The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1648:04 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system.  The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2016-8650     The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through     4.8.11 does not ensure that memory is allocated for limb data, which     allows local users to cause a denial of service (stack memory     corruption and panic) via an add_key system call for an RSA key with a     zero exponent.
    CVE-2016-9793     The sock_setsockopt function in net/core/sock.c in the Linux kernel     before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf,     which allows local users to cause a denial of service (memory     corruption and system crash) or possibly have unspecified other impact     by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt     system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option.
    CVE-2017-2618
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-2636     Race condition in drivers/tty/n_hdlc.c in the Linux kernel through     4.10.1 allows local users to gain privileges or cause a denial of     service (double free) by setting the HDLC line discipline.
    These updated kernel packages include several security issues and numerous bug fixes.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002986 advisory.

    Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain     privileges or cause a denial of service (double free) by setting the HDLC line discipline.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001166 advisory.

    Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain     privileges or cause a denial of service (double free) by setting the HDLC line discipline.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or have other impacts.

  - CVE-2016-9588     Jim Mattson discovered that the KVM implementation for     Intel x86 processors does not properly handle #BP and     #OF exceptions in an L2 (nested) virtual machine. A     local attacker in an L2 guest VM can take advantage of     this flaw to cause a denial of service for the L1 guest     VM.

  - CVE-2017-2636     Alexander Popov discovered a race condition flaw in the     n_hdlc line discipline that can lead to a double free. A     local unprivileged user can take advantage of this flaw     for privilege escalation. On systems that do not already     have the n_hdlc module loaded, this can be mitigated by     disabling it:echo >> /etc/modprobe.d/disable-n_hdlc.conf     install n_hdlc false

  - CVE-2017-5669     Gareth Evans reported that privileged users can map     memory at address 0 through the shmat() system call.
    This could make it easier to exploit other kernel     security vulnerabilities via a set-UID program.

  - CVE-2017-5986     Alexander Popov reported a race condition in the SCTP     implementation that can be used by local users to cause     a denial-of-service (crash). The initial fix for this     was incorrect and introduced further security issues (     CVE-2017-6353 ). This update includes a later fix that     avoids those. On systems that do not already have the     sctp module loaded, this can be mitigated by disabling     it:echo >> /etc/modprobe.d/disable-sctp.conf install     sctp false

  - CVE-2017-6214     Dmitry Vyukov reported a bug in the TCP implementation's     handling of urgent data in the splice() system call.
    This can be used by a remote attacker for     denial-of-service (hang) against applications that read     from TCP sockets with splice().

  - CVE-2017-6345     Andrey Konovalov reported that the LLC type 2     implementation incorrectly assigns socket buffer     ownership. This can be used by a local user to cause a     denial-of-service (crash). On systems that do not     already have the llc2 module loaded, this can be     mitigated by disabling it:echo >>     /etc/modprobe.d/disable-llc2.conf install llc2 false

  - CVE-2017-6346     Dmitry Vyukov reported a race condition in the raw     packet (af_packet) fanout feature. Local users with the     CAP_NET_RAW capability (in any user namespace) can use     this for denial-of-service and possibly for privilege     escalation.

  - CVE-2017-6348     Dmitry Vyukov reported that the general queue     implementation in the IrDA subsystem does not properly     manage multiple locks, possibly allowing local users to     cause a denial-of-service (deadlock) via crafted     operations on IrDA devices.

This is an update containing several CVE and other misc fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The SUSE Linux Enterprise 12 kernel was updated to fix the following security bugs :

  - CVE-2017-7184: The Linux kernel allowed local users to     obtain root privileges or cause a denial of service     (heap-based out-of-bounds access) via unspecified     vectors, as demonstrated during a Pwn2Own competition at     CanSecWest 2017 (bnc#1030573, bnc#1028372).

  - CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in     the Linux kernel allowed local users to gain privileges     or cause a denial of service (double free) by setting     the HDLC line discipline (bnc#1027565).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0892 advisory.

    - [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0933 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    These updated kernel packages include several security issues and numerous bug fixes. Space precludes     documenting all of these bug fixes in this advisory. To see the complete list of bug fixes, users are     directed to the related Knowledge Article: https://access.redhat.com/articles/2986951.

