Huawei EulerOS has critical kernel vulnerabilities with multiple CVEs affecting system security.
Reporter | Title | Published | Views | Family All 199 |
---|---|---|---|---|
![]() | EulerOS 2.0 SP9 : kernel (EulerOS-SA-2025-1040) | 14 Jan 202500:00 | – | nessus |
![]() | EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-1007) | 13 Jan 202500:00 | – | nessus |
![]() | EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-1024) | 13 Jan 202500:00 | – | nessus |
![]() | EulerOS 2.0 SP9 : kernel (EulerOS-SA-2025-1057) | 14 Jan 202500:00 | – | nessus |
![]() | Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-072) | 1 Nov 202400:00 | – | nessus |
![]() | Amazon Linux 2 : kernel (ALASKERNEL-5.4-2025-090) | 24 Jan 202500:00 | – | nessus |
![]() | Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-056) | 1 Nov 202400:00 | – | nessus |
![]() | Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-794) | 9 Jan 202500:00 | – | nessus |
![]() | CBL Mariner 2.0 Security Update: kernel (CVE-2024-50262) | 13 Dec 202400:00 | – | nessus |
![]() | CBL Mariner 2.0 Security Update: kernel (CVE-2024-50195) | 13 Dec 202400:00 | – | nessus |
Source | Link |
---|---|
developer | www.developer.huaweicloud.com/intl/en-us/euleros/securitydetail.html |
# SPDX-FileCopyrightText: 2025 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.1.2.2025.1040");
script_cve_id("CVE-2021-47345", "CVE-2021-47405", "CVE-2022-48757", "CVE-2022-48760", "CVE-2022-48946", "CVE-2022-48978", "CVE-2022-49021", "CVE-2023-52742", "CVE-2024-26865", "CVE-2024-33621", "CVE-2024-35898", "CVE-2024-36017", "CVE-2024-36933", "CVE-2024-40901", "CVE-2024-41089", "CVE-2024-44952", "CVE-2024-45021", "CVE-2024-45025", "CVE-2024-46673", "CVE-2024-46743", "CVE-2024-46744", "CVE-2024-46750", "CVE-2024-46777", "CVE-2024-46816", "CVE-2024-46826", "CVE-2024-46829", "CVE-2024-47685", "CVE-2024-47696", "CVE-2024-47701", "CVE-2024-47742", "CVE-2024-47745", "CVE-2024-49855", "CVE-2024-49860", "CVE-2024-49881", "CVE-2024-49882", "CVE-2024-49883", "CVE-2024-49884", "CVE-2024-49889", "CVE-2024-49959", "CVE-2024-50033", "CVE-2024-50035", "CVE-2024-50036", "CVE-2024-50073", "CVE-2024-50154", "CVE-2024-50179", "CVE-2024-50195", "CVE-2024-50199", "CVE-2024-50262", "CVE-2024-50301");
script_tag(name:"creation_date", value:"2025-01-14 15:21:42 +0000 (Tue, 14 Jan 2025)");
script_version("2025-01-15T05:38:11+0000");
script_tag(name:"last_modification", value:"2025-01-15 05:38:11 +0000 (Wed, 15 Jan 2025)");
script_tag(name:"cvss_base", value:"9.4");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:N/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2024-10-23 15:19:06 +0000 (Wed, 23 Oct 2024)");
script_name("Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1040)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2025 Greenbone AG");
script_family("Huawei EulerOS Local Security Checks");
script_dependencies("gb_huawei_euleros_consolidation.nasl");
script_mandatory_keys("ssh/login/euleros", "ssh/login/rpms", re:"ssh/login/release=EULEROS\-2\.0SP9");
script_xref(name:"Advisory-ID", value:"EulerOS-SA-2025-1040");
script_xref(name:"URL", value:"https://developer.huaweicloud.com/intl/en-us/euleros/securitydetail.html?secId=EulerOS-SA-2025-1040");
script_tag(name:"summary", value:"The remote host is missing an update for the Huawei EulerOS 'kernel' package(s) announced via the EulerOS-SA-2025-1040 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation(CVE-2024-36017)
netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()(CVE-2024-35898)
ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound(CVE-2024-33621)
net: fix information leakage in /proc/net/ptype(CVE-2022-48757)
USB: core: Fix hang in usb_kill_urb by adding memory barriers(CVE-2022-48760)
security/keys: fix slab-out-of-bounds in key_task_permission(CVE-2024-50301)
ext4: avoid use-after-free in ext4_ext_show_leaf().(CVE-2024-49889)
HID: core: fix shift-out-of-bounds in hid_report_raw_event(CVE-2022-48978)
firmware_loader: Block path traversal(CVE-2024-47742)
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()(CVE-2024-47685)
ext4: update orig_path in ext4_find_extent().(CVE-2024-49881)
bpf: Fix out-of-bounds write in trie_get_next_key().(CVE-2024-50262)
slip: make slhc_remember() more robust against malicious packets(CVE-2024-50033)
tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().(CVE-2024-50154)
ACPI: sysfs: validate return type of _STR method(CVE-2024-49860)
udf: Fix preallocation discarding at indirect extent boundary(CVE-2022-48946)
ppp: fix ppp_async_encode() illegal access(CVE-2024-50035)
ext4: avoid OOB when system.data xattr changes underneath the filesystem(CVE-2024-47701)
net: do not delay dst_entries_add() in dst_release()(CVE-2024-50036)
ext4: fix slab-use-after-free in ext4_split_extent_at().(CVE-2024-49884)
ext4: aovid use-after-free in ext4_ext_insert_extent().(CVE-2024-49883)
drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes(CVE-2024-41089)
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().(CVE-2024-26865)
net: USB: Fix wrong-direction WARNING in plusb.c (CVE-2023-52742)
fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE(CVE-2024-45025)
nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().(CVE-2024-36933)
In the Linux kernel, the following vulnerability has been resolved:memcg_write_event_control(): fix a user-triggerable oops we are *not* guaranteed that anything past the terminating NUL is mapped (let alone initialized with anything sane).(CVE-2024-45021)
udf: Avoid excessive partition lengths(CVE-2024-46777)
Squashfs: sanity check symbolic link size(CVE-2024-46744)
PCI: Add missing bridge lock to pci_bus_lock()(CVE-2024-46750)
driver core: Fix uevent_show() vs driver detach race(CVE-2024-44952)
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory(CVE-2024-40901)
HID: usbhid: free raw_report buffers in usbhid_stop(CVE-2021-47405)
rtmutex: Drop rt_mutex::wait_lock before scheduling(CVE-2024-46829)
of/irq: Prevent device address out-of-bounds read in interrupt map walk(CVE-2024-46743)
scsi: aacraid: Fix double-free on probe failure(CVE-2024-46673)
RDMA/cma: Fix rdma_resolve_route() memory ... [Please see the references for more information on the vulnerabilities]");
script_tag(name:"affected", value:"'kernel' package(s) on Huawei EulerOS V2.0SP9.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "EULEROS-2.0SP9") {
if(!isnull(res = isrpmvuln(pkg:"kernel", rpm:"kernel~4.19.90~vhulk2103.1.0.h1413.eulerosv2r9", rls:"EULEROS-2.0SP9"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-tools", rpm:"kernel-tools~4.19.90~vhulk2103.1.0.h1413.eulerosv2r9", rls:"EULEROS-2.0SP9"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-tools-libs", rpm:"kernel-tools-libs~4.19.90~vhulk2103.1.0.h1413.eulerosv2r9", rls:"EULEROS-2.0SP9"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python3-perf", rpm:"python3-perf~4.19.90~vhulk2103.1.0.h1413.eulerosv2r9", rls:"EULEROS-2.0SP9"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo