A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. (CVE-2011-4086)

Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. (CVE-2011-4347)

Stephan Barwolf discovered a flaw in the KVM (kernel-based virtual machine) subsystem of the Linux kernel. A local unprivileged user can crash use this flaw to crash VMs causing a deny of service.
(CVE-2012-0045)

A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. (CVE-2012-1090)

H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system.
(CVE-2012-1097)

A flaw was discovered in the Linux kernel's cgroups subset. A local attacker could use this flaw to crash the system. (CVE-2012-1146)

A flaw was found in the Linux kernel's handling of paged memory. A local unprivileged user, or a privileged user within a KVM guest, could exploit this flaw to crash the system. (CVE-2012-1179)

Tetsuo Handa reported a flaw in the OOM (out of memory) killer of the Linux kernel. A local unprivileged user can exploit this flaw to cause system unstability and denial of services. (CVE-2012-4398).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

CVE-2012-1097 regset: Prevent NULL pointer reference on readonly regsets

Disable threading in hibernate compression/decompression

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The SUSE Linux Enterprise 11 SP1 kernel has been updated to the 2.6.32.59 stable release to fix a lot of bugs and security issues.

The following security issues have been fixed :

  - A use after free bug in hugetlb support could be used by     local attackers to crash the system. (CVE-2012-2133)

  - A NULL pointer dereference bug in the regsets proc file     could be used by local attackers to perhaps crash the     system. With mmap_min_addr is set and enabled,     exploitation is unlikely. (CVE-2012-1097)

  - A reference counting issue in CLONE_IO could be used by     local attackers to cause a denial of service (out of     memory). (CVE-2012-0879)

  - A file handle leak in CIFS code could be used by local     attackers to crash the system. (CVE-2012-1090)

  - Large nested epoll chains could be used by local     attackers to cause a denial of service (excessive CPU     consumption). (CVE-2011-1083)

  - When using KVM, programming a PIT timer without a     irqchip configuration, can be used to crash the kvm     guest. This likely can be done only by a privileged     guest user. (CVE-2011-4622)

  - A KVM 32bit guest crash in 'syscall' opcode handling was     fixed that could be caused by local attackers.
    (CVE-2012-0045)

  - Fixed a oops in jbd/jbd2 that could be caused by     specific filesystem access patterns. The following     non-security issues have been fixed:. (CVE-2011-4086)

X86 :

  - x86: fix the initialization of physnode_map.
    (bnc#748112)

  - x86: Allow bootmem reserves at greater than 8G node     offset within a node. (bnc#740895)

  - x86, tsc: Fix SMI induced variation in     quick_pit_calibrate(). (bnc#751322)

  - x86, efi: Work around broken firmware. (bnc#714507)     BONDING :

  - bonding: update speed/duplex for NETDEV_CHANGE.
    (bnc#752634)

  - bonding: comparing a u8 with -1 is always false.
    (bnc#752634)

  - bonding: start slaves with link down for ARP monitor.
    (bnc#752634)

  - bonding: send gratuitous ARP for all addresses     (bnc#752491). XFS :

  - xfs: Fix excessive inode syncing when project quota is     exceeded. (bnc#756448)

  - xfs: Fix oops on IO error during     xlog_recover_process_iunlinks() (bnc#716850). SCSI :

  - scsi/ses: Handle non-unique element descriptors.
    (bnc#749342, bnc#617344)

  - scsi/sd: mark busy sd majors as allocated (bug#744658).

  - scsi: Check for invalid sdev in scsi_prep_state_check()     (bnc#734300). MD/RAID :

  - md: fix possible corruption of array metadata on     shutdown.

  - md: ensure changes to write-mostly are reflected in     metadata. (bnc#755178)

  - md: do not set md arrays to readonly on shutdown     (bnc#740180, bnc#713148, bnc#734900). XEN :

  - smpboot: adjust ordering of operations.

  - x86-64: provide a memset() that can deal with 4Gb or     above at a time. (bnc#738528)

  - blkfront: properly fail packet requests. (bnc#745929)

  - Update Xen patches to 2.6.32.57.

  - xenbus: Reject replies with payload >     XENSTORE_PAYLOAD_MAX.

