An update of the linux package has been released.

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3338 advisory.

  - A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue     could allow a remote user to crash the system. (CVE-2023-3338)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6416-2 advisory.

    It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash     collisions in connection lookup table. A remote attacker could use this to cause a denial of service     (excessive CPU consumption). (CVE-2023-1206)

    Danil Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD processors utilising     speculative execution and branch prediction may allow unauthorised memory reads via a speculative side-     channel attack. A local attacker could use this to expose sensitive information, including kernel memory.
    (CVE-2023-20569)

    It was discovered that the IPv6 RPL protocol implementation in the Linux kernel did not properly handle     user-supplied data. A remote attacker could use this to cause a denial of service (system crash).
    (CVE-2023-2156)

    Davide Ornaghi discovered that the DECnet network protocol implementation in the Linux kernel contained a     null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. Please note that kernel support for the DECnet has been     removed to resolve this CVE. (CVE-2023-3338)

    Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate     command payload size, leading to a out-of-bounds read vulnerability. A remote attacker could possibly use     this to cause a denial of service (system crash). (CVE-2023-38432)

    It was discovered that the NFC implementation in the Linux kernel contained a use-after-free vulnerability     when performing peer-to-peer communication in certain conditions. A privileged attacker could use this to     cause a denial of service (system crash) or possibly expose sensitive information (kernel memory).
    (CVE-2023-3863)

    Laurence Wit discovered that the KSMBD implementation in the Linux kernel did not properly validate a     buffer size in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker could     use this to cause a denial of service (system crash) or possibly expose sensitive information.
    (CVE-2023-3865)

    Laurence Wit discovered that the KSMBD implementation in the Linux kernel contained a null pointer     dereference vulnerability when handling handling chained requests. A remote attacker could use this to     cause a denial of service (system crash). (CVE-2023-3866)

    It was discovered that the Siano USB MDTV receiver device driver in the Linux kernel did not properly     handle device initialization failures in certain situations, leading to a use-after-free vulnerability. A     physically proximate attacker could use this cause a denial of service (system crash). (CVE-2023-4132)

    Andy Nguyen discovered that the KVM implementation for AMD processors in the Linux kernel with Secure     Encrypted Virtualization (SEV) contained a race condition when accessing the GHCB page. A local attacker     in a SEV guest VM could possibly use this to cause a denial of service (host system crash).
    (CVE-2023-4155)

    It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A     local attacker could use this to cause a denial of service (system crash). (CVE-2023-4194)

    Maxim Suhanov discovered that the exFAT file system implementation in the Linux kernel did not properly     check a file name length, leading to an out- of-bounds write vulnerability. An attacker could use this to     construct a malicious exFAT image that, when mounted and operated on, could cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2023-4273)

    Thelford Williams discovered that the Ceph file system messenger protocol implementation in the Linux     kernel did not properly validate frame segment length in certain situation, leading to a buffer overflow     vulnerability. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-44466)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in     VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash     the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a     kernel information leak problem.(CVE-2023-4387)

    A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in     the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with     normal user privilege to cause a denial of service due to a missing sanity check during     cleanup.(CVE-2023-4459)

    A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system     (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing     sanity check.(CVE-2023-4385)

    A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs     during device initialization when the siano device is plugged in. This flaw allows a local user to crash     the system, causing a denial of service condition.(CVE-2023-4132)

    A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes     actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code     uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted     branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted     branches can cause cache allocation. This issue leads to obtaining information that should not be     accessible.(CVE-2023-3006)

    A buffer overrun vulnerability was found in the netback driver in Xen due to an unusual split packet. This     flaw allows an unprivileged guest to cause a denial of service (DoS) of the host by sending network     packets to the backend, causing the backend to crash.(CVE-2023-34319)

    A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel.
    This flaw allows a local user with special privileges to impact a kernel information leak     issue.(CVE-2023-3863)

    An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a     .disconnect versus dvb_device_open race condition that leads to a use-after-free.(CVE-2022-45886)

    In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This     could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation.(CVE-2023-21255)

    A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue     could allow a remote user to crash the system.(CVE-2023-3338)

    An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in     drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the     NULL Pointer Dereference.(CVE-2023-3220)

    A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue     could allow a local user to crash the system.(CVE-2023-3358)

    An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in     renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.(CVE-2023-35828)

    A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in     the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to     incorrect handling of the existing filter, leading to a kernel information leak issue.(CVE-2023-4128)

