The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12120 advisory.

    - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Pablo Neira Ayuso)     [Orabug: 34978152]  {CVE-2023-0179}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5938-1 advisory.

    It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly     handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability.
    A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2023-0461)

    Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel did not properly handle VLAN     headers in some situations. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2023-0179)

    It was discovered that the NVMe driver in the Linux kernel did not properly handle reset events in some     situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3169)

    Maxim Levitsky discovered that the KVM nested virtualization (SVM) implementation for AMD processors in     the Linux kernel did not properly handle nested shutdown execution. An attacker in a guest vm could use     this to cause a denial of service (host kernel crash) (CVE-2022-3344)

    Gwangun Jung discovered a race condition in the IPv4 implementation in the Linux kernel when deleting     multipath routes, resulting in an out-of-bounds read. An attacker could use this to cause a denial of     service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-3435)

    It was discovered that a race condition existed in the Kernel Connection Multiplexor (KCM) socket     implementation in the Linux kernel when releasing sockets in certain situations. A local attacker could     use this to cause a denial of service (system crash). (CVE-2022-3521)

    It was discovered that the Netronome Ethernet driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-3545)

    It was discovered that the Intel i915 graphics driver in the Linux kernel did not perform a GPU TLB flush     in some situations. A local attacker could use this to cause a denial of service or possibly execute     arbitrary code. (CVE-2022-4139)

    It was discovered that a race condition existed in the Xen network backend driver in the Linux kernel when     handling dropped packets in certain circumstances. An attacker could use this to cause a denial of service     (kernel deadlock). (CVE-2022-42328, CVE-2022-42329)

    It was discovered that the NFSD implementation in the Linux kernel contained a use-after-free     vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash) or     execute arbitrary code. (CVE-2022-4379)

    It was discovered that a race condition existed in the x86 KVM subsystem implementation in the Linux     kernel when nested virtualization and the TDP MMU are enabled. An attacker in a guest vm could use this to     cause a denial of service (host OS crash). (CVE-2022-45869)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate the number     of channels, leading to an out-of-bounds write vulnerability. An attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-47518)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate specific     attributes, leading to an out-of-bounds write vulnerability. An attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-47519)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate offsets,     leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service     (system crash). (CVE-2022-47520)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate specific     attributes, leading to a heap-based buffer overflow. An attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2022-47521)

    Lin Ma discovered a race condition in the io_uring subsystem in the Linux kernel, leading to a null     pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system     crash). (CVE-2023-0468)

    It was discovered that the file system writeback functionality in the Linux kernel contained a user-after-     free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash)     or execute arbitrary code. (CVE-2023-26605)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5950-1 advisory.

    It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly     handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability.
    A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2023-0461)

    Davide Ornaghi discovered that the netfilter subsystem in the Linux kernel did not properly handle VLAN     headers in some situations. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2023-0179)

    It was discovered that the NVMe driver in the Linux kernel did not properly handle reset events in some     situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3169)

    Maxim Levitsky discovered that the KVM nested virtualization (SVM) implementation for AMD processors in     the Linux kernel did not properly handle nested shutdown execution. An attacker in a guest vm could use     this to cause a denial of service (host kernel crash) (CVE-2022-3344)

    Gwangun Jung discovered a race condition in the IPv4 implementation in the Linux kernel when deleting     multipath routes, resulting in an out-of-bounds read. An attacker could use this to cause a denial of     service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-3435)

    It was discovered that a race condition existed in the Kernel Connection Multiplexor (KCM) socket     implementation in the Linux kernel when releasing sockets in certain situations. A local attacker could     use this to cause a denial of service (system crash). (CVE-2022-3521)

    It was discovered that the Netronome Ethernet driver in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-3545)

    It was discovered that the Intel i915 graphics driver in the Linux kernel did not perform a GPU TLB flush     in some situations. A local attacker could use this to cause a denial of service or possibly execute     arbitrary code. (CVE-2022-4139)

    It was discovered that the NFSD implementation in the Linux kernel contained a use-after-free     vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash) or     execute arbitrary code. (CVE-2022-4379)

    It was discovered that a race condition existed in the x86 KVM subsystem implementation in the Linux     kernel when nested virtualization and the TDP MMU are enabled. An attacker in a guest vm could use this to     cause a denial of service (host OS crash). (CVE-2022-45869)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate the number     of channels, leading to an out-of-bounds write vulnerability. An attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-47518)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate specific     attributes, leading to an out-of-bounds write vulnerability. An attacker could use this to cause a denial     of service (system crash) or possibly execute arbitrary code. (CVE-2022-47519)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate offsets,     leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service     (system crash). (CVE-2022-47520)

    It was discovered that the Atmel WILC1000 driver in the Linux kernel did not properly validate specific     attributes, leading to a heap-based buffer overflow. An attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2022-47521)

    It was discovered that the file system writeback functionality in the Linux kernel contained a user-after-     free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash)     or execute arbitrary code. (CVE-2023-26605)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1188 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in     drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c (CVE-2021-43975)

    * kernel: memory leak in drivers/hid/hid-elo.c (CVE-2022-27950)

