Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2057)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Amazon Linux 2023 Security Advisory ALAS2023-2026-2057.
##

include('compat.inc');

if (description)
{
  script_id(337239);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/18");

  script_cve_id(
    "CVE-2026-45944",
    "CVE-2026-46093",
    "CVE-2026-53005",
    "CVE-2026-53027",
    "CVE-2026-53365",
    "CVE-2026-53392",
    "CVE-2026-53402",
    "CVE-2026-63970",
    "CVE-2026-64024",
    "CVE-2026-64187",
    "CVE-2026-64189",
    "CVE-2026-64192",
    "CVE-2026-64227",
    "CVE-2026-64265",
    "CVE-2026-64266",
    "CVE-2026-64279",
    "CVE-2026-64284",
    "CVE-2026-64286",
    "CVE-2026-64287",
    "CVE-2026-64294",
    "CVE-2026-64296",
    "CVE-2026-64298",
    "CVE-2026-64299",
    "CVE-2026-64306",
    "CVE-2026-64312",
    "CVE-2026-64313",
    "CVE-2026-64317",
    "CVE-2026-64322",
    "CVE-2026-64323",
    "CVE-2026-64324",
    "CVE-2026-64326",
    "CVE-2026-64352",
    "CVE-2026-64354",
    "CVE-2026-64355",
    "CVE-2026-64357",
    "CVE-2026-64364",
    "CVE-2026-64368",
    "CVE-2026-64370",
    "CVE-2026-64371",
    "CVE-2026-64372",
    "CVE-2026-64373",
    "CVE-2026-64374",
    "CVE-2026-64375",
    "CVE-2026-64380",
    "CVE-2026-64381",
    "CVE-2026-64382",
    "CVE-2026-64383",
    "CVE-2026-64384",
    "CVE-2026-64385",
    "CVE-2026-64386",
    "CVE-2026-64387",
    "CVE-2026-64411",
    "CVE-2026-64412",
    "CVE-2026-64413",
    "CVE-2026-64414",
    "CVE-2026-64415",
    "CVE-2026-64416",
    "CVE-2026-64418",
    "CVE-2026-64422",
    "CVE-2026-64423",
    "CVE-2026-64425",
    "CVE-2026-64432",
    "CVE-2026-64435",
    "CVE-2026-64436",
    "CVE-2026-64448",
    "CVE-2026-64450",
    "CVE-2026-64456",
    "CVE-2026-64457",
    "CVE-2026-64458",
    "CVE-2026-64465",
    "CVE-2026-64472",
    "CVE-2026-64474",
    "CVE-2026-64475",
    "CVE-2026-64476",
    "CVE-2026-64507",
    "CVE-2026-64508",
    "CVE-2026-64512",
    "CVE-2026-64514",
    "CVE-2026-64530",
    "CVE-2026-64532",
    "CVE-2026-64533",
    "CVE-2026-64538",
    "CVE-2026-64542",
    "CVE-2026-64543",
    "CVE-2026-64544",
    "CVE-2026-64545",
    "CVE-2026-64546",
    "CVE-2026-64548",
    "CVE-2026-64551",
    "CVE-2026-64552",
    "CVE-2026-64553",
    "CVE-2026-64555",
    "CVE-2026-64556",
    "CVE-2026-64560",
    "CVE-2026-64561",
    "CVE-2026-64589",
    "CVE-2026-64593",
    "CVE-2026-64597",
    "CVE-2026-64598",
    "CVE-2026-64604",
    "CVE-2026-68086",
    "CVE-2026-68090",
    "CVE-2026-68092"
  );

  script_name(english:"Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2057)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Amazon Linux 2023 host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2057 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    iommu/vt-d: Clear Present bit before tearing down context entry (CVE-2026-45944)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/vmalloc: take vmap_purge_lock in shrinker (CVE-2026-46093)

    In the Linux kernel, the following vulnerability has been resolved:

    af_unix: Drop all SCM attributes for SOCKMAP. (CVE-2026-53005)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() (CVE-2026-53027)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: fix zerocopy completion for multi-skb sends (CVE-2026-53365)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()

    When fbcon_do_set_font() fails (e.g., due to a memory allocation failureinside vc_resize() under heavy
    memory pressure), it jumps to the `err_out`label to roll back the console state. However, the current
    rollback logicforgets to restore the `hi_font` state, leading to a severe state machinecorruption.

