Rocky Linux 9.6 [CIQ] 安全性更新：kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / 等多個弱點 (ciqsa-2026_1558)
medium Nessus Plugin ID 356779
語言:
概要
Rocky Linux 主機缺少一個或多個安全性更新。說明
Rocky Linux 9.6 主機上安裝的多個套件受到 CIQ ciqsa-2026_1558 公告中提及的多個弱點影響。此公告彙總了 CIQ FIPS 9.6 合規中核心 SRPM 的安全修正。它解決了 168 個 CVE： CVE-2025-22055、 CVE-2026-64268、 CVE-2023-52933、 CVE-2025-21919、 和 CVE-2023-52922另外 163 個。
Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 CIQ 公告 ciqsa-2026_1558 中的指引，更新受影響的套件。另請參閱
https://github.com/ctrliq/advisories
http://www.nessus.org/u?013763ea
http://www.nessus.org/u?04f0941b
http://www.nessus.org/u?06f61998
http://www.nessus.org/u?07507846
http://www.nessus.org/u?0859405f
http://www.nessus.org/u?0869ce87
http://www.nessus.org/u?08eb831c
http://www.nessus.org/u?0d6739f1
http://www.nessus.org/u?0de7d029
http://www.nessus.org/u?103ea04a
http://www.nessus.org/u?1074394b
http://www.nessus.org/u?1149f09b
http://www.nessus.org/u?122aff6f
http://www.nessus.org/u?1277fcfe
http://www.nessus.org/u?12df7e3f
http://www.nessus.org/u?16dd920e
http://www.nessus.org/u?17253a12
http://www.nessus.org/u?1ba6b9c1
http://www.nessus.org/u?1bc74af9
http://www.nessus.org/u?1d1439fc
http://www.nessus.org/u?1df3b71c
http://www.nessus.org/u?1f4b238b
http://www.nessus.org/u?2170778c
http://www.nessus.org/u?234e855f
http://www.nessus.org/u?2366aab4
http://www.nessus.org/u?23a48d61
http://www.nessus.org/u?23d3d57f
http://www.nessus.org/u?246cd0d5
http://www.nessus.org/u?2473a079
http://www.nessus.org/u?249926c4
http://www.nessus.org/u?26feb12a
http://www.nessus.org/u?2845767d
http://www.nessus.org/u?28d5258e
http://www.nessus.org/u?2d0a2476
http://www.nessus.org/u?2d16d93c
http://www.nessus.org/u?2d98a2fb
http://www.nessus.org/u?2eda8170
http://www.nessus.org/u?2f92fa5d
http://www.nessus.org/u?318580f4
http://www.nessus.org/u?3274be61
http://www.nessus.org/u?36b7273a
http://www.nessus.org/u?37717210
http://www.nessus.org/u?38338a94
http://www.nessus.org/u?38700abb
http://www.nessus.org/u?392a5bee
http://www.nessus.org/u?3af21892
http://www.nessus.org/u?3b998194
http://www.nessus.org/u?3c4570a5
http://www.nessus.org/u?3cd5d233
http://www.nessus.org/u?3e00866c
http://www.nessus.org/u?3e36efaa
http://www.nessus.org/u?3f15a80e
http://www.nessus.org/u?3f6e53a1
http://www.nessus.org/u?3faefdbd
http://www.nessus.org/u?40e1f8a5
http://www.nessus.org/u?4395164c
http://www.nessus.org/u?45414fbe
http://www.nessus.org/u?4576879e
http://www.nessus.org/u?4ae09656
http://www.nessus.org/u?4b68b593
http://www.nessus.org/u?4e0eb87d
http://www.nessus.org/u?4f8e200a
http://www.nessus.org/u?52da0a79
http://www.nessus.org/u?53995faf
http://www.nessus.org/u?55ab8121
http://www.nessus.org/u?56ac7079
http://www.nessus.org/u?5a5e18d6
http://www.nessus.org/u?5a664078
http://www.nessus.org/u?5bfaff65
http://www.nessus.org/u?5d98e481
http://www.nessus.org/u?5e3dba42
http://www.nessus.org/u?609ca48e
http://www.nessus.org/u?6491ca43
http://www.nessus.org/u?6520235c
http://www.nessus.org/u?66827db3
http://www.nessus.org/u?68a38a43
http://www.nessus.org/u?6b831efa
http://www.nessus.org/u?6df158b1
http://www.nessus.org/u?6f1b2528
http://www.nessus.org/u?715e0245
http://www.nessus.org/u?7313c817
http://www.nessus.org/u?779db56c
