偵測

Plugin

關於 Plugin 系列

指標

攻擊指標 (IoA)

曝險指標 (IoE)

Rocky Linux 8.6 [CIQ] 安全性更新：bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc 多個弱點（ciqsa-2026_0009）

high Nessus Plugin ID 358696

語言:

概要

Rocky Linux 主機缺少一個或多個安全性更新。

說明

Rocky Linux 8.6 主機上安裝的多個套件受到 CIQ ciqsa-2026_0009 公告中提及的多個弱點影響。

此公告彙總了 CIQ LTS 8.6中核心 SRPM 的安全修正。它解決了 214 個 CVE：
CVE-2019-0154、CVE-2020-29661、CVE-2019-11091、CVE-2021-3609CVE-2019-8912、和 209 個。

Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

解決方案

根據 CIQ 公告 ciqsa-2026_0009 中的指引，更新受影響的套件。

另請參閱

https://github.com/ctrliq/advisories

http://www.nessus.org/u?00361082

http://www.nessus.org/u?007812fd

http://www.nessus.org/u?02636b33

http://www.nessus.org/u?02ad5d4d

http://www.nessus.org/u?03ba72ca

http://www.nessus.org/u?07272dac

http://www.nessus.org/u?08341d54

http://www.nessus.org/u?085536c3

http://www.nessus.org/u?08aa845d

http://www.nessus.org/u?09a9c264

http://www.nessus.org/u?0be52791

http://www.nessus.org/u?0d0018ce

http://www.nessus.org/u?0d560298

http://www.nessus.org/u?0da3629e

http://www.nessus.org/u?10896c52

http://www.nessus.org/u?10c7adff

http://www.nessus.org/u?10e2d75d

http://www.nessus.org/u?11a830ce

http://www.nessus.org/u?13af9cb5

http://www.nessus.org/u?15cd9c13

http://www.nessus.org/u?15cf7e89

http://www.nessus.org/u?163dc5fd

http://www.nessus.org/u?168de635

http://www.nessus.org/u?1931155a

http://www.nessus.org/u?1a0d06c0

http://www.nessus.org/u?1a5beb2c

http://www.nessus.org/u?1b409b18

http://www.nessus.org/u?1cd495c9

http://www.nessus.org/u?1cda75d5

http://www.nessus.org/u?1fb89849

http://www.nessus.org/u?201a735d

http://www.nessus.org/u?20fec859

http://www.nessus.org/u?2169cda0

http://www.nessus.org/u?22973cd0

http://www.nessus.org/u?22d661e9

http://www.nessus.org/u?2416d875

http://www.nessus.org/u?242a26f3

http://www.nessus.org/u?261c90c3

http://www.nessus.org/u?2791eafb

http://www.nessus.org/u?288ffa2e

http://www.nessus.org/u?297ddaab

http://www.nessus.org/u?2a59d660

http://www.nessus.org/u?2dfa4e22

http://www.nessus.org/u?2e31e3cb

http://www.nessus.org/u?2e7a4939

http://www.nessus.org/u?2f67709c

http://www.nessus.org/u?35cf69ff

http://www.nessus.org/u?363ad7bd

http://www.nessus.org/u?3682cfed

http://www.nessus.org/u?3780de08

http://www.nessus.org/u?38002bab

http://www.nessus.org/u?3802de72

http://www.nessus.org/u?39d56155

http://www.nessus.org/u?3b964098

http://www.nessus.org/u?3c558a67

http://www.nessus.org/u?3d021995

http://www.nessus.org/u?3f0403e9

http://www.nessus.org/u?41887121

http://www.nessus.org/u?459638c3

http://www.nessus.org/u?460a952c

http://www.nessus.org/u?47ff267b

http://www.nessus.org/u?48504b3e

http://www.nessus.org/u?4a012d79

http://www.nessus.org/u?4a6840cc

http://www.nessus.org/u?4c0d91b7

http://www.nessus.org/u?5118d905

http://www.nessus.org/u?540a86f3

http://www.nessus.org/u?541c8cae

http://www.nessus.org/u?545ff1da

http://www.nessus.org/u?55f1b9f8

http://www.nessus.org/u?569ccac0