    Earlier in the function, `set_vc_hi_font()` might be called to change`vc->vc_hi_font_mask` and mutate the
    screen buffer. If `vc_resize()`subsequently fails, the `err_out` path restores `vc_font.charcount`but
    entirely skips rolling back the `vc_hi_font_mask` and the screenbuffer.

    This mismatch leaves the terminal in a desynchronized state. Because`vc_hi_font_mask` remains set, the VT
    subsystem will still acceptcharacter indices greater than 255 from userspace and write them to thescreen
    buffer. Subsequent rendering calls (e.g., `fbcon_putcs()`) willthen use these inflated indices to access
    the reverted, 256-characterfont array, leading to a deterministic out-of-bounds read and potentialkernel
    memory disclosure.

    Fix this by adding the missing rollback logic for the `hi_font` maskand screen buffer in the error path.
    (CVE-2026-53402)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: bind uarg before filling zerocopy skb (CVE-2026-63970)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

    Blamed commit moved the TIME_WAIT-derived ISN from the skb controlblock to a per-CPU variable, assuming
    the value would always be consumedby tcp_conn_request() for the same packet that wrote it. That
    assumptionis violated by multiple drop paths between the producer(__this_cpu_write(tcp_tw_isn, isn) in
    tcp_v{4,6}_rcv()) and the consumer(tcp_conn_request()):

    - min_ttl / min_hopcount check- xfrm policy check- tcp_inbound_hash() MD5/AO mismatch- tcp_filter()
    eBPF/SO_ATTACH_FILTER drop- th->syn && th->fin discard in tcp_rcv_state_process() TCP_LISTEN-
    psp_sk_rx_policy_check() in tcp_v{4,6}_do_rcv()- tcp_checksum_complete() in tcp_v{4,6}_do_rcv()-
    tcp_v{4,6}_cookie_check() returning NULL

    When a packet is dropped on any of these paths, tcp_tw_isn is left set.

    The next SYN processed on the same CPU then consumes the non zero value intcp_conn_request(), receiving a
    potentially predictable ISN.

    This patch moves back tcp_tw_isn to skb->cb[], getting rid of the per-cpuvariable.

    Note that tcp_v{4,6}_fill_cb() do not set it.

    Very litle impact on overall code size/complexity:

    $ scripts/bloat-o-meter -t vmlinux.old vmlinux.newadd/remove: 0/0 grow/shrink: 2/1 up/down: 8/-15
    (-7)Function                                     old     new   deltatcp_v6_rcv
    3038    3042      +4tcp_v4_rcv                                  3035    3039      +4tcp_conn_request
    2938    2923     -15Total: Before=24436060, After=24436053, chg -0.00% (CVE-2026-64024)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fail recovery on a committed log item with no regions

    If the first op of a transaction is a bare transaction header(len == sizeof(struct xfs_trans_header)),
    xlog_recover_add_to_trans()adds an item but no region, leaving it on r_itemq with ri_cnt == 0 andri_buf ==
    NULL.

    The header can be split across op records, so later ops may still addregions; the item is only invalid if
    the transaction commits with none.The runtime commit path never emits such a transaction, so this
    onlyhappens on a crafted log.  It came from an AI-assisted code audit of therecovery parser.

    xlog_recover_reorder_trans() calls ITEM_TYPE() on the item, which reads*(unsigned short
    *)item->ri_buf[0].iov_base and faults on the NULLri_buf.  Reject it there, before the commit handlers that
    also readri_buf[0].

    KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]RIP: 0010:xlog_recover_reorder_trans
    (fs/xfs/xfs_log_recover.c:1836)xlog_recover_commit_trans
    (fs/xfs/xfs_log_recover.c:2043)xlog_recover_process_data
    (fs/xfs/xfs_log_recover.c:2501)xlog_do_recovery_pass (fs/xfs/xfs_log_recover.c:3244)xlog_recover
    (fs/xfs/xfs_log_recover.c:3493)xfs_log_mount (fs/xfs/xfs_log.c:618)xfs_mountfs
    (fs/xfs/xfs_mount.c:1034)xfs_fs_fill_super (fs/xfs/xfs_super.c:1938)vfs_get_tree
    (fs/super.c:1695)path_mount (fs/namespace.c:4161)__x64_sys_mount (fs/namespace.c:4367) (CVE-2026-64187)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

    When CONFIG_BPF_LSM=y is set, BPF inode storage maps(BPF_MAP_TYPE_INODE_STORAGE) are compiled into the
    kernel. However,if the BPF LSM is not explicitly enabled at boot time (e.g. omittedfrom the lsm= boot
    parameter), lsm_prepare() is never executed forthe BPF LSM.

    Consequently, the BPF inode security blob offset(bpf_lsm_blob_sizes.lbs_inode) is never initialized and
    remains atits default compiled size of 8 bytes instead of being updated to avalid offset past the reserved
    struct rcu_head (typically 16 bytesor more).

    When a privileged user creates and updates a BPF_MAP_TYPE_INODE_STORAGEmap, bpf_inode() evaluates
    inode->i_security + 8. This erroneouslyaliases the struct rcu_head.func callback pointer at the
    beginningof the inode->i_security blob. During subsequent map element cleanupor inode destruction, writing
    NULL to owner_storage clears the queuedRCU callback pointer. When rcu_do_batch() later executes the
    queuedcallback, it attempts an instruction fetch at address 0x0, triggeringan immediate kernel panic.

    Fix this by introducing a global bpf_lsm_initialized boolean flagmarked with __ro_after_init. Set this
    flag to true inside bpf_lsm_init()when the LSM framework successfully registers the BPF LSM. Gate
    mapallocation in inode_storage_map_alloc() on this flag, returning-EOPNOTSUPP if the BPF LSM is in turn
    uninitialized.

    This fail-fast approach prevents userspace from allocating inodestorage maps when the supporting BPF LSM
    infrastructure is absent,avoiding zombie map states. (CVE-2026-64192)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: driver: Check ACPI_COMPANION() against NULL during probe (CVE-2026-64227)

    In the Linux kernel, the following vulnerability has been resolved:

    fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (CVE-2026-64265)

    In the Linux kernel, the following vulnerability has been resolved:

    fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266)

    In the Linux kernel, the following vulnerability has been resolved:

    i2c: core: fix adapter deregistration race (CVE-2026-64279)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits (CVE-2026-64284)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (CVE-2026-64286)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: do file ownership checks with the proper mount idmap (CVE-2026-64294)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: bound uniname advance in exfat_find_dir_entry() (CVE-2026-64296)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Prevent out-of-bounds read in glob matching (CVE-2026-64299)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: drbg - Fix returning success on failure in CTR_DRBG (CVE-2026-64306)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: pcrypt - restore callback for non-parallel fallback (CVE-2026-64312)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: ecc - Fix carry overflow in vli multiplication (CVE-2026-64313)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: bound Rock Ridge symlink components to the SL record (CVE-2026-64317)

    In the Linux kernel, the following vulnerability has been resolved:

    udf: validate sparing table length as an entry count, not a byte count (CVE-2026-64322)

    In the Linux kernel, the following vulnerability has been resolved:

    udf: validate VAT header length against the VAT inode size (CVE-2026-64323)

    In the Linux kernel, the following vulnerability has been resolved:

    udf: validate free block extents against the partition length (CVE-2026-64324)

    In the Linux kernel, the following vulnerability has been resolved:

    block: skip sync_blockdev() on surprise removal in bdev_mark_dead() (CVE-2026-64326)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Allow LPM map access from sleepable BPF programs (CVE-2026-64352)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Validate BTF repeated field counts before expansion (CVE-2026-64354)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Reject fragmented frames in devmap (CVE-2026-64355)

    In the Linux kernel, the following vulnerability has been resolved:

    xfs: fix exchmaps reservation limit check (CVE-2026-64357)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: multitouch: fix out-of-bounds bit access on mt_io_flags (CVE-2026-64364)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (CVE-2026-64368)

