The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5173 advisory.

    Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation,     denial of service or information leaks. CVE-2021-4197 Eric Biederman reported that incorrect permission     checks in the cgroup process migration implementation can allow a local attacker to escalate privileges.
    CVE-2022-0494 The scsi_ioctl() was susceptible to an information leak only exploitable by users with     CAP_SYS_ADMIN or CAP_SYS_RAWIO capabilities. CVE-2022-0812 It was discovered that the RDMA transport for     NFS (xprtrdma) miscalculated the size of message headers, which could lead to a leak of sensitive     information between NFS servers and clients. CVE-2022-0854 Ali Haider discovered a potential information     leak in the DMA subsystem. On systems where the swiotlb feature is needed, this might allow a local user     to read sensitive information. CVE-2022-1011 Jann Horn discovered a flaw in the FUSE (Filesystem in User-     Space) implementation. A local user permitted to mount FUSE filesystems could exploit this to cause a use-     after-free and read sensitive information. CVE-2022-1012, CVE-2022-32296 Moshe Kol, Amit Klein, and Yossi     Gilad discovered a weakness in randomisation of TCP source port selection. CVE-2022-1016 David Bouman     discovered a flaw in the netfilter subsystem where the nft_do_chain function did not initialize register     data that nf_tables expressions can read from and write to. A local attacker can take advantage of this to     read sensitive information. CVE-2022-1048 Hu Jiahui discovered a race condition in the sound subsystem     that can result in a use-after-free. A local user permitted to access a PCM sound device can take     advantage of this flaw to crash the system or potentially for privilege escalation. CVE-2022-1184 A flaw     was discovered in the ext4 filesystem driver which can lead to a use-after-free. A local user permitted to     mount arbitrary filesystems could exploit this to cause a denial of service (crash or memory corruption)     or possibly for privilege escalation. CVE-2022-1195 Lin Ma discovered race conditions in the 6pack and     mkiss hamradio drivers, which could lead to a use-after-free. A local user could exploit these to cause a     denial of service (memory corruption or crash) or possibly for privilege escalation. CVE-2022-1198 Duoming     Zhou discovered a race condition in the 6pack hamradio driver, which could lead to a use-after-free. A     local user could exploit this to cause a denial of service (memory corruption or crash) or possibly for     privilege escalation. CVE-2022-1199, CVE-2022-1204, CVE-2022-1205 Duoming Zhou discovered race conditions     in the AX.25 hamradio protocol, which could lead to a use-after-free or null pointer dereference. A local     user could exploit this to cause a denial of service (memory corruption or crash) or possibly for     privilege escalation. CVE-2022-1353 The TCS Robot tool found an information leak in the PF_KEY subsystem.
    A local user can receive a netlink message when an IPsec daemon registers with the kernel, and this could     include sensitive information. CVE-2022-1419 Minh Yuan discovered a race condition in the vgem virtual GPU     driver that can lead to a use-after-free. A local user permitted to access the GPU device can exploit this     to cause a denial of service (crash or memory corruption) or possibly for privilege escalation.
    CVE-2022-1516 A NULL pointer dereference flaw in the implementation of the X.25 set of standardized     network protocols, which can result in denial of service. This driver is not enabled in Debian's official     kernel configurations. CVE-2022-1652 Minh Yuan discovered a race condition in the floppy driver that can     lead to a use-after-free. A local user permitted to access a floppy drive device can exploit this to cause     a denial of service (crash or memory corruption) or possibly for privilege escalation. CVE-2022-1729     Norbert Slusarek discovered a race condition in the perf subsystem which could result in local privilege     escalation to root. The default settings in Debian prevent exploitation unless more permissive settings     have been applied in the kernel.perf_event_paranoid sysctl. CVE-2022-1734 Duoming Zhou discovered race     conditions in the nfcmrvl NFC driver that could lead to a use-after-free, double-free or null pointer     dereference. A local user might be able to exploit these for denial of service (crash or memory     corruption) or possibly for privilege escalation. This driver is not enabled in Debian's official kernel     configurations. CVE-2022-1974, CVE-2022-1975 Duoming Zhou discovered that the NFC netlink interface was     suspectible to denial of service. CVE-2022-2153 kangel reported a flaw in the KVM implementation for x86     processors which could lead to a null pointer dereference. A local user permitted to access /dev/kvm could     exploit this to cause a denial of service (crash). CVE-2022-21123, CVE-2022-21125, CVE-2022-21166 Various     researchers discovered flaws in Intel x86 processors, collectively referred to as MMIO Stale Data     vulnerabilities. These are similar to the previously published Microarchitectural Data Sampling (MDS)     issues and could be exploited by local users to leak sensitive information. For some CPUs, the mitigations     for these issues require updated microcode. An updated intel-microcode package may be provided at a later     date. The updated CPU microcode may also be available as part of a system firmware (BIOS) update.