    * kernel: use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)

    * kernel: use-after-free when psi trigger is destroyed while being polled (CVE-2022-2938)

    * kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)

    * kernel: use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)

    * kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)

    * kernel: Denial of service in beacon protection for P2P-device (CVE-2022-42722)

    * kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)

    * kernel: x86/mm: Randomize per-cpu entry area (CVE-2023-0597)

    * kernel: Out-Of-Bounds Read vulnerability in smbCalcSize (CVE-2023-6606)

    * kernel: refcount leak in ctnetlink_create_conntrack() (CVE-2023-7192)

    * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in     function receive_encrypted_standard of client (CVE-2024-0565)

    * kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload     in drivers/gpu/drm/drm_atomic.c (CVE-2023-51043)

    Bug Fix(es):

    * kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans() (JIRA:RHEL-18732)

    * kernel: use-after-free in bss_ref_get in net/wireless/scan.c (JIRA:RHEL-18733)

    * kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (JIRA:RHEL-18734)

    * kernel: Denial of service in beacon protection for P2P-device (JIRA:RHEL-18735)

    * kernel: x86/mm: Randomize per-cpu entry area (JIRA:RHEL-18817)

    * kernel: KVM: x86/mmu: race condition in direct_page_fault() (JIRA:RHEL-18829)

    * kernel: refcount leak in ctnetlink_create_conntrack() (JIRA:RHEL-20297)

    * kernel: use-after-free in tc_new_tfilter() in net/sched/cls_api.c (JIRA:RHEL-20363)

    * kernel: Out-Of-Bounds Read vulnerability in smbCalcSize (JIRA:RHEL-21660)

    * kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in     function receive_encrypted_standard of client (JIRA:RHEL-22075)

    * kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload     in drivers/gpu/drm/drm_atomic.c (JIRA:RHEL-23475)

    * kernel: memory leak in drivers/hid/hid-elo.c (JIRA:RHEL-18557)

    * kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in     drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c (JIRA:RHEL-18798)

    * kernel: use-after-free when psi trigger is destroyed while being polled (JIRA:RHEL-21919)

    * [RHVH] Migration hangs between RHVH release bellow 4.5.1 and RHVH over or equal 4.5.2 release     (JIRA:RHEL-23061)

    * backport smartpqi: fix disable_managed_interrupts (JIRA:RHEL-26137)

    Enhancement(s):

    * [MCHP 8.7 FEAT] Update smartpqi driver to latest upstream Second Set of Patches (JIRA:RHEL-21592)

    * [IBM 8.10 FEAT] Upgrade the qeth driver to latest from upstream, e.g. kernel 6.4 (JIRA:RHEL-25809)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kernel-generic installed on the remote host is prior to 5.15.94 / 5.15.94_smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-048-01 advisory.

  - A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail     to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel     panic in the host (L0). (CVE-2022-3344)

  - A vulnerability classified as critical has been found in Linux Kernel. Affected is the function     btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to     use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability     is VDB-211032. (CVE-2022-3534)

  - A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability     is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the     component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this     issue. The identifier VDB-211045 was assigned to this vulnerability. (CVE-2022-3545)

  - An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in     drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128     (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing     a denial of service(DoS). (CVE-2022-36280)

  - Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC     interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It     appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol     headers are all contained within the linear section of the SKB and some NICs behave badly if this is not     the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x)     though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with     split headers, netback will forward those violating above mentioned assumption to the networking core,     resulting in said misbehavior. (CVE-2022-3643)

  - In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused     by refcount races, affecting dvb_demux_open and dvb_dmxdev_release. (CVE-2022-41218)

  - A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing     sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw     to potentially crash the system causing a denial of service. (CVE-2022-4129)

  - A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain     kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their     privileges on the system. (CVE-2022-4378)

  - A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was     found. It could be triggered by yanking out a device that is running the gadgetfs side. (CVE-2022-4382)

  - A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to     cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the     TDP MMU are enabled. (CVE-2022-45869)

  - An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c     has an integer wraparound via L2CAP_CONF_REQ packets. (CVE-2022-45934)

  - An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in     drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-     based buffer overflow when copying the list of operating channels from Wi-Fi management frames.
    (CVE-2022-47518)

  - An issue was discovered in the Linux kernel before 6.0.11. Missing validation of     IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000     wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi     management frames. (CVE-2022-47519)

  - An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in     drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds     read when parsing a Robust Security Network (RSN) information element from a Netlink packet.
    (CVE-2022-47520)

  - An issue was discovered in the Linux kernel before 6.0.11. Missing validation of     IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000     wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from     Wi-Fi management frames. (CVE-2022-47521)

  - In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows     an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control     configuration that is set up with tc qdisc and tc class commands. This affects qdisc_graft in     net/sched/sch_api.c. (CVE-2022-47929)

  - A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A     local user could use this flaw to crash the system. (CVE-2022-4842)

  - A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel.
    SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result     in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit     56b88b50565cd8b946a2d00b0c83927b7ebb055e (CVE-2023-0266)

  - A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network     subcomponent in the Linux kernel. This flaw causes the system to crash. (CVE-2023-0394)

  - cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial     of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes     indicate a TC_ACT_SHOT condition rather than valid classification results). (CVE-2023-23454)

  - atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial     of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition     rather than valid classification results). (CVE-2023-23455)

  - In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an     integer overflow in an addition. (CVE-2023-23559)

  - In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows     an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control     configuration that is set up with tc qdisc and tc class commands. This affects qdisc_graft in     net/sched/sch_api.c. (CVE-2022-47929) (CVE-2023-0179)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7313:32 advisory.

    * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
      * kernel: net/sched: multiple vulnerabilities (CVE-2023-3609, CVE-2023-3611, CVE-2023-4128,     CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)
      * kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436)
      * kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait (CVE-2021-43975)
      * kernel: Rate limit overflow messages in r8152 in intr_callback (CVE-2022-3594)
      * kernel: use after free flaw in l2cap_conn_del (CVE-2022-3640)
      * kernel: double free in usb_8dev_start_xmit (CVE-2022-28388)
      * kernel: vmwgfx: multiple vulnerabilities (CVE-2022-38457, CVE-2022-40133, CVE-2023-33951,     CVE-2023-33952)
      * hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)
      * kernel: Information leak in l2cap_parse_conf_req (CVE-2022-42895)
      * kernel: KVM: multiple vulnerabilities (CVE-2022-45869, CVE-2023-4155, CVE-2023-30456)
      * kernel: memory leak in ttusb_dec_exit_dvb (CVE-2022-45887)
      * kernel: speculative pointer dereference in do_prlimit (CVE-2023-0458)
      * kernel: use-after-free due to race condition in qdisc_graft (CVE-2023-0590)
      * kernel: x86/mm: Randomize per-cpu entry area (CVE-2023-0597)
      * kernel: HID: check empty report_list in hid_validate_values (CVE-2023-1073)
      * kernel: sctp: fail if no bound addresses can be used for a given scope (CVE-2023-1074)
      * kernel: hid: Use After Free in asus_remove (CVE-2023-1079)
      * kernel: use-after-free in drivers/media/rc/ene_ir.c (CVE-2023-1118)
      * kernel: hash collisions in the IPv6 connection lookup table (CVE-2023-1206)
      * kernel: ovl: fix use after free in struct ovl_aio_req (CVE-2023-1252)
      * kernel: denial of service in tipc_conn_close (CVE-2023-1382)
      * kernel: Use after free bug in btsdio_remove due to race condition (CVE-2023-1989)
      * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)
      * kernel: ext4: use-after-free in ext4_xattr_set_entry (CVE-2023-2513)
      * kernel: fbcon: shift-out-of-bounds in fbcon_set_font (CVE-2023-3161)
      * kernel: out-of-bounds access in relay_file_read (CVE-2023-3268)
      * kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params (CVE-2023-3772)
      * kernel: smsusb: use-after-free caused by do_submit_urb (CVE-2023-4132)
      * kernel: Race between task migrating pages and another task calling exit_mmap (CVE-2023-4732)
      * Kernel: denial of service in atm_tc_enqueue due to type confusion (CVE-2023-23455)
      * kernel: mpls: double free on sysctl allocation failure (CVE-2023-26545)
      * kernel: Denial of service issue in az6027 driver (CVE-2023-28328)
      * kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow (CVE-2023-28772)
      * kernel: blocking operation in dvb_frontend_get_event and wait_event_interruptible (CVE-2023-31084)
      * kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove (CVE-2023-33203)
      * kernel: saa7134: race condition leading to use-after-free in saa7134_finidev (CVE-2023-35823)
      * kernel: dm1105: race condition leading to use-after-free in dm1105_remove.c (CVE-2023-35824)
      * kernel: r592: race condition leading to use-after-free in r592_remove (CVE-2023-35825)
      * kernel: net/tls: tls_is_tx_ready() checked list_entry (CVE-2023-1075)
      * kernel: use-after-free bug in remove function xgene_hwmon_remove (CVE-2023-1855)
      * kernel: Use after free bug in r592_remove (CVE-2023-3141)
      * kernel: gfs2: NULL pointer dereference in gfs2_evict_inode (CVE-2023-3212)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
171395	Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12120)	Nessus	Oracle Linux Local Security Checks	2023/2/13	2026/2/9	high
172366	Ubuntu 22.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5938-1)	Nessus	Ubuntu Local Security Checks	2023/3/9	2024/8/27	high
172558	Ubuntu 22.10 : Linux kernel (KVM) vulnerabilities (USN-5950-1)	Nessus	Ubuntu Local Security Checks	2023/3/15	2024/8/27	high
191650	RHEL 8 : kernel (RHSA-2024:1188)	Nessus	Red Hat Local Security Checks	2024/3/6	2024/11/7	high
171621	Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2023-048-01)	Nessus	Slackware Local Security Checks	2023/2/18	2023/9/4	high
292841	MiracleLinux 8 : kernel-4.18.0-513.5.1.el8_9 (AXSA:2023-7313:32)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
173106	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-070)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2026/2/24	high

检测

插件搜索

high

high

high

high

high

high

high