    In the Linux kernel, the following vulnerability has been resolved:

    posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (CVE-2026-64370)

    In the Linux kernel, the following vulnerability has been resolved:

    proc: protect ptrace_may_access() with exec_update_lock (part 1) (CVE-2026-64371)

    In the Linux kernel, the following vulnerability has been resolved:

    cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (CVE-2026-64372)

    In the Linux kernel, the following vulnerability has been resolved:

    cpufreq: Fix hotplug-suspend race during reboot (CVE-2026-64373)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT (CVE-2026-64374)

    In the Linux kernel, the following vulnerability has been resolved:

    proc: protect ptrace_may_access() with exec_update_lock (FD links) (CVE-2026-64375)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: harden POSIX SID length parsing (CVE-2026-64380)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Fix next buffer leak in receive_encrypted_standard() (CVE-2026-64381)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix double-free in SMB2_flush() replay (CVE-2026-64383)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix change notify replay double-free (CVE-2026-64384)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix double-free in SMB2_ioctl() replay (CVE-2026-64385)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix query_info() replay double-free (CVE-2026-64386)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix query directory replay double-free (CVE-2026-64387)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ebtables: terminate table name before find_table_lock() (CVE-2026-64411)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ebtables: module names must be null-terminated (CVE-2026-64412)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ebtables: zero chainstack array (CVE-2026-64413)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: handle unreadable frags (CVE-2026-64414)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup (CVE-2026-64415)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host (CVE-2026-64416)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (CVE-2026-64422)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: igmp: remove multicast group from hash table on device destruction (CVE-2026-64423)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (CVE-2026-64425)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns (CVE-2026-64432)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: Fix data races of skb_queue_len() readers on audit_queue (CVE-2026-64435)

    In the Linux kernel, the following vulnerability has been resolved:

    net: af_key: initialize alg_key_len for IPComp states (CVE-2026-64436)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: restrict implied bcc[0] exemption to responses without data area (CVE-2026-64448)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix out-of-bounds read in broadcast Gap ACK blocks (CVE-2026-64450)

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio_pci: fix vq info pointer lookup via wrong index (CVE-2026-64457)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/damon/ops-common: handle extreme intervals in damon_hot_score() (CVE-2026-64458)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: xhci: Fix sleep in atomic context in xhci_free_streams() (CVE-2026-64465)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/mlx5: Fix racy bitfields and tighten struct layout (CVE-2026-64472)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (CVE-2026-64474)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/pci: Release the VGA arbiter client on register_device() failure (CVE-2026-64475)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/pci: Latch disable_idle_d3 per device (CVE-2026-64476)

    In the Linux kernel, the following vulnerability has been resolved:

    x86/bugs: Enable IBPB flush on BPF JIT allocation (CVE-2026-64507)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Support for hardening against JIT spraying (CVE-2026-64508)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: CPPC: Suppress UBSAN warning caused by field misuse (CVE-2026-64512)

    In the Linux kernel, the following vulnerability has been resolved:

    userfaultfd: gate must_wait writability check on pte_present() (CVE-2026-64514)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} (CVE-2026-64532)

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: validate lcns_follow in log_replay conversion (CVE-2026-64533)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). (CVE-2026-64538)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: ndisc: fix NULL deref in accept_untracked_na() (CVE-2026-64542)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (CVE-2026-64543)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (CVE-2026-64544)

    In the Linux kernel, the following vulnerability has been resolved:

    net, bpf: check master for NULL in xdp_master_redirect() (CVE-2026-64545)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/edid: fix OOB read in drm_parse_tiled_block() (CVE-2026-64546)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (CVE-2026-64548)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: validate STALE_COOKIE cause length before reading staleness (CVE-2026-64551)

    In the Linux kernel, the following vulnerability has been resolved:

    virtio-net: fix len check in receive_big() (CVE-2026-64552)

    In the Linux kernel, the following vulnerability has been resolved:

    net: psample: fix info leak in PSAMPLE_ATTR_DATA (CVE-2026-64553)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() (CVE-2026-64555)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/core: Detach event groups during remove_on_exec

    perf_event_remove_on_exec() removes events by callingperf_event_exit_event(). For top-level events, this
    removes the event fromthe context with DETACH_EXIT only.

    This can leave inconsistent group state when a removed event is a groupleader and the group contains
    siblings without remove_on_exec. If the groupwas active, the surviving siblings can remain active and
    attached to theremoved leader's sibling list, but are no longer represented by a validgroup leader on the
    PMU context active lists.

    A later close of the removed leader uses DETACH_GROUP and can promote thestill-active siblings from this
    stale group state. The next schedule-in canthen add an already-linked active_list entry again, corrupting
    the PMUcontext active list.

    With DEBUG_LIST enabled, this is caught as a list_add double-add inmerge_sched_in().

    Fix this by detaching group relationships when remove_on_exec removes anevent. This preserves the existing
    task-exit and revoke behavior, whileensuring surviving siblings are ungrouped before the removed event
    leavesthe context. (CVE-2026-64556)

    In the Linux kernel, the following vulnerability has been resolved:

    posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

    Check for a stale page fault, i.e. for an invalid and/or obsolete root,after making MMU pages available
    for the shadow MMU.  If reclaiming shadowpages zaps an in-use root, i.e. marks it invalid, then KVM will
    attempt tomap memory into an invalid root.  On its own, populating an invalid root isfine, but because
    child shadow pages inherit their parent's role, anychildren created during the map/fetch will be created
    as invalid pages,thus violating KVM's invariant that invalid pages are never on the list ofactive MMU
    pages.

    Note, the underlying flaw has existed since KVM first started trackinginvalid roots in 2008 (commit
    2e53d63acba7, KVM: MMU: ignore zapped rootpagetables), but the true badness only came along in 2020
    (Linux 5.9)with the invariant that invalid shadow pages can't be on the list ofactive pages.

    Note #2, inheriting role.invalid when creating child shadow pages is alsofar from ideal; that flaw will be
    addressed separately. (CVE-2026-64561)

    In the Linux kernel, the following vulnerability has been resolved:

    i2c: core: fix NULL-deref on adapter registration failure (CVE-2026-64589)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not trim a device which is not writeable (CVE-2026-64593)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597)

    In the Linux kernel, the following vulnerability has been resolved:

    smb/client: Fix error code in smb2_aead_req_alloc() (CVE-2026-64598)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode (CVE-2026-64604)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)

    In the Linux kernel, the following vulnerability has been resolved:

    debugobjects: Plug race against a concurrent OOM disable (CVE-2026-68090)

    In the Linux kernel, the following vulnerability has been resolved:

    time/jiffies: Register jiffies clocksource before usage (CVE-2026-68092)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com//AL2023/ALAS2023-2026-2057.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/faqs.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-45944.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-46093.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-53005.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-53027.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-53365.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-53392.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-53402.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-63970.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64024.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64187.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64189.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64192.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64227.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64265.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64266.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64279.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64284.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64286.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64287.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64294.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64296.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64298.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64299.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64306.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64312.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64313.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64317.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64322.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64323.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64324.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64326.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64352.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64354.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64355.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64357.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64364.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64368.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64370.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64371.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64372.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64373.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64374.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64375.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64380.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64381.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64382.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64383.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64384.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64385.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64386.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64387.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64411.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64412.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64413.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64414.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64415.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64416.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64418.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64422.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64423.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64425.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64432.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64435.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64436.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64448.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64450.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64456.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64457.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64458.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64465.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64472.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64474.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64475.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64476.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64507.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64508.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64512.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64514.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64530.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64532.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64533.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64538.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64542.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64543.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64544.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64545.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64546.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64548.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64551.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64552.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64553.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64555.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64556.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64560.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64561.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64589.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64593.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64597.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64598.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-64604.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-68086.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-68090.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-68092.html");
  script_set_attribute(attribute:"solution", value:
"Run 'dnf update kernel6.12 --releasever 2023.12.20260817' or
  or 'dnf update --advisory ALAS2023-2026-2057 --releasever 2023.12.20260817' to update your system.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-64294");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/05/27");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:bpftool6.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:bpftool6.12-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-livepatch-6.12.100-125.179");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-debuginfo-common-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-debuginfo-common-x86_64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-headers");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-modules-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-modules-extra-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-tools-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel6.12-tools-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:perf6.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:perf6.12-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:python3-perf6.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:python3-perf6.12-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux:2023");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Amazon Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list");

