Lucene search

K

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1040)

🗓️ 14 Jan 2025 00:00:00Reported by Copyright (C) 2025 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 4 Views

Huawei EulerOS has critical kernel vulnerabilities with multiple CVEs affecting system security.

Show more
Related
Refs
Code
# SPDX-FileCopyrightText: 2025 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.1.2.2025.1040");
  script_cve_id("CVE-2021-47345", "CVE-2021-47405", "CVE-2022-48757", "CVE-2022-48760", "CVE-2022-48946", "CVE-2022-48978", "CVE-2022-49021", "CVE-2023-52742", "CVE-2024-26865", "CVE-2024-33621", "CVE-2024-35898", "CVE-2024-36017", "CVE-2024-36933", "CVE-2024-40901", "CVE-2024-41089", "CVE-2024-44952", "CVE-2024-45021", "CVE-2024-45025", "CVE-2024-46673", "CVE-2024-46743", "CVE-2024-46744", "CVE-2024-46750", "CVE-2024-46777", "CVE-2024-46816", "CVE-2024-46826", "CVE-2024-46829", "CVE-2024-47685", "CVE-2024-47696", "CVE-2024-47701", "CVE-2024-47742", "CVE-2024-47745", "CVE-2024-49855", "CVE-2024-49860", "CVE-2024-49881", "CVE-2024-49882", "CVE-2024-49883", "CVE-2024-49884", "CVE-2024-49889", "CVE-2024-49959", "CVE-2024-50033", "CVE-2024-50035", "CVE-2024-50036", "CVE-2024-50073", "CVE-2024-50154", "CVE-2024-50179", "CVE-2024-50195", "CVE-2024-50199", "CVE-2024-50262", "CVE-2024-50301");
  script_tag(name:"creation_date", value:"2025-01-14 15:21:42 +0000 (Tue, 14 Jan 2025)");
  script_version("2025-01-15T05:38:11+0000");
  script_tag(name:"last_modification", value:"2025-01-15 05:38:11 +0000 (Wed, 15 Jan 2025)");
  script_tag(name:"cvss_base", value:"9.4");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:N/A:C");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2024-10-23 15:19:06 +0000 (Wed, 23 Oct 2024)");

  script_name("Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1040)");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2025 Greenbone AG");
  script_family("Huawei EulerOS Local Security Checks");
  script_dependencies("gb_huawei_euleros_consolidation.nasl");
  script_mandatory_keys("ssh/login/euleros", "ssh/login/rpms", re:"ssh/login/release=EULEROS\-2\.0SP9");

  script_xref(name:"Advisory-ID", value:"EulerOS-SA-2025-1040");
  script_xref(name:"URL", value:"https://developer.huaweicloud.com/intl/en-us/euleros/securitydetail.html?secId=EulerOS-SA-2025-1040");

  script_tag(name:"summary", value:"The remote host is missing an update for the Huawei EulerOS 'kernel' package(s) announced via the EulerOS-SA-2025-1040 advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation(CVE-2024-36017)

netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()(CVE-2024-35898)

ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound(CVE-2024-33621)

net: fix information leakage in /proc/net/ptype(CVE-2022-48757)

USB: core: Fix hang in usb_kill_urb by adding memory barriers(CVE-2022-48760)

security/keys: fix slab-out-of-bounds in key_task_permission(CVE-2024-50301)

ext4: avoid use-after-free in ext4_ext_show_leaf().(CVE-2024-49889)

HID: core: fix shift-out-of-bounds in hid_report_raw_event(CVE-2022-48978)

firmware_loader: Block path traversal(CVE-2024-47742)

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()(CVE-2024-47685)

ext4: update orig_path in ext4_find_extent().(CVE-2024-49881)

bpf: Fix out-of-bounds write in trie_get_next_key().(CVE-2024-50262)

slip: make slhc_remember() more robust against malicious packets(CVE-2024-50033)

tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().(CVE-2024-50154)

ACPI: sysfs: validate return type of _STR method(CVE-2024-49860)

udf: Fix preallocation discarding at indirect extent boundary(CVE-2022-48946)

ppp: fix ppp_async_encode() illegal access(CVE-2024-50035)

ext4: avoid OOB when system.data xattr changes underneath the filesystem(CVE-2024-47701)

net: do not delay dst_entries_add() in dst_release()(CVE-2024-50036)

ext4: fix slab-use-after-free in ext4_split_extent_at().(CVE-2024-49884)

ext4: aovid use-after-free in ext4_ext_insert_extent().(CVE-2024-49883)

drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes(CVE-2024-41089)

rds: tcp: Fix use-after-free of net in reqsk_timer_handler().(CVE-2024-26865)

net: USB: Fix wrong-direction WARNING in plusb.c (CVE-2023-52742)

fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE(CVE-2024-45025)

nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().(CVE-2024-36933)

In the Linux kernel, the following vulnerability has been resolved:memcg_write_event_control(): fix a user-triggerable oops we are *not* guaranteed that anything past the terminating NUL is mapped (let alone initialized with anything sane).(CVE-2024-45021)

udf: Avoid excessive partition lengths(CVE-2024-46777)

Squashfs: sanity check symbolic link size(CVE-2024-46744)

PCI: Add missing bridge lock to pci_bus_lock()(CVE-2024-46750)

driver core: Fix uevent_show() vs driver detach race(CVE-2024-44952)

scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory(CVE-2024-40901)

HID: usbhid: free raw_report buffers in usbhid_stop(CVE-2021-47405)

rtmutex: Drop rt_mutex::wait_lock before scheduling(CVE-2024-46829)

of/irq: Prevent device address out-of-bounds read in interrupt map walk(CVE-2024-46743)

scsi: aacraid: Fix double-free on probe failure(CVE-2024-46673)

RDMA/cma: Fix rdma_resolve_route() memory ... [Please see the references for more information on the vulnerabilities]");

  script_tag(name:"affected", value:"'kernel' package(s) on Huawei EulerOS V2.0SP9.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "EULEROS-2.0SP9") {

  if(!isnull(res = isrpmvuln(pkg:"kernel", rpm:"kernel~4.19.90~vhulk2103.1.0.h1413.eulerosv2r9", rls:"EULEROS-2.0SP9"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"kernel-tools", rpm:"kernel-tools~4.19.90~vhulk2103.1.0.h1413.eulerosv2r9", rls:"EULEROS-2.0SP9"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"kernel-tools-libs", rpm:"kernel-tools-libs~4.19.90~vhulk2103.1.0.h1413.eulerosv2r9", rls:"EULEROS-2.0SP9"))) {
    report += res;
  }

  if(!isnull(res = isrpmvuln(pkg:"python3-perf", rpm:"python3-perf~4.19.90~vhulk2103.1.0.h1413.eulerosv2r9", rls:"EULEROS-2.0SP9"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
14 Jan 2025 00:00Current
9.7High risk
Vulners AI Score9.7
CVSS39.1
EPSS0.001
SSVC
4
.json
Report