The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2783-1 advisory.

    This update for the Linux Kernel 5.3.18-24_93 fixes several issues.

    The following security issues were fixed:

    - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel.
    (bnc#1198033)
    - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access     could crash the system or corrupt the system memory. (bsc#1196830)
    - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel     (bnc#1198031).
    - CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the     ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
    - CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu()     (bsc#1200604).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5469-1 advisory.

    It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when     booted in secure boot environments. A privileged attacker could use this to bypass UEFI Secure Boot     restrictions. (CVE-2022-21499)

    Aaron Adams discovered that the netfilter subsystem in the Linux kernel did not properly handle the     removal of stateful expressions in some situations, leading to a use-after-free vulnerability. A local     attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
    (CVE-2022-1966)

    Billy Jheng Bing Jhong discovered that the CIFS network file system implementation in the Linux kernel did     not properly validate arguments to ioctl() in some situations. A local attacker could possibly use this to     cause a denial of service (system crash). (CVE-2022-0168)

    Hu Jiahui discovered that multiple race conditions existed in the Advanced Linux Sound Architecture (ALSA)     framework, leading to use-after-free vulnerabilities. A local attacker could use these to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-1048)

    Qiuhao Li, Gaoning Pan and Yongkang Jia discovered that the KVM implementation in the Linux kernel did not     properly perform guest page table updates in some situations. An attacker in a guest vm could possibly use     this to crash the host OS. (CVE-2022-1158)

    It was discovered that the implementation of the 6pack and mkiss protocols in the Linux kernel did not     handle detach events properly in some situations, leading to a use-after-free vulnerability. A local     attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1195)

    Duoming Zhou discovered that the 6pack protocol implementation in the Linux kernel did not handle detach     events properly in some situations, leading to a use-after-free vulnerability. A local attacker could use     this to cause a denial of service (system crash). (CVE-2022-1198)

    Duoming Zhou discovered that the AX.25 amateur radio protocol implementation in the Linux kernel did not     handle detach events properly in some situations. A local attacker could possibly use this to cause a     denial of service (system crash) or execute arbitrary code. (CVE-2022-1199)

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux     kernel during device detach operations. A local attacker could possibly use this to cause a denial of     service (system crash). (CVE-2022-1204)

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux     kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a     denial of service (system crash). (CVE-2022-1205)

    Qiuhao Li, Gaoning Pan, and Yongkang Jia discovered that the kvm implementation in the Linux kernel did     not handle releasing a virtual cpu properly. A local attacker in a guest VM coud possibly use this to     cause a denial of service (host system crash). (CVE-2022-1263)

    It was discovered that the PF_KEYv2 implementation in the Linux kernel did not properly initialize kernel     memory in some situations. A local attacker could use this to expose sensitive information (kernel     memory). (CVE-2022-1353)

    It was discovered that the implementation of X.25 network protocols in the Linux kernel did not terminate     link layer sessions properly. A local attacker could possibly use this to cause a denial of service     (system crash). (CVE-2022-1516)

    It was discovered that the ACRN Hypervisor Service Module implementation in the Linux kernel did not     properly deallocate memory in some situations. A local privileged attacker could possibly use this to     cause a denial of service (memory exhaustion). (CVE-2022-1651)

    It was discovered that the RxRPC session socket implementation in the Linux kernel did not properly handle     ioctls called when no security protocol is given. A local attacker could use this to cause a denial of     service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-1671)

    Ziming Zhang discovered that the netfilter subsystem in the Linux kernel did not properly validate sets     with multiple ranged fields. A local attacker could use this to cause a denial of service or execute     arbitrary code. (CVE-2022-1972)

     discovered that the 802.2 LLC type 2 driver in the Linux kernel did not properly perform     reference counting in some error conditions. A local attacker could use this to cause a denial of service.
    (CVE-2022-28356)

    It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly     handle certain error conditions, leading to a double-free. A local attacker could possibly use this to     cause a denial of service (system crash). (CVE-2022-28388)

    It was discovered that the Microchip CAN BUS Analyzer interface implementation in the Linux kernel did not     properly handle certain error conditions, leading to a double-free. A local attacker could possibly use     this to cause a denial of service (system crash). (CVE-2022-28389)

    It was discovered that the EMS CAN/USB interface implementation in the Linux kernel contained a double-     free vulnerability when handling certain error conditions. A local attacker could use this to cause a     denial of service (memory exhaustion). (CVE-2022-28390)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1163-1 advisory.

