The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2438-1 advisory.

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116).
    - CVE-2021-33909: Extremely large seq buffer allocations in seq_file could lead to buffer underruns and     code execution (bsc#1188062).
    - CVE-2021-3609: A use-after-free in can/bcm could have led to privilege escalation (bsc#1187215).
    - CVE-2021-3612: An out-of-bounds memory write flaw was found in the joystick devices subsystem in the way     the user calls ioctl JSIOCSBTNMAP. This flaw allowed a local user to crash the system or possibly escalate     their privileges on the system. The highest threat from this vulnerability is to confidentiality,     integrity, as well as system availability (bnc#1187585 ).
    - CVE-2021-35039: kernel/module.c mishandled Signature Verification, aka CID-0c18f29aae7c. Without     CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, did not occur     for a module.sig_enforce=1 command-line argument (bnc#1188080). NOTE that SUSE kernels are configured with     CONFIG_MODULE_SIG=y, so are not affected.


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2487-1 advisory.

    This update for the Linux Kernel 5.3.18-24_70 fixes several issues.

    The following security issues were fixed:

    - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root     privileges. (bsc#1188062)
    - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local     provilege escalation. (bsc#1188116)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2559-1 advisory.

    This update for the Linux Kernel 5.3.18-59_10 fixes several issues.

    The following security issues were fixed:

    - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root     privileges. (bsc#1188062)
    - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local     provilege escalation. (bsc#1188116)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2643-1 advisory.

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c     (bsc#1188876).
    - CVE-2021-37576: Fixed an issue on the powerpc platform, where a KVM guest OS user could cause host OS     memory corruption via rtas_args.nargs (bsc#1188838).
    - CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory     corruption due to a use after free. This could lead to local escalation of privilege with System execution     privileges needed. (bsc#1176724).
    - CVE-2020-36386: Fixed a slab out-of-bounds read in hci_extended_inquiry_result_evt (bsc#1187038).
    - CVE-2021-22543: Fixed an improper handling of VM_IO|VM_PFNMAP vmas in KVM that allows users to start and     control a VM to read/write random pages of memory and can result in local privilege escalation.
    (bnc#1186482)
    - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to obtain full root     privileges. (bsc#1188062)
    - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local     provilege escalation. (bsc#1188116)
    - CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local     privilege escalation. (bsc#1187215)
    - CVE-2021-3612: Fixed an out-of-bounds memory write flaw which could allows a local user to crash the     system or possibly escalate their privileges on the system. (bsc#1187585)
    - CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation.
    (bsc#1187050)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has kernel packages installed that are affected by multiple vulnerabilities:

  - In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could     overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in     ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
    (CVE-2020-25211)

  - A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13.
    drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.
    (CVE-2020-29661)

  - A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.
    This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name     space (CVE-2021-22555)

  - arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest     OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e. (CVE-2021-37576)

  - A vulnerability was found in the Linux kernel's cgroup_release_agent_write in the     kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups     v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
    (CVE-2022-0492)

  - A flaw was found in the way the flags member of the new pipe buffer structure was lacking proper     initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus     contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache     backed by read only files and as such escalate their privileges on the system. (CVE-2022-0847)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
151997	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:2438-1)	Nessus	SuSE Local Security Checks	2021/7/22	2026/6/25	high
152108	SUSE SLES15: kernel-livepatch-5_3_18-24_70-default / etc (SUSE-SU-2021:2487-1)	Nessus	SuSE Local Security Checks	2021/7/28	2026/6/25	high
152160	SUSE SLES15 Security Update : kernel (Live Patch 2 for SLE 15 SP3) (SUSE-SU-2021:2559-1)	Nessus	SuSE Local Security Checks	2021/7/30	2026/6/25	high
152481	SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2021:2643-1)	Nessus	SuSE Local Security Checks	2021/8/11	2026/6/25	high
239060	TencentOS Server 4: kernel (TSSA-2024:0958)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/23	high
160765	NewStart CGSL MAIN 6.02 : kernel Multiple Vulnerabilities (NS-SA-2022-0074)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2026/6/3	high

检测

插件搜索

high

high

high

high

high

high