| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
| Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-184) | 8 Jun 202300:00 | – | nessus | |
| Important: kernel | 7 Jun 202300:00 | – | amazon | |
| Astra Linux - уязвимость в linux-5.10 | 20 May 202605:53 | – | astralinux | |
| Linux kernel 安全漏洞 | 7 Oct 202500:00 | – | cnnvd | |
| CVE-2023-53642 | 7 Oct 202515:19 | – | cve | |
| CVE-2023-53642 x86: fix clear_user_rep_good() exception handling annotation | 7 Oct 202515:19 | – | cvelist | |
| CVE-2023-53642 | 7 Oct 202515:19 | – | debiancve | |
| EUVD-2025-32754 | 7 Oct 202515:19 | – | euvd | |
| CVE-2023-53642 | 7 Oct 202516:15 | – | nvd | |
| BELL-CVE-2023-53642 | 8 Oct 202506:04 | – | osv |
| Source | Link |
|---|---|
| ubuntu | www.ubuntu.com/security/CVE-2023-53642 |
| cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(270247);
script_version("1.15");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/03");
script_cve_id("CVE-2023-53642");
script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2023-53642");
script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.
- x86: fix clear_user_rep_good() exception handling annotation This code no longer exists in mainline,
because it was removed in commit d2c95f9d6802 (x86: don't use REP_GOOD or ERMS for user memory clearing)
upstream. However, rather than backport the full range of x86 memory clearing and copying cleanups, fix
the exception table annotation placement for the final 'rep movsb' in clear_user_rep_good(): rather than
pointing at the actual instruction that did the user space access, it pointed to the register move just
before it. That made sense from a code flow standpoint, but not from an actual usage standpoint: it means
that if user access takes an exception, the exception handler won't actually find the instruction in the
exception tables. As a result, rather than fixing it up and returning -EFAULT, it would then turn it into
a kernel oops report instead, something like: BUG: unable to handle page fault for address:
0000000020081000 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page
... RIP: 0010:clear_user_rep_good+0x1c/0x30 arch/x86/lib/clear_page_64.S:147 ... Call Trace: __clear_user
arch/x86/include/asm/uaccess_64.h:103 [inline] clear_user arch/x86/include/asm/uaccess_64.h:124 [inline]
iov_iter_zero+0x709/0x1290 lib/iov_iter.c:800 iomap_dio_hole_iter fs/iomap/direct-io.c:389 [inline]
iomap_dio_iter fs/iomap/direct-io.c:440 [inline] __iomap_dio_rw+0xe3d/0x1cd0 fs/iomap/direct-io.c:601
iomap_dio_rw+0x40/0xa0 fs/iomap/direct-io.c:689 ext4_dio_read_iter fs/ext4/file.c:94 [inline]
ext4_file_read_iter+0x4be/0x690 fs/ext4/file.c:145 call_read_iter include/linux/fs.h:2183 [inline]
do_iter_readv_writev+0x2e0/0x3b0 fs/read_write.c:733 do_iter_read+0x2f2/0x750 fs/read_write.c:796
vfs_readv+0xe5/0x150 fs/read_write.c:916 do_preadv+0x1b6/0x270 fs/read_write.c:1008 __do_sys_preadv2
fs/read_write.c:1070 [inline] __se_sys_preadv2 fs/read_write.c:1061 [inline] __x64_sys_preadv2+0xef/0x150
fs/read_write.c:1061 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0
arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd which then looks like a filesystem bug
rather than the incorrect exception annotation that it is. [ The alternative to this one-liner fix is to
take the upstream series that cleans this all up: 68674f94ffc9 (x86: don't use REP_GOOD or ERMS for small
memory copies) 20f3337d350c (x86: don't use REP_GOOD or ERMS for small memory clearing) adfcf4231b8c
(x86: don't use REP_GOOD or ERMS for user memory copies) * d2c95f9d6802 (x86: don't use REP_GOOD or
ERMS for user memory clearing) 3639a535587d (x86: move stac/clac from user copy routines into callers)
577e6a7fd50d (x86: inline the 'rep movs' in user copies for the FSRM case) 8c9b6a88b7e2 (x86: improve
on the non-rep 'clear_user' function) 427fda2c8a49 (x86: improve on the non-rep 'copy_user' function) *
e046fe5a36a9 (x86: set FSRS automatically on AMD CPUs that have FSRM) e1f2750edc4a (x86: remove
'zerorest' argument from __copy_user_nocache()) 034ff37d3407 (x86: rewrite '__copy_user_nocache'
function) with either the whole series or at a minimum the two marked commits being needed to fix this
issue ] (CVE-2023-53642)
Note that Nessus relies on the presence of the package as reported by the vendor.");