  - xenbus_dev: add missing error checks to watch handling.

  - Refresh other Xen patches. (bnc#652942, bnc#668194,     bnc#688079)

  - fix Xen-specific kABI issue in Linux 2.6.19. NFS :

  - NFSD: Fill in WCC data for REMOVE, RMDIR, MKNOD, and     MKDIR. (bnc#751880)

  - nfs: Include SYNC flag when comparing mount options with     NOAC flag. (bnc#745422)

  - NFS returns EIO for EDQUOT and others. (bnc#747028)

  - lockd: fix arg parsing for grace_period and timeout.
    (bnc#733761)

  - nfs: allow nfs4leasetime to be set before starting     servers. (bnc#733761)

  - nfs: handle d_revalidate of dot correctly (bnc#731809).
    S/390 :

  - ctcmpc: use correct idal word list for ctcmpc     (bnc#750171,LTC#79264).

  - qeth: synchronize discipline module loading     (bnc#747430,LTC#78788).

  - qdio: avoid race leading to stall when tolerating CQ     (bnc#737326,LTC#76599).

  - kernel: no storage key operations for invalid page table     entries (bnc#737326,LTC#77697). OTHER :

  - tlan: add cast needed for proper 64 bit operation.
    (bnc#756840)

  - dl2k: Tighten ioctl permissions. (bnc#758813)

  - tg3: Fix RSS ring refill race condition. (bnc#757917)

  - usbhid: fix error handling of not enough bandwidth.
    (bnc#704280)

  - pagecache limit: Fix the shmem deadlock. (bnc#755537)

  - tty_audit: fix tty_audit_add_data live lock on audit     disabled. (bnc#721366)

  - ixgbe: driver sets all WOL flags upon initialization so     that machine is powered on as soon at it is switched     off. (bnc#693639)

  - PCI: Set device power state to PCI_D0 for device without     native PM support. (bnc#752972)

  - dlm: Do not allocate a fd for peeloff. (bnc#729247)

  - sctp: Export sctp_do_peeloff. (bnc#729247)

  - epoll: Do not limit non-nested epoll paths. (bnc#676204)

  - mlx4: Limit MSI-X vector allocation. (bnc#624072)

  - mlx4: Changing interrupt scheme. (bnc#624072)

  - mlx4_en: Assigning TX irq per ring. (bnc#624072)

  - mlx4_en: Restoring RX buffer pointer in case of failure.
    (bnc#624072)

  - mlx4_en: using new mlx4 interrupt scheme. (bnc#624072)

  - igb: Fix for Alt MAC Address feature on 82580 and later     devices. (bnc#746980)

  - igb: Power down link when interface is down.
    (bnc#745699)

  - igb: use correct bits to identify if managability is     enabled. (bnc#743209)

  - intel_agp: Do not oops with zero stolen memory.
    (bnc#738679)

  - agp: fix scratch page cleanup. (bnc#738679)

  - hugetlb: add generic definition of NUMA_NO_NODE.
    (bnc#751844)

  - sched: Fix proc_sched_set_task(). (bnc#717994)

  - PM: Print a warning if firmware is requested when tasks     are frozen. (bnc#749886)

  - PM / Sleep: Fix freezer failures due to racy     usermodehelper_is_disabled(). (bnc#749886)

  - PM / Sleep: Fix read_unlock_usermodehelper() call.
    (bnc#749886)

  - firmware loader: allow builtin firmware load even if     usermodehelper is disabled. (bnc#749886)

  - PM / Hibernate: Enable usermodehelpers in     software_resume() error path. (bnc#744163)

  - ipv6: Allow inet6_dump_addr() to handle more than 64     addresses. (bnc#748279)

  - ipv6: fix refcnt problem related to POSTDAD state.
    (bnc#743619)

  - be2net: change to show correct physical link status.
    (bnc#727834)

  - be2net: changes to properly provide phy details.
    (bnc#727834)

  - aio: fix race between io_destroy() and io_submit().
    (bnc#747445 / bnc#611264)

  - intel-iommu: Check for identity mapping candidate using     system dma mask. (bnc#700449)

  - intel-iommu: Dont cache iova above 32bit. (bnc#700449)