http://www.nessus.org/u?7956d087
http://www.nessus.org/u?7d492c41
http://www.nessus.org/u?7d5f5d30
http://www.nessus.org/u?7dc059f5
http://www.nessus.org/u?7ed492e8
http://www.nessus.org/u?7f26b111
http://www.nessus.org/u?7f78046a
http://www.nessus.org/u?82c5b573
http://www.nessus.org/u?85fb5bd5
http://www.nessus.org/u?878a0ac4
http://www.nessus.org/u?894f28d5
http://www.nessus.org/u?8c6057cf
http://www.nessus.org/u?90e31710
http://www.nessus.org/u?9231aba6
http://www.nessus.org/u?93088abb
http://www.nessus.org/u?948187ba
http://www.nessus.org/u?94a9db10
http://www.nessus.org/u?94dbe8dd
http://www.nessus.org/u?95833837
http://www.nessus.org/u?95aa6321
http://www.nessus.org/u?9971b133
http://www.nessus.org/u?99b3cd98
http://www.nessus.org/u?99b3dcb0
http://www.nessus.org/u?a06ae0ff
http://www.nessus.org/u?a0cdcf9c
http://www.nessus.org/u?a0d33eec
http://www.nessus.org/u?a10c0391
http://www.nessus.org/u?a802b9f2
http://www.nessus.org/u?a9878023
http://www.nessus.org/u?acdd735a
http://www.nessus.org/u?acee8f60
http://www.nessus.org/u?ad12a5e2
http://www.nessus.org/u?ad5bc526
http://www.nessus.org/u?af21787a
http://www.nessus.org/u?b0272ced
http://www.nessus.org/u?b317cfe5
http://www.nessus.org/u?b6dc9563
http://www.nessus.org/u?b8c9a402
http://www.nessus.org/u?b98dbf29
http://www.nessus.org/u?ba7d437c
http://www.nessus.org/u?bbcd641e
http://www.nessus.org/u?bd859c9d
http://www.nessus.org/u?bd9818d6
http://www.nessus.org/u?bf544e79
http://www.nessus.org/u?c06741ea
http://www.nessus.org/u?c0d71d21
http://www.nessus.org/u?c0f04a31
http://www.nessus.org/u?c236e23f
http://www.nessus.org/u?c3b9a8a9
http://www.nessus.org/u?c49cdf30
http://www.nessus.org/u?c5fcdad3
http://www.nessus.org/u?ca1d921a
http://www.nessus.org/u?cb4e5cd3
http://www.nessus.org/u?cc2de9a3
http://www.nessus.org/u?ccf3704b
http://www.nessus.org/u?ce7a5ef8
http://www.nessus.org/u?ceae9071
http://www.nessus.org/u?cfb6ff0f
http://www.nessus.org/u?d0c77789
http://www.nessus.org/u?d1253ae2
http://www.nessus.org/u?d1317bd1
http://www.nessus.org/u?d185358f
http://www.nessus.org/u?d2520802
http://www.nessus.org/u?d268850c
http://www.nessus.org/u?d2f988ef
http://www.nessus.org/u?d589a77a
http://www.nessus.org/u?d6d2d4c0
http://www.nessus.org/u?dcfbf64c
http://www.nessus.org/u?dede3e62
http://www.nessus.org/u?df4ee096
http://www.nessus.org/u?e1d849bd
http://www.nessus.org/u?e50efe7d
http://www.nessus.org/u?e7dfed3c
http://www.nessus.org/u?e98c515a
http://www.nessus.org/u?eab2f7ac
http://www.nessus.org/u?eb2f186c
http://www.nessus.org/u?ee109964
http://www.nessus.org/u?f123d146
http://www.nessus.org/u?f33e6616
http://www.nessus.org/u?f4c48d66
http://www.nessus.org/u?f50fe3ab
http://www.nessus.org/u?f59f1f1a
http://www.nessus.org/u?f61e959b
http://www.nessus.org/u?f9ac44ff
http://www.nessus.org/u?f9eba05e
Plugin 詳細資訊
嚴重性: Medium
ID: 356779
檔案名稱: ciq_rocky_linux_9_6_ciqsa-2026_1558.nasl
版本: 1.7
類型: Local
已發布: 2026/10/1
已更新: 2026/10/26
支援的感應器: Continuous Assessment, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: Critical
分數: 9.5
百分位數: 99.87
Vendor
Vendor Severity: Critical
CVSS v2
風險因素: Critical
基本分數: 10
時間性分數: 8.7
媒介: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2025-39682