script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2023-53642");
script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
script_set_attribute(attribute:"agent", value:"unix");
script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-53642");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vendor_unpatched", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2025/10/07");
script_set_attribute(attribute:"plugin_publication_date", value:"2025/10/14");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:25.04");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:25.10");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-allwinner-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.0");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.13");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-5.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-6.2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-aws-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-5.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-5.13");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-5.3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-5.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-6.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-6.2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-edge");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-fde");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-fde-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-fde-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-fde-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-fde-6.2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-fde-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-nvidia");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-azure-nvidia-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-5.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-5.13");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-5.3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-5.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-6.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-6.2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gcp-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gke");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gke-4.15");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gke-5.15");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gke-5.4");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gkeop");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-5.15");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-gkeop-5.4");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-5.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-5.13");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-5.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-6.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-6.2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-hwe-edge");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-ibm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-ibm-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-intel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-intel-5.13");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-intel-iot-realtime");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-lowlatency");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-lowlatency-hwe-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-lowlatency-hwe-6.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-lowlatency-hwe-6.2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-lowlatency-hwe-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-lowlatency-hwe-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-nvidia");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-nvidia-6.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-nvidia-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-nvidia-6.2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-nvidia-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-nvidia-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-nvidia-lowlatency");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-nvidia-tegra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-5.10");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-5.13");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-5.