The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778787063 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: can: m_can: pci: add missing     m_can_class_free_dev() in probe/remove methods In m_can_pci_remove() and error handling path of     m_can_pci_probe(), m_can_class_free_dev() should be called to free resource allocated by     m_can_class_allocate_dev(), otherwise there will be memleak. (CVE-2022-49024)

  - In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow     in ima_appraise_measurement When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be     negative, which may cause the integer overflow problem. (CVE-2022-49643)

  - In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case     usbnet_write_cmd_async() mixed up which buffers need to be freed in which error case. v2: add Fixes tag     v3: fix uninitialized buf pointer (CVE-2022-49657)

  - In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_send_one(): fix     missing CAN header initialization The read access to struct canxl_frame::len inside of a j1939 created     skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame. This     patch initializes the 8 byte CAN header with zero. (CVE-2022-49845)

  - In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak     in tifm_7xx1_switch_media() If device_register() returns error in tifm_7xx1_switch_media(), name of     kobject which is allocated in dev_set_name() called in device_add() is leaked. Never directly free @dev     after calling device_register(), even if it returned an error! Always use put_device() to give up the     reference initialized. (CVE-2022-50349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

检测

插件搜索

high