The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3218 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: lockdown: bypass through ACPI write via efivar_ssdt (CVE-2019-20908)

    * kernel: lockdown: bypass through ACPI write via acpi_configfs (CVE-2020-15780)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837433)

    * [Regression] RHEL8.2 RC  - [Boston/DD2.1] [RHEL8.2/kernel-4.18.0-193.el8.ppc64le] Host kernel crashes     while running storage test bucket on KVM guest (iscsi) (BZ#1852048)

    * RHEL8.2 - s390/mm: fix panic in gup_fast on large pud (BZ#1853336)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3224 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837428)

    * RHEL7.7 - Request: retrofit kernel commit f82b4b6 to RHEL 7.7/7.8 3.10 kernels. (BZ#1838601)

    * Possible race condition updating the cfg structure in __assign_irq_vector. (BZ#1854553)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3221 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    * kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver     (CVE-2019-19527)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837438)

    * kernel-rt: update to the latest RHEL7.8.z3 source tree (BZ#1848017)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3220 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    * kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver     (CVE-2019-19527)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * RHEL7.7 - scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (BZ#1830889)

    * [DELL EMC 7.8 BUG bnxt_en] Error messages related to hwrm observed for BCM 57504 under dmesg in RHEL 7.8     (BZ#1834190)

    * kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837429)

    * RHEL7.7 - Request: retrofit kernel commit f82b4b6 to RHEL 7.7/7.8 3.10 kernels. (BZ#1838602)

    * kipmi thread high CPU consumption when performing BMC firmware upgrade (BZ#1841825)

    * RHEL7.7 - virtio-blk: fix hw_queue stopped on arbitrary error (kvm) (BZ#1842994)

    * rhel 7 infinite blocked waiting on inode_dio_wait in nfs (BZ#1845520)

    * http request is taking more time for endpoint running on different host via nodeport service     (BZ#1847333)

    * ext4: change LRU to round-robin in extent status tree shrinker (BZ#1847343)

    * libaio is returning duplicate events (BZ#1850055)

    * After upgrade to 3.9.89 pod containers with CPU limits fail to start due to cgroup error (BZ#1850500)

    * Fix dpdk regression introduced by bz1837297 (BZ#1852245)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3222 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: use-after-free in sound/core/timer.c (CVE-2019-19807)

    * kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)

    * kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off     the SSBD protection. (CVE-2020-10766)

    * kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS     is available. (CVE-2020-10767)

    * kernel: Indirect branch speculation can be enabled after it was force-disabled by the     PR_SPEC_FORCE_DISABLE prctl command. (CVE-2020-10768)

    * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in     drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)

    * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in     drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)

    * Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888)

    * kernel: lockdown: bypass through ACPI write via efivar_ssdt (CVE-2019-20908)

    * kernel: lockdown: bypass through ACPI write via acpi_configfs (CVE-2020-15780)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [DELL EMC 8.1 BUG] : Observing Multiple hw csum failure while installing RHEL 8.1 on iSCSI LUN     (BZ#1821374)

    * kernel: provide infrastructure to support dual-signing of the kernel (foundation to help address     CVE-2020-10713) (BZ#1837432)

    * deadlock between modprobe and netns exit (BZ#1845163)

    * exit_boot failed when install RHEL8.1 (BZ#1846179)

    * http request is taking more time for endpoint running on different host via nodeport service     (BZ#1847127)

    * RHEL8.1 - s390/cio: fix virtio-ccw DMA without PV (BZ#1847534)

    * RHEL8.1 - zEDC problems on z14 (genwqe/pci) (BZ#1847939)

    * NVMe/FC with DM-MP unexpected I/O failure during transitioning [EIOP-8345] (BZ#1854678)

    * Backport conntrack race condition fixes (BZ#1854953)

    * nf_conntrack module unload fail and refcount become to negative (BZ#1854954)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
139188	RHEL 8 : kernel (RHSA-2020:3218)	Nessus	Red Hat Local Security Checks	2020/7/30	2024/11/7	medium
139195	RHEL 7 : kernel (RHSA-2020:3224)	Nessus	Red Hat Local Security Checks	2020/7/30	2024/11/8	high
139200	RHEL 7 : kernel-rt (RHSA-2020:3221)	Nessus	Red Hat Local Security Checks	2020/7/31	2024/11/7	high
139199	RHEL 7 : kernel (RHSA-2020:3220)	Nessus	Red Hat Local Security Checks	2020/7/30	2024/11/7	high
139187	RHEL 8 : kernel (RHSA-2020:3222)	Nessus	Red Hat Local Security Checks	2020/7/30	2024/11/7	high

检测

插件搜索

medium

high

high

high

high