Rocky Linux 9.2 [CIQ] 安全性更新：bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc 多個弱點 （ciqsa-2026_0438）
critical Nessus Plugin ID 356103
語言:
概要
Rocky Linux 主機缺少一個或多個安全性更新。說明
Rocky Linux 9.2 主機上安裝的多個套件受到 CIQ ciqsa-2026_0438 公告中提及的多個弱點影響。此公告彙總了 CIQ LTS 9.2中核心 SRPM 的安全修正。它解決了 135 個 CVE：
CVE-2022-41674、CVE-2022-30594、 CVE-2022-2959CVE-2023-52628CVE-2025-21727和 130 個。
Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 CIQ 公告 ciqsa-2026_0438 中的指引，更新受影響的套件。另請參閱
https://github.com/ctrliq/advisories
http://www.nessus.org/u?013763ea
http://www.nessus.org/u?01fc691e
http://www.nessus.org/u?023af81d
http://www.nessus.org/u?0384b336
http://www.nessus.org/u?0869ce87
http://www.nessus.org/u?08d1ad5c
http://www.nessus.org/u?091e4eed
http://www.nessus.org/u?0b0b96a6
http://www.nessus.org/u?0cfa60bc
http://www.nessus.org/u?0d0018ce
http://www.nessus.org/u?0f042d08
http://www.nessus.org/u?103ea04a
http://www.nessus.org/u?13884cfe
http://www.nessus.org/u?14fcd01d
http://www.nessus.org/u?15cd9c13
http://www.nessus.org/u?15cf7e89
http://www.nessus.org/u?1952c478
http://www.nessus.org/u?1a42c2e8
http://www.nessus.org/u?1d931010
http://www.nessus.org/u?1ddf3508
http://www.nessus.org/u?1fb3e7e6
http://www.nessus.org/u?201a735d
http://www.nessus.org/u?21b2675d
http://www.nessus.org/u?272057bd
http://www.nessus.org/u?27bd8a3c
http://www.nessus.org/u?283a0ead
http://www.nessus.org/u?288ffa2e
http://www.nessus.org/u?2935c346
http://www.nessus.org/u?2a46d146
http://www.nessus.org/u?2cfe3af0
http://www.nessus.org/u?2e31e3cb
http://www.nessus.org/u?2eda8170
http://www.nessus.org/u?3243824a
http://www.nessus.org/u?34b48694
http://www.nessus.org/u?35208c3b
http://www.nessus.org/u?392a5bee
http://www.nessus.org/u?3ce93529
http://www.nessus.org/u?3d0a9168
http://www.nessus.org/u?3f15a80e
http://www.nessus.org/u?416a24f5
http://www.nessus.org/u?4771432d
http://www.nessus.org/u?494da935
http://www.nessus.org/u?49f79624
http://www.nessus.org/u?4a283181
http://www.nessus.org/u?4b5bbd83
http://www.nessus.org/u?4d4d1332
http://www.nessus.org/u?4dce8c83
http://www.nessus.org/u?5012b3e5
http://www.nessus.org/u?523d4d94
http://www.nessus.org/u?52da0a79
http://www.nessus.org/u?52e2ea66
http://www.nessus.org/u?534b8488
http://www.nessus.org/u?56c8bf13
http://www.nessus.org/u?5ac1b340
http://www.nessus.org/u?5d6adaa3
http://www.nessus.org/u?5e55be83
http://www.nessus.org/u?62757176
http://www.nessus.org/u?632e4479
http://www.nessus.org/u?64e982c9
http://www.nessus.org/u?6752d521
http://www.nessus.org/u?67cfdbe2
http://www.nessus.org/u?76c2ade7
http://www.nessus.org/u?773c6bb0
http://www.nessus.org/u?79212ff3
http://www.nessus.org/u?79544fee
http://www.nessus.org/u?7f82d770
http://www.nessus.org/u?7fac364e
http://www.nessus.org/u?801508da
http://www.nessus.org/u?8a996b0d
http://www.nessus.org/u?8d817783
http://www.nessus.org/u?8db50c30
http://www.nessus.org/u?8edb6a69
http://www.nessus.org/u?90e31710
http://www.nessus.org/u?90fd2b4f
http://www.nessus.org/u?91877ab6
http://www.nessus.org/u?92de8ff3
http://www.nessus.org/u?94a9db10
http://www.nessus.org/u?994d86a7
http://www.nessus.org/u?9971b133
http://www.nessus.org/u?9af4e61e
http://www.nessus.org/u?9d9977aa
http://www.nessus.org/u?a0812708
http://www.nessus.org/u?a1051775
http://www.nessus.org/u?a279c9dd
http://www.nessus.org/u?a3ed86be
http://www.nessus.org/u?a6d4eb24
http://www.nessus.org/u?a7b9032a
http://www.nessus.org/u?a8b6f2a5
http://www.nessus.org/u?a963f40d
http://www.nessus.org/u?a9f8606c
http://www.nessus.org/u?abf0de13
http://www.nessus.org/u?afedaa07
http://www.nessus.org/u?b7963360
http://www.nessus.org/u?b81e70f3
http://www.nessus.org/u?bc973108
http://www.nessus.org/u?c2e211b0
http://www.nessus.org/u?c3e55790
http://www.nessus.org/u?c3ef9d6d
http://www.nessus.org/u?c99f213f
http://www.nessus.org/u?cac3c978
http://www.nessus.org/u?cb4e5cd3
http://www.nessus.org/u?cc787c34
http://www.nessus.org/u?cca75f70
