804 CVE-2024-26805 CVE-2024-26809                      CVE-2024-26810 CVE-2024-26811 CVE-2024-26812 CVE-2024-26813                      CVE-2024-26814 CVE-2024-26815 CVE-2024-26816 CVE-2024-27437

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.85-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmYaIyZfFIAAAAAALgAo     aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2     NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND     z0RN3A/9HbzpFDgN8uqJJVEHYgDh38m+h/8maSC2qL3G9ZPEckWX6MLBm+yBWcJ0     l/DesFcqc5Lh25bgWSO2jJ4TY4+dbTRFzFcJ/aTnbOKGoGCUQt0W9ZHFVwmkPKQN     tbZm1W1K3u/5dz8qow1ntsQuBarD0uDpImbhOZdrk+n88yKVB4lqAqNgel6EPt03     6SYAz/A3S1A3cgTEwz9udrA6du7yX/2vFwd9g4CO96VflHBgsHSnWAnmJZScZjIA     MT8jWGEXUw0zPg78w6AieLWhXTRe/bRxzhPRtYMOwXu1rX3wcPO8cbF9+hgbdj9w     VD+qKTP3PWzP7nxJ3KLRUf8NvHjOI5CvVJFR3UFVlOE+BtYO//POTZI9eUv9tU3x     vqXXTuHN+uXHkOtvRImx0Hf6FxjQbdh6IuvK6ipb/YH6IE2jZOw94AYi75UkDkgf     VBbQf7eShv81Z05tZQo1rFHQMYBbGjtpudJllQ8/zmbv+hM9WuL4NCkw6EQytFPU     51lVn/8Cqx1wt0IAmKr4FQ3hz/d766jgQvByFQWhqs1ZD7vQy2SxbzzTsKT1Zlha     GsRB5LNZXvIwZi/A4ls7+4YM4urbRljMFgU7sUaNl+nbhqcw0y/AoLcUGO+7vl6L     S/9Mmm8mnmXvTTYCgw9tuLo/wCP9UlF5PTEsZTQyslJYVxu/bvQ=     =IM/D
    -----END PGP SIGNATURE-----

    Reply to:
    debian-security-announce@lists.debian.org     Salvatore Bonaccorso (on-list)     Salvatore Bonaccorso (off-list)

    Prev by Date:
    [SECURITY] [DSA 5657-1] xorg-server security update

    Next by Date:
    [SECURITY] [DSA 5659-1] trafficserver security update

    Previous by thread:
    [SECURITY] [DSA 5657-1] xorg-server security update

    Next by thread:
    [SECURITY] [DSA 5659-1] trafficserver security update

    Index(es):

    Date     Thread

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2802-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600).
    - CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
    - CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
    - CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
    - CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
    - CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
    - CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
    - CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
    - CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
    - CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
    - CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
    - CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
    - CVE-2024-26691: KVM: arm64: Fix circular locking dependency (bsc#1222463).
    - CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438).
    - CVE-2024-26785: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779).
    - CVE-2024-26826: mptcp: fix data re-injection from stale subflow (bsc#1223010).
    - CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
    - CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
    - CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804).
    - CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
    - CVE-2024-27016: netfilter: flowtable: validate pppoe header (bsc#1223807).
    - CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
    - CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
    - CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
    - CVE-2024-27064: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740).
    - CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
    - CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
    - CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
    - CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).
    - CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604).
    - CVE-2024-35854: Fixed possible use-after-free during rehash (bsc#1224636).
    - CVE-2024-35890: gro: fix ownership transfer (bsc#1224516).
    - CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
    - CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
    - CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
    - CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
    - CVE-2024-35942: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589).
    - CVE-2024-36003: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544).
    - CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
    - CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
    - CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
    - CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted     (bsc#1225744).
    - CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717).
    - CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745).
    - CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752).
    - CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753).
    - CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757).
    - CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851).
    - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
    - CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783).
    - CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750).
    - CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757).
    - CVE-2024-38604: block: refine the EOF check in blkdev_iomap_begin (bsc#1226866).
    - CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883).
    - CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
    - CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103.
    - CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
    - CVE-2024-39474: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (bsc#1227434).
    - CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447).
    - CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
    - CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626).
    - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
    - CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
    - CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723)
    - CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755).
    - CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
    - CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
    - CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
    - CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763).
    - CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
    - CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()     (bsc#1227779).
    - CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
    - CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
    - CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
    - CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
    - CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
    - CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
    - CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
    - CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
    - CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
    - CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
    - CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
    - CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
    - CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
    - CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
    - CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
    - CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
    - CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()     (bsc#1227866).
    - CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
    - CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
    - CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
    - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
    - CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
    - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
    - CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel-generic installed on the remote host is prior to 5.15.160 / 5.15.160_smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-157-01 advisory.