  exit(0);
}

include("rpm2.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var alas_release = get_kb_item("Host/AmazonLinux/release");
if (isnull(alas_release) || !strlen(alas_release)) audit(AUDIT_OS_NOT, "Amazon Linux");
var os_ver = pregmatch(pattern: "^AL(A|\d+|-\d+)", string:alas_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux");
os_ver = os_ver[1];
if (os_ver != "-2023")
{
  if (os_ver == 'A') os_ver = 'AMI';
  audit(AUDIT_OS_NOT, "Amazon Linux 2023", "Amazon Linux " + os_ver);
}

if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var pkgs = [
    {'reference':'bpftool6.12-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'bpftool6.12-6.12.'},
    {'reference':'bpftool6.12-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'bpftool6.12-6.12.'},
    {'reference':'bpftool6.12-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'bpftool6.12-debuginfo-6.12.'},
    {'reference':'bpftool6.12-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'bpftool6.12-debuginfo-6.12.'},
    {'reference':'kernel-livepatch-6.12.100-125.179-1.0-0.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'kernel-livepatch-6.12.100-125.179-1.0-0.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE},
    {'reference':'kernel6.12-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-6.12.'},
    {'reference':'kernel6.12-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-6.12.'},
    {'reference':'kernel6.12-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-debuginfo-6.12.'},
    {'reference':'kernel6.12-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-debuginfo-6.12.'},
    {'reference':'kernel6.12-debuginfo-common-aarch64-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-debuginfo-common-aarch64-6.12.'},
    {'reference':'kernel6.12-debuginfo-common-x86_64-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-debuginfo-common-x86_64-6.12.'},
    {'reference':'kernel6.12-devel-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-devel-6.12.'},
    {'reference':'kernel6.12-devel-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-devel-6.12.'},
    {'reference':'kernel6.12-headers-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-headers-6.12.'},
    {'reference':'kernel6.12-headers-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-headers-6.12.'},
    {'reference':'kernel6.12-modules-extra-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-modules-extra-6.12.'},
    {'reference':'kernel6.12-modules-extra-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-modules-extra-6.12.'},
    {'reference':'kernel6.12-modules-extra-common-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-modules-extra-common-6.12.'},
    {'reference':'kernel6.12-modules-extra-common-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-modules-extra-common-6.12.'},
    {'reference':'kernel6.12-tools-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-tools-6.12.'},
    {'reference':'kernel6.12-tools-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-tools-6.12.'},
    {'reference':'kernel6.12-tools-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-tools-debuginfo-6.12.'},
    {'reference':'kernel6.12-tools-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-tools-debuginfo-6.12.'},
    {'reference':'kernel6.12-tools-devel-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-tools-devel-6.12.'},
    {'reference':'kernel6.12-tools-devel-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel6.12-tools-devel-6.12.'},
    {'reference':'perf6.12-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'perf6.12-6.12.'},
    {'reference':'perf6.12-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'perf6.12-6.12.'},
    {'reference':'perf6.12-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'perf6.12-debuginfo-6.12.'},
    {'reference':'perf6.12-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'perf6.12-debuginfo-6.12.'},
    {'reference':'python3-perf6.12-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'python3-perf6.12-6.12.'},
    {'reference':'python3-perf6.12-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'python3-perf6.12-6.12.'},
    {'reference':'python3-perf6.12-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'aarch64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'python3-perf6.12-debuginfo-6.12.'},
    {'reference':'python3-perf6.12-debuginfo-6.12.100-125.179.amzn2023', 'cpu':'x86_64', 'release':'AL-2023', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'python3-perf6.12-debuginfo-6.12.'}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  var cves = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
  if (reference && _release && (!exists_check || rpm_exists(release:_release, rpm:exists_check))) {
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "bpftool6.12 / bpftool6.12-debuginfo / kernel-livepatch-6.12.100-125.179 / etc");
}