The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2022_7110 advisory.

    * A use-after-free in cls_route filter implementation may lead to privilege escalation (CVE-2022-2588)

    * Information leak in scsi_ioctl() (CVE-2022-0494)

    * A kernel-info-leak issue in pfkey_register (CVE-2022-1353)

    * RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)

    * Branch Type Confusion (non-retbleed) (CVE-2022-23825)

    * RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2022_7134 advisory.

    * kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation     (CVE-2022-2588)

    * kernel: information leak in  scsi_ioctl() (CVE-2022-0494)

    * Kernel: A kernel-info-leak issue in pfkey_register (CVE-2022-1353)

    * hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816,     CVE-2022-29900)

    * hw: cpu: AMD:  Branch Type Confusion (non-retbleed) (CVE-2022-23825)

    * hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote VMware ESXi host is version 6.5, 6.7 or 7.0 and is affected by multiple vulnerabilities, as follows:

  - Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their     retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack     return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent     conditions. (CVE-2022-29901)

  - Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an     authorized user to potentially enable information disclosure via local access. (CVE-2022-26373)

  - Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading     to information disclosure. (CVE-2022-23825)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
358741	Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2022_7110)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/2/2026	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	10/9/2026	high
357518	Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2022_7134)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/2/2026	high
192466	VMware ESXi 6.5 / 6.7 / 7.0 Multiple Vulnerabilities (VMSA-2022-0020)	Nessus	Misc.	3/22/2024	3/25/2024	medium

Detections

Analytics

Plugins Search

high

high

high

medium