    Further information on the mitigation can be found at https://www.kernel.org/doc/html/latest/admin-     guide/hw-vuln/processor_mmio_stale_data.html or in the linux-doc-4.19 package. CVE-2022-23960 Researchers     at VUSec discovered that the Branch History Buffer in Arm processors can be exploited to create     information side channels with speculative execution. This issue is similar to Spectre variant 2, but     requires additional mitigations on some processors. This was previously mitigated for 32-bit Arm (armel     and armhf) architectures and is now also mitigated for 64-bit Arm (arm64). This can be exploited to obtain     sensitive information from a different security context, such as from user-space to the kernel, or from a     KVM guest to the kernel. CVE-2022-26490 Buffer overflows in the STMicroelectronics ST21NFCA core driver     can result in denial of service or privilege escalation. This driver is not enabled in Debian's official     kernel configurations. CVE-2022-27666 valis reported a possible buffer overflow in the IPsec ESP     transformation code. A local user can take advantage of this flaw to cause a denial of service or for     privilege escalation. CVE-2022-28356 Beraphin discovered that the ANSI/IEEE 802.2 LLC type 2 driver did     not properly perform reference counting on some error paths. A local attacker can take advantage of this     flaw to cause a denial of service. CVE-2022-28388 A double free vulnerability was discovered in the 8     devices USB2CAN interface driver. CVE-2022-28389 A double free vulnerability was discovered in the     Microchip CAN BUS Analyzer interface driver. CVE-2022-28390 A double free vulnerability was discovered in     the EMS CPC-USB/ARM7 CAN/USB interface driver. CVE-2022-29581 Kyle Zeng discovered a reference-counting     bug in the cls_u32 network classifier which can lead to a use-after-free. A local user can exploit this to     cause a denial of service (crash or memory corruption) or possibly for privilege escalation.
    CVE-2022-30594 Jann Horn discovered a flaw in the interaction between ptrace and seccomp subsystems. A     process sandboxed using seccomp() but still permitted to use ptrace() could exploit this to remove the     seccomp restrictions. CVE-2022-32250 Aaron Adams discovered a use-after-free in Netfilter which may result     in local privilege escalation to root. CVE-2022-33981 Yuan Ming from Tsinghua University reported a race     condition in the floppy driver involving use of the FDRAWCMD ioctl, which could lead to a use-after-free.
    A local user with access to a floppy drive device could exploit this to cause a denial of service (crash     or memory corruption) or possibly for privilege escalation. This ioctl is now disabled by default. For the     oldstable distribution (buster), these problems have been fixed in version 4.19.249-2. Due to an issue in     the signing service (Cf. Debian bug #1012741), the vport-vxlan module cannot be loaded for the signed     kernel for amd64 in this update. This update also corrects a regression in the network scheduler subsystem     (bug #1013299). For the 32-bit Arm (armel and armhf) architectures, this update enables optimised     implementations of several cryptographic and CRC algorithms. For at least AES, this should remove a timing     sidechannel that could lead to a leak of sensitive information. This update includes many more bug fixes     from stable updates 4.19.236-4.19.249 inclusive, including for bug #1006346. The random driver has been     backported from Linux 5.19, fixing numerous performance and correctness issues. Some changes will be     visible: The entropy pool size is now 256 bits instead of 4096. You may need to adjust the configuration     of system monitoring or user-space entropy gathering services to allow for this. On systems without a     hardware RNG, the kernel may log more uses of /dev/urandom before it is fully initialised. These uses were     previously under-counted and this is not a regression. We recommend that you upgrade your linux packages.
    For the detailed security status of linux please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/linux

