The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2169 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32     GB from vcpu->run (CVE-2021-3501)

    * kernel: nitro_enclaves stale file descriptors on failed usercopy (CVE-2021-3543)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update RT source tree to the RHEL-8.4.z0 source tree (BZ#1957489)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2522 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-     virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed     using a special build of Red Hat Enterprise Linux with only the packages required to host virtual     machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing     administrative tasks.

    Security Fix(es):

    * glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits     to 32 bits (CVE-2021-27219)

    * kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32     GB from vcpu->run (CVE-2021-3501)

    * polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (CVE-2021-3560)

    * hw: vt-d related privilege escalation (CVE-2020-24489)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Previously, systemtap dependencies were not included in the RHV-H channel. Therefore, systemtap could     not be installed.
    In this release, the systemtap dependencies have been included in the channel, resolving the issue.
    (BZ#1903997)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:2168 advisory.

  - A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API,     is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-     of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
    (CVE-2021-3501)

  - A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs     forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to     crash the system or escalate their privileges on the system. (CVE-2021-3543)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 21.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4977-1 advisory.

    Kiyin () discovered that the NFC LLCP protocol implementation in the Linux kernel contained a     reference counting error. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2020-25670)

    Kiyin () discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly     deallocate memory in certain error situations. A local attacker could use this to cause a denial of     service (memory exhaustion). (CVE-2020-25671, CVE-2020-25672)

    Kiyin () discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly     handle error conditions in some situations, leading to an infinite loop. A local attacker could use this     to cause a denial of service. (CVE-2020-25673)

    Piotr Krysiuk and Benedict Schlueter discovered that the eBPF implementation in the Linux kernel performed     out of bounds speculation on pointer arithmetic. A local attacker could use this to expose sensitive     information. (CVE-2021-29155)

    Reiji Watanabe discovered that the KVM VMX implementation in the Linux kernel did not properly prevent     user space from tampering with an array index value, leading to a potential out-of-bounds write. A local     attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2021-3501)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2168 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32     GB from vcpu->run (CVE-2021-3501)

    * kernel: nitro_enclaves stale file descriptors on failed usercopy (CVE-2021-3543)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * OVS mistakenly using local IP as tun_dst for VXLAN packets (?) (BZ#1944667)

    * Selinux: The task calling security_set_bools() deadlocks with itself when it later calls     selinux_audit_rule_match(). (BZ#1945123)

    * [mlx5] tc flower mpls match options does not work (BZ#1952061)

    * mlx5: missing patches for ct.rel (BZ#1952062)

    * CT HWOL: with OVN/OVS, intermittently, load balancer hairpin TCP packets get dropped for seconds in a     row (BZ#1952065)

    * [Lenovo 8.3 bug] Blackscreen after clicking on Settings icon from top-right corner. (BZ#1952900)

    * RHEL 8.x missing uio upstream fix. (BZ#1952952)

    * Turbostat doesn't show any measured data on AMD Milan (BZ#1952987)

    * P620 no sound from front headset jack (BZ#1954545)

    * RHEL kernel 8.2 and higher are affected by data corruption bug in raid1 arrays using bitmaps.
    (BZ#1955188)

    * [net/sched] connection failed with DNAT + SNAT by tc action ct (BZ#1956458)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API,     is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-     of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
    (CVE-2021-3501)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
150289	RHEL 8 : kernel-rt (RHSA-2021:2169)	Nessus	Red Hat Local Security Checks	2021/6/4	2024/11/8	high
150950	RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.6] (Important) (RHSA-2021:2522)	Nessus	Red Hat Local Security Checks	2021/6/22	2024/11/8	high
157742	Rocky Linux 8 : kernel (RLSA-2021:2168)	Nessus	Rocky Linux Local Security Checks	2022/2/9	2023/11/6	high
150151	Ubuntu 21.04 : Linux kernel vulnerabilities (USN-4977-1)	Nessus	Ubuntu Local Security Checks	2021/6/2	2024/8/27	high
150295	RHEL 8 : kernel (RHSA-2021:2168)	Nessus	Red Hat Local Security Checks	2021/6/4	2024/11/7	high
248259	Linux Distros Unpatched Vulnerability : CVE-2021-3501	Nessus	Misc.	2025/8/11	2026/7/17	high

检测

插件搜索

high

high

high

high

high

high