    A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to     bypass network filters and gain unauthorized access to some resources. The original patches fixing     CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits -     a096ccca6e50 ('tun: tun_chr_open(): correctly initialize socket uid'), - 66b2c338adce ('tap: tap_open():
    correctly initialize socket uid'), pass 'inode-i_uid' to sock_init_data_uid() as the last parameter and     that turns out to not be accurate.(CVE-2023-4194)

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to     achieve local privilege escalation.If tcf_change_indev() fails, fw_set_parms() will immediately return an     error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can     control the reference counter and set it to zero, they can cause the reference to be freed, leading to a     use-after-free vulnerability.We recommend upgrading past commit     0323bce598eea038714f941ce2b22541c46d488f.(CVE-2023-3776)

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to     achieve local privilege escalation.If tcf_change_indev() fails, u32_set_parms() will immediately return an     error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can     control the reference counter and set it to zero, they can cause the reference to be freed, leading to a     use-after-free vulnerability.We recommend upgrading past commit     04c55383fa5689357bcdd2c8036725a55ed632bc.(CVE-2023-3609)

    A flaw was found in the Linux kernels IP framework for transforming packets (XFRM subsystem). This     issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in     xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.(CVE-2023-3772)

    An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited     to achieve local privilege escalation.The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-     of-bounds write because lmax is updated according to packet sizes without bounds checks.We recommend     upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.(CVE-2023-3611)

    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register     contents when CAP_NET_ADMIN is in any user or network namespace(CVE-2023-35001)

    A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in     net/netfilter/nf_tables_api.c.Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a     dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local     attacker with user access to cause a privilege escalation issue.We recommend upgrading past     commit1240eb93f0616b21c675416516ff3d74798fdc97.(CVE-2023-3390)

    A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernels IPv6     functionality when a user makes a new kind of SYN flood attack. A user located in the local network or     with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up     to 95%.(CVE-2023-1206)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6445-2 advisory.

    It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash     collisions in connection lookup table. A remote attacker could use this to cause a denial of service     (excessive CPU consumption). (CVE-2023-1206)

    Daniel Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD processors utilising     speculative execution and branch prediction may allow unauthorised memory reads via a speculative side-     channel attack. A local attacker could use this to expose sensitive information, including kernel memory.
    (CVE-2023-20569)

    It was discovered that the IPv6 RPL protocol implementation in the Linux kernel did not properly handle     user-supplied data. A remote attacker could use this to cause a denial of service (system crash).
    (CVE-2023-2156)

    Davide Ornaghi discovered that the DECnet network protocol implementation in the Linux kernel contained a     null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. Please note that kernel support for the DECnet has been     removed to resolve this CVE. (CVE-2023-3338)

    Ross Lagerwall discovered that the Xen netback backend driver in the Linux kernel did not properly handle     certain unusual packets from a paravirtualized network frontend, leading to a buffer overflow. An attacker     in a guest VM could use this to cause a denial of service (host system crash) or possibly execute     arbitrary code. (CVE-2023-34319)

    Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate     command payload size, leading to a out-of-bounds read vulnerability. A remote attacker could possibly use     this to cause a denial of service (system crash). (CVE-2023-38432)

    It was discovered that the NFC implementation in the Linux kernel contained a use-after-free vulnerability     when performing peer-to-peer communication in certain conditions. A privileged attacker could use this to     cause a denial of service (system crash) or possibly expose sensitive information (kernel memory).
    (CVE-2023-3863)

    Laurence Wit discovered that the KSMBD implementation in the Linux kernel did not properly validate a     buffer size in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker could     use this to cause a denial of service (system crash) or possibly expose sensitive information.
    (CVE-2023-3865)

    Laurence Wit discovered that the KSMBD implementation in the Linux kernel contained a null pointer     dereference vulnerability when handling handling chained requests. A remote attacker could use this to     cause a denial of service (system crash). (CVE-2023-3866)

    It was discovered that the Siano USB MDTV receiver device driver in the Linux kernel did not properly     handle device initialization failures in certain situations, leading to a use-after-free vulnerability. A     physically proximate attacker could use this cause a denial of service (system crash). (CVE-2023-4132)

    Andy Nguyen discovered that the KVM implementation for AMD processors in the Linux kernel with Secure     Encrypted Virtualization (SEV) contained a race condition when accessing the GHCB page. A local attacker     in a SEV guest VM could possibly use this to cause a denial of service (host system crash).
    (CVE-2023-4155)

    It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A     local attacker could use this to cause a denial of service (system crash). (CVE-2023-4194)

    Bien Pham discovered that the netfiler subsystem in the Linux kernel contained a race condition, leading     to a use-after-free vulnerability. A local user could use this to cause a denial of service (system crash)     or possibly execute arbitrary code. (CVE-2023-4244)

