The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001792 advisory.

    arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated     with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an     IRET instruction that leads to access to a GS Base address from the wrong space.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2446-1 advisory.

    Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack     Segment (SS) register in the x86 architecture. A local attacker could exploit this flaw to gain     administrative privileges. (CVE-2014-9322)

    An information leak in the Linux kernel was discovered that could leak the high 16 bits of the kernel     stack address on 32-bit Kernel Virtual Machine (KVM) paravirt guests. A user in the guest OS could exploit     this leak to obtain information that could potentially be used to aid in attacking the kernel.
    (CVE-2014-8134)

    Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace subsystem of the Linux kernel does     not properly handle private syscall numbers. A local user could exploit this flaw to cause a denial of     service (OOPS). (CVE-2014-7826)

    A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control Transmission Protocol)     implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a     denial of service (system crash). (CVE-2014-3673)

    A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control Transmission Protocol)     implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a     denial of service (panic). (CVE-2014-3687)

    It was discovered that excessive queuing by SCTP (Stream Control Transmission Protocol) implementation in     the Linux kernel can cause memory pressure. A remote attacker could exploit this flaw to cause a denial of     service. (CVE-2014-3688)

    Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a flaw in how the perf subsystem of the Linux     kernel handles private systecall numbers. A local user could exploit this to cause a denial of service     (OOPS) or bypass ASLR protections via a crafted application. (CVE-2014-7825)

    The KVM (kernel virtual machine) subsystem of the Linux kernel miscalculates the number of memory pages     during the handling of a mapping failure. A guest OS user could exploit this to cause a denial of service     (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges.
    (CVE-2014-8369)

    Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack     Segment (SS) register on the x86 architecture. A local attacker could exploit this flaw to cause a denial     of service (panic). (CVE-2014-9090)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 6.5 Extended Update Support.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

The system must be rebooted for this update to take effect.

From Red Hat Security Advisory 2014:2008 :

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3106 advisory.

    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224059]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3107 advisory.

    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224060]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3108 advisory.

    - net: guard tcp_set_keepalive() to tcp sockets (Eric Dumazet)  [Orabug: 20224099]  {CVE-2012-6657}
    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224061]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:2028 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    * A flaw was found in the way the Linux kernel handled GS segment register     base switching when recovering from a #SS (stack segment) fault on an     erroneous return to user space. A local, unprivileged user could use this     flaw to escalate their privileges on the system. (CVE-2014-9322, Important)

    Red Hat would like to thank Andy Lutomirski for reporting this issue.

    All kernel users are advised to upgrade to these updated packages, which     contain a backported patch to correct this issue. The system must be     rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5.9 Extended Update Support.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect.

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
286459	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001792)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/15	high
80032	Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2446-1)	Nessus	Ubuntu Local Security Checks	2014/12/15	2024/8/28	high
80097	RHEL 6 : kernel (RHSA-2014:2009)	Nessus	Red Hat Local Security Checks	2014/12/18	2021/1/14	high
80100	Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20141217)	Nessus	Scientific Linux Local Security Checks	2014/12/18	2021/1/14	high
80110	Oracle Linux 5 : kernel (ELSA-2014-2008-1)	Nessus	Oracle Linux Local Security Checks	2014/12/19	2021/1/14	high
80156	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3106)	Nessus	Oracle Linux Local Security Checks	2014/12/22	2026/2/9	high
80157	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3107)	Nessus	Oracle Linux Local Security Checks	2014/12/22	2026/2/9	high
80158	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3108)	Nessus	Oracle Linux Local Security Checks	2014/12/22	2026/2/9	high
80213	RHEL 6 : kernel (RHSA-2014:2028)	Nessus	Red Hat Local Security Checks	2014/12/23	2025/4/15	high
80214	RHEL 5 : kernel (RHSA-2014:2029)	Nessus	Red Hat Local Security Checks	2014/12/23	2021/1/14	high
85947	F5 Networks BIG-IP : Linux kernel vulnerability (SOL16122)	Nessus	F5 Networks Local Security Checks	2015/9/16	2021/3/10	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high