Rocky Linux 9.2 [CIQ] 安全性更新：bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc 多個弱點 （ciqsa-2026_1575）
high Nessus Plugin ID 359533
語言:
概要
Rocky Linux 主機缺少一個或多個安全性更新。說明
Rocky Linux 9.2 主機上安裝的多個套件受到 CIQ ciqsa-2026_1575 公告中提及的多個弱點影響。此公告彙總了 CIQ LTS 9.2中核心 SRPM 的安全修正。它解決了 78 個 CVE：
CVE-2026-64304、CVE-2023-52933、 CVE-2023-1637CVE-2024-41090CVE-2023-28466和 73 個。
Tenable 已直接從 CIQ 安全公告擷取前置描述區塊。
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 CIQ 公告 ciqsa-2026_1575 中的指引，更新受影響的套件。另請參閱
https://github.com/ctrliq/advisories
http://www.nessus.org/u?01e0b43a
http://www.nessus.org/u?04137cc0
http://www.nessus.org/u?06c36e6e
http://www.nessus.org/u?0d828bbc
http://www.nessus.org/u?0dea017a
http://www.nessus.org/u?0f9b82b8
http://www.nessus.org/u?122aff6f
http://www.nessus.org/u?12df7e3f
http://www.nessus.org/u?17253a12
http://www.nessus.org/u?17c10a37
http://www.nessus.org/u?189826a4
http://www.nessus.org/u?1f4b238b
http://www.nessus.org/u?21b001b5
http://www.nessus.org/u?2308a181
http://www.nessus.org/u?27c3cacf
http://www.nessus.org/u?27d49541
http://www.nessus.org/u?28d5258e
http://www.nessus.org/u?28dc5209
http://www.nessus.org/u?36929e46
http://www.nessus.org/u?38338a94
http://www.nessus.org/u?42f7f895
http://www.nessus.org/u?46f50531
http://www.nessus.org/u?4ae09656
http://www.nessus.org/u?4b68b593
http://www.nessus.org/u?4d20a6d5
http://www.nessus.org/u?50c048b0
http://www.nessus.org/u?558025dc
http://www.nessus.org/u?5aa95637
http://www.nessus.org/u?5bfaff65
http://www.nessus.org/u?5e3dba42
http://www.nessus.org/u?6302e575
http://www.nessus.org/u?66b8d809
http://www.nessus.org/u?72f9fd5e
http://www.nessus.org/u?74b97b01
http://www.nessus.org/u?792a1c37
http://www.nessus.org/u?7c146d6e
http://www.nessus.org/u?7c3d3598
http://www.nessus.org/u?7d492c41
http://www.nessus.org/u?7dc059f5
http://www.nessus.org/u?86411730
http://www.nessus.org/u?8800e4b1
http://www.nessus.org/u?89d8ba37
http://www.nessus.org/u?8c6057cf
http://www.nessus.org/u?9426f8bc
http://www.nessus.org/u?95b8c2d7
http://www.nessus.org/u?9b958677
http://www.nessus.org/u?9f94db7c
http://www.nessus.org/u?a06ae0ff
http://www.nessus.org/u?a11f1e00
http://www.nessus.org/u?a36697fb
http://www.nessus.org/u?a6a101c2
http://www.nessus.org/u?ad5bc526
http://www.nessus.org/u?af21787a
http://www.nessus.org/u?afa4ddff
http://www.nessus.org/u?b5872979
http://www.nessus.org/u?b6782bc9
http://www.nessus.org/u?b6dc9563
http://www.nessus.org/u?bd9818d6
http://www.nessus.org/u?be642dbc
http://www.nessus.org/u?c0c0e044
http://www.nessus.org/u?c208f2ba
http://www.nessus.org/u?c236e23f
http://www.nessus.org/u?c27e6783
http://www.nessus.org/u?c4b20f34
http://www.nessus.org/u?c6859392
http://www.nessus.org/u?c99d2f84