  - intel-iommu: Add domain check in     domain_remove_one_dev_info. (bnc#700449)

  - intel-iommu: Provide option to enable 64-bit IOMMU pass     through mode. (bnc#700449)

  - intel-iommu: Remove Host Bridge devices from identity     mapping. (bnc#700449)

  - intel-iommu: Speed up processing of the identity_mapping     function. (bnc#700449)

  - intel-iommu: Use coherent DMA mask when requested.
    (bnc#700449)

  - 1: Fix accounting of softirq time when idle.
    (bnc#719793)

  - driver-core: fix race between device_register and     driver_register. (bnc#742358)

  - dcache: patches.fixes/large-hash-dcache_init-fix.patch:
    Fix oops when initializing large hash on > 16TB machine.
    (bnc#742210)

  - kdump: Save PG_compound or PG_head value in VMCOREINFO.
    (bnc#738503)

  - Update config files: disable NET_9P_RDMA. (bnc#720374)

  - cdc-wdm: fix race leading leading to memory corruption.
    (bnc#759544)

A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. (CVE-2011-4086)

A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. (CVE-2012-1090)

H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system.
(CVE-2012-1097)

A flaw was discovered in the Linux kernel's cgroups subset. A local attacker could use this flaw to crash the system. (CVE-2012-1146)

A flaw was found in the Linux kernel's ext4 file system when mounting a corrupt filesystem. A user-assisted remote attacker could exploit this flaw to cause a denial of service. (CVE-2012-2100)

This USN was released in error and has been removed.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Fix bug number for commit 'cciss: Update HPSA_BOUNDARY'     (Joe Jin) [Orabug: 14681166]

  - cciss: Update HPSA_BOUNDARY. (Joe Jin) [Orabug:
    14319765]

  - KVM: introduce kvm_for_each_memslot macro (Maxim Uvarov)     [Bugdb: 13966]

  - dl2k: Clean up rio_ioctl (Jeff Mahoney) [Orabug:
    14126896] (CVE-2012-2313)

  - NFSv4: include bitmap in nfsv4 get acl data (Andy     Adamson) (CVE-2011-4131)

  - KVM: Fix buffer overflow in kvm_set_irq (Avi Kivity)     [Bugdb: 13966] (CVE-2012-2137)

  - net: sock: validate data_len before allocating skb in     sock_alloc_send_pskb (Jason Wang) [Bugdb: 13966]     (CVE-2012-2136)

  - mm: pmd_read_atomic: fix 32bit PAE pmd walk vs     pmd_populate SMP race condition (Andrea Arcangeli)     [Bugdb: 13966] (CVE-2012-2373)

  - KVM: lock slots_lock around device assignment (Alex     Williamson) [Bugdb: 13966] (CVE-2012-2121)

  - KVM: unmap pages from the iommu when slots are removed     (Maxim Uvarov) [Bugdb: 13966] (CVE-2012-2121)

  - fcaps: clear the same personality flags as suid when     fcaps are used (Eric Paris) [Bugdb: 13966]     (CVE-2012-2123)

  - tilegx: enable SYSCALL_WRAPPERS support (Chris Metcalf)     (CVE-2009-0029)

  - drm/i915: fix integer overflow in i915_gem_do_execbuffer     (Xi Wang) [Orabug: 14107456] (CVE-2012-2384)

  - drm/i915: fix integer overflow in i915_gem_execbuffer2     (Xi Wang) [Orabug: 14107445] (CVE-2012-2383)

  - [dm] do not forward ioctls from logical volumes to the     underlying device (Joe Jin) (CVE-2011-4127)

  - [block] fail SCSI passthrough ioctls on partition     devices (Joe Jin) (CVE-2011-4127)

  - [block] add and use scsi_blk_cmd_ioctl (Joe Jin)     [Orabug: 14056755] (CVE-2011-4127)

  - KVM: Ensure all vcpus are consistent with in-kernel     irqchip settings (Avi Kivity) [Bugdb: 13871]     (CVE-2012-1601)

  - regset: Return -EFAULT, not -EIO, on host-side memory     fault (H. Peter Anvin) (CVE-2012-1097)

