Amazon Linux 2023：bpftool、kernel、kernel-devel (ALAS2023-2026-2058)
medium Nessus Plugin ID 337226
語言:
概要
遠端 Amazon Linux 2023 主機缺少一個安全性更新。說明
因此，會受到 ALAS2023-2026-2058 公告中所提及的多個弱點影響。在 Linux 核心中，下列弱點已解決：
fbdev：修正 store_modes（） 中的釋放後使用 （CVE-2026-63826）
在 Linux 核心中，下列弱點已解決：
netfilter： ebtables：移至兩階段移除方案 （CVE-2026-64077）
Tenable 已直接從所測試產品的安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
執行「dnf update kernel --releasever 2023.12.20260817」或「dnf update --advisory ALAS2023-2026-2058 --releasever 2023.12.20260817」以更新您的系統。另請參閱
https://alas.aws.amazon.com//AL2023/ALAS2023-2026-2058.html
https://alas.aws.amazon.com/faqs.html
https://explore.alas.aws.amazon.com/CVE-2026-53392.html
https://explore.alas.aws.amazon.com/CVE-2026-53393.html
https://explore.alas.aws.amazon.com/CVE-2026-53400.html
https://explore.alas.aws.amazon.com/CVE-2026-53402.html
https://explore.alas.aws.amazon.com/CVE-2026-63806.html
https://explore.alas.aws.amazon.com/CVE-2026-63810.html
https://explore.alas.aws.amazon.com/CVE-2026-63826.html
https://explore.alas.aws.amazon.com/CVE-2026-63829.html
https://explore.alas.aws.amazon.com/CVE-2026-64077.html
https://explore.alas.aws.amazon.com/CVE-2026-64187.html
https://explore.alas.aws.amazon.com/CVE-2026-64189.html
https://explore.alas.aws.amazon.com/CVE-2026-64266.html
https://explore.alas.aws.amazon.com/CVE-2026-64279.html
https://explore.alas.aws.amazon.com/CVE-2026-64296.html
https://explore.alas.aws.amazon.com/CVE-2026-64298.html
https://explore.alas.aws.amazon.com/CVE-2026-64299.html
https://explore.alas.aws.amazon.com/CVE-2026-64306.html
https://explore.alas.aws.amazon.com/CVE-2026-64312.html
https://explore.alas.aws.amazon.com/CVE-2026-64313.html
https://explore.alas.aws.amazon.com/CVE-2026-64317.html
https://explore.alas.aws.amazon.com/CVE-2026-64322.html
https://explore.alas.aws.amazon.com/CVE-2026-64323.html
https://explore.alas.aws.amazon.com/CVE-2026-64324.html
https://explore.alas.aws.amazon.com/CVE-2026-64352.html
https://explore.alas.aws.amazon.com/CVE-2026-64355.html
https://explore.alas.aws.amazon.com/CVE-2026-64364.html
https://explore.alas.aws.amazon.com/CVE-2026-64370.html
https://explore.alas.aws.amazon.com/CVE-2026-64371.html
https://explore.alas.aws.amazon.com/CVE-2026-64372.html
https://explore.alas.aws.amazon.com/CVE-2026-64373.html
https://explore.alas.aws.amazon.com/CVE-2026-64374.html
https://explore.alas.aws.amazon.com/CVE-2026-64375.html
https://explore.alas.aws.amazon.com/CVE-2026-64378.html
https://explore.alas.aws.amazon.com/CVE-2026-64380.html
https://explore.alas.aws.amazon.com/CVE-2026-64381.html
https://explore.alas.aws.amazon.com/CVE-2026-64411.html
https://explore.alas.aws.amazon.com/CVE-2026-64412.html
https://explore.alas.aws.amazon.com/CVE-2026-64413.html
https://explore.alas.aws.amazon.com/CVE-2026-64422.html
https://explore.alas.aws.amazon.com/CVE-2026-64423.html
https://explore.alas.aws.amazon.com/CVE-2026-64425.html
https://explore.alas.aws.amazon.com/CVE-2026-64432.html
https://explore.alas.aws.amazon.com/CVE-2026-64435.html
https://explore.alas.aws.amazon.com/CVE-2026-64436.html
https://explore.alas.aws.amazon.com/CVE-2026-64448.html
https://explore.alas.aws.amazon.com/CVE-2026-64450.html
https://explore.alas.aws.amazon.com/CVE-2026-64456.html
https://explore.alas.aws.amazon.com/CVE-2026-64458.html
https://explore.alas.aws.amazon.com/CVE-2026-64465.html
https://explore.alas.aws.amazon.com/CVE-2026-64472.html
https://explore.alas.aws.amazon.com/CVE-2026-64475.html
https://explore.alas.aws.amazon.com/CVE-2026-64476.html
https://explore.alas.aws.amazon.com/CVE-2026-64512.html
https://explore.alas.aws.amazon.com/CVE-2026-64514.html
https://explore.alas.aws.amazon.com/CVE-2026-64530.html
https://explore.alas.aws.amazon.com/CVE-2026-64532.html
https://explore.alas.aws.amazon.com/CVE-2026-64533.html
https://explore.alas.aws.amazon.com/CVE-2026-64538.html
