MiracleLinux 9 : bcc-0.30.0-6.el9 (AXSA:2024-9387:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9387:04 advisory. bcc: unprivileged users can force loading of compromised linux headers CVE-2024-2314 Tenable has extracted the preceding description block directly from the...

CVE-2024-2314

creationtimestamp| type| source ---|---|--- 2024-03-11 00:26:13+00:00| seen| https://t.me/ctinow/204376 2024-03-11 00:26:18+00:00| seen| https://t.me/ctinow/204380 2024-03-11 16:01:47+00:00| seen| https://t.me/ctinow/204795...

AZL-38914 CVE-2024-2314 affecting package bcc for versions less than 0.29.1-3

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default...