目的

前回の挙動を再現できなくなっていたので確認
どこかに問題があると思うけどよくわからない
前回：https://qiita.com/witchcraze/items/68c68e80ec220e4fa3a3

結論

なんかおかしい

方法

Hyper-V上にUbuntu インストール
Vuls インストール
Vuls Scan/Report - 1
Ubuntuに古いKernelインストールして、古いKernelでReboot
Vuls Scan/Report - 2

Log

Hyper-V上にUbuntu インストール

$ cat /etc/os-release
NAME="Ubuntu"
VERSION="18.04.6 LTS (Bionic Beaver)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 18.04.6 LTS"
VERSION_ID="18.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=bionic
UBUNTU_CODENAME=bionic

$ uname -r
4.15.0-197-generic

$ dpkg-query -W -f="\${binary:Package},\${db:Status-Abbrev},\${Version},\${Source},\${source:Version}\n" | grep ^linux-
linux-base,ii ,4.5ubuntu1.7,,4.5ubuntu1.7
linux-firmware,ii ,1.173.21,,1.173.21
linux-generic,ii ,4.15.0.197.182,linux-meta,4.15.0.197.182
linux-headers-4.15.0-197,ii ,4.15.0-197.208,linux,4.15.0-197.208
linux-headers-4.15.0-197-generic,ii ,4.15.0-197.208,linux,4.15.0-197.208
linux-headers-generic,ii ,4.15.0.197.182,linux-meta,4.15.0.197.182
linux-image-4.15.0-197-generic,ii ,4.15.0-197.208,linux-signed,4.15.0-197.208
linux-image-generic,ii ,4.15.0.197.182,linux-meta,4.15.0.197.182
linux-modules-4.15.0-197-generic,ii ,4.15.0-197.208,linux,4.15.0-197.208
linux-modules-extra-4.15.0-197-generic,ii ,4.15.0-197.208,linux,4.15.0-197.208

Vuls インストール

今回はvulsctl
https://vuls.io/docs/en/install-with-vulsctl-host.html

$ sudo bash install.sh

$ /usr/local/go/bin/go version
go version go1.19.3 linux/amd64
$ which vuls
/usr/local/bin/vuls
$ vuls -v
vuls-v0.21.1-build-20221115_133708_1d97e91

$ goval-dictionary fetch ubuntu 18
$ go-cve-dictionary fetch nvd

$ ll *.sqlite3
-rw-r--r-- 1 wk wk 1209712640 Nov 15 13:44 cve.sqlite3
-rw-r--r-- 1 wk wk   32186368 Nov 15 13:39 oval.sqlite3

$ cat config.toml
[servers]

[servers.localhost]
host               = "127.0.0.1"
port               = "local"
scanMode           = ["fast"]

Vuls Scan/Report - 1

$ vuls scan
$ vuls report -quiet | grep linux
| CVE-2022-3649    |  9.8 |  AV:N  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-23960   |  8.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2017-13165   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2018-12930   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2018-12931   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2019-19378   |  7.8 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2019-19814   |  7.8 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-11725   |  7.8 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-12362   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-39801   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-20421   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-3239    |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2019-20425   |  7.5 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2019-20429   |  7.5 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-0400    |  7.5 |  AV:N  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2019-14899   |  7.4 |  AV:A  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-32078   |  7.1 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-3864    |  7.0 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-39686   |  7.0 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-23041   |  7.0 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-3028    |  7.0 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2013-7445    |  6.9 |  AV:N  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2015-8553    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2016-8660    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2018-17977   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-26141   |  6.9 |  AV:A  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-26145   |  6.9 |  AV:A  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-26541   |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-27835   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-36310   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-20320   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-33061   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-33624   |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-34556   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-35477   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-39800   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-4148    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-4150    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-4159    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-4218    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-44879   |  6.9 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-0168    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-0382    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-0480    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-1263    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-1280    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-1508    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-20148   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-20166   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-20369   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-2153    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-26373   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-2663    |  6.9 |  AV:N  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-2991    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-3061    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-39188   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-39842   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-40307   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-42703   |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2018-1121    |  5.9 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2016-10723   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2017-13693   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2018-12928   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2018-12929   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2019-19815   |  5.5 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-12363   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-12364   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-3669    |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-0854    |  5.5 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2017-0537    |  4.7 |  AV:N  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2019-16230   |  4.7 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-27820   |  4.7 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2019-15213   |  4.6 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2022-20132   |  4.6 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-14304   |  4.4 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2020-35501   |  3.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-197-generic |
| CVE-2021-34981   |  3.9 |        |     |           | unfixed | linux-image-4.15.0-197-generic |

