The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0150 advisory.

    - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783284] {CVE-2011-4086}
    - [fs] epoll: workarounds to preserve kernel ABI (Jason Baron) [681692] {CVE-2011-1083}
    - [fs] epoll: limit paths (Jason Baron) [681692] {CVE-2011-1083}
    - [fs] epoll: prevent creating circular epoll structures (Jason Baron) [681692] {CVE-2011-1083}
    - [fs] epoll: add ep_call_nested() (Jason Baron) [681692] {CVE-2011-1083}
    - [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [750283]     {CVE-2012-0028}
    - [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [754620] {CVE-2011-4325}
    - [scsi] sd: fix 32-on-64 block device ioctls (Paolo Bonzini) [752386] {CVE-2011-4127}
    - [md] dm: do not forward ioctls from LVs to the underlying devices (Paolo Bonzini) [752386]     {CVE-2011-4127}
    - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752386] {CVE-2011-4127}
    - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752386] {CVE-2011-4127}
    - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747946] {CVE-2011-3638}
    - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749160] {CVE-2011-4077}
    - [fs] hfs: add sanity check for file name length (Eric Sandeen) [755433] {CVE-2011-4330}
    - [security] keys: Fix NULL deref in user-defined key type (David Howells) [751301] {CVE-2011-4110}
    - [fs] proc: fix oops on invalid /proc/<pid>/maps access (Johannes Weiner) [747699] {CVE-2011-3637}
    - [misc] remove div_long_long_rem (Prarit Bhargava) [732614] {CVE-2011-3209}
    - [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [703045] {CVE-2011-2942}
    - [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692042] {CVE-2011-1020}
    - [mm] implement access_remote_vm (Johannes Weiner) [692042] {CVE-2011-1020}
    - [mm] factor out main logic of access_process_vm (Johannes Weiner) [692042] {CVE-2011-1020}
    - [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692042] {CVE-2011-1020}
    - [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692042]     {CVE-2011-1020}
    - [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692042] {CVE-2011-1020}
    - [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692042]     {CVE-2011-1020}
    - [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692042]     {CVE-2011-1020}
    - [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692042] {CVE-2011-1020}
    - [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692042] {CVE-2011-1020}
    - [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692042] {CVE-2011-1020}
    - [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692042] {CVE-2011-1020}
    - [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692042] {CVE-2011-1020}
    - [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738300] {CVE-2011-3363}
    - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738300] {CVE-2011-3363}
    - [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732631] {CVE-2011-1162}
    - [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716846] {CVE-2011-2494}
    - [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716544] {CVE-2011-2496}
    - [fs] ecryptfs: Add mount option to check uid of mounting device (Eric Sandeen) [731174] {CVE-2011-1833}
    - [misc] taskstats: don't allow duplicate entries in listener mode (Jerome Marchand) [715450]     {CVE-2011-2484}
    - [net] gro: Only reset frag0 when skb can be pulled (Herbert Xu) [679682] {CVE-2011-2723}
    - [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714870] {CVE-2011-2482}
    - [xen] iommu: disable bus-mastering on hw that causes IOMMU fault (Laszlo Ersek) [730343] {CVE-2011-3131}
    - [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718884] {CVE-2011-2519}
    - [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [719850] {CVE-2011-2901}
    - [usb] auerswald: fix buffer overflow (Don Zickus) [722396] {CVE-2009-4067}
    - [char] tpm: Fix uninitialized usage of data buffer (Stanislaw Gruszka) [684673] {CVE-2011-1160}
    - [fs] ext4: Fix max size and logical block counting of extent file (Lukas Czerner) [722563]     {CVE-2011-2695}
    - [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718155]     {CVE-2011-2517}
    - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716828] {CVE-2011-2495}
    - [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709547] {CVE-2011-2491}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A flaw was found in the way the Linux kernel's Event Poll (epoll) subsystem handled large, nested epoll structures. A local, unprivileged user could use this flaw to cause a denial of service.

A malicious Network File System version 4 (NFSv4) server could return a crafted reply to a GETACL request, causing a denial of service on the client.

The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address, as demonstrated by rds-ping.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of     epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a     crafted application that makes epoll_create and epoll_ctl system calls. (CVE-2011-1083)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2026 advisory.

    - epoll: clear the tfile_check_list on -ELOOP (Joe Jin)  {CVE-2012-3375}
    - epoll: kabi fixups for epoll limit wakeup paths (Joe Jin) {CVE-2011-1083}
    - epoll: limit paths (Jason Baron)  {CVE-2011-1083}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
68468	Oracle Linux 5 : kernel (ELSA-2012-0150)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	medium
69590	Amazon Linux AMI : kernel (ALAS-2012-100)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	medium
217367	Linux Distros Unpatched Vulnerability : CVE-2011-1083	Nessus	Misc.	2025/3/3	2026/1/28	medium
68679	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2026)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	medium

检测

插件搜索

medium

medium

medium

medium