  - regset: Prevent null pointer reference on readonly     regsets (H. Peter Anvin) (CVE-2012-1097)

  - cifs: fix dentry refcount leak when opening a FIFO on     lookup (Jeff Layton) (CVE-2012-1090)

  - mm: thp: fix pmd_bad triggering in code paths holding     mmap_sem read mode (Andrea Arcangeli) (CVE-2012-1179)

  - ext4: fix undefined behavior in ext4_fill_flex_info (Xi     Wang) (CVE-2009-4307)

  - ocfs2: clear unaligned io flag when dio fails (Junxiao     Bi) [Orabug: 14063941]

  - aio: make kiocb->private NUll in init_sync_kiocb     (Junxiao Bi) [Orabug: 14063941]

  - igb: Fix for Alt MAC Address feature on 82580 and later     devices (Carolyn Wyborny) [Orabug: 14258706]

  - igb: Alternate MAC Address Updates for Func2&3 (Akeem G.
    Abodunrin) [Orabug: 14258706]

  - igb: Alternate MAC Address EEPROM Updates (Akeem G.
    Abodunrin) [Orabug: 14258706]

  - cciss: only enable cciss_allow_hpsa when for ol5 (Joe     Jin) [Orabug: 14106006]

  - Revert 'cciss: remove controllers supported by hpsa'     (Joe Jin) [Orabug: 14106006]

  - [scsi] hpsa: add all support devices for ol5 (Joe Jin)     [Orabug: 14106006]

  - Disable VLAN 0 tagging for none VLAN traffic (Adnan     Misherfi) [Orabug: 14406424]

  - x86: Add Xen kexec control code size check to linker     script (Daniel Kiper)

  - drivers/xen: Export vmcoreinfo through sysfs (Daniel     Kiper)

  - x86/xen/enlighten: Add init and crash kexec/kdump hooks     (Maxim Uvarov)

  - x86/xen: Add kexec/kdump makefile rules (Daniel Kiper)

  - x86/xen: Add x86_64 kexec/kdump implementation (Daniel     Kiper)

  - x86/xen: Add placeholder for i386 kexec/kdump     implementation (Daniel Kiper)

  - x86/xen: Register resources required by kexec-tools     (Daniel Kiper)

  - x86/xen: Introduce architecture dependent data for     kexec/kdump (Daniel Kiper)

  - xen: Introduce architecture independent data for     kexec/kdump (Daniel Kiper)

  - x86/kexec: Add extra pointers to transition page table     PGD, PUD, PMD and PTE (Daniel Kiper)

  - kexec: introduce kexec_ops struct (Daniel Kiper)

  - SPEC: replace DEFAULTKERNEL from kernel-ovs to     kernel-uek

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-4307     Nageswara R Sastry reported an issue in the ext4     filesystem. Local users with the privileges to mount a     filesystem can cause a denial of service (BUG) by     providing a s_log_groups_per_flex value greater than 31.

  - CVE-2011-1833     Vasiliy Kulikov of Openwall and Dan Rosenberg discovered     an information leak in the eCryptfs filesystem. Local     users were able to mount arbitrary directories.

  - CVE-2011-4347     Sasha Levin reported an issue in the device assignment     functionality in KVM. Local users with permission to     access /dev/kvm could assign unused pci devices to a     guest and cause a denial of service (crash).

  - CVE-2012-0045     Stephan Barwolf reported an issue in KVM. Local users in     a 32-bit guest running on a 64-bit system can crash the     guest with a syscall instruction.

  - CVE-2012-1090     CAI Qian reported an issue in the CIFS filesystem. A     reference count leak can occur during the lookup of     special files, resulting in a denial of service (oops)     on umount.

  - CVE-2012-1097     H. Peter Anvin reported an issue in the regset     infrastructure. Local users can cause a denial of     service (NULL pointer dereference) by triggering the     write methods of readonly regsets.

Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. (CVE-2011-4347)

Stephan Barwolf discovered a flaw in the KVM (kernel-based virtual machine) subsystem of the Linux kernel. A local unprivileged user can crash use this flaw to crash VMs causing a deny of service.
(CVE-2012-0045)

H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system.
(CVE-2012-1097)

A flaw was discovered in the Linux kernel's cgroups subset. A local attacker could use this flaw to crash the system. (CVE-2012-1146).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. (CVE-2011-4347)

Stephan Barwolf discovered a flaw in the KVM (kernel-based virtual machine) subsystem of the Linux kernel. A local unprivileged user can crash use this flaw to crash VMs causing a deny of service.
(CVE-2012-0045)

A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. (CVE-2012-1090)

H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system.
(CVE-2012-1097)

Tetsuo Handa reported a flaw in the OOM (out of memory) killer of the Linux kernel. A local unprivileged user can exploit this flaw to cause system unstability and denial of services. (CVE-2012-4398).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the     absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer     dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET     ptrace call. (CVE-2012-1097)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1042 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    This update fixes the following security issues:

    * A local, unprivileged user could use an integer overflow flaw in     drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their     privileges. (CVE-2012-0044, Important)

    * It was found that the kvm_vm_ioctl_assign_device() function in the KVM     (Kernel-based Virtual Machine) subsystem of a Linux kernel did not check if     the user requesting device assignment was privileged or not. A local,     unprivileged user on the host could assign unused PCI devices, or even     devices that were in use and whose resources were not properly claimed by     the respective drivers, which could result in the host crashing.
    (CVE-2011-4347, Moderate)

    * A flaw was found in the way the Linux kernel's XFS file system     implementation handled on-disk Access Control Lists (ACLs). A local,     unprivileged user could use this flaw to cause a denial of service or     escalate their privileges by mounting a specially-crafted disk.
    (CVE-2012-0038, Moderate)

    * It was found that the Linux kernel's register set (regset) common     infrastructure implementation did not check if the required get and set     handlers were initialized. A local, unprivileged user could use this flaw     to cause a denial of service by performing a register set operation with a     ptrace() PTRACE_SETREGSET or PTRACE_GETREGSET request. (CVE-2012-1097,     Moderate)

    * A race condition was found in the Linux kernel's memory management     subsystem in the way pmd_none_or_clear_bad(), when called with mmap_sem in     read mode, and Transparent Huge Pages (THP) page faults interacted. A     privileged user in a KVM guest with the ballooning functionality enabled     could potentially use this flaw to crash the host. A local, unprivileged     user could use this flaw to crash the system. (CVE-2012-1179, Moderate)

    Red Hat would like to thank Chen Haogang for reporting CVE-2012-0044; Sasha     Levin for reporting CVE-2011-4347; Wang Xi for reporting CVE-2012-0038; and     H. Peter Anvin for reporting CVE-2012-1097.

    This update also fixes the following bugs:

    * When a RoCE (RDMA over Converged Ethernet) adapter with active RoCE     communications was taken down suddenly (either by adapter failure or the     intentional shutdown of the interface), the ongoing RoCE communications     could cause the kernel to panic and render the machine unusable. A patch     has been provided to protect the kernel in this situation and to pass an     error up to the application still using the interface after it has been     taken down instead. (BZ#799944)

    * The fix for Red Hat Bugzilla bug 713494, released via RHSA-2011:0928,     introduced a regression. Attempting to change the state of certain     features, such as GRO (Generic Receive Offload) or TSO (TCP segment     offloading), for a 10 Gigabit Ethernet card that is being used in a     virtual LAN (VLAN) resulted in a kernel panic. (BZ#816974)

    * If a new file was created on a Network File System version 4 (NFSv4)     share, the ownership was set to nfsnobody (-2) until it was possible to     upcall to the idmapper. As a consequence, subsequent file system operations     could incorrectly use -2 for the user and group IDs for the given file,     causing certain operations to fail. In reported cases, this issue also     caused Viminfo file is not writable errors for users running Vim with     files on an NFSv4 share. (BZ#820960)

    Users should upgrade to these updated packages, which contain backported     patches to correct these issues. The system must be rebooted for this     update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

This update fixes the following security issues :

  - Numerous reference count leaks were found in the Linux     kernel's block layer I/O context handling     implementation. This could allow a local, unprivileged     user to cause a denial of service. (CVE-2012-0879,     Moderate)