    Maxim Suhanov discovered that the exFAT file system implementation in the Linux kernel did not properly     check a file name length, leading to an out- of-bounds write vulnerability. An attacker could use this to     construct a malicious exFAT image that, when mounted and operated on, could cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2023-4273)

    Kyle Zeng discovered that the networking stack implementation in the Linux kernel did not properly     validate skb object size in certain conditions. An attacker could use this cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2023-42752)

    Kyle Zeng discovered that the netfiler subsystem in the Linux kernel did not properly calculate array     offsets, leading to a out-of-bounds write vulnerability. A local user could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-42753)

    Kyle Zeng discovered that the IPv4 Resource Reservation Protocol (RSVP) classifier implementation in the     Linux kernel contained an out-of-bounds read vulnerability. A local attacker could use this to cause a     denial of service (system crash). Please note that kernel packet classifier support for RSVP has been     removed to resolve this vulnerability. (CVE-2023-42755)

    Kyle Zeng discovered that the netfilter subsystem in the Linux kernel contained a race condition in IP set     operations in certain situations. A local attacker could use this to cause a denial of service (system     crash). (CVE-2023-42756)

    Thelford Williams discovered that the Ceph file system messenger protocol implementation in the Linux     kernel did not properly validate frame segment length in certain situation, leading to a buffer overflow     vulnerability. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-44466)

    Bing-Jhong Billy Jheng discovered that the Unix domain socket implementation in the Linux kernel contained     a race condition in certain situations, leading to a use-after-free vulnerability. A local attacker could     use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-4622)

    Budimir Markovic discovered that the qdisc implementation in the Linux kernel did not properly validate     inner classes, leading to a use-after-free vulnerability. A local user could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-4623)

    Alex Birnberg discovered that the netfilter subsystem in the Linux kernel did not properly validate     register length, leading to an out-of- bounds write vulnerability. A local attacker could possibly use     this to cause a denial of service (system crash). (CVE-2023-4881)

    It was discovered that the Quick Fair Queueing scheduler implementation in the Linux kernel did not     properly handle network packets in certain conditions, leading to a use after free vulnerability. A local     attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2023-4921)

    Kevin Rich discovered that the netfilter subsystem in the Linux kernel did not properly handle removal of     rules from chain bindings in certain circumstances, leading to a use-after-free vulnerability. A local     attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code.
    (CVE-2023-5197)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3623 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3623-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     October 19, 2023                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-5.10     Version        : 5.10.197-1~deb10u1     CVE ID         : CVE-2022-4269 CVE-2022-39189 CVE-2023-1206 CVE-2023-1380                      CVE-2023-2002 CVE-2023-2007 CVE-2023-2124 CVE-2023-2269                      CVE-2023-2898 CVE-2023-3090 CVE-2023-3111 CVE-2023-3141                      CVE-2023-3212 CVE-2023-3268 CVE-2023-3338 CVE-2023-3389                      CVE-2023-3609 CVE-2023-3611 CVE-2023-3772 CVE-2023-3773                      CVE-2023-3776 CVE-2023-3863 CVE-2023-4004 CVE-2023-4128                      CVE-2023-4132 CVE-2023-4147 CVE-2023-4194 CVE-2023-4244                      CVE-2023-4273 CVE-2023-4622 CVE-2023-4623 CVE-2023-4921                      CVE-2023-20588 CVE-2023-21255 CVE-2023-21400 CVE-2023-31084                      CVE-2023-34256 CVE-2023-34319 CVE-2023-35788 CVE-2023-35823                      CVE-2023-35824 CVE-2023-40283 CVE-2023-42753 CVE-2023-42755                      CVE-2023-42756     Debian Bug     : 871216 1035359 1036543 1044518 1050622

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    CVE-2022-4269

        William Zhao discovered that a flaw in the Traffic Control (TC)         subsystem when using a specific networking configuration         (redirecting egress packets to ingress using TC action mirred),         may allow a local unprivileged user to cause a denial of service         (triggering a CPU soft lockup).

    CVE-2022-39189

        Jann Horn discovered that TLB flush operations are mishandled in         the KVM subsystem in certain KVM_VCPU_PREEMPTED situations, which         may allow an unprivileged guest user to compromise the guest         kernel.

    CVE-2023-1206

        It was discovered that the networking stack permits attackers to         force hash collisions in the IPv6 connection lookup table, which         may result in denial of service (significant increase in the cost         of lookups, increased CPU utilization).

    CVE-2023-1380

        Jisoo Jang reported a heap out-of-bounds read in the brcmfmac         Wi-Fi driver. On systems using this driver, a local user could         exploit this to read sensitive information or to cause a denial of         service.