  - In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This     could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:
    A-185125206References: Upstream kernel (CVE-2021-39698)

  - The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not     properly update bounds while handling the mov32 instruction, which allows local users to obtain     potentially sensitive address information, aka a pointer leak. (CVE-2021-45402)

  - In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota     tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a     corrupted quota file. (CVE-2021-45868)

  - A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to     userspace. (CVE-2022-0850)

  - A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMA_FROM_DEVICE.
    This flaw allows a local user to read random memory from the kernel space. (CVE-2022-0854)

  - A use-after-free flaw was found in the Linux kernel's FUSE filesystem in the way a user triggers write().
    This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in     privilege escalation. (CVE-2022-1011)

  - A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a     use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel     information leak problem caused by a local, unprivileged attacker. (CVE-2022-1016)

  - A use-after-free flaw was found in the Linux kernel's sound subsystem in the way a user triggers     concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM     for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the     system. (CVE-2022-1048)

  - A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain     privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past     commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 (CVE-2022-1055)

  - A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a     local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device     is detached and reclaim resources early. (CVE-2022-1195)

  - A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an     attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.
    (CVE-2022-1198)

  - A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating     amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free     vulnerability. (CVE-2022-1199)

  - A NULL pointer dereference flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality     in the way a user connects with the protocol. This flaw allows a local user to crash the system.
    (CVE-2022-1205)

  - Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to     multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV     device frontends are using the grant table interfaces for removing access rights of the backends in ways     being subject to race conditions, resulting in potential data leaks, data corruption by malicious     backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the     gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they     assume that a following removal of the granted access will always succeed, which is not true in case the     backend has mapped the granted page between those two operations. As a result the backend can keep access     to the memory page of the guest no matter how the page will be used after the frontend I/O has finished.
    The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of     a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038     gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus,     9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no     longer in use, but the freeing of the related data page is not synchronized with dropping the granted     access. As a result the backend can keep access to the memory page even after it has been freed and then     re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to     revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which     can be triggered by the backend. CVE-2022-23042 (CVE-2022-23036, CVE-2022-23037, CVE-2022-23038,     CVE-2022-23039, CVE-2022-23040, CVE-2022-23041, CVE-2022-23042)

  - In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not     validated and might be manipulated by the host for out-of-array access. (CVE-2022-27223)

  - A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and     net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap     objects and may cause a local privilege escalation threat. (CVE-2022-27666)

  - usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28388)

  - mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28389)

  - ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
    (CVE-2022-28390)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double     free. (CVE-2022-28389)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
164097	SUSE SLES15 Security Update : kernel (Live Patch 21 for SLE 15 SP2) (SUSE-SU-2022:2783-1)	Nessus	SuSE Local Security Checks	2022/8/13	2026/6/25	high
161955	Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-5469-1)	Nessus	Ubuntu Local Security Checks	2022/6/8	2026/6/3	high
159698	SUSE SLES15 Security Update : kernel (SUSE-SU-2022:1163-1)	Nessus	SuSE Local Security Checks	2022/4/13	2023/7/13	high
224696	Linux Distros Unpatched Vulnerability : CVE-2022-28389	Nessus	Misc.	2025/3/5	2026/7/17	medium
236670	Alibaba Cloud Linux 3 : 0125: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2022:0125)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2026/6/3	high

检测

插件搜索

high

high

high

medium

high