  - A flaw was found in the Linux kernel's cifs_lookup()     implementation. POSIX open during lookup should only be     supported for regular files. When non-regular files (for     example, a named (FIFO) pipe or other special files) are     opened on lookup, it could cause a denial of service.
    (CVE-2012-1090, Moderate)

  - It was found that the Linux kernel's register set     (regset) common infrastructure implementation did not     check if the required get and set handlers were     initialized. A local, unprivileged user could use this     flaw to cause a denial of service by performing a     register set operation with a ptrace() PTRACE_SETREGSET     or PTRACE_GETREGSET request. (CVE-2012-1097, Moderate)

This update also fixes several bugs and adds various enhancements. The system must be rebooted for this update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0481 advisory.

    - Revert: [fs] NFSv4: include bitmap in nfsv4 get acl data (Sachin Prabhu) [753231 753232] {CVE-2011-4131}
    - [kernel] regset: Return -EFAULT, not -EIO, on host-side memory fault (Jerome Marchand) [799212 799213]     {CVE-2012-1097}
    - [kernel] regset: Prevent null pointer reference on readonly regsets (Jerome Marchand) [799212 799213]     {CVE-2012-1097}
    - [block] Fix io_context leak after failure of clone with CLONE_IO (Vivek Goyal) [796846 791125]     {CVE-2012-0879}
    - [block] Fix io_context leak after clone with CLONE_IO (Vivek Goyal) [796846 791125] {CVE-2012-0879}
    - [fs] cifs: fix dentry refcount leak when opening a FIFO on lookup (Sachin Prabhu) [798298 781893]     {CVE-2012-1090}
    - [fs] NFSv4: include bitmap in nfsv4 get acl data (Sachin Prabhu) [753231 753232] {CVE-2011-4131}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
58946	Ubuntu 11.10 : linux vulnerabilities (USN-1431-1)	Nessus	Ubuntu Local Security Checks	2012/5/1	2019/9/19	critical
58346	Fedora 15 : kernel-2.6.42.9-2.fc15 (2012-3356)	Nessus	Fedora Local Security Checks	2012/3/15	2021/1/11	high
64173	SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 6227 / 6229 / 6230)	Nessus	SuSE Local Security Checks	2013/1/25	2021/1/19	high
59322	USN-1458-1 : linux-ti-omap4 vulnerabilities	Nessus	Ubuntu Local Security Checks	2012/6/1	2016/12/1	critical
58494	Ubuntu 11.04 : linux vulnerabilities (USN-1406-1)	Nessus	Ubuntu Local Security Checks	2012/3/27	2019/9/19	critical
79484	OracleVM 3.1 : kernel-uek (OVMSA-2012-0042)	Nessus	OracleVM Local Security Checks	2014/11/26	2021/1/4	high
58486	Debian DSA-2443-1 : linux-2.6 - privilege escalation/denial of service	Nessus	Debian Local Security Checks	2012/3/27	2021/1/11	high
58741	Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1421-1)	Nessus	Ubuntu Local Security Checks	2012/4/13	2019/9/19	critical
58871	Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1426-1)	Nessus	Ubuntu Local Security Checks	2012/4/25	2019/9/19	high
217678	Linux Distros Unpatched Vulnerability : CVE-2012-1097	Nessus	Misc.	2025/3/4	2026/1/28	high
58312	Fedora 16 : kernel-3.2.9-2.fc16 (2012-3350)	Nessus	Fedora Local Security Checks	2012/3/12	2021/1/11	high
58495	Ubuntu 10.10 : linux vulnerabilities (USN-1407-1)	Nessus	Ubuntu Local Security Checks	2012/3/27	2019/9/19	critical
58870	Ubuntu 10.04 LTS : linux vulnerabilities (USN-1425-1)	Nessus	Ubuntu Local Security Checks	2012/4/25	2019/9/19	high
64044	RHEL 6 : kernel (RHSA-2012:1042)	Nessus	Red Hat Local Security Checks	2013/1/24	2025/4/15	high
61302	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120417)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
68515	Oracle Linux 6 : kernel (ELSA-2012-0481)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	high

检测

插件搜索

critical

high

high

critical

critical

high

high

critical

high

high

high

critical

high

high

high

high