The version of kernel installed on the remote host is prior to 5.4.253-167.359. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2023-054 advisory.

    A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This     flaw allows an attacker to crash the system and possibly cause a kernel information lea (CVE-2023-1611)

    A flaw in the Linux Kernel found in the GFS2 file system. On corrupted gfs2 file systems the evict code     can try to reference the journal descriptor structure, jdesc, after it has been freed and set to NULL. It     can lead to null pointer dereference when gfs2_trans_begin being called and then fail     ingfs2_evict_inode(). (CVE-2023-3212)

    The fix for XSA-423 added logic to Linux'es netback driver to deal witha frontend splitting a packet in a     way such that not all of the headerswould come in one piece.  Unfortunately the logic introduced     theredidn't account for the extreme case of the entire packet being splitinto as many pieces as permitted     by the protocol, yet still beingsmaller than the area that's specially dealt with to keep all     (possible)headers together.  Such an unusual packet would therefore trigger abuffer overrun in the driver.
    (CVE-2023-34319)

    An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux     kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
    (CVE-2023-39197)

    A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in     the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to     incorrect handling of the existing filter, leading to a kernel information leak issue. (CVE-2023-4128)

    A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to     bypass network filters and gain unauthorized access to some resources. The original patches fixing     CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits -     a096ccca6e50 (tun: tun_chr_open(): correctly initialize socket uid), - 66b2c338adce (tap: tap_open():
    correctly initialize socket uid), pass inode->i_uid to sock_init_data_uid() as the last parameter and     that turns out to not be accurate. (CVE-2023-4194)

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to     achieve local privilege escalation.

    When route4_change() is called on an existing filter, the whole tcf_result struct is always copied into     the new instance of the filter. This causes a problem when updating a filter bound to a class, as     tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the     still referenced class and allowing it to be deleted, leading to a use-after-free.

    We recommend upgrading past commit b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8. (CVE-2023-4206)

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to     achieve local privilege escalation.

    When fw_change() is called on an existing filter, the whole tcf_result struct is always copied into the     new instance of the filter. This causes a problem when updating a filter bound to a class, as     tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the     still referenced class and allowing it to be deleted, leading to a use-after-free.

    We recommend upgrading past commit 76e42ae831991c828cffa8c37736ebfb831ad5ec. (CVE-2023-4207)

    A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to     achieve local privilege escalation.

    When u32_change() is called on an existing filter, the whole tcf_result struct is always copied into the     new instance of the filter. This causes a problem when updating a filter bound to a class, as     tcf_unbind_filter() is always called on the old instance in the success path, decreasing filter_cnt of the     still referenced class and allowing it to be deleted, leading to a use-after-free.

    We recommend upgrading past commit 3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81. (CVE-2023-4208)

    In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race     condition between a nonblocking atomic commit and a driver unload. (CVE-2023-51043)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (CVE-2023-52885)

    In the Linux kernel, the following vulnerability has been resolved:

    can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922)

    In the Linux kernel, the following vulnerability has been resolved:

    igb: Fix igb_down hung on surprise removal (CVE-2023-53148)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Pointer may be dereferenced (CVE-2023-53150)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: prevent soft lockup while flush writes (CVE-2023-53151)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Fix null pointer dereference in tracing_err_log_open() (CVE-2023-53167)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6/addrconf: fix a potential refcount underflow for idev (CVE-2023-53189)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/fair: Don't balance task to its current running CPU (CVE-2023-53215)

    In the Linux kernel, the following vulnerability has been resolved:

    jfs: jfs_dmap: Validate db_l2nbperpage while mounting (CVE-2023-53222)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (CVE-2023-53280)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/client: Fix memory leak in drm_client_modeset_probe (CVE-2023-53288)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix wrong setting of max_corr_read_errors (CVE-2023-53313)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Wait for io return on terminate rport (CVE-2023-53322)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (CVE-2023-53333)

    In the Linux kernel, the following vulnerability has been resolved:

    icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (CVE-2023-53343)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (CVE-2023-53357)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6mr: Fix skb_under_panic in ip6mr_cache_report() (CVE-2023-53365)

    In the Linux kernel, the following vulnerability has been resolved:

    net: dcb: choose correct policy to parse DCB_ATTR_BCN (CVE-2023-53369)

    In the Linux kernel, the following vulnerability has been resolved:

    md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (CVE-2023-53380)

    In the Linux kernel, the following vulnerability has been resolved:

    PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (CVE-2023-53446)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Fix potential NULL pointer dereference (CVE-2023-53451)

    In the Linux kernel, the following vulnerability has been resolved:

    net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (CVE-2023-53546)

    In the Linux kernel, the following vulnerability has been resolved:

    net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (CVE-2023-53548)

    In the Linux kernel, the following vulnerability has been resolved:

    iavf: Fix use-after-free in free_netdev (CVE-2023-53556)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing/histograms: Add histograms to hist_vars if they have referenced variables (CVE-2023-53560)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (CVE-2023-53619)

    In the Linux kernel, the following vulnerability has been resolved:

    ring-buffer: Fix deadloop issue on reading trace_pipe (CVE-2023-53668)

    In the Linux kernel, the following vulnerability has been resolved:

    bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (CVE-2023-53681)

    In the Linux kernel, the following vulnerability has been resolved:

    posix-timers: Ensure timer ID search-loop limit is valid (CVE-2023-53728)

    In the Linux kernel, the following vulnerability has been resolved:

    netlink: fix potential deadlock in netlink_set_err() (CVE-2023-53731)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: wacom: Use ktime_t rather than int when dealing with timestamps (CVE-2023-53797)

