Debian Linux Kernel Package Detection Improvements

Summary

We are updating our Debian plugins to improve the detection of kernel packages in two significant ways. The primary detection of Debian Linux kernel packages in Nessus has been aligned to Debian's package release process. This change improves our detection of publicly disclosed kernel vulnerabilities. In the second part of this improvement, Nessus now will only consider installed Linux kernel packages that correspond to the running kernel version when a target is in a state between a kernel update and a system reboot.

Impact

Customers scanning targets that run Debian Linux and have unpatched kernel vulnerabilities will see new findings in their scan results.  Debian Linux targets that have been upgraded to address kernel vulnerabilities will show unpatched kernel vulnerabilities until after reboot, when the host is running the upgraded kernel.

Affected Plugins

The following plugins are impacted by these changes:

126837, Debian DSA-4484-1 : linux - security update

127491, Debian DSA-4495-1 : linux - security update

127867, Debian DSA-4497-1 : linux - security update

129306, Debian DSA-4531-1 : linux - security update

130982, Debian DSA-4564-1 : linux - security update

136124, Debian DSA-4667-1 : linux - security update

137341, Debian DSA-4699-1 : linux - security update

141552, Debian DSA-4774-1 : linux - security update

146052, Debian DSA-4843-1 : linux - security update

151890, Debian DSA-4941-1 : linux - security update

153668, Debian DSA-4978-1 : linux - security update

164947, Debian DLA-3102-1 : linux-5.10 - LTS security update

165623, Debian DLA-3131-1 : linux - LTS security update

166822, Debian DLA-3173-1 : linux-5.10 - LTS security update

169293, Debian DLA-3244-1 : linux-5.10 - LTS security update

169294, Debian DLA-3245-1 : linux - LTS security update

156950, Debian DSA-5050-1 : linux - security update

158682, Debian DSA-5092-1 : linux - security update

158762, Debian DSA-5095-1 : linux - security update

158761, Debian DSA-5096-1 : linux - security update

160469, Debian DSA-5127-1 : linux - security update

162159, Debian DSA-5161-1 : linux - security update

162703, Debian DSA-5173-1 : linux - security update

163480, Debian DSA-5191-1 : linux - security update

164150, Debian DSA-5207-1 : linux - security update

166232, Debian DSA-5257-1 : linux - security update

172079, Debian DLA-3349-1 : linux-5.10 - LTS security update

175926, Debian DLA-3403-1 : linux - LTS security update

175925, Debian DLA-3404-1 : linux-5.10 - LTS security update

176729, Debian DLA-3446-1 : linux-5.10 - LTS security update

178958, Debian DLA-3508-1 : linux - LTS security update

179309, Debian DLA-3512-1 : linux-5.10 - LTS security update

179933, Debian DLA-3524-1 : linux - LTS security update

179934, Debian DLA-3525-1 : linux-5.10 - LTS security update

183491, Debian DLA-3623-1 : linux-5.10 - LTS security update

170485, Debian DSA-5324-1 : linux - security update

175664, Debian DSA-5402-1 : linux - security update

178003, Debian DSA-5448-1 : linux - security update

178329, Debian DSA-5453-1 : linux - security update

179043, Debian DSA-5461-1 : linux - security update

179044, Debian DSA-5462-1 : linux - security update

179736, Debian DSA-5475-1 : linux - security update

180016, Debian DSA-5480-1 : linux - security update

181209, Debian DSA-5492-1 : linux - security update

189094, Debian dla-3710 : hyperv-daemons - security update

189090, Debian dla-3711 : linux-config-5.10 - security update

Target Release Date

March 27, 2024