CVSS v3
風險因素: Critical
基本分數: 9.8
時間性分數: 9.4
媒介: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:H/RL:O/RC:C
CVSS v4
風險因素: Medium
Base Score: 5.7
Threat Score: 5.7
Threat Vector: CVSS:4.0/E:A
Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 評分資料來源: CVE-2024-28956
弱點資訊
必要的 KB 項目: Host/OS/extended-third-party, Host/local_checks_enabled, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/cpu
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/9/26
弱點發布日期: 2025/10/10
CISA 已知遭惡意利用弱點到期日: 2025/9/25, 2026/9/21
參考資訊
CVE: CVE-2022-3424, CVE-2022-49788, CVE-2022-49846, CVE-2022-50087, CVE-2022-50367, CVE-2023-52922, CVE-2023-52933, CVE-2023-53125, CVE-2023-53331, CVE-2023-53373, CVE-2023-53494, CVE-2024-28956, CVE-2024-42234, CVE-2024-49977, CVE-2024-50301, CVE-2024-53088, CVE-2024-53134, CVE-2024-56570, CVE-2024-56611, CVE-2024-56623, CVE-2024-56631, CVE-2024-56699, CVE-2024-57807, CVE-2024-57888, CVE-2024-57980, CVE-2024-58002, CVE-2024-58005, CVE-2024-58007, CVE-2024-58069, CVE-2025-1272, CVE-2025-21633, CVE-2025-21663, CVE-2025-21668, CVE-2025-21669, CVE-2025-21689, CVE-2025-21694, CVE-2025-21726, CVE-2025-21727, CVE-2025-21756, CVE-2025-21759, CVE-2025-21764, CVE-2025-21765, CVE-2025-21867, CVE-2025-21883, CVE-2025-21887, CVE-2025-21905, CVE-2025-21919, CVE-2025-21920, CVE-2025-21926, CVE-2025-21927, CVE-2025-21928, CVE-2025-21929, CVE-2025-21961, CVE-2025-21962, CVE-2025-21963, CVE-2025-21964, CVE-2025-21966, CVE-2025-21969, CVE-2025-21979, CVE-2025-21991, CVE-2025-21993, CVE-2025-21997, CVE-2025-21999, CVE-2025-22004, CVE-2025-22020, CVE-2025-22026, CVE-2025-22055, CVE-2025-22058, CVE-2025-22077, CVE-2025-22085, CVE-2025-22091, CVE-2025-22097, CVE-2025-22104, CVE-2025-22113, CVE-2025-22121, CVE-2025-22126, CVE-2025-23150, CVE-2025-37738, CVE-2025-37749, CVE-2025-37750, CVE-2025-37785, CVE-2025-37797, CVE-2025-37798, CVE-2025-37799, CVE-2025-37803, CVE-2025-37810, CVE-2025-37823, CVE-2025-37873, CVE-2025-37890, CVE-2025-37914, CVE-2025-37918, CVE-2025-37932, CVE-2025-37943, CVE-2025-37946, CVE-2025-37948, CVE-2025-37953, CVE-2025-37958, CVE-2025-37963, CVE-2025-37974, CVE-2025-38000, CVE-2025-38001, CVE-2025-38052, CVE-2025-38079, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38087, CVE-2025-38089, CVE-2025-38107, CVE-2025-38110, CVE-2025-38124, CVE-2025-38159, CVE-2025-38200, CVE-2025-38211, CVE-2025-38250, CVE-2025-38292, CVE-2025-38332, CVE-2025-38350, CVE-2025-38351, CVE-2025-38352, CVE-2025-38380, CVE-2025-38392, CVE-2025-38417, CVE-2025-38449, CVE-2025-38461, CVE-2025-38464, CVE-2025-38471, CVE-2025-38472, CVE-2025-38498, CVE-2025-38500, CVE-2025-38527, CVE-2025-38550, CVE-2025-38556, CVE-2025-38566, CVE-2025-38571, CVE-2025-38614, CVE-2025-38718, CVE-2025-38729, CVE-2025-39682, CVE-2025-39694, CVE-2025-39698, CVE-2025-39702, CVE-2025-39718, CVE-2025-39730, CVE-2025-39751, CVE-2025-39757, CVE-2025-39761, CVE-2025-39817, CVE-2025-39819, CVE-2025-39841, CVE-2025-39849, CVE-2025-39964, CVE-2025-40022, CVE-2026-43042, CVE-2026-52933, CVE-2026-53000, CVE-2026-53185, CVE-2026-53196, CVE-2026-53266, CVE-2026-63887, CVE-2026-64191, CVE-2026-64268, CVE-2026-64382, CVE-2026-64387, CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000