CentOS Linux 8 [TuxCare] 安全性更新：bpftool / kernel / kernel-core / kernel-cross-headers / etc多個漏洞 （CENTOS-STREAM8：CLSA-2026：1789141176）
high Nessus Plugin ID 361969
語言:
概要
CentOS Linux 主機缺少一個或多個安全性更新。說明
CentOS Linux 8 主機安裝的套件會受到 TuxCare CENTOS-STREAM8：CLSA-2026：1789141176 公告中提及的多個弱點影響。- 已解決 Linux 核心中的下列弱點：bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns
-EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero. Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.
(CVE-2022-50490)
- 已解決 Linux 核心中的下列弱點：scsi: hpsa: Fix possible memory leak in hpsa_init_one() The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map. Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly. (CVE-2022-50646)
- prctl 系統呼叫的目前實作不會在系統呼叫期間立即發出 IBPB。ib_prctl_set 函式會更新工作的執行緒資訊旗標 (TIF)，並更新 __speculation_ctrl_update 函式上的 SPEC_CTRL MSR，但只有在檢查 TIF 位元時，才會在下一個排程中發出 IBPB。這會使受害者容易受到在 prctl 系統呼叫之前已在 BTB 上插入的值影響。透過 prctl (ib_prctl_set) 新增條件緩解支援的修補程式可回溯至核心 4.9.176。我們建議升級過去的提交 a664ec9158eeddd75121d39c9a0758016097fa96 (CVE-2023-0045)
- 在 Linux 核心用於轉換封包的 IP 架構 (XFRM 子系統) 中發現一個瑕疵。此問題可允許具有 CAP_NET_ADMIN 權限的惡意使用者在剖析 netlink 屬性時，造成 XFRMA_MTIMER_THRESH 發生 4 位元組超出邊界讀取，進而導致敏感堆積資料可能洩漏至使用者空間。(CVE-2023-3773)
- 已解決 Linux 核心中的下列弱點：fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev with deferred I/O is once opened and closed, the dirty pages still remain queued in the pageref list, and eventually later those may be processed in the delayed work.
This may lead to a corruption of pages, hitting an Oops. This patch makes sure to cancel the delayed work and clean up the pageref list at closing the device for addressing the bug. A part of the cleanup code is factored out as a new helper function that is called from the common fb_release(). (CVE-2023-52731)
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
根據 TuxCare 公告 CENTOS-STREAM8：CLSA-2026：1789141176 中的指引更新受影響的套件。另請參閱
Plugin 詳細資訊
嚴重性: High
ID: 361969
檔案名稱: tuxcare_centos_8_CLSA-2026-1789141176.nasl
版本: 1.1
類型: Local
代理程式: unix
已發布: 2026/10/1
已更新: 2026/10/1
支援的感應器: Continuous Assessment, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
風險資訊
VPR
風險因素: High
分數: 7.9
百分位數: 99.35
Vendor
Vendor Severity: Important
CVSS v2
風險因素: High
基本分數: 8.3
時間性分數: 6.5
媒介: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C
CVSS 評分資料來源: CVE-2026-23395
CVSS v3
風險因素: High
基本分數: 8.8
時間性分數: 7.9
媒介: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
時間媒介: CVSS:3.0/E:P/RL:O/RC:C
CVSS v4
風險因素: High
Base Score: 7.3
Threat Score: 6.4
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 評分資料來源: CVE-2025-54518
弱點資訊
必要的 KB 項目: Host/OS/extended-third-party, Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
可被惡意程式利用: true
可輕鬆利用: Exploits are available
修補程式發佈日期: 2026/9/11
弱點發布日期: 2021/7/21
參考資訊
CVE: CVE-2022-49961, CVE-2022-50490, CVE-2022-50646, CVE-2023-0045, CVE-2023-3773, CVE-2023-52474, CVE-2023-52621, CVE-2023-52697, CVE-2023-52731, CVE-2023-52935, CVE-2023-53235, CVE-2023-53252, CVE-2023-53473, CVE-2023-53543, CVE-2023-53987, CVE-2023-54177, CVE-2023-54258, CVE-2024-39480, CVE-2024-47672, CVE-2024-49861, CVE-2024-53099, CVE-2024-53174, CVE-2025-21761, CVE-2025-21762, CVE-2025-37913, CVE-2025-37915, CVE-2025-38046, CVE-2025-38108, CVE-2025-38111, CVE-2025-38117, CVE-2025-38146, CVE-2025-38248, CVE-2025-38342, CVE-2025-38593, CVE-2025-38676, CVE-2025-39689, CVE-2025-39810, CVE-2025-39835, CVE-2025-39860, CVE-2025-39880, CVE-2025-39957, CVE-2025-39977, CVE-2025-40071, CVE-2025-54518, CVE-2025-68291, CVE-2025-68363, CVE-2025-68742, CVE-2025-71089, CVE-2026-23054, CVE-2026-23208, CVE-2026-23262, CVE-2026-23315, CVE-2026-23318, CVE-2026-23395, CVE-2026-23447, CVE-2026-23454, CVE-2026-31399, CVE-2026-31493, CVE-2026-43049, CVE-2026-43116, CVE-2026-43449, CVE-2026-43453, CVE-2026-46006, CVE-2026-46174, CVE-2026-46218, CVE-2026-52962, CVE-2026-52998, CVE-2026-53186, CVE-2026-53253, CVE-2026-53329, CVE-2026-63829, CVE-2026-63884, CVE-2026-64219, CVE-2026-64268, CVE-2026-64298, CVE-2026-64322, CVE-2026-64340, CVE-2026-64343, CVE-2026-64344, CVE-2026-64423, CVE-2026-64496, CVE-2026-64572, CVE-2026-64574, CVE-2026-64579, CVE-2026-64582, CVE-2026-68093, CVE-2026-68121, CVE-2026-68123, CVE-2026-68142, CVE-2026-68143, CVE-2026-68153, CVE-2026-68155, CVE-2026-68156, CVE-2026-68158, CVE-2026-68160, CVE-2026-68175, CVE-2026-68176, CVE-2026-68189, CVE-2026-68202, CVE-2026-68214, CVE-2026-68226, CVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68355, CVE-2026-68363, CVE-2026-68376, CVE-2026-68388, CVE-2026-68414, CVE-2026-68426, CVE-2026-72472, CVE-2026-74470, CVE-2026-74499, CVE-2026-74565, CVE-2026-74587, CVE-2026-74588, CVE-2026-74589, CVE-2026-74597, CVE-2026-74609, CVE-2026-74630, CVE-2026-74641, CVE-2026-74656, CVE-2026-74660, CVE-2026-74667, CVE-2026-74669, CVE-2026-74682, CVE-2026-74688, CVE-2026-74700, CVE-2026-74705, CVE-2026-74720, CVE-2026-80558
CLSA: 2026:1789141176