The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0145 for details.

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support and Red Hat Enterprise Linux 6.5 Telco Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es) :

* A race condition flaw was found in the N_HLDC Linux kernel driver when accessing n_hdlc.tbuf list that can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device could use this flaw to increase their privileges on the system.
(CVE-2017-2636, Important)

Red Hat would like to thank Alexander Popov for reporting this issue.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1639:03 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system.  The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2016-7910     Use-after-free vulnerability in the disk_seqf_stop function in     block/genhd.c in the Linux kernel before 4.7.1 allows local users to     gain privileges by leveraging the execution of a certain stop     operation even if the corresponding start operation had failed.
    CVE-2017-2636     Race condition in drivers/tty/n_hdlc.c in the Linux kernel through     4.10.1 allows local users to gain privileges or cause a denial of     service (double free) by setting the HDLC line discipline.
    Fixed bugs:
    * Previously, Chelsio firmware included an incorrectly-formatted firmware bin file. As a consequence, the     firmware could not be flashed. This update provides a firmware bin file that is formatted correctly. As a     result, Chelsio firmware can now be flashed successfully.
    * When multiple simultaneous processes attempted to read from the /proc/stat file, spinlock overhead was     generated on Non-Uniform Memory Access (NUMA) systems. Consequently, a large amount of CPU was consumed.
    With this update, the underlying source code has been fixed to avoid taking spinlock when the interrupt     line does not exist. As a result, the spinlock overhead is now generated less often, and multiple     simultaneous processes can now read /proc/stat without consuming a large amount of CPU.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003385 advisory.

    Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain     privileges or cause a denial of service (double free) by setting the HDLC line discipline.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is an update containing several CVE and other bug fixes,

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The SUSE Linux Enterprise 11 SP3 kernel was updated to fix the following security bug :

  - CVE-2017-2636: A race condition in the n_hdlc tty Linux     kernel driver (drivers/tty/n_hdlc.c) could have been     exploited to gain a local privilege escalation     (bnc#1027565)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - A race condition flaw was found in the N_HLDC Linux     kernel driver when accessing n_hdlc.tbuf list that can     lead to double free. A local, unprivileged user able to     set the HDLC line discipline on the tty device could use     this flaw to increase their privileges on the system.
    (CVE-2017-2636, Important)

  - A flaw was found in the Linux kernel's implementation of     seq_file where a local attacker could manipulate memory     in the put() function pointer. This could lead to memory     corruption and possible privileged escalation.
    (CVE-2016-7910, Moderate)

Bug Fix(es) :

  - Previously, Chelsio firmware included an     incorrectly-formatted firmware bin file. As a     consequence, the firmware could not be flashed. This     update provides a firmware bin file that is formatted     correctly. As a result, Chelsio firmware can now be     flashed successfully.

  - When multiple simultaneous processes attempted to read     from the /proc/stat file, spinlock overhead was     generated on Non-Uniform Memory Access (NUMA) systems.
    Consequently, a large amount of CPU was consumed. With     this update, the underlying source code has been fixed     to avoid taking spinlock when the interrupt line does     not exist. As a result, the spinlock overhead is now     generated less often, and multiple simultaneous     processes can now read /proc/stat without consuming a     large amount of CPU.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1125 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * A race condition flaw was found in the N_HLDC Linux kernel driver when accessing n_hdlc.tbuf list that     can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device     could use this flaw to increase their privileges on the system. (CVE-2017-2636, Important)

    Red Hat would like to thank Alexander Popov for reporting this issue.

    Bug Fix(es):

    * Previously, memory allocation in the libceph kernel module did not work correctly. Consequently, the     file system on a RADOS Block Device(RBD) could become unresponsive in the situations under high memory     pressure. With this update, the underlying source code has been fixed, and the file system no longer hangs     in the described scenario. (BZ#1418314)

    * Previously, the mpt3sas driver incorrectly checked the Transport Layer Retries (TLR) state even on     Redundant Array Of Independent Discs (RAID) devices. Consequently, a kernel panic occurred when mpt3sas     attempted to read from the RAID devices. With this update, mpt3sas has been fixed to check the TLR state     only for non-RAID devices, and the kernel no longer panics under the described circumstances. (BZ#1427453)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
102774	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0145) (Stack Clash)	Nessus	OracleVM Local Security Checks	8/25/2017	11/25/2025	critical
100239	RHEL 6 : kernel (RHSA-2017:1232)	Nessus	Red Hat Local Security Checks	5/17/2017	12/18/2025	high
289277	MiracleLinux 4 : kernel-2.6.32-696.1.1.el6 (AXSA:2017-1639:03)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/19/2026	high
287684	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003385)	Nessus	Unity Linux Local Security Checks	1/15/2026	1/16/2026	high
97602	Ubuntu 12.04 LTS : linux, linux-ti-omap4 vulnerability (USN-3218-1)	Nessus	Ubuntu Local Security Checks	3/8/2017	12/30/2025	high
97677	Fedora 25 : kernel (2017-387ff46a66)	Nessus	Fedora Local Security Checks	3/13/2017	12/30/2025	high
99181	SUSE SLES11 Security Update : kernel (SUSE-SU-2017:0913-1)	Nessus	SuSE Local Security Checks	4/4/2017	12/26/2025	high
99301	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20170411)	Nessus	Scientific Linux Local Security Checks	4/12/2017	12/26/2025	high
99683	RHEL 7 : kernel (RHSA-2017:1125)	Nessus	Red Hat Local Security Checks	4/26/2017	11/4/2024	high

Detections

Analytics

Plugins Search

critical

high

high

high

high

high

high

high

high