遠端 MiracleLinux 7 主機已安裝受到多個弱點影響的套件如 AXSA:2025-9862:27 公告中所提及。

    * drmnv04修正超出邊界存取 {CVE-2024-27008}
    * mediauvcvideo修正錯誤路徑中的重複釋放 {CVE-2024-57980} CVE
    CVE-2024-27008 在 Linux 核心中下列弱點已解決 drm: nv04: Fix out of bounds access When Output Resource (dcb->or) value is assigned in fabricate_dcb_output(), there may be out of bounds access to dac_users array in case dcb->or is zero because ffs(dcb->or) is used as index there. The 'or' argument of fabricate_dcb_output() must be interpreted as a number of bit to set, not value. Utilize macros from 'enum nouveau_or' in calls instead of hardcoding. Found by Linux Verification Center (linuxtesting.org) with SVACE.
    CVE-2024-57980 In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset the pointer to NULL. This results in the kfree() call in uvc_status_cleanup() trying to double-free the memory. Fix it by resetting the dev->status pointer to NULL after freeing it.
    Reviewed by: Ricardo Ribalda

Tenable 已直接從 MiracleLinux 安全性公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

偵測

MiracleLinux 7kernel-3.10.0-1160.119.1.0.10.el7.AXS7 (AXSA:2025-9862:27)

high Nessus Plugin ID 282971

版本 1.2