According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In the Linux kernel 5.0.21, mounting a crafted ext4     filesystem image, performing some operations, and     unmounting can lead to a use-after-free in     ext4_put_super in fs/ext4/super.c, related to     dump_orphan_list in fs/ext4/super.c.(CVE-2019-19447 )

  - In the Linux kernel 5.4.0-rc2, there is a     use-after-free (read) in the __blk_add_trace function     in kernel/trace/blktrace.c (which is used to fill out a     blk_io_trace structure and place it in a per-cpu     sub-buffer).(CVE-2019-19768)

  - ext4_protect_reserved_inode in fs/ext4/block_validity.c     in the Linux kernel through 5.5.3 allows attackers to     cause a denial of service (soft lockup) via a crafted     journal size.(CVE-2020-8992)

  - An issue was discovered in the Linux kernel through     5.5.6. set_fdc in drivers/block/floppy.c leads to a     wait_til_ready out-of-bounds read because the FDC index     is not checked for errors before assigning it, aka     CID-2e90ca68b0d2.(CVE-2020-9383)

  - In the Linux kernel before 5.3.11, sound/core/timer.c     has a use-after-free caused by erroneous code     refactoring, aka CID-e7af6307a8a5. This is related to     snd_timer_open and snd_timer_close_locked. The timeri     variable was originally intended to be for a newly     created timer instance, but was used for a different     purpose after refactoring.(CVE-2019-19807)

  - Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor     to access sensitive L1 resources(CVE-2020-2732)

  - There is a use-after-free vulnerability in the Linux     kernel through 5.5.2 in the n_tty_receive_buf_common     function in drivers/tty/n_tty.c.(CVE-2020-8648)

  - There is a use-after-free vulnerability in the Linux     kernel through 5.5.2 in the vgacon_invert_region     function in     drivers/video/console/vgacon.c.(CVE-2020-8649)

  - There is a use-after-free vulnerability in the Linux     kernel through 5.5.2 in the vc_do_resize function in     drivers/tty/vt/vt.c.(CVE-2020-8647)

  - fs/namei.c in the Linux kernel before 5.5 has a     may_create_in_sticky use-after-free, which allows local     users to cause a denial of service (OOPS) or possibly     obtain sensitive information from kernel memory, aka     CID-d0cb50185ae9. One attack vector may be an open     system call for a UNIX domain socket, if the socket is     being moved to a new parent directory and its old     parent directory is being removed.(CVE-2020-8428)

  - In a Linux KVM guest that has PV TLB enabled, a process     in the guest kernel may be able to read memory     locations from another process in the same guest. This     problem is limit to the host running linux kernel 4.10     with a guest running linux kernel 4.16 or later. The     problem mainly affects AMD processors but Intel CPUs     cannot be ruled out.(CVE-2019-3016)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4419-1 advisory.

    It was discovered that a race condition existed in the Precision Time Protocol (PTP) implementation in the     Linux kernel, leading to a use-after- free vulnerability. A local attacker could possibly use this to     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-10690)

    Matthew Sheets discovered that the SELinux network label handling implementation in the Linux kernel could     be coerced into de-referencing a NULL pointer. A remote attacker could use this to cause a denial of     service (system crash). (CVE-2020-10711)

    It was discovered that the SCSI generic (sg) driver in the Linux kernel did not properly handle certain     error conditions correctly. A local privileged attacker could use this to cause a denial of service     (system crash). (CVE-2020-12770)

    It was discovered that the USB Gadget device driver in the Linux kernel did not validate arguments passed     from configfs in some situations. A local attacker could possibly use this to cause a denial of service     (system crash) or possibly expose sensitive information. (CVE-2020-13143)

    Shijie Luo discovered that the ext4 file system implementation in the Linux kernel did not properly check     for a too-large journal size. An attacker could use this to construct a malicious ext4 image that, when     mounted, could cause a denial of service (soft lockup). (CVE-2020-8992)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001506 advisory.

    ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers     to cause a denial of service (soft lockup) via a crafted journal size.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4342-1 advisory.

    Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades     for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of     service (system crash) or execute arbitrary code. (CVE-2020-11884)

    It was discovered that the Intel Wi-Fi driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash).
    (CVE-2019-16234)

    Tristan Madani discovered that the block I/O tracing implementation in the Linux kernel contained a race     condition. A local attacker could use this to cause a denial of service (system crash) or possibly expose     sensitive information. (CVE-2019-19768)

    It was discovered that the vhost net driver in the Linux kernel contained a stack buffer overflow. A local     attacker with the ability to perform ioctl() calls on /dev/vhost-net could use this to cause a denial of     service (system crash). (CVE-2020-10942)

    It was discovered that the virtual terminal implementation in the Linux kernel contained a race condition.
    A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive     information. (CVE-2020-8648)

    Shijie Luo discovered that the ext4 file system implementation in the Linux kernel did not properly check     for a too-large journal size. An attacker could use this to construct a malicious ext4 image that, when     mounted, could cause a denial of service (soft lockup). (CVE-2020-8992)

    Jordy Zomer discovered that the floppy driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash) or     possibly expose sensitive information. (CVE-2020-9383)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4344-1 advisory.

