Test ID:	1.3.6.1.4.1.25623.1.1.10.2024.0032
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2024-0032)
Summary:	The remote host is missing an update for the 'kernel-linus' package(s) announced via the MGASA-2024-0032 advisory.
Description:	Summary: The remote host is missing an update for the 'kernel-linus' package(s) announced via the MGASA-2024-0032 advisory. Vulnerability Insight: Upstream version 6.6.14 with many bugfixes and at least the following security fixes: An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information. (CVE-2023-6610) An unprivileged guest can cause Denial of Service (DoS) of the host by sending network packets to the backend, causing the backend to crash. Data corruption or privilege escalation have not been ruled out. [link moved to references] (CVE-2023-46838) Affected Software/OS: 'kernel-linus' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-46838 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGEKT4DKSDXDS34EL7M4UVJMMPH7Z3ZZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFYW6R64GPLUOXSQBJI3JBUX3HGLAYPP/ https://xenbits.xenproject.org/xsa/advisory-448.html Common Vulnerability Exposure (CVE) ID: CVE-2023-6610 RHBZ#2253614 https://bugzilla.redhat.com/show_bug.cgi?id=2253614 RHSA-2024:0723 https://access.redhat.com/errata/RHSA-2024:0723 RHSA-2024:0724 https://access.redhat.com/errata/RHSA-2024:0724 RHSA-2024:0725 https://access.redhat.com/errata/RHSA-2024:0725 RHSA-2024:0881 https://access.redhat.com/errata/RHSA-2024:0881 RHSA-2024:0897 https://access.redhat.com/errata/RHSA-2024:0897 RHSA-2024:1248 https://access.redhat.com/errata/RHSA-2024:1248 RHSA-2024:1404 https://access.redhat.com/errata/RHSA-2024:1404 https://access.redhat.com/security/cve/CVE-2023-6610 https://bugzilla.kernel.org/show_bug.cgi?id=218219
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.