https://explore.alas.aws.amazon.com/CVE-2026-64544.html
https://explore.alas.aws.amazon.com/CVE-2026-64545.html
https://explore.alas.aws.amazon.com/CVE-2026-64546.html
https://explore.alas.aws.amazon.com/CVE-2026-64548.html
https://explore.alas.aws.amazon.com/CVE-2026-64551.html
https://explore.alas.aws.amazon.com/CVE-2026-64552.html
https://explore.alas.aws.amazon.com/CVE-2026-64553.html
https://explore.alas.aws.amazon.com/CVE-2026-64560.html
https://explore.alas.aws.amazon.com/CVE-2026-64561.html
https://explore.alas.aws.amazon.com/CVE-2026-64593.html
https://explore.alas.aws.amazon.com/CVE-2026-64604.html
https://explore.alas.aws.amazon.com/CVE-2026-72193.html
https://explore.alas.aws.amazon.com/CVE-2026-72197.html
https://explore.alas.aws.amazon.com/CVE-2026-72218.html
https://explore.alas.aws.amazon.com/CVE-2026-72276.html
https://explore.alas.aws.amazon.com/CVE-2026-72290.html
https://explore.alas.aws.amazon.com/CVE-2026-72343.html
https://explore.alas.aws.amazon.com/CVE-2026-72419.html
https://explore.alas.aws.amazon.com/CVE-2026-72437.html
https://explore.alas.aws.amazon.com/CVE-2026-74262.html
https://explore.alas.aws.amazon.com/CVE-2026-74305.html
https://explore.alas.aws.amazon.com/CVE-2026-74327.html
Plugin 詳細資訊
嚴重性: Medium
ID: 337226
檔案名稱: al2023_ALAS2023-2026-2058.nasl
版本: 1.2
類型: Local
代理程式: unix
已發布: 2026/8/18
已更新: 2026/8/19
支援的感應器: Frictionless Assessment AWS, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: High
分數: 8
百分位數: 99.68
CVSS v2
風險因素: Medium
基本分數: 4.6
時間性分數: 3.6
媒介: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C
CVSS 評分資料來源: CVE-2026-64187
CVSS v3
風險因素: Medium
基本分數: 5.5
時間性分數: 5
媒介: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
時間媒介: CVSS:3.0/E:P/RL:O/RC:C
弱點資訊
CPE: cpe:/o:amazon:linux:2023, p-cpe:/a:amazon:linux:bpftool-debuginfo, p-cpe:/a:amazon:linux:bpftool, p-cpe:/a:amazon:linux:kernel-debuginfo-common-aarch64, p-cpe:/a:amazon:linux:kernel-debuginfo-common-x86_64, p-cpe:/a:amazon:linux:kernel-debuginfo, p-cpe:/a:amazon:linux:kernel-devel, p-cpe:/a:amazon:linux:kernel-headers, p-cpe:/a:amazon:linux:kernel-livepatch-6.1.180-225.360, p-cpe:/a:amazon:linux:kernel-modules-extra-common, p-cpe:/a:amazon:linux:kernel-modules-extra, p-cpe:/a:amazon:linux:kernel-tools-debuginfo, p-cpe:/a:amazon:linux:kernel-tools-devel, p-cpe:/a:amazon:linux:kernel-tools, p-cpe:/a:amazon:linux:kernel, p-cpe:/a:amazon:linux:perf-debuginfo, p-cpe:/a:amazon:linux:perf, p-cpe:/a:amazon:linux:python3-perf-debuginfo, p-cpe:/a:amazon:linux:python3-perf
必要的 KB 項目: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/8/17
弱點發布日期: 2026/7/8
參考資訊
CVE: CVE-2026-53392, CVE-2026-53393, CVE-2026-53400, CVE-2026-53402, CVE-2026-63806, CVE-2026-63810, CVE-2026-63826, CVE-2026-63829, CVE-2026-64077, CVE-2026-64187, CVE-2026-64189, CVE-2026-64266, CVE-2026-64279, CVE-2026-64296, CVE-2026-64298, CVE-2026-64299, CVE-2026-64306, CVE-2026-64312, CVE-2026-64313, CVE-2026-64317, CVE-2026-64322, CVE-2026-64323, CVE-2026-64324, CVE-2026-64352, CVE-2026-64355, CVE-2026-64364, CVE-2026-64370, CVE-2026-64371, CVE-2026-64372, CVE-2026-64373, CVE-2026-64374, CVE-2026-64375, CVE-2026-64378, CVE-2026-64380, CVE-2026-64381, CVE-2026-64411, CVE-2026-64412, CVE-2026-64413, CVE-2026-64422, CVE-2026-64423, CVE-2026-64425, CVE-2026-64432, CVE-2026-64435, CVE-2026-64436, CVE-2026-64448, CVE-2026-64450, CVE-2026-64456, CVE-2026-64458, CVE-2026-64465, CVE-2026-64472, CVE-2026-64475, CVE-2026-64476, CVE-2026-64512, CVE-2026-64514, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64538, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546, CVE-2026-64548, CVE-2026-64551, CVE-2026-64552, CVE-2026-64553, CVE-2026-64560, CVE-2026-64561, CVE-2026-64593, CVE-2026-64604, CVE-2026-72193, CVE-2026-72197, CVE-2026-72218, CVE-2026-72276, CVE-2026-72290, CVE-2026-72343, CVE-2026-72419, CVE-2026-72437, CVE-2026-74262, CVE-2026-74305, CVE-2026-74327, CVE-2026-74329, CVE-2026-74380