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-5.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-5.6");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-6.0");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-6.1");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-6.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oem-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-5.0");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-5.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-5.13");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-5.3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-5.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-oracle-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-raspi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-raspi-realtime");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-raspi2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-realtime");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-riscv");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-riscv-5.11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-riscv-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-riscv-5.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-riscv-6.14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-riscv-6.17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-riscv-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-riscv-6.8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-starfive-5.19");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-starfive-6.2");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-starfive-6.5");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:linux-xilinx");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
script_require_ports("Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-25.04", "Host/OS/Ubuntu Linux-25.10", "Host/OS/Ubuntu Linux-26.04");
exit(0);
}
if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/Debian/dpkg-l"))) audit(AUDIT_PACKAGE_LIST_MISSING);
include('linux_unpatched.inc');
var distro_constraints_array = {
"Ubuntu Linux-16.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "16.04",
"pkgs": [
{"reference": "linux-hwe-edge"}
]
}
]
},
"Ubuntu Linux-18.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "18.04",
"pkgs": [
{"reference": "linux-aws-5.0"},
{"reference": "linux-aws-5.3"},
{"reference": "linux-azure-5.3"},
{"reference": "linux-azure-cloud-tools-4.15.0"},
{"reference": "linux-azure-edge"},
{"reference": "linux-azure-headers-4.15.0"},
{"reference": "linux-azure-tools-4.15.0"},
{"reference": "linux-cloud-tools-4.15.0"},
{"reference": "linux-gcp-5.3"},
{"reference": "linux-gcp-headers-4.15.0"},
{"reference": "linux-gcp-tools-4.15.0"},
{"reference": "linux-gke-4.15"},
{"reference": "linux-gke-5.4"},
{"reference": "linux-gkeop-5.4"},
{"reference": "linux-headers-4.15.0"},
{"reference": "linux-hwe"},
{"reference": "linux-hwe-edge"},
{"reference": "linux-image-4.15.0"},
{"reference": "linux-image-unsigned-4.15.0"},
{"reference": "linux-modules-4.15.0"},
{"reference": "linux-modules-extra-4.15.0"},
{"reference": "linux-oem-headers-4.15.0"},
{"reference": "linux-oem-tools-4.15.0"},
{"reference": "linux-oracle-5.0"},
{"reference": "linux-oracle-5.3"},
{"reference": "linux-tools-4.15.0"},
{"reference": "linux-udebs-azure"},
{"reference": "linux-udebs-oem"}
]
}
]
},
"Ubuntu Linux-20.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "20.04",
"pkgs": [
{"reference": "linux-aws-5.11"},
{"reference": "linux-aws-5.13"},
{"reference": "linux-aws-5.8"},
{"reference": "linux-azure-5.11"},
{"reference": "linux-azure-5.13"},
{"reference": "linux-azure-5.8"},
{"reference": "linux-azure-fde"},
{"reference": "linux-buildinfo-5.4.0"},
{"reference": "linux-buildinfo-5.6.0"},
{"reference": "linux-cloud-tools-5.4.0"},
{"reference": "linux-cloud-tools-5.6.0"},
{"reference": "linux-gcp-5.11"},
{"reference": "linux-gcp-5.13"},
{"reference": "linux-gcp-5.8"},
{"reference": "linux-gke"},
{"reference": "linux-gke-5.15"},
{"reference": "linux-gkeop"},