http://www.nessus.org/u?571400cb

http://www.nessus.org/u?5741828c

http://www.nessus.org/u?57f061da

http://www.nessus.org/u?58ff0e84

http://www.nessus.org/u?5b7990f6

http://www.nessus.org/u?5d793be0

http://www.nessus.org/u?5e2ef18d

http://www.nessus.org/u?5ef38b99

http://www.nessus.org/u?630beefc

http://www.nessus.org/u?653a7baa

http://www.nessus.org/u?65effcd7

http://www.nessus.org/u?66421cbc

http://www.nessus.org/u?66aad1b9

http://www.nessus.org/u?66acf2ce

http://www.nessus.org/u?69678eb5

http://www.nessus.org/u?6a0e07ea

http://www.nessus.org/u?6ae09453

http://www.nessus.org/u?6ae9c782

http://www.nessus.org/u?6fcf7b07

http://www.nessus.org/u?70516c35

http://www.nessus.org/u?70825a12

http://www.nessus.org/u?714c9694

http://www.nessus.org/u?726fe760

http://www.nessus.org/u?72ede555

http://www.nessus.org/u?734e890e

http://www.nessus.org/u?7411b3ca

http://www.nessus.org/u?74e84782

http://www.nessus.org/u?755b02d1

http://www.nessus.org/u?759c90d8

http://www.nessus.org/u?75d23d67

http://www.nessus.org/u?77e9025e

http://www.nessus.org/u?798d8ea6

http://www.nessus.org/u?79c74870

http://www.nessus.org/u?7a560b91

http://www.nessus.org/u?7a7d1859

http://www.nessus.org/u?7cce709e

http://www.nessus.org/u?7f7763ad

http://www.nessus.org/u?7fd6a728

http://www.nessus.org/u?80d15693

http://www.nessus.org/u?81653f5d

http://www.nessus.org/u?81914ddc

http://www.nessus.org/u?8286fb19

http://www.nessus.org/u?82aa4421

http://www.nessus.org/u?83bba243

http://www.nessus.org/u?844a607a

http://www.nessus.org/u?846f7d9f

http://www.nessus.org/u?85c1f13b

http://www.nessus.org/u?85c86d34

http://www.nessus.org/u?872a73ee

http://www.nessus.org/u?88e081d1

http://www.nessus.org/u?88fd3c50

http://www.nessus.org/u?8edb6a69

http://www.nessus.org/u?9092a790

http://www.nessus.org/u?91877ab6

http://www.nessus.org/u?91e83838

http://www.nessus.org/u?926ee51f

http://www.nessus.org/u?9270120b

http://www.nessus.org/u?938f5834

http://www.nessus.org/u?9449f7e4

http://www.nessus.org/u?949d83d5

http://www.nessus.org/u?94cd0611

http://www.nessus.org/u?96c2ea1a

http://www.nessus.org/u?98fccb42

http://www.nessus.org/u?99e3d5b9

http://www.nessus.org/u?9b1ce409

http://www.nessus.org/u?9bb4009c

http://www.nessus.org/u?9bfc40f9

http://www.nessus.org/u?9d22deef

http://www.nessus.org/u?9d9977aa

http://www.nessus.org/u?9ee6e34f

http://www.nessus.org/u?9f3bbf30

http://www.nessus.org/u?9fcc306a

http://www.nessus.org/u?a0545c79

http://www.nessus.org/u?a1b5fe3b

http://www.nessus.org/u?a30fb830

http://www.nessus.org/u?a57fe6ba

http://www.nessus.org/u?a60a41b2

http://www.nessus.org/u?a64394d3

http://www.nessus.org/u?a7b9032a

http://www.nessus.org/u?aa64f5bb

http://www.nessus.org/u?ab7abbb1

http://www.nessus.org/u?abb0267b

http://www.nessus.org/u?abf0de13

http://www.nessus.org/u?ac175951

http://www.nessus.org/u?ac5bb470

http://www.nessus.org/u?af32c08b

http://www.nessus.org/u?af738ecf

http://www.nessus.org/u?afedaa07