    New kernel packages are available for Slackware 15.0 to fix security issues.

Tenable has extracted the preceding description block directly from the kernel-generic security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    IB/ipoib: Fix mcast list locking(CVE-2023-52587)

    netfilter: nftables: avoid overflows in nft_hash_buckets()(CVE-2021-46992)

    SUNRPC: Fix a suspicious RCU usage warning(CVE-2023-52623)

    l2tp: pass correct message length to ip6_append_data(CVE-2024-26752)

    net/sched: act_mirred: use the backlog for mirred ingress(CVE-2024-26740)

    RDMA/srp: Do not call scsi_done() from srp_abort()(CVE-2023-52515)

    hwrng: core - Fix page fault dead lock on mmap-ed hwrng(CVE-2023-52615)

    KVM: s390: fix setting of fpc register(CVE-2023-52597)

    In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race     condition between a nonblocking atomic commit and a driver unload.(CVE-2023-51043)

    uio: Fix use-after-free in uio_open(CVE-2023-52439)

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to     achieve local privilege escalation.The nft_verdict_init() function allows positive values as drop error     within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when     NF_DROP is issued with a drop error which resembles NF_ACCEPT.(CVE-2024-1086)

    ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure(CVE-2021-46953)

    drivers/amd/pm: fix a use-after-free in kv_parse_power_table(CVE-2023-52469)

    KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU(CVE-2021-47061)

    KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache(CVE-2024-26598)

    i2c: validate user data in compat ioctl(CVE-2021-46934)

    parisc: Clear stale IIR value on instruction access rights trap(CVE-2021-46928)

    net: hso: fix null-ptr-deref during tty device unregistration(CVE-2021-46904)

    net: hso: fix NULL-deref on disconnect regression(CVE-2021-46905)

    usb: hub: Guard against accesses to uninitialized BOS descriptors(CVE-2023-52477)

    EDAC/thunderx: Fix possible out-of-bounds string access(CVE-2023-52464)

    cifs: Return correct error code from smb2_get_enc_key(CVE-2021-46960)

    openvswitch: fix stack OOB read while fragmenting IPv4 packets(CVE-2021-46955)

    ceph: fix deadlock or deadcode of misusing dget()(CVE-2023-52583)

    ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook(CVE-2021-47006)

    block: add check that partition length needs to be aligned with block size(CVE-2023-52458)

    locking/qrwlock: Fix ordering in queued_write_lock_slowpath()(CVE-2021-46921)

    The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can     be consumed easily, e.g., leading to a denial of service (network is unreachable errors) when IPv6 packets     are sent in a loop via a raw socket.(CVE-2023-52340)

    pstore/ram: Fix crash when setting number of cpus to an odd number(CVE-2023-52619)

    NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds(CVE-2021-46952)

    ext4: always panic when errors=panic is specified(CVE-2021-46945)

    net: fix possible store tearing in neigh_periodic_work()(CVE-2023-52522)

    net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send(CVE-2021-47013)

    bnxt_en: Fix RX consumer index logic in the error path.(CVE-2021-47015)

    net: Only allow init netns to set default tcp cong to a restricted algo(CVE-2021-47010)

    net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg(CVE-2023-52528)

    A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan()     function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or     denial of service issue.(CVE-2024-24855)

    ext4: avoid online resizing failures due to oversized flex bg(CVE-2023-52622)

    nvme-loop: fix memory leak in nvme_loop_create_ctrl()(CVE-2021-47074)

    userfaultfd: release page in error path to avoid BUG_ON(CVE-2021-46988)