{"reference": "linux-gkeop-5.15"},
{"reference": "linux-headers-5.4.0"},
{"reference": "linux-headers-5.6.0"},
{"reference": "linux-hwe-5.11"},
{"reference": "linux-hwe-5.13"},
{"reference": "linux-hwe-5.8"},
{"reference": "linux-image-5.4.0"},
{"reference": "linux-image-unsigned-5.6.0"},
{"reference": "linux-intel-5.13"},
{"reference": "linux-libc-dev"},
{"reference": "linux-modules-5.4.0"},
{"reference": "linux-modules-5.6.0"},
{"reference": "linux-modules-extra-5.4.0"},
{"reference": "linux-modules-extra-5.6.0"},
{"reference": "linux-oem-5.10"},
{"reference": "linux-oem-5.13"},
{"reference": "linux-oem-5.14"},
{"reference": "linux-oem-5.6-headers-5.6.0"},
{"reference": "linux-oem-5.6-tools-5.6.0"},
{"reference": "linux-oem-5.6-tools-common"},
{"reference": "linux-oem-5.6-tools-host"},
{"reference": "linux-oracle-5.11"},
{"reference": "linux-oracle-5.13"},
{"reference": "linux-oracle-5.8"},
{"reference": "linux-raspi2"},
{"reference": "linux-riscv-5.11"},
{"reference": "linux-riscv-5.8"},
{"reference": "linux-riscv-headers-5.4.0"},
{"reference": "linux-riscv-tools-5.4.0"},
{"reference": "linux-tools-5.4.0"},
{"reference": "linux-tools-5.6.0"},
{"reference": "linux-udebs-generic"},
{"reference": "linux-udebs-oem"}
]
}
]
},
"Ubuntu Linux-22.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "22.04",
"pkgs": [
{"reference": "linux-allwinner-5.19"},
{"reference": "linux-aws-5.19"},
{"reference": "linux-aws-6.2"},
{"reference": "linux-aws-6.5"},
{"reference": "linux-aws-6.8"},
{"reference": "linux-azure-5.19"},
{"reference": "linux-azure-6.2"},
{"reference": "linux-azure-6.5"},
{"reference": "linux-azure-6.8"},
{"reference": "linux-azure-fde-5.19"},
{"reference": "linux-azure-fde-6.2"},
{"reference": "linux-azure-fde-6.8"},
{"reference": "linux-buildinfo-5.15.0"},
{"reference": "linux-buildinfo-5.17.0"},
{"reference": "linux-cloud-tools-5.15.0"},
{"reference": "linux-cloud-tools-5.17.0"},
{"reference": "linux-gcp-5.19"},
{"reference": "linux-gcp-6.2"},
{"reference": "linux-gcp-6.5"},
{"reference": "linux-gcp-6.8"},
{"reference": "linux-headers-5.15.0"},
{"reference": "linux-headers-5.17.0"},
{"reference": "linux-hwe-5.19"},
{"reference": "linux-hwe-6.2"},
{"reference": "linux-hwe-6.5"},
{"reference": "linux-hwe-6.8"},
{"reference": "linux-ibm-6.8"},
{"reference": "linux-image-5.15.0"},
{"reference": "linux-image-unsigned-5.17.0"},
{"reference": "linux-intel-iot-realtime"},
{"reference": "linux-lowlatency-hwe-5.19"},
{"reference": "linux-lowlatency-hwe-6.2"},
{"reference": "linux-lowlatency-hwe-6.5"},
{"reference": "linux-lowlatency-hwe-6.8"},
{"reference": "linux-modules-5.15.0"},
{"reference": "linux-modules-5.17.0"},
{"reference": "linux-modules-extra-5.15.0"},
{"reference": "linux-modules-extra-5.17.0"},
{"reference": "linux-nvidia-6.2"},
{"reference": "linux-nvidia-6.5"},
{"reference": "linux-nvidia-6.8"},
{"reference": "linux-oem-5.17-headers-5.17.0"},
{"reference": "linux-oem-5.17-tools-5.17.0"},
{"reference": "linux-oem-5.17-tools-host"},
{"reference": "linux-oem-6.0"},
{"reference": "linux-oem-6.1"},
{"reference": "linux-oem-6.5"},
{"reference": "linux-oracle-6.5"},
{"reference": "linux-oracle-6.8"},
{"reference": "linux-realtime"},
{"reference": "linux-riscv-5.19"},
{"reference": "linux-riscv-6.5"},
{"reference": "linux-riscv-6.8"},
{"reference": "linux-riscv-headers-5.15.0"},
{"reference": "linux-riscv-tools-5.15.0"},
{"reference": "linux-starfive-5.19"},
{"reference": "linux-starfive-6.2"},
{"reference": "linux-starfive-6.5"},
{"reference": "linux-tools-5.15.0"},
{"reference": "linux-tools-5.17.0"}
]
}
]
},
"Ubuntu Linux-24.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "24.04",
"pkgs": [
{"reference": "linux-aws-6.14"},
{"reference": "linux-aws-6.17"},
{"reference": "linux-aws-cloud-tools-6.8.0"},
{"reference": "linux-aws-headers-6.8.0"},
{"reference": "linux-aws-tools-6.8.0"},
{"reference": "linux-azure-6.11"},
{"reference": "linux-azure-6.14"},
{"reference": "linux-azure-6.17"},
{"reference": "linux-azure-cloud-tools-6.8.0"},
{"reference": "linux-azure-fde"},
{"reference": "linux-azure-fde-6.14"},
{"reference": "linux-azure-fde-6.17"},
{"reference": "linux-azure-headers-6.8.0"},
{"reference": "linux-azure-nvidia"},
{"reference": "linux-azure-nvidia-6.14"},
{"reference": "linux-azure-tools-6.8.0"},
