Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is an update containing several CVE and other bug fixes,

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The SUSE Linux Enterprise 11 SP3 kernel was updated to fix the following security bug :

  - CVE-2017-2636: A race condition in the n_hdlc tty Linux     kernel driver (drivers/tty/n_hdlc.c) could have been     exploited to gain a local privilege escalation     (bnc#1027565)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1125 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * A race condition flaw was found in the N_HLDC Linux kernel driver when accessing n_hdlc.tbuf list that     can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device     could use this flaw to increase their privileges on the system. (CVE-2017-2636, Important)

    Red Hat would like to thank Alexander Popov for reporting this issue.

    Bug Fix(es):

    * Previously, memory allocation in the libceph kernel module did not work correctly. Consequently, the     file system on a RADOS Block Device(RBD) could become unresponsive in the situations under high memory     pressure. With this update, the underlying source code has been fixed, and the file system no longer hangs     in the described scenario. (BZ#1418314)

    * Previously, the mpt3sas driver incorrectly checked the Transport Layer Retries (TLR) state even on     Redundant Array Of Independent Discs (RAID) devices. Consequently, a kernel panic occurred when mpt3sas     attempted to read from the RAID devices. With this update, mpt3sas has been fixed to check the TLR state     only for non-RAID devices, and the kernel no longer panics under the described circumstances. (BZ#1427453)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003385 advisory.

    Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain     privileges or cause a denial of service (double free) by setting the HDLC line discipline.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for the Linux Kernel 3.12.62-60_64_8 fixes several issues.
The following security bugs were fixed :

  - CVE-2017-7533: A bug in inotify code allowed local users     to escalate privilege (bsc#1050751).

  - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd     subsystem in the Linux kernel allowed remote attackers     to cause a denial of service (system crash) via a long     RPC reply, related to net/sunrpc/svc.c,     fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).

  - CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in     the Linux kernel allowed local users to gain privileges     or cause a denial of service (double free) by setting     the HDLC line discipline (bsc#1027575).

  - CVE-2017-9242: The __ip6_append_data function in     net/ipv6/ip6_output.c in the Linux kernel is too late in     checking whether an overwrite of an skb data structure     may occur, which allowed local users to cause a denial     of service (system crash) via crafted system calls     (bsc#1042892).

  - CVE-2017-8890: The inet_csk_clone_lock function in     net/ipv4/inet_connection_sock.c in the Linux kernel     allowed attackers to cause a denial of service (double     free) or possibly have unspecified other impact by     leveraging use of the accept system call (bsc#1038564).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - A race condition flaw was found in the N_HLDC Linux     kernel driver when accessing n_hdlc.tbuf list that can     lead to double free. A local, unprivileged user able to     set the HDLC line discipline on the tty device could use     this flaw to increase their privileges on the system.
    (CVE-2017-2636, Important)

  - A flaw was found in the Linux kernel's implementation of     seq_file where a local attacker could manipulate memory     in the put() function pointer. This could lead to memory     corruption and possible privileged escalation.
    (CVE-2016-7910, Moderate)

Bug Fix(es) :

  - Previously, Chelsio firmware included an     incorrectly-formatted firmware bin file. As a     consequence, the firmware could not be flashed. This     update provides a firmware bin file that is formatted     correctly. As a result, Chelsio firmware can now be     flashed successfully.

  - When multiple simultaneous processes attempted to read     from the /proc/stat file, spinlock overhead was     generated on Non-Uniform Memory Access (NUMA) systems.
    Consequently, a large amount of CPU was consumed. With     this update, the underlying source code has been fixed     to avoid taking spinlock when the interrupt line does     not exist. As a result, the spinlock overhead is now     generated less often, and multiple simultaneous     processes can now read /proc/stat without consuming a     large amount of CPU.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1639:03 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system.  The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2016-7910     Use-after-free vulnerability in the disk_seqf_stop function in     block/genhd.c in the Linux kernel before 4.7.1 allows local users to     gain privileges by leveraging the execution of a certain stop     operation even if the corresponding start operation had failed.
    CVE-2017-2636     Race condition in drivers/tty/n_hdlc.c in the Linux kernel through     4.10.1 allows local users to gain privileges or cause a denial of     service (double free) by setting the HDLC line discipline.
    Fixed bugs:
    * Previously, Chelsio firmware included an incorrectly-formatted firmware bin file. As a consequence, the     firmware could not be flashed. This update provides a firmware bin file that is formatted correctly. As a     result, Chelsio firmware can now be flashed successfully.
    * When multiple simultaneous processes attempted to read from the /proc/stat file, spinlock overhead was     generated on Non-Uniform Memory Access (NUMA) systems. Consequently, a large amount of CPU was consumed.
    With this update, the underlying source code has been fixed to avoid taking spinlock when the interrupt     line does not exist. As a result, the spinlock overhead is now generated less often, and multiple     simultaneous processes can now read /proc/stat without consuming a large amount of CPU.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0145 for details.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
97602	Ubuntu 12.04 LTS : linux, linux-ti-omap4 vulnerability (USN-3218-1)	Nessus	Ubuntu Local Security Checks	2017/3/8	2025/12/30	high
97677	Fedora 25 : kernel (2017-387ff46a66)	Nessus	Fedora Local Security Checks	2017/3/13	2025/12/30	high
99181	SUSE SLES11 Security Update : kernel (SUSE-SU-2017:0913-1)	Nessus	SuSE Local Security Checks	2017/4/4	2025/12/26	high
99683	RHEL 7 : kernel (RHSA-2017:1125)	Nessus	Red Hat Local Security Checks	2017/4/26	2024/11/4	high
287684	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003385)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/16	high
102307	SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2088-1)	Nessus	SuSE Local Security Checks	2017/8/9	2025/12/2	high
99301	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20170411)	Nessus	Scientific Linux Local Security Checks	2017/4/12	2025/12/26	high
289277	MiracleLinux 4 : kernel-2.6.32-696.1.1.el6 (AXSA:2017-1639:03)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/19	high
102774	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0145) (Stack Clash)	Nessus	OracleVM Local Security Checks	2017/8/25	2025/11/25	critical

检测

插件搜索

high

high

high

high

high

high

high

high

critical