http://www.nessus.org/u?b1576d9a

http://www.nessus.org/u?b3be98ba

http://www.nessus.org/u?b6a6faee

http://www.nessus.org/u?b7963360

http://www.nessus.org/u?b803ce37

http://www.nessus.org/u?bd8f60cc

http://www.nessus.org/u?beeaade7

http://www.nessus.org/u?c0880c1a

http://www.nessus.org/u?c149a3be

http://www.nessus.org/u?c162c55c

http://www.nessus.org/u?c78bcf54

http://www.nessus.org/u?c99f213f

http://www.nessus.org/u?cafd64fa

http://www.nessus.org/u?cc0b0550

http://www.nessus.org/u?ccb8b739

http://www.nessus.org/u?cccb0b1d

http://www.nessus.org/u?ccfe73f7

http://www.nessus.org/u?cd57372d

http://www.nessus.org/u?cdbc47d4

http://www.nessus.org/u?cecf99e3

http://www.nessus.org/u?cef22f6e

http://www.nessus.org/u?d2f518ae

http://www.nessus.org/u?d5c84fd4

http://www.nessus.org/u?d66b12f2

http://www.nessus.org/u?d6e8cd93

http://www.nessus.org/u?d747ca3d

http://www.nessus.org/u?da1b7205

http://www.nessus.org/u?dbcac506

http://www.nessus.org/u?dcd5cf43

http://www.nessus.org/u?dd1c6ffc

http://www.nessus.org/u?dd57a65e

http://www.nessus.org/u?de26ccea

http://www.nessus.org/u?de3fe66b

http://www.nessus.org/u?de5594a4

http://www.nessus.org/u?e317e930

http://www.nessus.org/u?e4fa6c49

http://www.nessus.org/u?e5932748

http://www.nessus.org/u?e8811ee1

http://www.nessus.org/u?f0f14c91

http://www.nessus.org/u?f0fb38bf

http://www.nessus.org/u?f2bd605d

http://www.nessus.org/u?f4d1a439

http://www.nessus.org/u?f4fd176a

http://www.nessus.org/u?f5223894

http://www.nessus.org/u?f5c97014

http://www.nessus.org/u?f6391ba0

http://www.nessus.org/u?f7984bfa

http://www.nessus.org/u?f7e59d4b

http://www.nessus.org/u?f818bb1c

http://www.nessus.org/u?fa016a34

http://www.nessus.org/u?fabd0dcf

http://www.nessus.org/u?fc82c22d

http://www.nessus.org/u?fcc1b717

http://www.nessus.org/u?fd43a216

http://www.nessus.org/u?fd9e896d

http://www.nessus.org/u?fed21b8e

Plugin 詳細資訊

嚴重性: High

ID: 358696

檔案名稱: ciq_rocky_linux_8_6_ciqsa-2026_0009.nasl

版本: 1.7

類型: Local

系列: Rocky Linux Local Security Checks

已發布: 2026/10/1

已更新: 2026/10/23

支援的感應器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

風險資訊

VPR

風險因素: Critical

分數: 9.6

百分位數: 99.95

Vendor

Vendor Severity: Critical

CVSS v2

風險因素: Critical

基本分數: 10

時間性分數: 8.7

媒介: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS 評分資料來源: CVE-2019-14901

CVSS v3

風險因素: Critical

基本分數: 9.8

時間性分數: 9.4

媒介: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

時間媒介: CVSS:3.0/E:H/RL:O/RC:C

CVSS 評分資料來源: CVE-2021-43267

CVSS v4

風險因素: High

Base Score: 8.6

Threat Score: 8.6

Threat Vector: CVSS:4.0/E:A

Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

CVSS 評分資料來源: CVE-2022-1055

弱點資訊

必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party

可被惡意程式利用: true

可輕鬆利用: Exploits are available

修補程式發佈日期: 2026/9/1

弱點發布日期: 2021/7/21

CISA 已知遭惡意利用弱點到期日: 2022/6/10, 2022/6/13, 2024/9/11

可惡意利用

Core Impact

Metasploit (vmwgfx Driver File Descriptor Handling Priv Esc)