{"reference": "linux-buildinfo-6.8.0"},
{"reference": "linux-cloud-tools-6.8.0"},
{"reference": "linux-cloud-tools-common"},
{"reference": "linux-doc"},
{"reference": "linux-gcp-6.11"},
{"reference": "linux-gcp-6.14"},
{"reference": "linux-gcp-6.17"},
{"reference": "linux-gcp-headers-6.8.0"},
{"reference": "linux-gcp-tools-6.8.0"},
{"reference": "linux-gke-headers-6.8.0"},
{"reference": "linux-gke-tools-6.8.0"},
{"reference": "linux-gkeop"},
{"reference": "linux-headers-6.8.0"},
{"reference": "linux-hwe-6.11"},
{"reference": "linux-hwe-6.14"},
{"reference": "linux-hwe-6.17"},
{"reference": "linux-ibm-cloud-tools-6.8.0"},
{"reference": "linux-ibm-cloud-tools-common"},
{"reference": "linux-ibm-headers-6.8.0"},
{"reference": "linux-ibm-source-6.8.0"},
{"reference": "linux-ibm-tools-6.8.0"},
{"reference": "linux-ibm-tools-common"},
{"reference": "linux-image-6.8.0"},
{"reference": "linux-image-unsigned-6.8.0"},
{"reference": "linux-intel"},
{"reference": "linux-lib-rust-6.8.0"},
{"reference": "linux-libc-dev"},
{"reference": "linux-lowlatency-cloud-tools-6.8.0"},
{"reference": "linux-lowlatency-cloud-tools-common"},
{"reference": "linux-lowlatency-headers-6.8.0"},
{"reference": "linux-lowlatency-hwe-6.11"},
{"reference": "linux-lowlatency-lib-rust-6.8.0"},
{"reference": "linux-lowlatency-tools-6.8.0"},
{"reference": "linux-lowlatency-tools-common"},
{"reference": "linux-lowlatency-tools-host"},
{"reference": "linux-modules-6.8.0"},
{"reference": "linux-modules-extra-6.8.0"},
{"reference": "linux-modules-ipu6-6.8.0"},
{"reference": "linux-modules-ivsc-6.8.0"},
{"reference": "linux-modules-iwlwifi-6.8.0"},
{"reference": "linux-nvidia"},
{"reference": "linux-nvidia-6.11"},
{"reference": "linux-nvidia-6.17"},
{"reference": "linux-nvidia-lowlatency"},
{"reference": "linux-nvidia-tegra"},
{"reference": "linux-oem-6.11"},
{"reference": "linux-oem-6.14"},
{"reference": "linux-oem-6.17"},
{"reference": "linux-oem-6.8-headers-6.8.0"},
{"reference": "linux-oem-6.8-lib-rust-6.8.0"},
{"reference": "linux-oem-6.8-tools-6.8.0"},
{"reference": "linux-oracle-6.14"},
{"reference": "linux-oracle-6.17"},
{"reference": "linux-oracle-headers-6.8.0"},
{"reference": "linux-oracle-tools-6.8.0"},
{"reference": "linux-raspi-headers-6.8.0"},
{"reference": "linux-raspi-realtime"},
{"reference": "linux-raspi-tools-6.8.0"},
{"reference": "linux-realtime"},
{"reference": "linux-riscv-6.14"},
{"reference": "linux-riscv-6.17"},
{"reference": "linux-riscv-headers-6.8.0"},
{"reference": "linux-riscv-tools-6.8.0"},
{"reference": "linux-source-6.8.0"},
{"reference": "linux-tools-6.8.0"},
{"reference": "linux-tools-common"},
{"reference": "linux-tools-host"},
{"reference": "linux-udebs-aws"},
{"reference": "linux-udebs-azure"},
{"reference": "linux-xilinx"}
]
}
]
},
"Ubuntu Linux-25.10": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "25.10",
"pkgs": [
{"reference": "bpftool"},
{"reference": "linux-aws-cloud-tools-6.17.0"},
{"reference": "linux-aws-headers-6.17.0"},
{"reference": "linux-aws-tools-6.17.0"},
{"reference": "linux-azure-cloud-tools-6.17.0"},
{"reference": "linux-azure-fde"},
{"reference": "linux-azure-headers-6.17.0"},
{"reference": "linux-azure-tools-6.17.0"},
{"reference": "linux-bpf-dev"},
{"reference": "linux-buildinfo-6.17.0"},
{"reference": "linux-cloud-tools-6.17.0"},
{"reference": "linux-cloud-tools-common"},
{"reference": "linux-doc"},
{"reference": "linux-gcp-headers-6.17.0"},
{"reference": "linux-gcp-tools-6.17.0"},
{"reference": "linux-headers-6.17.0"},
{"reference": "linux-image-6.17.0"},
{"reference": "linux-image-unsigned-6.17.0"},
{"reference": "linux-lib-rust-6.17.0"},
{"reference": "linux-libc-dev"},
{"reference": "linux-modules-6.17.0"},
{"reference": "linux-modules-extra-6.17.0"},
{"reference": "linux-modules-ipu6-6.17.0"},
{"reference": "linux-modules-ipu7-6.17.0"},
{"reference": "linux-modules-iwlwifi-6.17.0"},
{"reference": "linux-modules-usbio-6.17.0"},
{"reference": "linux-modules-vision-6.17.0"},
{"reference": "linux-oracle-headers-6.17.0"},
{"reference": "linux-oracle-tools-6.17.0"},
{"reference": "linux-perf"},
{"reference": "linux-raspi-headers-6.17.0"},
{"reference": "linux-raspi-tools-6.17.0"},
{"reference": "linux-realtime"},
{"reference": "linux-riscv-headers-6.17.0"},
