The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4775-1 advisory.

    This update for the Linux Kernel 5.14.21-150400_15_53 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited     to achieve local privilege escalation. (bsc#1215097)
    - CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215971)
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215442).
    - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being     incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege     escalation, and container escape. (bsc#1215519)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4848-1 advisory.

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local     privilege escalation (bsc#1213584).
    - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited     to achieve local privilege escalation. (bsc#1215097)
    - CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215971)
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215442).
    - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being     incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege     escalation, and container escape. (bsc#1215519)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4822-1 advisory.

    This update for the Linux Kernel 5.14.21-150400_24_60 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local     privilege escalation (bsc#1213584).
    - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited     to achieve local privilege escalation. (bsc#1215097)
    - CVE-2023-5345: Fixed an use-after-free vulnerability in the fs/smb/client component which could be     exploited to achieve local privilege escalation. (bsc#1215971)
    - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be     exploited to achieve local privilege escalation (bsc#1215442).
    - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being     incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege     escalation, and container escape. (bsc#1215519)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0439 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe     (CVE-2023-2163)

    * kernel: use after free in unix_stream_sendpage (CVE-2023-4622)

    * kernel: net/sched: sch_hfsc UAF (CVE-2023-4623)

    * kernel: eBPF: insufficient stack type checks in dynptr (CVE-2023-39191)

    * kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)

    * kernel: Race Condition leading to UAF in Unix Socket could happen in sk_receive_queue (BZ#2230094)

    * kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545)

    * kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858)

    * kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162)

    * kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166)

    * kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)

    * kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race (CVE-2023-3567)

    * kernel: use-after-free in netfilter: nf_tables (CVE-2023-3777)

    * kernel: use after free in nft_immediate_deactivate (CVE-2023-4015)

    * kernel: A heap out-of-bounds write (CVE-2023-5717)

    * hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

    * kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment     (CVE-2023-38409)

    * kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)

    * kernel: SEV-ES local priv escalation (CVE-2023-46813)

    * kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192)

    * kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c     (CVE-2023-6679)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to     achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked     whether the chain is bound and the chain's owner rule can also release the objects in certain     circumstances. We recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.
    (CVE-2023-3777)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
186879	SUSE SLES15: kernel-livepatch-5_14_21-150400_15_53-rt / etc (SUSE-SU-2023:4775-1)	Nessus	SuSE Local Security Checks	2023/12/14	2026/6/25	high
186934	SUSE SLES15: kernel-livepatch-5_14_21-150400_15_5-rt / etc (SUSE-SU-2023:4848-1)	Nessus	SuSE Local Security Checks	2023/12/15	2026/6/25	high
187000	SUSE SLES15 Security Update : kernel (Live Patch 11 for SLE 15 SP4) (SUSE-SU-2023:4822-1)	Nessus	SuSE Local Security Checks	2023/12/15	2026/6/25	high
189572	RHEL 9 : kernel-rt (RHSA-2024:0439)	Nessus	Red Hat Local Security Checks	2024/1/25	2025/8/15	high
226457	Linux Distros Unpatched Vulnerability : CVE-2023-3777	Nessus	Misc.	2025/3/5	2026/7/17	high

检测

插件搜索

high

high

high

high

high