    Security Fix(es):

    * A race condition flaw was found in the N_HLDC Linux kernel driver when accessing n_hdlc.tbuf list that     can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device     could use this flaw to increase their privileges on the system. (CVE-2017-2636, Important)

    * A flaw was found in the Linux kernel key management subsystem in which a local attacker could crash the     kernel or corrupt the stack and additional memory (denial of service) by supplying a specially crafted RSA     key. This flaw panics the machine during the verification of the RSA key. (CVE-2016-8650, Moderate)

    * A flaw was found in the Linux kernel's implementation of setsockopt for the SO_{SND|RCV}BUFFORCE     setsockopt() system call. Users with non-namespace CAP_NET_ADMIN are able to trigger this call and create     a situation in which the sockets sendbuff data size could be negative. This could adversely affect memory     allocations and create situations where the system could crash or cause memory corruption. (CVE-2016-9793,     Moderate)

    * A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files.
    An empty (null) write to this file can crash the system by causing the system to attempt to access     unmapped kernel memory. (CVE-2017-2618, Moderate)

    Red Hat would like to thank Alexander Popov for reporting CVE-2017-2636 and Ralf Spenneberg for reporting     CVE-2016-8650. The CVE-2017-2618 issue was discovered by Paul Moore (Red Hat Engineering).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0932 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * A race condition flaw was found in the N_HLDC Linux kernel driver when accessing n_hdlc.tbuf list that     can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device     could use this flaw to increase their privileges on the system. (CVE-2017-2636, Important)

    * A use-after-free flaw was found in the way the Linux kernel's Datagram Congestion Control Protocol     (DCCP) implementation freed SKB (socket buffer) resources for a DCCP_PKT_REQUEST packet when the     IPV6_RECVPKTINFO option is set on the socket. A local, unprivileged user could use this flaw to alter the     kernel memory, allowing them to escalate their privileges on the system. (CVE-2017-6074, Important)

    * A flaw was found in the Linux kernel key management subsystem in which a local attacker could crash the     kernel or corrupt the stack and additional memory (denial of service) by supplying a specially crafted RSA     key. This flaw panics the machine during the verification of the RSA key. (CVE-2016-8650, Moderate)

    * A flaw was found in the Linux kernel's implementation of setsockopt for the SO_{SND|RCV}BUFFORCE     setsockopt() system call. Users with non-namespace CAP_NET_ADMIN are able to trigger this call and create     a situation in which the sockets sendbuff data size could be negative. This could adversely affect memory     allocations and create situations where the system could crash or cause memory corruption. (CVE-2016-9793,     Moderate)

    * A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files.
    An empty (null) write to this file can crash the system by causing the system to attempt to access     unmapped kernel memory. (CVE-2017-2618, Moderate)

    Red Hat would like to thank Alexander Popov for reporting CVE-2017-2636; Andrey Konovalov (Google) for     reporting CVE-2017-6074; and Ralf Spenneberg for reporting CVE-2016-8650. The CVE-2017-2618 issue was     discovered by Paul Moore (Red Hat Engineering).

    Bug Fix(es):

    * The kernel-rt packages have been upgraded to version 3.10.0-514.rt56.219, which provides a number of bug     fix updates over the previous version. (BZ#1429613)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
290141	MiracleLinux 7 : kernel-3.10.0-514.16.1.el7 (AXSA:2017-1648:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/19	high
287704	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002986)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/16	high
291252	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001166)	Nessus	Unity Linux Local Security Checks	2026/1/16	2026/1/16	high
97615	Debian DSA-3804-1 : linux - security update	Nessus	Debian Local Security Checks	2017/3/9	2025/12/30	high
97675	Fedora 24 : kernel (2017-2e1f3694b2)	Nessus	Fedora Local Security Checks	2017/3/13	2025/12/30	high
99090	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:0864-1)	Nessus	SuSE Local Security Checks	2017/3/30	2025/12/26	high
99298	Oracle Linux 6 : kernel (ELSA-2017-0892)	Nessus	Oracle Linux Local Security Checks	2017/4/12	2026/2/9	high
99346	RHEL 7 : kernel (RHSA-2017:0933)	Nessus	Red Hat Local Security Checks	2017/4/13	2025/4/15	high
99345	RHEL 6 : kernel-rt (RHSA-2017:0932)	Nessus	Red Hat Local Security Checks	2017/4/13	2025/3/24	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high