    A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This     flaw allows a local user to cause an information leak problem while freeing the old quota file names     before a potential failure, leading to a use-after-free.(CVE-2024-0775)

    Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows     Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from     5.10.0-60.18.0 before 5.10.0-183.0.0.(CVE-2021-33631)

    NFS: Fix an Oopsable condition in __nfs_pageio_add_request()(CVE-2021-47167)

    crypto: scomp - fix req-dst buffer overflow(CVE-2023-52612)

    sched/membarrier: reduce the ability to hammer on sys_membarrier(CVE-2024-26602)

    Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid,     raid5 modules) allows Forced Integer Overflow.(CVE-2024-23307)

    dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails(CVE-2021-46938)

    NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()(CVE-2021-47166)

    drm: Don't unref the same fb many times by mistake due to deadlock handling(CVE-2023-52486)

    A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval()     function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes     are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every     iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local     user to cause a denial of service or potentially break NetFilter functionality.(CVE-2024-0607)

    blk-mq: fix IO hang from sbitmap wakeup race(CVE-2024-26671)

    i2c: Fix a potential use after free(CVE-2019-25162)

    drm: bridge/panel: Cleanup connector on bridge detach(CVE-2021-47063)

    bus: qcom: Put child node before return(CVE-2021-47054)

    A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a     recursive operation of code push recursively calls into the code block. The OVS module does not validate     the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a     crash or other related issues.(CVE-2024-1151)

    net: prevent mss overflow in skb_segment()(CVE-2023-52435)

    RDMA/rxe: Return CQE error if invalid lkey was supplied(CVE-2021-47076)

    ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()(CVE-2023-52527)

    netfilter: nft_limit: avoid possible divide error in nft_limit_init(CVE-2021-46915)

    ipv6: sr: fix possible use-after-free and null-ptr-deref(CVE-2024-26735)

    netfilter: nf_tables: disallow anonymous set with timeout flag(CVE-2024-26642)

    drm/amdgpu: Fix a use-after-free(CVE-2021-47142)

    tcp: add sanity checks to rx zerocopy(CVE-2024-26640)

    USB: usbfs: Don't WARN about excessively large memory allocations(CVE-2021-47170)

    net: usb: fix memory leak in smsc75xx_bind(CVE-2021-47171)

    tracing: Ensure visibility when inserting an element into tracing_map(CVE-2024-26645)

    mld: fix panic in mld_newpack()(CVE-2021-47146)

    llc: Drop support for ETH_P_TR_802_2.(CVE-2024-26635)

    inet: read sk-sk_family once in inet_recv_error()(CVE-2024-26679)

    asix: fix uninit-value in asix_mdio_read()(CVE-2021-47101)

    mac80211: fix locking in ieee80211_start_ap error path(CVE-2021-47091)

    ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()(CVE-2024-26633)

    ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()(CVE-2024-26772)

    wifi: mac80211: fix race condition on enabling fast-xmit(CVE-2024-26779)

    NFS: fix an incorrect limit in filelayout_decode_layout()(CVE-2021-47168)

    net: ip_tunnel: prevent perpetual headroom growth(CVE-2024-26804)

    mm/swap: fix race when skipping swapcache(CVE-2024-26759)

    mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again(CVE-2024-26720)

    ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()(CVE-2024-26773)

    dm-crypt: don't modify the data when using authenticated encryption(CVE-2024-26763)

    netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter(CVE-2024-26805)

    net/tls: Fix use-after-free after the TLS device goes down and up(CVE-2021-47131)

    netfilter: nf_tables: disallow timeout for anonymous sets(CVE-2023-52620)

    vt: fix memory overlapping when deleting chars in the buffer(CVE-2022-48627)

    wifi: mac80211: fix potential key use-after-free(CVE-2023-52530)

    net: bridge: use DEV_STATS_INC()(CVE-2023-52578)

    RDMA/rxe: Clear all QP fields if creation failed(CVE-2021-47078)

    Input: appletouch - initialize work before device registration(CVE-2021-46932)

    In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has     a fence use-after-free.(CVE-2023-51042)