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5541-1 advisory.

    Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not     perform permission checks correctly in some situations. A local attacker could possibly use this to gain     administrative privileges. (CVE-2021-4197)

    Jann Horn discovered that the FUSE file system in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-1011)

    Duoming Zhou discovered that the 6pack protocol implementation in the Linux kernel did not handle detach     events properly in some situations, leading to a use-after-free vulnerability. A local attacker could use     this to cause a denial of service (system crash). (CVE-2022-1198)

    Duoming Zhou discovered that the AX.25 amateur radio protocol implementation in the Linux kernel did not     handle detach events properly in some situations. A local attacker could possibly use this to cause a     denial of service (system crash) or execute arbitrary code. (CVE-2022-1199)

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux     kernel during device detach operations. A local attacker could possibly use this to cause a denial of     service (system crash). (CVE-2022-1204)

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux     kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a     denial of service (system crash). (CVE-2022-1205)

    It was discovered that the PF_KEYv2 implementation in the Linux kernel did not properly initialize kernel     memory in some situations. A local attacker could use this to expose sensitive information (kernel     memory). (CVE-2022-1353)

    It was discovered that the implementation of X.25 network protocols in the Linux kernel did not terminate     link layer sessions properly. A local attacker could possibly use this to cause a denial of service     (system crash). (CVE-2022-1516)

    Zheyu Ma discovered that the Silicon Motion SM712 framebuffer driver in the Linux kernel did not properly     handle very small reads. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2022-2380)

    It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly     handle certain error conditions, leading to a double-free. A local attacker could possibly use this to     cause a denial of service (system crash). (CVE-2022-28388)

    It was discovered that the Microchip CAN BUS Analyzer interface implementation in the Linux kernel did not     properly handle certain error conditions, leading to a double-free. A local attacker could possibly use     this to cause a denial of service (system crash). (CVE-2022-28389)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1407-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated.

    The following security bugs were fixed:

    - CVE-2022-0854: Fixed a memory leak flaw was found in the Linux kernels DMA subsystem. This flaw allowed     a local user to read random memory from the kernel space. (bnc#1196823)
    - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This     vulnerability gives an attacker a powerful primitive that can be used to both read from and write to     relative stack data, which can lead to arbitrary code execution. (bsc#1197227)
    - CVE-2022-1199: Fixed null-ptr-deref and use-after-free vulnerabilities that allow an attacker to crash     the linux kernel by simulating Amateur Radio. (bsc#1198028)
    - CVE-2022-1205: Fixed null pointer dereference and use-after-free vulnerabilities that allow an attacker     to crash the linux kernel by simulating Amateur Radio. (bsc#1198027)
    - CVE-2022-1198: Fixed an use-after-free vulnerability that allow an attacker to crash the linux kernel by     simulating Amateur Radio (bsc#1198030).
    - CVE-2022-1195: Fixed an use-after-free vulnerability which could allow a local attacker with a user     privilege to execute a denial of service. (bsc#1198029)
    - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel.
    (bnc#1198031)
    - CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel.
    (bnc#1198032)
    - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel.
    (bnc#1198033)
    - CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock     with buffer_mutex and mmap_lock. (bsc#1197331)
    - CVE-2022-1055: Fixed a use-after-free in tc_new_tfilter that could allow a local attacker to gain     privilege escalation. (bnc#1197702)
    - CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c. (bsc#1196761)
    - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw     allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a     local privilege escalation. (bnc#1197462)
    - CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-     after-free if there is a corrupted quota file. (bnc#1197366)
    - CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve     (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems.
    (bnc#1197343)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel-generic installed on the remote host is prior to 5.15.38 / 5.15.38_smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-129-01 advisory.

  - Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may     allow an authorized user to potentially enable information disclosure via local access. (CVE-2022-0001)

  - Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an     authorized user to potentially enable information disclosure via local access. (CVE-2022-0002)

  - A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in     the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or     CAP_SYS_RAWIO) to create issues with confidentiality. (CVE-2022-0494)

  - A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds     memory write in the Linux kernel's BPF subsystem due to the way a user loads BTF. This flaw allows a local     user to crash or escalate their privileges on the system. (CVE-2022-0500)

  - Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making     it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit     2d3916f3189172d5c69d33065c3c21119fe539fc. (CVE-2022-0742)

  - A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMA_FROM_DEVICE.
    This flaw allows a local user to read random memory from the kernel space. (CVE-2022-0854)

  - An out-of-bounds (OOB) memory write flaw was found in the Linux kernel's watch_queue event notification     subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain     privileged access or cause a denial of service on the system. (CVE-2022-0995)

  - A use-after-free flaw was found in the Linux kernel's FUSE filesystem in the way a user triggers write().
    This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in     privilege escalation. (CVE-2022-1011)