http://www.nessus.org/u?ccf3704b
http://www.nessus.org/u?ceae9071
http://www.nessus.org/u?d0c77789
http://www.nessus.org/u?d1317bd1
http://www.nessus.org/u?d185358f
http://www.nessus.org/u?d1b81dcf
http://www.nessus.org/u?d3d9f2c5
http://www.nessus.org/u?d7c85181
http://www.nessus.org/u?dfae1793
http://www.nessus.org/u?e6292c4b
http://www.nessus.org/u?e7896dc4
http://www.nessus.org/u?e7b43c06
http://www.nessus.org/u?e8839cfb
http://www.nessus.org/u?eba2ee83
http://www.nessus.org/u?ed8bdc37
http://www.nessus.org/u?edc5d12f
http://www.nessus.org/u?f72d4ee4
http://www.nessus.org/u?f73efd44
http://www.nessus.org/u?faf6dbb0
Plugin 詳細資訊
嚴重性: High
ID: 359533
檔案名稱: ciq_rocky_linux_9_2_ciqsa-2026_1575.nasl
版本: 1.5
類型: Local
已發布: 2026/10/1
已更新: 2026/10/23
支援的感應器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: Critical
分數: 9.5
百分位數: 99.87
Vendor
Vendor Severity: High
CVSS v2
風險因素: High
基本分數: 8.3
時間性分數: 7.2
媒介: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2022-42896
CVSS v3
風險因素: High
基本分數: 8.8
時間性分數: 8.4
媒介: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:H/RL:O/RC:C
弱點資訊
必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/10/1
弱點發布日期: 2026/5/1
CISA 已知遭惡意利用弱點到期日: 2025/2/26, 2025/4/30, 2025/7/8, 2025/9/25, 2026/9/21
可惡意利用
Core Impact
Metasploit (Local Privilege Escalation via CVE-2023-0386)
參考資訊
CVE: CVE-2021-47596, CVE-2022-2196, CVE-2022-3545, CVE-2022-41858, CVE-2022-42896, CVE-2022-4379, CVE-2022-45869, CVE-2022-4744, CVE-2022-48637, CVE-2022-49788, CVE-2022-49977, CVE-2022-50200, CVE-2023-0386, CVE-2023-0458, CVE-2023-1637, CVE-2023-1998, CVE-2023-2002, CVE-2023-20593, CVE-2023-21102, CVE-2023-2124, CVE-2023-2194, CVE-2023-2235, CVE-2023-28466, CVE-2023-3090, CVE-2023-31248, CVE-2023-32233, CVE-2023-3390, CVE-2023-35001, CVE-2023-35788, CVE-2023-3610, CVE-2023-3776, CVE-2023-3812, CVE-2023-39191, CVE-2023-4004, CVE-2023-40283, CVE-2023-4147, CVE-2023-4623, CVE-2023-51042, CVE-2023-51043, CVE-2023-51779, CVE-2023-52439, CVE-2023-52933, CVE-2023-53047, CVE-2023-53107, CVE-2023-6817, CVE-2024-26886, CVE-2024-35896, CVE-2024-35962, CVE-2024-36960, CVE-2024-41090, CVE-2024-42284, CVE-2024-53104, CVE-2024-53150, CVE-2024-56642, CVE-2025-21756, CVE-2025-21785, CVE-2025-21927, CVE-2025-22020, CVE-2025-22104, CVE-2025-23150, CVE-2025-37738, CVE-2025-37797, CVE-2025-37890, CVE-2025-38086, CVE-2025-38332, CVE-2025-38352, CVE-2025-39964, CVE-2025-40022, CVE-2026-43042, CVE-2026-43114, CVE-2026-46056, CVE-2026-52993, CVE-2026-53006, CVE-2026-53016, CVE-2026-53071, CVE-2026-53196, CVE-2026-53266, CVE-2026-63887, CVE-2026-64268, CVE-2026-64304, CVE-2026-64564, CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-80863, CVE-2026-81000