    An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause     a denial of service (panic) because input_set_capability mishandles the situation in which an event code     falls outside of a bitmap.(CVE-2022-48619)

    vsock/virtio: free queued packets when closing socket(CVE-2021-47024)

    net: fix use-after-free in tw_timer_handler(CVE-2021-46936)

    scsi: qedf: Add pointer checks in qedf_update_link_speed()(CVE-2021-47077)

    scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()(CVE-2021-47203)

    HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect(CVE-2023-52478)

    arp: Prevent overflow in arp_req_get().(CVE-2024-26733)

    RDMA/qedr: Fix qedr_create_user_qp error flow(CVE-2024-26743)

    RDMA/srpt: Support specifying the srpt_service_guid parameter(CVE-2024-26744)

    ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()(CVE-2024-26641)

    fs/proc: do_task_stat: use sig-stats_lock to gather the threads/children stats(CVE-2024-26686)

    ppp_async: limit MRU to 64K(CVE-2024-26675)

    create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero     bytes, and crash, because of a missing check for ubi-leb_size.(CVE-2024-25739)

    KVM: Stop looking for coalesced MMIO zones if the bus is destroyed(CVE-2021-47060)

    net/sched: act_mirred: don't override retval if we already lost the skb(CVE-2024-26739)

    HID: usbhid: fix info leak in hid_submit_ctrl(CVE-2021-46906)

    bpf: Fix hashtab overflow check on 32-bit arches(CVE-2024-26884)

    drm/amd/amdgpu: fix refcount leak(CVE-2021-47144)

    tracing: Restructure trace_clock_global() to never block(CVE-2021-46939)

    netfilter: nft_limit: reject configurations that cause integer overflow(CVE-2024-26668)

    ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()(CVE-2024-26894)

    ext4: fix double-free of blocks due to wrong extents moved_len(CVE-2024-26704)

    netfilter: nf_conntrack_h323: Add protection for bmp length out of range(CVE-2024-26851)

    vfio/pci: Lock external INTx masking ops(CVE-2024-26810)

    cfg80211: call cfg80211_stop_ap when switch from P2P_GO type(CVE-2021-47194)

    vfio/pci: Disable auto-enable of exclusive INTx IRQ(CVE-2024-27437)

    RDMA/srpt: Do not register event handler until srpt device is fully setup(CVE-2024-26872)

    cachefiles: fix memory leak in cachefiles_add_cache()(CVE-2024-26840)

    drm/amdgpu: Reset IH OVERFLOW_CLEAR bit(CVE-2024-26915)

    vfio/platform: Create persistent IRQ handlers(CVE-2024-26813)

    net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()(CVE-2024-26882)

    net/bnx2x: Prevent access to a freed page in page_pool(CVE-2024-26859)

    vfio/pci: Create persistent INTx handler(CVE-2024-26812)

    team: fix null-ptr-deref when team device type is changed(CVE-2023-52574)

    drm/amdgpu: validate the parameters of bo mapping operations more clearly(CVE-2024-26922)

    cifs: fix underflow in parse_server_interfaces()(CVE-2024-26828)

    do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak(CVE-2024-26901)

    scsi: core: Fix scsi_mode_sense() buffer length handling(CVE-2021-47182)

    A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in     drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue could be exploited to trigger a     denial of service.(CVE-2023-7042)

    net: qualcomm: rmnet: fix global oob in rmnet_policy(CVE-2024-26597)

    tun: avoid double free in tun_free_netdev(CVE-2021-47082)

    scsi: target: core: Add TMF to tmr_list handling(CVE-2024-26845)

    bpf: Fix stackmap overflow check on 32-bit arches(CVE-2024-26883)

    tcp: make sure init the accept_queue's spinlocks once(CVE-2024-26614)

    wifi: rt2x00: restart beacon queue when hardware reset(CVE-2023-52595)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
193309	Debian dsa-5658 : affs-modules-6.1.0-11-4kc-malta-di - security update	Nessus	Debian Local Security Checks	4/13/2024	3/17/2025	high
205163	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2802-1)	Nessus	SuSE Local Security Checks	8/8/2024	9/9/2024	high
200129	Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2024-157-01)	Nessus	Slackware Local Security Checks	6/5/2024	6/6/2024	high
207620	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2024-2476)	Nessus	Huawei Local Security Checks	9/24/2024	9/25/2024	high

Detections

Analytics

Plugins Search

high

high

high

high