    In the Linux kernel, the following vulnerability has been resolved:

    devlink: report devlink_port_type_warn source device (CVE-2023-53841)

    In the Linux kernel, the following vulnerability has been resolved:

    netlink: do not hard code device address lenth in fdb dumps (CVE-2023-53863)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix warning when putting transaction with qgroups enabled after abort (CVE-2023-53865)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: mm: fix VA-range sanity check (CVE-2023-53989)

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: virtio - Fix race on data_avail and actual data (CVE-2023-53998)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (CVE-2023-54014)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix race when deleting quota root from the dirty cow roots list (CVE-2023-54032)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/client: Fix memory leak in drm_client_target_cloned (CVE-2023-54091)

    In the Linux kernel, the following vulnerability has been resolved:

    fs: Protect reconfiguration of sb read-write from racing writes (CVE-2023-54099)

    In the Linux kernel, the following vulnerability has been resolved:

    keys: Fix linking a duplicate key to a keyring's assoc_array (CVE-2023-54170)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Array index may go out of bound (CVE-2023-54179)

    In the Linux kernel, the following vulnerability has been resolved:

    pstore/ram: Add check for kstrdup (CVE-2023-54189)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Fix warning in trace_buffered_event_disable() (CVE-2023-54211)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Address KCSAN report on bpf_lru_list (CVE-2023-54283)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qedf: Fix NULL dereference in error handling (CVE-2023-54289)

    A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in     net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw allows guests with local user privileges     to trigger a deadlock and potentially crash the system. (CVE-2024-0639)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    media: uvcvideo: Handle cameras with invalid descriptors(CVE-2023-53437)

    scsi: target: iscsi: Fix a race condition between login_work and the login thread(CVE-2022-50350)

    crypto: cavium - prevent integer overflow loading firmware(CVE-2022-50330)

    HID: core: do not bypass hid_hw_raw_request(CVE-2025-38494)

    tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak(CVE-2022-50389)

    scsi: qla4xxx: Add length check when parsing nlattrs(CVE-2023-53456)

    virtio-mmio: don't break lifecycle of vm_dev(CVE-2023-53515)

    scsi: qla2xxx: Pointer may be dereferenced(CVE-2023-53150)

    tracing/histograms: Add histograms to hist_vars if they have referenced variables(CVE-2023-53560)

    fs: writeback: fix use-after-free in __mark_inode_dirty()(CVE-2025-39866)

    ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS(CVE-2022-50315)

    pnode: terminate at peers of source(CVE-2022-50280)

    drm/sched: Increment job count before swapping tail spsc queue(CVE-2025-38515)

    tracing: Fix race issue between cpu buffer write and swap(CVE-2023-53368)

    usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()(CVE-2022-50544)

    mtd: Fix device name leak when register device failed in add_mtd_device()(CVE-2022-50566)

    ext4: add bounds checking in get_max_inline_xattr_value_size()(CVE-2023-53285)

    tee: fix NULL pointer dereference in tee_shm_put(CVE-2025-39865)

    crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg(CVE-2025-39964)

    do_change_type(): refuse to operate on unmounted/not ours mounts(CVE-2025-38498)

    drm/gem: Acquire references on GEM handles for framebuffers(CVE-2025-38449)

    dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path(CVE-2023-53604)

    qede: confirm skb is allocated before using(CVE-2022-49084)

    recordmcount: Fix memory leaks in the uwrite function(CVE-2023-53318)

    ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer(CVE-2023-53395)

    usb: net: sierra: check for no status endpoint(CVE-2025-38474)

    posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()(CVE-2025-38352)

    ext4: avoid deadlock in fs reclaim with page writeback(CVE-2023-53149)

    kobject: Add sanity check for kset-kobj.ktype in kset_register()(CVE-2023-53480)

    PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free(CVE-2023-53446)

    tracing: Limit access to parser-buffer when trace_get_user failed(CVE-2025-39683)

    binfmt_misc: fix shift-out-of-bounds in check_special_flags(CVE-2022-50497)

    arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()(CVE-2025-38320)

    udf: Fix uninitialized array access for some pathnames(CVE-2023-53165)

    ext4: avoid crash when inline data creation follows DIO write(CVE-2022-50435)

    serial: 8250: Reinit port-pm on port specific driver unbind(CVE-2023-53176)

    rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails(CVE-2023-53307)

    udf: Do not bother merging very long extents(CVE-2023-53506)

    spi: qup: Don't skip cleanup in remove's error path(CVE-2023-53567)

    calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().(CVE-2025-38181)

    ftrace: Also allocate and copy hash for reading of filter files(CVE-2025-39689)

    xhci: Remove device endpoints from bandwidth list when freeing the device(CVE-2022-50470)

    usbnet: Fix linkwatch use-after-free on disconnect(CVE-2022-50220)

    fs: udf: fix OOB read in lengthAllocDescs handling(CVE-2025-40044)

    blk-mq: use quiesced elevator switch when reinitializing queues(CVE-2022-50552)

    ext4: fix WARNING in mb_find_extent(CVE-2023-53317)

    posix-timers: Ensure timer ID search-loop limit is valid(CVE-2023-53728)

    net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb(CVE-2023-53548)

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
182659	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2023-054 (ALASKERNEL-5.4-2023-054)	Nessus	Amazon Linux Local Security Checks	2023/10/6	2026/2/9	high
284771	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-1050)	Nessus	Huawei Local Security Checks	2026/1/15	2026/9/19	high

检测

插件搜索

high

high