參考資訊

CVE: CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2018-12207, CVE-2018-14625, CVE-2018-14633, CVE-2018-15572, CVE-2018-16658, CVE-2018-16880, CVE-2018-16884, CVE-2018-17182, CVE-2018-18021, CVE-2018-18281, CVE-2018-18397, CVE-2018-18955, CVE-2018-19407, CVE-2018-19854, CVE-2018-19985, CVE-2018-20169, CVE-2018-20669, CVE-2018-20784, CVE-2018-3620, CVE-2018-3646, CVE-2018-5391, CVE-2018-9363, CVE-2019-0154, CVE-2019-0155, CVE-2019-10126, CVE-2019-10207, CVE-2019-10639, CVE-2019-11085, CVE-2019-11091, CVE-2019-11135, CVE-2019-1125, CVE-2019-11477, CVE-2019-11478, CVE-2019-11479, CVE-2019-11487, CVE-2019-11810, CVE-2019-11833, CVE-2019-11884, CVE-2019-12614, CVE-2019-13233, CVE-2019-13272, CVE-2019-14821, CVE-2019-14835, CVE-2019-14895, CVE-2019-14901, CVE-2019-15099, CVE-2019-15925, CVE-2019-16231, CVE-2019-16233, CVE-2019-17053, CVE-2019-17055, CVE-2019-17133, CVE-2019-17666, CVE-2019-18808, CVE-2019-18809, CVE-2019-19056, CVE-2019-19057, CVE-2019-19062, CVE-2019-19063, CVE-2019-19068, CVE-2019-19072, CVE-2019-19073, CVE-2019-19074, CVE-2019-19319, CVE-2019-19332, CVE-2019-19338, CVE-2019-19524, CVE-2019-19533, CVE-2019-19534, CVE-2019-19543, CVE-2019-19767, CVE-2019-19770, CVE-2019-20054, CVE-2019-20636, CVE-2019-3459, CVE-2019-3819, CVE-2019-3846, CVE-2019-3874, CVE-2019-3882, CVE-2019-3887, CVE-2019-3892, CVE-2019-5489, CVE-2019-6974, CVE-2019-7221, CVE-2019-7222, CVE-2019-7308, CVE-2019-8912, CVE-2019-8956, CVE-2019-8980, CVE-2019-9213, CVE-2019-9455, CVE-2019-9458, CVE-2019-9500, CVE-2019-9506, CVE-2020-0305, CVE-2020-0404, CVE-2020-0427, CVE-2020-0466, CVE-2020-0543, CVE-2020-10711, CVE-2020-10713, CVE-2020-10732, CVE-2020-10751, CVE-2020-10757, CVE-2020-10766, CVE-2020-10767, CVE-2020-10768, CVE-2020-10773, CVE-2020-10774, CVE-2020-10942, CVE-2020-11565, CVE-2020-11884, CVE-2020-12114, CVE-2020-12351, CVE-2020-12352, CVE-2020-12362, CVE-2020-12655, CVE-2020-12826, CVE-2020-12888, CVE-2020-13974, CVE-2020-14314, CVE-2020-14331, CVE-2020-14351, CVE-2020-14356, CVE-2020-14385, CVE-2020-14386, CVE-2020-15437, CVE-2020-16166, CVE-2020-24490, CVE-2020-24502, CVE-2020-24503, CVE-2020-24504, CVE-2020-24586, CVE-2020-24587, CVE-2020-24588, CVE-2020-25211, CVE-2020-25212, CVE-2020-25284, CVE-2020-25285, CVE-2020-25643, CVE-2020-25645, CVE-2020-26139, CVE-2020-26141, CVE-2020-26144, CVE-2020-26145, CVE-2020-26147, CVE-2020-26541, CVE-2020-2732, CVE-2020-27777, CVE-2020-27820, CVE-2020-27835, CVE-2020-28374, CVE-2020-28974, CVE-2020-29368, CVE-2020-29660, CVE-2020-29661, CVE-2020-35508, CVE-2020-36158, CVE-2020-8647, CVE-2020-8648, CVE-2020-8649, CVE-2021-0342, CVE-2021-0920, CVE-2021-20239, CVE-2021-20321, CVE-2021-20322, CVE-2021-21781, CVE-2021-26708, CVE-2021-27363, CVE-2021-27364, CVE-2021-27365, CVE-2021-29155, CVE-2021-31829, CVE-2021-33034, CVE-2021-33200, CVE-2021-3501, CVE-2021-3542, CVE-2021-3564, CVE-2021-3573, CVE-2021-3609, CVE-2021-3653, CVE-2021-3656, CVE-2021-3659, CVE-2021-3669, CVE-2021-3679, CVE-2021-37159, CVE-2021-3732, CVE-2021-37576, CVE-2021-3759, CVE-2021-3773, CVE-2021-4002, CVE-2021-4155, CVE-2021-41864, CVE-2021-4203, CVE-2021-43056, CVE-2021-43267, CVE-2021-43389, CVE-2021-44733, CVE-2021-45485, CVE-2021-45486, CVE-2022-0185, CVE-2022-0330, CVE-2022-1055, CVE-2022-22942, CVE-2022-3640, CVE-2022-42720, CVE-2023-0597, CVE-2023-1118, CVE-2023-1252, CVE-2023-1989, CVE-2023-53145