  - A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem.
    This flaw allows a local user to cause an out-of-bounds write issue. (CVE-2022-1015)

  - A use-after-free flaw was found in the Linux kernel's sound subsystem in the way a user triggers     concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM     for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the     system. (CVE-2022-1048)

  - A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This     flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a     leak of internal kernel information. (CVE-2022-1353)

  - A NULL pointer dereference flaw was found in the Linux kernel's X.25 set of standardized network protocols     functionality in the way a user terminates their session using a simulated Ethernet card and continued     usage of this connection. This flaw allows a local user to crash the system. (CVE-2022-1516)

  - Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to     multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV     device frontends are using the grant table interfaces for removing access rights of the backends in ways     being subject to race conditions, resulting in potential data leaks, data corruption by malicious     backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the     gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they     assume that a following removal of the granted access will always succeed, which is not true in case the     backend has mapped the granted page between those two operations. As a result the backend can keep access     to the memory page of the guest no matter how the page will be used after the frontend I/O has finished.
    The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of     a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038     gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus,     9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no     longer in use, but the freeing of the related data page is not synchronized with dropping the granted     access. As a result the backend can keep access to the memory page even after it has been freed and then     re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to     revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which     can be triggered by the backend. CVE-2022-23042 (CVE-2022-23036, CVE-2022-23037, CVE-2022-23038,     CVE-2022-23039, CVE-2022-23040, CVE-2022-23041, CVE-2022-23042)

  - kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of     the availability of pointer arithmetic via certain *_OR_NULL pointer types. (CVE-2022-23222)

  - Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation,     aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to     influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive     information. (CVE-2022-23960)

  - drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.
    (CVE-2022-24958)

  - st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has     EVT_TRANSACTION buffer overflows because of untrusted length parameters. (CVE-2022-26490)

  - A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and     net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap     objects and may cause a local privilege escalation threat. (CVE-2022-27666)

  - In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c. (CVE-2022-28356)

  - usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28388)

  - mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28389)

  - ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
    (CVE-2022-28390)

  - In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring     timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race     condition perhaps can only be exploited infrequently. (CVE-2022-29582)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5515-1 advisory.

    Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not     perform permission checks correctly in some situations. A local attacker could possibly use this to gain     administrative privileges. (CVE-2021-4197)

    Jann Horn discovered that the FUSE file system in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-1011)

    Duoming Zhou discovered that the 6pack protocol implementation in the Linux kernel did not handle detach     events properly in some situations, leading to a use-after-free vulnerability. A local attacker could use     this to cause a denial of service (system crash). (CVE-2022-1198)

    Duoming Zhou discovered that the AX.25 amateur radio protocol implementation in the Linux kernel did not     handle detach events properly in some situations. A local attacker could possibly use this to cause a     denial of service (system crash) or execute arbitrary code. (CVE-2022-1199)

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux     kernel during device detach operations. A local attacker could possibly use this to cause a denial of     service (system crash). (CVE-2022-1204)

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux     kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a     denial of service (system crash). (CVE-2022-1205)

    It was discovered that the PF_KEYv2 implementation in the Linux kernel did not properly initialize kernel     memory in some situations. A local attacker could use this to expose sensitive information (kernel     memory). (CVE-2022-1353)

    It was discovered that the implementation of X.25 network protocols in the Linux kernel did not terminate     link layer sessions properly. A local attacker could possibly use this to cause a denial of service     (system crash). (CVE-2022-1516)

    Zheyu Ma discovered that the Silicon Motion SM712 framebuffer driver in the Linux kernel did not properly     handle very small reads. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2022-2380)

    It was discovered that the Microchip CAN BUS Analyzer interface implementation in the Linux kernel did not     properly handle certain error conditions, leading to a double-free. A local attacker could possibly use     this to cause a denial of service (system crash). (CVE-2022-28389)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in     the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or     CAP_SYS_RAWIO) to create issues with confidentiality. (CVE-2022-0494)

  - A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMA_FROM_DEVICE.
    This flaw allows a local user to read random memory from the kernel space. (CVE-2022-0854)

  - A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain     privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past     commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 (CVE-2022-1055)

  - A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a     local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device     is detached and reclaim resources early. (CVE-2022-1195)

  - A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux     kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of     service (DoS) or a kernel information leak. (CVE-2022-1280)

