The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1304 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)

    Bug Fix(es):

    * [RHEL9] Add various *.peak control files to cgroup v2 (JIRA:RHEL-22850)

    * RHEL9 Guest on Google Cloud panics on reading pvpanic device capabilities (JIRA:RHEL-23858)

    * raid5: read data is wrong when recovery happens  (JIRA:RHEL-23882)

    * md/raid5: release batch_last before waiting for another stripe_head (JIRA:RHEL-24512)

    * [regression][ext4][xfstests generic/094] Error reading from file with invalid argument (JIRA:RHEL-25436)

    * bpf: Fix elem_size not being set for inner maps (JIRA:RHEL-25764)

    * Backport crypto: rsa - allow only odd e and restrict value in FIPS mode (JIRA:RHEL-26078)

    * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (JIRA:RHEL-8911)

    * [HPEMC RHEL 9.3 BUG] tools/power/x86 intel-speed-select crashes on systems with more than 8 sockets     (JIRA:RHEL-17907)

    * IPoIB: fix PKEY creation (JIRA:RHEL-22221)

    * Memory corruption when using dm-crypt or dm-verity on RHEL-9 (JIRA:RHEL-26095)

    * backport smartpqi: fix disable_managed_interrupts (JIRA:RHEL-26143)

    * ffdhe* algortihms introduced in 0a2e5b909023 as .fips_allowed=1 lack pairwise consistency tests     (JIRA:RHEL-27007)

    Enhancement(s):

    * s390/qeth: Fix vipa deletion (JIRA:RHEL-25813)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1303 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)

    Bug Fix(es):

    * kernel-rt: kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion     (JIRA:RHEL-8998)

    * kernel-rt: update RT source tree to the latest RHEL-9.2.z7 Batch (JIRA:RHEL-26863)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1722533082 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free     Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit     to avoid the use after free. [wsa: added comment to the code, added Fixes tag] (CVE-2019-25162)

  - In the Linux kernel, the following vulnerability has been resolved: tty: tty_buffer: Fix the softlockup     issue in flush_to_ldisc When running ltp testcase(ltp/testcases/kernel/pty/pty04.c) with arm64, there is a     soft lockup, which look like this one: Workqueue: events_unbound flush_to_ldisc Call trace:
    dump_backtrace+0x0/0x1ec show_stack+0x24/0x30 dump_stack+0xd0/0x128 panic+0x15c/0x374     watchdog_timer_fn+0x2b8/0x304 __run_hrtimer+0x88/0x2c0 __hrtimer_run_queues+0xa4/0x120     hrtimer_interrupt+0xfc/0x270 arch_timer_handler_phys+0x40/0x50 handle_percpu_devid_irq+0x94/0x220
    __handle_domain_irq+0x88/0xf0 gic_handle_irq+0x84/0xfc el1_irq+0xc8/0x180 slip_unesc+0x80/0x214 [slip]     tty_ldisc_receive_buf+0x64/0x80 tty_port_default_receive_buf+0x50/0x90 flush_to_ldisc+0xbc/0x110     process_one_work+0x1d4/0x4b0 worker_thread+0x180/0x430 kthread+0x11c/0x120 In the testcase pty04, The     first process call the write syscall to send data to the pty master. At the same time, the workqueue will     do the flush_to_ldisc to pop data in a loop until there is no more data left. When the sender and     workqueue running in different core, the sender sends data fastly in full time which will result in     workqueue doing work in loop for a long time and occuring softlockup in flush_to_ldisc with kernel     configured without preempt. So I add need_resched check and cond_resched in the flush_to_ldisc loop to     avoid it. (CVE-2021-47185)

  - A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to     host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX)     file locks. (CVE-2022-0480)

  - A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where     virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-     free and create a situation where it may be possible to escalate privileges on the system. (CVE-2022-2977)

  - A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element     is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The     manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is     sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/     fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb92789094     0de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.
    (CVE-2022-3534)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to     host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX)     file locks. (CVE-2022-0480)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007332 advisory.

    A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to     host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX)     file locks.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8139:13 advisory.

    * kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546)
      * kernel: multiple use-after-free vulnerabilities (CVE-2024-1086, CVE-2023-3567, CVE-2023-4133,     CVE-2023-6932, CVE-2023-39198, CVE-2023-51043, CVE-2023-51779, CVE-2023-51780, CVE-2024-1085,     CVE-2024-26582)
      * kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack     (CVE-2020-26555)
      * kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion (CVE-2022-0480)
      * kernel: multiple NULL pointer dereference vulnerabilities (CVE-2022-38096, CVE-2023-6622,     CVE-2023-6915, CVE-2023-42754, CVE-2023-46862, CVE-2023-52574, CVE-2024-0841, CVE-2023-52448)
      * kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c (CVE-2022-45934)
      * kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable() (CVE-2023-6040)
      * kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF (CVE-2023-6531)
      * kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size     (CVE-2023-6931)
      * kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses (CVE-2023-24023)
      * kernel: irdma: Improper access control (CVE-2023-25775)
      * Kernel: double free in hci_conn_cleanup of the bluetooth subsystem (CVE-2023-28464)
      * kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c (CVE-2023-28866)
      * kernel: race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hci_uart_tty_ioctl     (CVE-2023-31083)
      * kernel: multiple out-of-bounds read vulnerabilities (CVE-2023-37453, CVE-2023-39189, CVE-2023-39193,     CVE-2023-6121, CVE-2023-39194)
      * kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP (CVE-2023-42756)
      * kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write (CVE-2023-45863)
      * kernel: smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434)
      * kernel: mm/sparsemem: fix race in accessing memory_section->usage (CVE-2023-52489)
      * kernel: net: fix possible store tearing in neigh_periodic_work() (CVE-2023-52522)
      * kernel: multiple memory leak vulnerabilities (CVE-2023-52529, CVE-2023-52581)
      * kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
      * kernel: net/core: kernel crash in ETH_P_1588 flow dissector (CVE-2023-52580)
      * kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
      * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in     function receive_encrypted_standard of client (CVE-2024-0565)
      * kernel: tls: race between async notify and socket close (CVE-2024-26583)
      * kernel: tls: handle backlogging of crypto requests (CVE-2024-26584)
      * kernel: tls: race between tx work scheduling and socket close (CVE-2024-26585)
      * kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption (CVE-2024-26586)
      * kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
      * kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602)
      * kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters (CVE-2024-26609)
      * kernel: local dos vulnerability in scatterwalk_copychunks (CVE-2023-6176)
      * kernel: perf/x86/lbr: Filter vsyscall addresses (CVE-2023-52476)
      * kernel: netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620)
      * kernel: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVE-2024-26633)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
192008	RHEL 9 : kernel (RHSA-2024:1304)	Nessus	Red Hat Local Security Checks	2024/3/13	2024/11/7	medium
192009	RHEL 9 : kernel-rt (RHSA-2024:1303)	Nessus	Red Hat Local Security Checks	2024/3/13	2024/11/7	medium
352344	AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1722533082)	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/10/1	medium
229741	Linux Distros Unpatched Vulnerability : CVE-2022-0480	Nessus	Misc.	2025/3/5	2026/11/5	medium
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	2026/7/24	2026/10/29	high
239850	TencentOS Server 4: kernel (TSSA-2024:0980)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
307303	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007332)	Nessus	Unity Linux Local Security Checks	2026/4/17	2026/4/21	medium
293735	MiracleLinux 9 : kernel-5.14.0-427.13.1.el9_4 (AXSA:2024-8139:13)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/2/4	critical

检测

插件搜索

medium

medium

medium

medium

high

high

medium

critical