    CVE-2023-2002

        Ruiahn Li reported an incorrect permissions check in the Bluetooth         subsystem. A local user could exploit this to reconfigure local         Bluetooth interfaces, resulting in information leaks, spoofing, or         denial of service (loss of connection).

    CVE-2023-2007

        Lucas Leong and Reno Robert discovered a         time-of-check-to-time-of-use flaw in the dpt_i2o SCSI controller         driver. A local user with access to a SCSI device using this         driver could exploit this for privilege escalation.

        This flaw has been mitigated by removing support for the I2OUSRCMD         operation.

    CVE-2023-2124

        Kyle Zeng, Akshay Ajayan and Fish Wang discovered that missing         metadata validation may result in denial of service or potential         privilege escalation if a corrupted XFS disk image is mounted.

    CVE-2023-2269

        Zheng Zhang reported that improper handling of locking in the         device mapper implementation may result in denial of service.

    CVE-2023-2898

        It was discovered that missing sanitising in the f2fs file system         may result in denial of service if a malformed file system is         accessed.

    CVE-2023-3090

        It was discovered that missing initialization in ipvlan networking         may lead to an out-of-bounds write vulnerability, resulting in         denial of service or potentially the execution of arbitrary code.

    CVE-2023-3111

        The TOTE Robot tool found a flaw in the Btrfs filesystem driver         that can lead to a use-after-free. It's unclear whether an         unprivileged user can exploit this.

    CVE-2023-3141

        A flaw was discovered in the r592 memstick driver that could lead         to a use-after-free after the driver is removed or unbound from a         device. The security impact of this is unclear.

    CVE-2023-3212

        Yang Lan discovered that missing validation in the GFS2 filesystem         could result in denial of service via a NULL pointer dereference         when mounting a malformed GFS2 filesystem.

    CVE-2023-3268

        It was discovered that an out-of-bounds memory access in relayfs         could result in denial of service or an information leak.

    CVE-2023-3338

        Davide Ornaghi discovered a flaw in the DECnet protocol         implementation which could lead to a null pointer dereference or         use-after-free. A local user can exploit this to cause a denial of         service (crash or memory corruption) and probably for privilege         escalation.

        This flaw has been mitigated by removing the DECnet protocol         implementation.

    CVE-2023-3389

        Querijn Voet discovered a use-after-free in the io_uring         subsystem, which may result in denial of service or privilege         escalation.

    CVE-2023-3609, CVE-2023-3776. CVE-2023-4128

        It was discovered that a use-after-free in the cls_fw, cls_u32,         cls_route and network classifiers may result in denial of service         or potential local privilege escalation.

    CVE-2023-3611

        It was discovered that an out-of-bounds write in the traffic         control subsystem for the Quick Fair Queueing scheduler (QFQ) may         result in denial of service or privilege escalation.

    CVE-2023-3772

        Lin Ma discovered a NULL pointer dereference flaw in the XFRM         subsystem which may result in denial of service.

    CVE-2023-3773

        Lin Ma discovered a flaw in the XFRM subsystem, which may result         in denial of service for a user with the CAP_NET_ADMIN capability         in any user or network namespace.

    CVE-2023-3863

        It was discovered that a use-after-free in the NFC implementation         may result in denial of service, an information leak or potential         local privilege escalation.

    CVE-2023-4004

        It was discovered that a use-after-free in Netfilter's         implementation of PIPAPO (PIle PAcket POlicies) may result in         denial of service or potential local privilege escalation for a         user with the CAP_NET_ADMIN capability in any user or network         namespace.

    CVE-2023-4132

        A use-after-free in the driver for Siano SMS1xxx based MDTV         receivers may result in local denial of service.

    CVE-2023-4147

        Kevin Rich discovered a use-after-free in Netfilter when adding a         rule with NFTA_RULE_CHAIN_ID, which may result in local privilege         escalation for a user with the CAP_NET_ADMIN capability in any         user or network namespace.

    CVE-2023-4194

        A type confusion in the implementation of TUN/TAP network devices         may allow a local user to bypass network filters.

    CVE-2023-4244

        A race condition was found in the nftables subsystem that could         lead to a use-after-free.  A local user could exploit this to         cause a denial of service (crash), information leak, or possibly         for privilege escalation.

    CVE-2023-4273

        Maxim Suhanov discovered a stack overflow in the exFAT driver,         which may result in local denial of service via a malformed file         system.

    CVE-2023-4622

        Bing-Jhong Billy Jheng discovered a use-after-free within the Unix         domain sockets component, which may result in local privilege         escalation.