  - A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This     flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a     leak of internal kernel information. (CVE-2022-1353)

  - A NULL pointer dereference flaw was found in the Linux kernel's X.25 set of standardized network protocols     functionality in the way a user terminates their session using a simulated Ethernet card and continued     usage of this connection. This flaw allows a local user to crash the system. (CVE-2022-1516)

  - In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c. (CVE-2022-28356)

  - usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28388)

  - mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28389)

  - ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
    (CVE-2022-28390)

  - The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers     to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. (CVE-2022-30594)

  - A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root     (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD     CPU that supports Secure Encrypted Virtualization (SEV). (CVE-2022-0171)

  - An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c function in     RPCRDMA_HDRLEN_MIN (7) (in rpcrdma_max_call_header_size, rpcrdma_max_reply_header_size). This flaw allows     an attacker with normal user privileges to leak kernel information. (CVE-2022-0812)

  - kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak     (CVE-2022-1012)

  - No description is available for this CVE. (CVE-2022-1198)

  - kernel: Null pointer dereference and use after free in ax25_release() (CVE-2022-1199)

  - A use-after-free flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality in the     way a user connects with the protocol. This flaw allows a local user to crash the system. (CVE-2022-1204)

  - A NULL pointer dereference flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality     in the way a user connects with the protocol. This flaw allows a local user to crash the system.
    (CVE-2022-1205)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in     the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or     CAP_SYS_RAWIO) to create issues with confidentiality. (CVE-2022-0494)

  - A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMA_FROM_DEVICE.
    This flaw allows a local user to read random memory from the kernel space. (CVE-2022-0854)

  - A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain     privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past     commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 (CVE-2022-1055)

  - A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a     local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device     is detached and reclaim resources early. (CVE-2022-1195)

  - A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux     kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of     service (DoS) or a kernel information leak. (CVE-2022-1280)

  - A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This     flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a     leak of internal kernel information. (CVE-2022-1353)

  - A NULL pointer dereference flaw was found in the Linux kernel's X.25 set of standardized network protocols     functionality in the way a user terminates their session using a simulated Ethernet card and continued     usage of this connection. This flaw allows a local user to crash the system. (CVE-2022-1516)

  - In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c. (CVE-2022-28356)

  - usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28388)

  - mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28389)

  - ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
    (CVE-2022-28390)

  - The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers     to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag. (CVE-2022-30594)

  - A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root     (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD     CPU that supports Secure Encrypted Virtualization (SEV). (CVE-2022-0171)

  - An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c function in     RPCRDMA_HDRLEN_MIN (7) (in rpcrdma_max_call_header_size, rpcrdma_max_reply_header_size). This flaw allows     an attacker with normal user privileges to leak kernel information. (CVE-2022-0812)

  - kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak     (CVE-2022-1012)

  - No description is available for this CVE. (CVE-2022-1198)

  - kernel: Null pointer dereference and use after free in ax25_release() (CVE-2022-1199)

  - A use-after-free flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality in the     way a user connects with the protocol. This flaw allows a local user to crash the system. (CVE-2022-1204)

  - A NULL pointer dereference flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality     in the way a user connects with the protocol. This flaw allows a local user to crash the system.
    (CVE-2022-1205)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
236670	Alibaba Cloud Linux 3 : 0125: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2022:0125)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2026/9/15	high
162703	Debian DSA-5173-1 : linux - security update	Nessus	Debian Local Security Checks	2022/7/4	2025/1/24	high
163545	Ubuntu 16.04 ESM : Linux kernel (Azure) vulnerabilities (USN-5541-1)	Nessus	Ubuntu Local Security Checks	2022/7/29	2024/8/28	high
160222	SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2022:1407-1)	Nessus	SuSE Local Security Checks	2022/4/27	2026/6/26	high
160874	Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-129-01)	Nessus	Slackware Local Security Checks	2022/5/10	2026/8/26	high
163111	Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5515-1)	Nessus	Ubuntu Local Security Checks	2022/7/14	2024/8/27	high
163171	EulerOS Virtualization 2.10.0 : kernel (EulerOS-SA-2022-2090)	Nessus	Huawei Local Security Checks	2022/7/14	2023/1/6	high
163565	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2134)	Nessus	Huawei Local Security Checks	2022/7/29	2023/1/6	high

检测

插件搜索

high

high

high

high

high

high

high

high