    It was discovered that the Intel Wi-Fi driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash).
    (CVE-2019-16234)

    It was discovered that the Intel WiMAX 2400 driver in the Linux kernel did not properly deallocate memory     in certain situations. A local attacker could use this to cause a denial of service (kernel memory     exhaustion). (CVE-2019-19051)

    Tristan Madani discovered that the block I/O tracing implementation in the Linux kernel contained a race     condition. A local attacker could use this to cause a denial of service (system crash) or possibly expose     sensitive information. (CVE-2019-19768)

    It was discovered that the vhost net driver in the Linux kernel contained a stack buffer overflow. A local     attacker with the ability to perform ioctl() calls on /dev/vhost-net could use this to cause a denial of     service (system crash). (CVE-2020-10942)

    It was discovered that the virtual terminal implementation in the Linux kernel contained a race condition.
    A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive     information. (CVE-2020-8648)

    Shijie Luo discovered that the ext4 file system implementation in the Linux kernel did not properly check     for a too-large journal size. An attacker could use this to construct a malicious ext4 image that, when     mounted, could cause a denial of service (soft lockup). (CVE-2020-8992)

    Jordy Zomer discovered that the floppy driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash) or     possibly expose sensitive information. (CVE-2020-9383)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The SUSE Linux Enterprise 15 kernel was updated receive various security and bugfixes.

The following security bugs were fixed :

CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).

CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111).

CVE-2020-8992: Fixed an issue which could have allowed attackers to cause a soft lockup via a crafted journal size (bsc#1164069).

CVE-2020-8834: Fixed a stack corruption which could have lead to kernel panic (bsc#1168276).

CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).

CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).

CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).

CVE-2020-8428: Fixed a use-after-free which could have allowed local users to cause a denial of service (bsc#1162109).

CVE-2020-7053: Fixed a use-after-free in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c (bsc#1160966).

CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).

CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).

CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).

CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).

CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).

CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).

CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).

CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).

CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).

CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).

CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).

CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).

CVE-2020-11609: Fixed a NULL pointer dereference due to improper handling of descriptors (bsc#1168854).

CVE-2020-11608: Fixed a NULL pointer dereferences via a crafted USB (bsc#1168829).

CVE-2020-11494: Fixed an issue which could have allowed attackers to read uninitialized can_frame data (bsc#1168424).

CVE-2020-10942: Fixed a kernel stack corruption via crafted system calls (bsc#1167629).

CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).

CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook where it was assumed that an skb would only contain a single netlink message (bsc#1171189).

CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).

CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).

CVE-2020-10711: Fixed a NULL pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).

CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).

CVE-2019-9458: Fixed a use after free due to a race condition which could have led to privilege escalation of privilege (bsc#1168295).

CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).

CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bsc#1120386).

CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could have resulted in a denial of service (bsc#1172453).

CVE-2019-20810: Fixed a memory leak in due to not calling of snd_card_free (bsc#1172458).

CVE-2019-20096: Fixed a memory leak in __feat_register_sp() in net/dccp/feat.c, which could have caused denial of service (bsc#1159908).

CVE-2019-20095: Fixed an improper error-handling cases that did not free allocated hostcmd memory which was causing memory leak (bsc#1159909).

CVE-2019-20054: Fixed a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links (bsc#1159910).

CVE-2019-19966: Fixed a use-after-free in cpia2_exit() which could have caused denial of service (bsc#1159841).

CVE-2019-19965: Fixed a NULL pointer dereference, due to mishandling of port disconnection during discovery (bsc#1159911).

CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).

CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bsc#1159285).

CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).

CVE-2019-19447: Fixed a user after free via a crafted ext4 filesystem image (bsc#1158819).

CVE-2019-19319: Fixed a user after free when a large old_size value is used in a memset call (bsc#1158021).

CVE-2019-19318: Fixed a use after free via a crafted btrfs image (bsc#1158026).

CVE-2019-19054: Fixed a memory leak in the cx23888_ir_probe() which could have allowed attackers to cause a denial of service (bsc#1161518).

CVE-2019-19045: Fixed a memory leak in which could have allowed attackers to cause a denial of service (bsc#1161522).

CVE-2019-19036: Fixed a NULL pointer dereference in btrfs_root_node (bsc#1157692).

CVE-2019-16994: Fixed a memory leak which might have caused denial of service (bsc#1161523).

CVE-2019-14897: Fixed a stack overflow in Marvell Wifi Driver (bsc#1157155).

CVE-2019-14896: Fixed a heap overflow in Marvell Wifi Driver (bsc#1157157).

CVE-2019-14615: Fixed an improper control flow in certain data structures which could have led to information disclosure (bsc#1160195).

CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
134784	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1292)	Nessus	Huawei Local Security Checks	2020/3/23	2024/3/21	high
138325	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4419-1)	Nessus	Ubuntu Local Security Checks	2020/7/9	2024/8/29	medium
290893	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001506)	Nessus	Unity Linux Local Security Checks	2026/1/16	2026/1/16	medium
134559	openSUSE Security Update : the Linux Kernel (openSUSE-2020-336)	Nessus	SuSE Local Security Checks	2020/3/13	2024/3/22	critical
136085	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4342-1)	Nessus	Ubuntu Local Security Checks	2020/4/29	2024/8/27	high
136087	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4344-1)	Nessus	Ubuntu Local Security Checks	2020/4/29	2024/8/27	high
138272	SUSE SLES15 Security Update : kernel (SUSE-SU-2020:1663-1)	Nessus	SuSE Local Security Checks	2020/7/9	2024/3/1	critical

检测

插件搜索

high

medium

medium

critical

high

high

critical