{"reference": "linux-riscv-tools-6.17.0"},
{"reference": "linux-source-6.17.0"},
{"reference": "linux-tools-6.17.0"},
{"reference": "linux-tools-common"},
{"reference": "linux-tools-host"},
{"reference": "linux-udebs-aws"},
{"reference": "linux-udebs-aws-64k"},
{"reference": "linux-udebs-azure"}
]
}
]
},
"Ubuntu Linux-26.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "26.04",
"pkgs": [
{"reference": "bpftool"},
{"reference": "linux-aws-cloud-tools-7.0.0"},
{"reference": "linux-aws-headers-7.0.0"},
{"reference": "linux-aws-tools-7.0.0"},
{"reference": "linux-azure-cloud-tools-7.0.0"},
{"reference": "linux-azure-fde-cloud-tools-7.0.0"},
{"reference": "linux-azure-fde-headers-7.0.0"},
{"reference": "linux-azure-fde-tools-7.0.0"},
{"reference": "linux-azure-headers-7.0.0"},
{"reference": "linux-azure-tools-7.0.0"},
{"reference": "linux-bpf-dev"},
{"reference": "linux-buildinfo-7.0.0"},
{"reference": "linux-cloud-tools-7.0.0"},
{"reference": "linux-cloud-tools-common"},
{"reference": "linux-doc"},
{"reference": "linux-gcp-headers-7.0.0"},
{"reference": "linux-gcp-tools-7.0.0"},
{"reference": "linux-headers-7.0.0"},
{"reference": "linux-ibm-cloud-tools-7.0.0"},
{"reference": "linux-ibm-headers-7.0.0"},
{"reference": "linux-ibm-tools-7.0.0"},
{"reference": "linux-image-7.0.0"},
{"reference": "linux-image-unsigned-7.0.0"},
{"reference": "linux-lib-rust-7.0.0"},
{"reference": "linux-libc-dev"},
{"reference": "linux-modules-7.0.0"},
{"reference": "linux-modules-extra-7.0.0"},
{"reference": "linux-nvidia"},
{"reference": "linux-oracle-headers-7.0.0"},
{"reference": "linux-oracle-tools-7.0.0"},
{"reference": "linux-perf"},
{"reference": "linux-raspi-headers-7.0.0"},
{"reference": "linux-raspi-tools-7.0.0"},
{"reference": "linux-realtime-cloud-tools-7.0.0"},
{"reference": "linux-realtime-headers-7.0.0"},
{"reference": "linux-realtime-tools-7.0.0"},
{"reference": "linux-riscv-headers-7.0.0"},
{"reference": "linux-riscv-tools-7.0.0"},
{"reference": "linux-source-7.0.0"},
{"reference": "linux-tools-7.0.0"},
{"reference": "linux-tools-common"},
{"reference": "linux-tools-host"},
{"reference": "linux-udebs-aws"},
{"reference": "linux-udebs-aws-64k"},
{"reference": "linux-udebs-azure"},
{"reference": "linux-udebs-azure-fde"}
]
}
]
},
"Ubuntu Linux-25.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "25.04",
"pkgs": [
{"reference": "bpftool"},
{"reference": "linux-aws-cloud-tools-6.14.0"},
{"reference": "linux-aws-headers-6.14.0"},
{"reference": "linux-aws-tools-6.14.0"},
{"reference": "linux-azure-cloud-tools-6.14.0"},
{"reference": "linux-azure-fde"},
{"reference": "linux-azure-headers-6.14.0"},
{"reference": "linux-azure-tools-6.14.0"},
{"reference": "linux-bpf-dev"},
{"reference": "linux-buildinfo-6.14.0"},
{"reference": "linux-cloud-tools-6.14.0"},
{"reference": "linux-cloud-tools-common"},
{"reference": "linux-doc"},
{"reference": "linux-gcp-headers-6.14.0"},
{"reference": "linux-gcp-tools-6.14.0"},
{"reference": "linux-headers-6.14.0"},
{"reference": "linux-image-6.14.0"},
{"reference": "linux-image-unsigned-6.14.0"},
{"reference": "linux-lib-rust-6.14.0"},
{"reference": "linux-libc-dev"},
{"reference": "linux-modules-6.14.0"},
{"reference": "linux-modules-extra-6.14.0"},
{"reference": "linux-modules-ipu6-6.14.0"},
{"reference": "linux-modules-ipu7-6.14.0"},
{"reference": "linux-modules-iwlwifi-6.14.0"},
{"reference": "linux-modules-usbio-6.14.0"},
{"reference": "linux-modules-vision-6.14.0"},
{"reference": "linux-oracle-headers-6.14.0"},
{"reference": "linux-oracle-tools-6.14.0"},
{"reference": "linux-perf"},
{"reference": "linux-raspi-headers-6.14.0"},
{"reference": "linux-raspi-tools-6.14.0"},
{"reference": "linux-realtime"},
{"reference": "linux-riscv-headers-6.14.0"},
{"reference": "linux-riscv-tools-6.14.0"},
{"reference": "linux-source-6.14.0"},
{"reference": "linux-tools-6.14.0"},
{"reference": "linux-tools-common"},
{"reference": "linux-tools-host"},
{"reference": "linux-udebs-aws"},
{"reference": "linux-udebs-azure"},
{"reference": "linux-xilinx"}
]
}
]
}
};
var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);
if (!empty_or_null(report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : report
);
exit(0);
}
else
{
audit(AUDIT_HOST_NOT, 'affected');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation