MiracleLinux 9 : kernel-5.14.0-427.26.1.el9_4 (AXSA:2024-8593:22)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8593:22 advisory. kernel: TIPC message reassembly use-after-free remote code execution vulnerability CVE-2024-36886 kernel: ethernet: hisilicon: hns: hnsdsafmisc: fix...

MiracleLinux 7 : kernel-3.10.0-1160.108.1.el7 (AXSA:2024-7470:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7470:05 advisory. kernel: netfilter: potential slab-out-of-bound access due to integer underflow CVE-2023-42753 Tenable has extracted the preceding description block directly...

MiracleLinux 8 : kernel-4.18.0-477.27.2.el8_8 (AXSA:2023-6482:27)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6482:27 advisory. x86/microcode/AMD: Rename a couple of functions CVE-2023-20593 x86/microcode: Add a parameter to microcodecheck to store CPU capabilities...

MiracleLinux 7 : kernel-3.10.0-1160.102.1.el7 (AXSA:2023-6501:28)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6501:28 advisory. kernel: net/sched: clsu32 component reference counter leak if tcfchangeindev fails CVE-2023-3609 kernel: netfilter: use-after-free in nftables when...

MiracleLinux 9 : kernel-5.14.0-427.20.1.el9_4 (AXSA:2024-8495:18)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8495:18 advisory. kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref CVE-2024-26735 kernel: fs: sysfs: Fix reference leak in sysfsbreakactiveprotection...

MiracleLinux 8 : kernel-4.18.0-477.13.1.el8_8 (AXSA:2023-6202:19)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6202:19 advisory. kernel: netfilter: use-after-free in nftables when processing batch requests can lead to privilege escalation CVE-2023-32233 Tenable has extracted the...

MiracleLinux 4 : kernel-2.6.32-754.31.1.el6 (AXSA:2020-230:08)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-230:08 advisory. kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure CVE-2019-18660 Tenable has extracted the preceding description block directly...

MiracleLinux 8 : kernel-4.18.0-305.7.1.el8_4 (AXSA:2021-2251:15)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2251:15 advisory. kernel: use-after-free in net/bluetooth/hcievent.c when destroying an hcichan CVE-2021-33034 kernel: security bypass in certs/blacklist.c and...

MiracleLinux 7 : kernel-3.10.0-1160.41.1.el7 (AXSA:2021-2410:19)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2410:19 advisory. kernel: out-of-bounds write in xtcompattargetfromuser in net/netfilter/xtables.c CVE-2021-22555 kernel: race condition for removal of the HCI...

MiracleLinux 7 : kernel-3.10.0-1160.15.2.el7 (AXSA:2021-1471:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1471:03 advisory. kernel: use-after-free in fs/blockdev.c CVE-2020-15436 kernel: Nfsd failure to clear umask after processing an open or create CVE-2020-35513 Tenable...

MiracleLinux 7 : kernel-3.10.0-1127.13.1.el7 (AXSA:2020-222:07)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-222:07 advisory. Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario CVE-2020-12888 Tenable has extracted the preceding description block...

MiracleLinux 8 : kernel-4.18.0-305.19.1.el8_4 (AXSA:2021-2424:22)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2424:22 advisory. kernel: SVM nested virtualization issue in KVM AVIC support CVE-2021-3653 Tenable has extracted the preceding description block directly from the MiracleLinu...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

ROS-20260119-7312

A vulnerability in the net/mptcp/pmnetlink.c component of the Linux operating system kernel is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260119-7325

A vulnerability in the padatareorder function of the kernel/padata.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260119-7356

A vulnerability in the arpxmitfinish function of the net/ipv4/arp.c module of the Linux kernel IPv4 protocol implementation is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protecte...

ROS-20260119-7357

A vulnerability in the neighnotify function of the net/core/neighbour.c module of the Linux kernel's network functions support is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

ROS-20260119-7382

A vulnerability in the omapinitlcddma function of the lcddma.c component of the Linux kernel is related to buffer copying without input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260119-7329

A vulnerability in the ufsbsgremove function of the drivers/ufs/core/ufsbsg.c module of the Linux kernel's UFS Universal Flash Storage host controller support is related to the reuse of previously freed memory. Exploitation of the vulnerability could allow an attacker to affect the confidentialit...

MiracleLinux 7 : kernel-3.10.0-693.el7 (AXSA:2017-1758:07)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1758:07 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security issues fixed with this release: CVE-2016-10200...