CentOS Linux 6 [TuxCare] 安全性更新：核心 / kernel-abi-whitelists / kernel-debug / kernel-debug-devel / etc （CENTOS6：CLSA-2026：1792759879）

high Nessus Plugin ID 372111

語言:

概要

CentOS Linux 主機缺少一個或多個安全性更新。

說明

CentOS Linux 6 主機已安裝的套件會受到 TuxCare CENTOS6：CLSA-2026：1792759879 公告中提及的弱點影響。

- 已解決 Linux 核心中的下列弱點：scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() In the format 1 path, the virtual port is located on ha->vp_list while holding vport_slock, but the lock is dropped before vp is used: qla_update_host_map() is called and VP_IDX_ACQUIRED/REGISTER_FC4_NEEDED/ REGISTER_FDMI_NEEDED are set on vp. No reference is taken across that window, so a concurrent qla24xx_deallocate_vp_id() can tear the vport down and free it, leading to a use-after-free. Take a vport reference (vref_count) under vport_slock when the matching vp is found, and drop it after the last use of vp. qla24xx_deallocate_vp_id() waits for vref_count to reach zero before unlinking and freeing the vport, so the pointer stays valid. This matches the reference idiom already used by the other ha->vp_list traversals. (CVE-2026-89861)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。