Rocky Linux 9.6 [CIQ] 安全性更新：kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / 等多個弱點 (ciqsa-2026_1343)
high Nessus Plugin ID 353628
語言:
概要
Rocky Linux 主機缺少一個或多個安全性更新。說明
Rocky Linux 9.6 主機上安裝的多個套件受到 CIQ ciqsa-2026_1343 公告中提及的多個弱點影響。此公告彙總了 CIQ FIPS 9.6 合規中核心 SRPM 的安全修正。它解決了 82 個 CVE： CVE-2025-40271、 CVE-2025-38024、 CVE-2025-38022、 CVE-2025-40240、 和 CVE-2025-23142另外 77 個。
Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 CIQ 公告 ciqsa-2026_1343 中的指引，更新受影響的套件。另請參閱
https://github.com/ctrliq/advisories
http://www.nessus.org/u?05472e7e
http://www.nessus.org/u?08064f42
http://www.nessus.org/u?0aec29bb
http://www.nessus.org/u?0efe38ee
http://www.nessus.org/u?113d1f96
http://www.nessus.org/u?14deeee1
http://www.nessus.org/u?15ce19e1
http://www.nessus.org/u?17485d26
http://www.nessus.org/u?1aeba1da
http://www.nessus.org/u?1de1080e
http://www.nessus.org/u?2013a894
http://www.nessus.org/u?21ada227
http://www.nessus.org/u?2329aadc
http://www.nessus.org/u?264ba684
http://www.nessus.org/u?26d3ede8
http://www.nessus.org/u?27bfce6d
http://www.nessus.org/u?2c35c451
http://www.nessus.org/u?2e695978
http://www.nessus.org/u?33a82a77
http://www.nessus.org/u?397069ed
http://www.nessus.org/u?3d383f7a
http://www.nessus.org/u?429cedcf
http://www.nessus.org/u?45f1ea60
http://www.nessus.org/u?4c1eb187
http://www.nessus.org/u?5043edc6
http://www.nessus.org/u?513c97b6
http://www.nessus.org/u?5427716f
http://www.nessus.org/u?55b10154
http://www.nessus.org/u?568f54b7
http://www.nessus.org/u?5b558447
http://www.nessus.org/u?66c4ec54
http://www.nessus.org/u?6779a1d2
http://www.nessus.org/u?6c9126ef
http://www.nessus.org/u?73d8df8c
http://www.nessus.org/u?7496270a
http://www.nessus.org/u?7828fb80
http://www.nessus.org/u?7b3edac8
http://www.nessus.org/u?7b401360
http://www.nessus.org/u?7b9ab946
http://www.nessus.org/u?807a3ef8
http://www.nessus.org/u?8417085f
http://www.nessus.org/u?84c495a6
http://www.nessus.org/u?865c58c0
http://www.nessus.org/u?8660744f
http://www.nessus.org/u?87dd2d4f
http://www.nessus.org/u?9143cf5d
http://www.nessus.org/u?91d10bb6
http://www.nessus.org/u?93e1bd30
http://www.nessus.org/u?942f9480
http://www.nessus.org/u?94dc4ba7
http://www.nessus.org/u?9f9c2cee
http://www.nessus.org/u?a100df80
http://www.nessus.org/u?a6e65f5d
http://www.nessus.org/u?a8ac0ca9
http://www.nessus.org/u?ad1c5bf3
http://www.nessus.org/u?ae6109c4
http://www.nessus.org/u?b2e4fdf8
http://www.nessus.org/u?b7d68cfa
http://www.nessus.org/u?b8a94bfe
http://www.nessus.org/u?c044535a
http://www.nessus.org/u?c08484a5
http://www.nessus.org/u?c215945a
http://www.nessus.org/u?ca32b33a
http://www.nessus.org/u?cd354230
http://www.nessus.org/u?d16de72c
http://www.nessus.org/u?d4c52064
http://www.nessus.org/u?d5171851
http://www.nessus.org/u?d6010f0a
http://www.nessus.org/u?d692dddf
http://www.nessus.org/u?d80997c1
http://www.nessus.org/u?dab70131
http://www.nessus.org/u?ddfc57f3
http://www.nessus.org/u?e3335db1
http://www.nessus.org/u?e554a066
http://www.nessus.org/u?e85ed674
http://www.nessus.org/u?e965a071
http://www.nessus.org/u?eb91a499
http://www.nessus.org/u?edbffd8b
http://www.nessus.org/u?ef6efb18
http://www.nessus.org/u?f2511b4a
http://www.nessus.org/u?f5d7cb7a
Plugin 詳細資訊
嚴重性: High
ID: 353628
檔案名稱: ciq_rocky_linux_9_6_ciqsa-2026_1343.nasl
版本: 1.6
類型: Local
已發布: 2026/10/1
已更新: 2026/10/26
支援的感應器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: Critical
分數: 9.5
百分位數: 99.87
Vendor
Vendor Severity: High
CVSS v2
風險因素: Medium
基本分數: 6.8
時間性分數: 5.9
媒介: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2026-23231
CVSS v3
風險因素: High
基本分數: 7.8
時間性分數: 7.5
媒介: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:H/RL:O/RC:C
CVSS v4
風險因素: High
Base Score: 8.6
Threat Score: 8.6
Threat Vector: CVSS:4.0/E:A
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 評分資料來源: CVE-2026-31431
弱點資訊
必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/9/2
弱點發布日期: 2024/4/9
CISA 已知遭惡意利用弱點到期日: 2026/5/15
可惡意利用
Core Impact
Metasploit (Copy Fail AF_ALG + authencesn Page-Cache Write)
參考資訊
CVE: CVE-2023-53034, CVE-2024-47727, CVE-2024-53229, CVE-2024-54456, CVE-2024-56603, CVE-2024-56645, CVE-2024-56690, CVE-2025-21647, CVE-2025-21786, CVE-2025-21791, CVE-2025-21795, CVE-2025-21863, CVE-2025-22056, CVE-2025-23142, CVE-2025-37761, CVE-2025-37789, CVE-2025-37819, CVE-2025-37849, CVE-2025-37861, CVE-2025-37869, CVE-2025-37882, CVE-2025-37891, CVE-2025-38022, CVE-2025-38024, CVE-2025-38051, CVE-2025-38106, CVE-2025-38129, CVE-2025-38141, CVE-2025-38154, CVE-2025-38180, CVE-2025-38206, CVE-2025-38289, CVE-2025-38323, CVE-2025-38349, CVE-2025-38703, CVE-2025-38724, CVE-2025-39697, CVE-2025-39760, CVE-2025-39864, CVE-2025-39881, CVE-2025-39883, CVE-2025-39898, CVE-2025-39918, CVE-2025-39955, CVE-2025-39966, CVE-2025-39971, CVE-2025-39973, CVE-2025-40047, CVE-2025-40096, CVE-2025-40141, CVE-2025-40154, CVE-2025-40176, CVE-2025-40186, CVE-2025-40240, CVE-2025-40248, CVE-2025-40251, CVE-2025-40258, CVE-2025-40269, CVE-2025-40271, CVE-2025-40277, CVE-2025-40294, CVE-2025-40304, CVE-2025-40318, CVE-2025-40322, CVE-2025-68285, CVE-2025-68287, CVE-2025-68301, CVE-2025-68349, CVE-2025-68800, CVE-2025-68811, CVE-2025-71085, CVE-2026-23001, CVE-2026-23060, CVE-2026-23111, CVE-2026-23144, CVE-2026-23193, CVE-2026-23204, CVE-2026-23209, CVE-2026-23231, CVE-2026-23273, CVE-2026-31431, CVE-2026-31677