The version of kernel installed on the remote host is prior to 4.14.231-173.360. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1627 advisory.

    A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel     before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.
    (CVE-2019-19060)

    A bypass was found for the Spectre v1 hardening in the eBPF engine of the Linux kernel. The code in the     kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic in various     cases, including cases of different branches with different state or limits to sanitize, leading to side-     channel attacks. (CVE-2019-7308)

    A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free     which might lead to privilege escalations. (CVE-2020-25670)

    A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-     free which might lead to privilege escalations. (CVE-2020-25671)

    A memory leak vulnerability was found in Linux kernel in llcp_sock_connect. (CVE-2020-25672)

    A flaw was found in the Linux kernels eBPF verification code. By default accessing the eBPF verifier is     only accessible to privileged users with CAP_SYS_ADMIN. A flaw that triggers Integer underflow when     restricting speculative pointer arithmetic allows unprivileged local users to leak the content of kernel     memory. The highest threat from this vulnerability is to data confidentiality. (CVE-2020-27171)

    A flaw was found in the Linux kernel. The rtw_wx_set_scan driver allows writing beyond the end of the
    ->ssid[] array. The highest threat from this vulnerability is to data confidentiality and integrity as     well system availability. (CVE-2021-28660)

    The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use     uninitialized or stale values. This initialization went too far and may under certain conditions also     overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking     persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died,     leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable.
    XSA-365 was classified to affect versions back to at least 3.11. (CVE-2021-28688)

    A race condition flaw was found in get_old_root in fs/btrfs/ctree.c in the Linux kernel in btrfs file-     system. This flaw allows a local attacker with a special user privilege to cause a denial of service due     to not locking an extent buffer before a cloning operation. The highest threat from this vulnerability is     to system availability. (CVE-2021-28964)

    A flaw in the Linux kernels implementation of the RPA PCI Hotplug driver for power-pc.  A user with     permissions to write to the sysfs settings for this driver can trigger a buffer overflow when writing a     new device name to the driver from userspace, overwriting data in the kernel's stack. (CVE-2021-28972)

    A flaw was found in the Linux kernels eBPF implementation. By default, accessing the eBPF verifier is only     accessible to privileged users with CAP_SYS_ADMIN.   A local user with the ability to insert eBPF     instructions can abuse a flaw in eBPF to corrupt memory. The highest threat from this vulnerability is to     confidentiality, integrity, as well as system availability. (CVE-2021-29154)

    A flaw was found in the Linux kernel. The usbip driver allows attackers to cause a denial of service (GPF)     because the stub-up sequence has race conditions during an update of the local and shared status. The     highest threat from this vulnerability is to system availability. (CVE-2021-29265)

    A flaw was found in the Linux kernel. This flaw allows attackers to obtain sensitive information from     kernel memory because of a partially uninitialized data structure. The highest threat from this     vulnerability is to confidentiality. (CVE-2021-29647)

    A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice     into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest     threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    (CVE-2021-3483)

    A flaw was discovered in processing setsockopt IPT_SO_SET_REPLACE (or IP6T_SO_SET_REPLACE) for 32 bit     processes on 64 bit systems. This flaw will allow local user to gain privileges or cause a DoS through     user name space. This action is usually restricted to root-privileged users but can also be leveraged if     the kernel is compiled with CONFIG_USER_NS and CONFIG_NET_NS and the user is granted elevated privileges.
    (CVE-2021-22555)

    CVE-2021-22555 has been added after the original release, however it was fixed in the patch from     2021-04-20.

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

CVE-2018-20669: Missing access control checks in ioctl of gpu/drm/i915 driver were fixed which might have lead to information leaks.
(bnc#1122971).

CVE-2019-3459, CVE-2019-3460: The Bluetooth stack suffered from two remote information leak vulnerabilities in the code that handles incoming L2cap configuration packets (bsc#1120758).

CVE-2019-3819: A flaw was found in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ('root') can cause a system lock up and a denial of service. (bnc#1123161).

CVE-2019-6974: kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandled reference counting because of a race condition, leading to a use-after-free (bnc#1124728 ).

CVE-2019-7221: Fixed a use-after-free vulnerability in the KVM hypervisor related to the emulation of a preemption timer, allowing an guest user/process to crash the host kernel. (bsc#1124732).

CVE-2019-7222: Fixed an information leakage in the KVM hypervisor related to handling page fault exceptions, which allowed a guest user/process to use this flaw to leak the host's stack memory contents to a guest (bsc#1124735).

CVE-2019-7308: kernel/bpf/verifier.c performed undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks (bnc#1124055).

CVE-2019-8912: af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr (bnc#1125907).

CVE-2019-8980: A memory leak in the kernel_read_file function in fs/exec.c allowed attackers to cause a denial of service (memory consumption) by triggering vfs_read failures (bnc#1126209).

CVE-2019-9213: expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bnc#1128166).

CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
148919	Amazon Linux 2 : kernel (ALAS-2021-1627)	Nessus	Amazon Linux Local Security Checks	2021/4/22	2026/2/24	high
123413	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:0765-1) (Spectre)	Nessus	SuSE Local Security Checks	2019/3/27	2022/5/20	high

检测

插件搜索

high

high