http://www.nessus.org/u?cd4d6db7
http://www.nessus.org/u?cfb6ff0f
http://www.nessus.org/u?d0156ea4
http://www.nessus.org/u?d10a6a64
http://www.nessus.org/u?d2520802
http://www.nessus.org/u?d57df3c1
http://www.nessus.org/u?d654b5af
http://www.nessus.org/u?d6915f40
http://www.nessus.org/u?dcb96d22
http://www.nessus.org/u?dcd5cf43
http://www.nessus.org/u?dddb88f4
http://www.nessus.org/u?de15e3fb
http://www.nessus.org/u?e0381649
http://www.nessus.org/u?e0556447
http://www.nessus.org/u?e371cfbd
http://www.nessus.org/u?e5e9aa34
http://www.nessus.org/u?e9bb11a5
http://www.nessus.org/u?edc2b228
http://www.nessus.org/u?f19af5ac
http://www.nessus.org/u?f2b46b1d
http://www.nessus.org/u?f4315794
http://www.nessus.org/u?f492f18d
http://www.nessus.org/u?f4fd176a
http://www.nessus.org/u?f5012766
http://www.nessus.org/u?f50fe3ab
http://www.nessus.org/u?f61e959b
http://www.nessus.org/u?f809548f
http://www.nessus.org/u?f88a8c73
http://www.nessus.org/u?f8ca0751
http://www.nessus.org/u?fa016a34
http://www.nessus.org/u?fa954665
Plugin 詳細資訊
嚴重性: Critical
ID: 356103
檔案名稱: ciq_rocky_linux_9_2_ciqsa-2026_0438.nasl
版本: 1.7
類型: Local
已發布: 2026/10/1
已更新: 2026/10/20
支援的感應器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: Critical
分數: 9.5
百分位數: 99.87
Vendor
Vendor Severity: Critical
CVSS v2
風險因素: High
基本分數: 9
時間性分數: 7.8
媒介: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2022-0435
CVSS v3
風險因素: Critical
基本分數: 9.8
時間性分數: 9.4
媒介: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:H/RL:O/RC:C
CVSS 評分資料來源: CVE-2021-43267
弱點資訊
必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/9/1
弱點發布日期: 2020/11/4
CISA 已知遭惡意利用弱點到期日: 2022/5/2, 2022/5/16, 2023/4/20, 2024/7/17, 2024/9/11, 2026/6/5, 2026/8/29
可惡意利用
CANVAS (CANVAS)
Core Impact
Metasploit (vmwgfx Driver File Descriptor Handling Priv Esc)
參考資訊
CVE: CVE-2020-27820, CVE-2020-36516, CVE-2021-20322, CVE-2021-22600, CVE-2021-26341, CVE-2021-26401, CVE-2021-33655, CVE-2021-3669, CVE-2021-3744, CVE-2021-3759, CVE-2021-3764, CVE-2021-3772, CVE-2021-3773, CVE-2021-4001, CVE-2021-4002, CVE-2021-4028, CVE-2021-4083, CVE-2021-4155, CVE-2021-41864, CVE-2021-4197, CVE-2021-4203, CVE-2021-43267, CVE-2021-43389, CVE-2021-44733, CVE-2021-47505, CVE-2022-0001, CVE-2022-0002, CVE-2022-0185, CVE-2022-0330, CVE-2022-0435, CVE-2022-0492, CVE-2022-0617, CVE-2022-0742, CVE-2022-0847, CVE-2022-0854, CVE-2022-0995, CVE-2022-1011, CVE-2022-1012, CVE-2022-1015, CVE-2022-1016, CVE-2022-1462, CVE-2022-1679, CVE-2022-1729, CVE-2022-1882, CVE-2022-1966, CVE-2022-1998, CVE-2022-20141, CVE-2022-2078, CVE-2022-21123, CVE-2022-21125, CVE-2022-21166, CVE-2022-21499, CVE-2022-21505, CVE-2022-22942, CVE-2022-23816, CVE-2022-23825, CVE-2022-23960, CVE-2022-24122, CVE-2022-25636, CVE-2022-2585, CVE-2022-2586, CVE-2022-2590, CVE-2022-26373, CVE-2022-27666, CVE-2022-28390, CVE-2022-2873, CVE-2022-2959, CVE-2022-2964, CVE-2022-29900, CVE-2022-29901, CVE-2022-3028, CVE-2022-30594, CVE-2022-3077, CVE-2022-33743, CVE-2022-34918, CVE-2022-3522, CVE-2022-3564, CVE-2022-3619, CVE-2022-3628, CVE-2022-36946, CVE-2022-39188, CVE-2022-4129, CVE-2022-4139, CVE-2022-41674, CVE-2022-4269, CVE-2022-42703, CVE-2022-42720, CVE-2022-42721, CVE-2022-42722, CVE-2022-43750, CVE-2022-4378, CVE-2022-43945, CVE-2022-49840, CVE-2023-0179, CVE-2023-0266, CVE-2023-0394, CVE-2023-0590, CVE-2023-1252, CVE-2023-2176, CVE-2023-3567, CVE-2023-52628, CVE-2023-52707, CVE-2023-52973, CVE-2023-53100, CVE-2023-53354, CVE-2023-6606, CVE-2023-6610, CVE-2023-6931, CVE-2023-6932, CVE-2024-26852, CVE-2024-36883, CVE-2024-36904, CVE-2024-36978, CVE-2024-38538, CVE-2024-41049, CVE-2024-42285, CVE-2024-46858, CVE-2024-47696, CVE-2025-21727, CVE-2025-21764, CVE-2025-21867, CVE-2025-22058, CVE-2025-22113, CVE-2025-22121, CVE-2025-38000, CVE-2025-38079, CVE-2025-38107, CVE-2025-38159, CVE-2025-38177, CVE-2025-38211, CVE-2025-38350, CVE-2025-38380, CVE-2025-38464, CVE-2025-38471, CVE-2025-38684