CentOS Linux 8 主機已安裝的套件受到 TuxCare CENTOS-STREAM8：CLSA-2025：1738592614 公告中提及的多個弱點影響。

  - 已解決 Linux 核心中的下列弱點：ceph: prevent use-after-free in encode_cap_msg() In fs/ceph/caps.c, in encode_cap_msg(), use after free error was caught by KASAN at this line - 'ceph_buffer_get(arg->xattr_buf);'. This implies before the refcount could be increment here, it was freed. In same file, in handle_cap_grant() refcount is decremented by this line - 'ceph_buffer_put(ci->i_xattrs.blob);'. It appears that a race occurred and resource was freed by the latter line before the former line could increment it. encode_cap_msg() is called by __send_cap() and
    __send_cap() is called by ceph_check_caps() after calling __prep_cap(). __prep_cap() is where arg->xattr_buf is assigned to ci->i_xattrs.blob. This is the spot where the refcount must be increased to prevent use after free error. (CVE-2024-26689)

  - 已解決 Linux 核心中的下列弱點：smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF. (CVE-2024-26928)

  - 已解決 Linux 核心中的下列弱點：smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF. (CVE-2024-35861)

  - 已解決 Linux 核心中的下列弱點：smb: client: fix potential UAF in is_valid_oplock_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
    (CVE-2024-35863)

  - 已解決 Linux 核心中的下列弱點：smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
    (CVE-2024-35864)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

偵測

CentOS Linux 8 [TuxCare] 安全性更新：bpftool / kernel / kernel-core / kernel-cross-headers / etc多個漏洞（CENTOS-STREAM8：CLSA-2025：1738592614）

high Nessus Plugin ID 366949

版本 1.1

偵測

CentOS Linux 8 [TuxCare] 安全性更新：bpftool / kernel / kernel-core / kernel-cross-headers / etc多個漏洞 （CENTOS-STREAM8：CLSA-2025：1738592614）

high Nessus Plugin ID 366949

版本 1.1

CentOS Linux 8 [TuxCare] 安全性更新：bpftool / kernel / kernel-core / kernel-cross-headers / etc多個漏洞（CENTOS-STREAM8：CLSA-2025：1738592614）