    CVE-2023-4623

        Budimir Markovic reported a missing configuration check in the         sch_hfsc network scheduler that could lead to a use-after-free or         other problems.  A local user with the CAP_NET_ADMIN capability in         any user or network namespace could exploit this to cause a denial         of service (crash or memory corruption) or possibly for privilege         escalation.

    CVE-2023-4921

        valis reported flaws in the sch_qfq network scheduler that could         lead to a use-after-free.  A local user with the CAP_NET_ADMIN         capability in any user or network namespace could exploit this to         cause a denial of service (crash or memory corruption) or possibly         for privilege escalation.

    CVE-2023-20588

        Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Koepf and         Oleksii Oleksenko discovered that on some AMD CPUs with the Zen1         micro architecture an integer division by zero may leave stale         quotient data from a previous division, resulting in a potential         leak of sensitive data.

    CVE-2023-21255

        A use-after-free was discovered in the Android binder driver,         which may result in local privilege escalation on systems where         the binder driver is loaded.

    CVE-2023-21400

        Ye Zhang and Nicolas Wu discovered a double-free in the io_uring         subsystem, which may result in denial of service or privilege         escalation.

    CVE-2023-31084

        It was discovered that the DVB Core driver does not properly         handle locking of certain events, allowing a local user to cause a         denial of service.

    CVE-2023-34256

        The syzbot tool found a time-of-check-to-time-of-use flaw in the         ext4 filesystem driver. An attacker able to mount a disk image or         device that they can also write to directly could exploit this to         cause an out-of-bounds read, possibly resulting in a leak of         sensitive information or denial of service (crash).

    CVE-2023-34319

        Ross Lagerwall discovered a buffer overrun in Xen's netback driver         which may allow a Xen guest to cause denial of service to the         virtualisation host by sending malformed packets.

    CVE-2023-35788

        Hangyu Hua discovered that an off-by-one in the Flower traffic         classifier may result in local denial of service or the execution         of privilege escalation.

    CVE-2023-35823

        A flaw was discovered in the saa7134 media driver that could lead         to a use-after-free after the driver is removed or unbound from a         device. The security impact of this is unclear.

    CVE-2023-35824

        A flaw was discovered in the dm1105 media driver that could lead         to a use-after-free after the driver is removed or unbound from a         device. The security impact of this is unclear.

    CVE-2023-40283

        A use-after-free was discovered in Bluetooth L2CAP socket         handling.

    CVE-2023-42753

        Kyle Zeng discovered an off-by-one error in the netfilter ipset         subsystem which could lead to out-of-bounds memory access.  A         local user with the CAP_NET_ADMIN capability in any user or         network namespace could exploit this to cause a denial of service         (memory corruption or crash) and possibly for privilege         escalation.

    CVE-2023-42755

        Kyle Zeng discovered missing configuration validation in the         cls_rsvp network classifier which could lead to out-of-bounds         reads.  A local user with the CAP_NET_ADMIN capability in any user         or network namespace could exploit this to cause a denial of         service (crash) or to leak sensitive information.

        This flaw has been mitigated by removing the cls_rsvp classifier.

    CVE-2023-42756

        Kyle Zeng discovered a race condition in the netfiler ipset         subsystem which could lead to an assertion failure.  A local user         with the CAP_NET_ADMIN capability in any user or network namespace         could exploit this to cause a denial of service (crash).

    For Debian 10 buster, these problems have been fixed in version     5.10.197-1~deb10u1.  This update additionally fixes Debian bugs     #871216, #1035359, #1036543, #1044518, and #1050622; and includes many     more bug fixes from stable updates 5.10.180-5.10.197 inclusive.

    We recommend that you upgrade your linux-5.10 packages.

    For the detailed security status of linux-5.10 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-5.10

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
203834	Photon OS 3.0: Linux PHSA-2023-3.0-0621	Nessus	PhotonOS Local Security Checks	2024/7/24	2026/8/10	high
205690	CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-3338)	Nessus	MarinerOS Local Security Checks	2024/8/16	2025/2/10	medium
182691	Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6416-2)	Nessus	Ubuntu Local Security Checks	2023/10/6	2024/8/27	critical
188715	EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2023-3085)	Nessus	Huawei Local Security Checks	2024/1/16	2025/9/29	high
183780	Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6445-2)	Nessus	Ubuntu Local Security Checks	2023/10/24	2025/9/24	critical
183491	Debian dla-3623 : linux-config-5.10 - security update	Nessus	Debian Local Security Checks	2023/10/20	2025/9/24	high

检测

插件搜索

high

medium

critical

high

critical

high