$ vuls report -quiet | grep linux | wc -l
77

Ubuntuに古いKernelインストールして、古いKernelでReboot

バージョン番号の若いやつをインストール

$ sudo apt install linux-image-4.15.0-22-generic

Hyper-Vキーボード設定 → 全画面表示時に VM で使用
Shiftを押しながらRebootして、古いkernelを選択

$ uname -r
4.15.0-22-generic

$ dpkg-query -W -f="\${binary:Package},\${db:Status-Abbrev},\${Version},\${Source},\${source:Version}\n" | grep ^linux-
linux-base,ii ,4.5ubuntu1.7,,4.5ubuntu1.7
linux-firmware,ii ,1.173.21,,1.173.21
linux-generic,ii ,4.15.0.197.182,linux-meta,4.15.0.197.182
linux-headers-4.15.0-197,ii ,4.15.0-197.208,linux,4.15.0-197.208
linux-headers-4.15.0-197-generic,ii ,4.15.0-197.208,linux,4.15.0-197.208
linux-headers-generic,ii ,4.15.0.197.182,linux-meta,4.15.0.197.182
linux-image-4.15.0-197-generic,ii ,4.15.0-197.208,linux-signed,4.15.0-197.208
linux-image-4.15.0-22-generic,ii ,4.15.0-22.24,linux-signed,4.15.0-22.24
linux-image-generic,ii ,4.15.0.197.182,linux-meta,4.15.0.197.182
linux-libc-dev:amd64,ii ,4.15.0-197.208,linux,4.15.0-197.208
linux-modules-4.15.0-197-generic,ii ,4.15.0-197.208,linux,4.15.0-197.208
linux-modules-4.15.0-22-generic,ii ,4.15.0-22.24,linux,4.15.0-22.24
linux-modules-extra-4.15.0-197-generic,ii ,4.15.0-197.208,linux,4.15.0-197.208

Vuls Scan/Report - 2

$ vuls scan
$ vuls report -quiet | grep linux
| CVE-2022-3649    |  9.8 |  AV:N  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-23960   |  8.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2017-13165   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2018-12930   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2018-12931   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2019-19378   |  7.8 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2019-19814   |  7.8 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-11725   |  7.8 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-12362   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-39801   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-20421   |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-3239    |  7.8 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2019-20425   |  7.5 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2019-20429   |  7.5 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-0400    |  7.5 |  AV:N  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2019-14899   |  7.4 |  AV:A  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-32078   |  7.1 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-3864    |  7.0 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-39686   |  7.0 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-23041   |  7.0 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-3028    |  7.0 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2013-7445    |  6.9 |  AV:N  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2015-8553    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2016-8660    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2018-17977   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-26141   |  6.9 |  AV:A  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-26145   |  6.9 |  AV:A  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-26541   |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-27835   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-36310   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-20320   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-33061   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-33624   |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-34556   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-35477   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-39800   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-4148    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-4150    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-4159    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-4218    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-44879   |  6.9 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-0168    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-0382    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-0480    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-1263    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-1280    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-1508    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-20148   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-20166   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-20369   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-2153    |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-26373   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-2663    |  6.9 |  AV:N  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-2991    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-3061    |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-39188   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-39842   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-40307   |  6.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-42703   |  6.9 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2018-1121    |  5.9 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2016-10723   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2017-13693   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2018-12928   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2018-12929   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2019-19815   |  5.5 |  AV:N  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-12363   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-12364   |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-3669    |  5.5 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-0854    |  5.5 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2017-0537    |  4.7 |  AV:N  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2019-16230   |  4.7 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-27820   |  4.7 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2019-15213   |  4.6 |  AV:L  | POC |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2022-20132   |  4.6 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-14304   |  4.4 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2020-35501   |  3.9 |  AV:L  |     |           | unfixed | linux-image-4.15.0-22-generic  |
| CVE-2021-34981   |  3.9 |        |     |           | unfixed | linux-image-4.15.0-22-generic  |

$ vuls report -quiet | grep linux | wc -l
77