Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-135)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Amazon Linux 2 Security Advisory ALASKERNEL-5.10-2026-135.
##

include('compat.inc');

if (description)
{
  script_id(366741);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/17");

  script_cve_id(
    "CVE-2026-74268",
    "CVE-2026-80671",
    "CVE-2026-80912",
    "CVE-2026-80932",
    "CVE-2026-80963",
    "CVE-2026-80976",
    "CVE-2026-80977",
    "CVE-2026-80978",
    "CVE-2026-80994",
    "CVE-2026-81001",
    "CVE-2026-81002",
    "CVE-2026-81005",
    "CVE-2026-89440",
    "CVE-2026-89476",
    "CVE-2026-89477",
    "CVE-2026-89478",
    "CVE-2026-89479",
    "CVE-2026-89482",
    "CVE-2026-89483",
    "CVE-2026-89485",
    "CVE-2026-89487",
    "CVE-2026-89488",
    "CVE-2026-89508",
    "CVE-2026-89510",
    "CVE-2026-89511",
    "CVE-2026-89515",
    "CVE-2026-89525",
    "CVE-2026-89538",
    "CVE-2026-89540",
    "CVE-2026-89541",
    "CVE-2026-89542",
    "CVE-2026-89548",
    "CVE-2026-89549",
    "CVE-2026-89551",
    "CVE-2026-89554",
    "CVE-2026-89555",
    "CVE-2026-89557",
    "CVE-2026-89559",
    "CVE-2026-89562",
    "CVE-2026-89563",
    "CVE-2026-89573",
    "CVE-2026-89575",
    "CVE-2026-89576",
    "CVE-2026-89582",
    "CVE-2026-89586",
    "CVE-2026-89595",
    "CVE-2026-89606",
    "CVE-2026-89607",
    "CVE-2026-89608",
    "CVE-2026-89627",
    "CVE-2026-89628",
    "CVE-2026-89637",
    "CVE-2026-89643",
    "CVE-2026-89649",
    "CVE-2026-89650",
    "CVE-2026-89652",
    "CVE-2026-89655",
    "CVE-2026-89656",
    "CVE-2026-89662",
    "CVE-2026-89663",
    "CVE-2026-89669",
    "CVE-2026-89673",
    "CVE-2026-89674",
    "CVE-2026-89684",
    "CVE-2026-89694",
    "CVE-2026-89696",
    "CVE-2026-89699",
    "CVE-2026-89704",
    "CVE-2026-89706",
    "CVE-2026-89711",
    "CVE-2026-89712",
    "CVE-2026-89723",
    "CVE-2026-89726",
    "CVE-2026-89729",
    "CVE-2026-89741",
    "CVE-2026-89752",
    "CVE-2026-89753",
    "CVE-2026-89777",
    "CVE-2026-89783",
    "CVE-2026-89784",
    "CVE-2026-89816",
    "CVE-2026-89823",
    "CVE-2026-89843",
    "CVE-2026-89845",
    "CVE-2026-89846",
    "CVE-2026-89847",
    "CVE-2026-89850",
    "CVE-2026-89851",
    "CVE-2026-89852",
    "CVE-2026-89853",
    "CVE-2026-89854",
    "CVE-2026-89855",
    "CVE-2026-89856",
    "CVE-2026-89858",
    "CVE-2026-89861",
    "CVE-2026-89864",
    "CVE-2026-89865",
    "CVE-2026-89927",
    "CVE-2026-89965",
    "CVE-2026-89973",
    "CVE-2026-89982",
    "CVE-2026-89984",
    "CVE-2026-89997",
    "CVE-2026-89999",
    "CVE-2026-90000",
    "CVE-2026-90011",
    "CVE-2026-90015",
    "CVE-2026-90031",
    "CVE-2026-90034",
    "CVE-2026-90049",
    "CVE-2026-90054",
    "CVE-2026-90058",
    "CVE-2026-90062",
    "CVE-2026-90071",
    "CVE-2026-90072",
    "CVE-2026-90073",
    "CVE-2026-90075",
    "CVE-2026-90081",
    "CVE-2026-90102",
    "CVE-2026-90103",
    "CVE-2026-90114",
    "CVE-2026-90126",
    "CVE-2026-90141",
    "CVE-2026-90151",
    "CVE-2026-90157",
    "CVE-2026-90160",
    "CVE-2026-90202",
    "CVE-2026-90203",
    "CVE-2026-90216",
    "CVE-2026-90218",
    "CVE-2026-90219",
    "CVE-2026-90283",
    "CVE-2026-90284",
    "CVE-2026-90285",
    "CVE-2026-90290",
    "CVE-2026-90293",
    "CVE-2026-90294",
    "CVE-2026-90307",
    "CVE-2026-90318",
    "CVE-2026-90329",
    "CVE-2026-90334",
    "CVE-2026-90360",
    "CVE-2026-90388",
    "CVE-2026-90393",
    "CVE-2026-90413",
    "CVE-2026-90414",
    "CVE-2026-90415",
    "CVE-2026-90416",
    "CVE-2026-90419",
    "CVE-2026-90420",
    "CVE-2026-90434",
    "CVE-2026-90435",
    "CVE-2026-92501",
    "CVE-2026-92521",
    "CVE-2026-92522",
    "CVE-2026-92524",
    "CVE-2026-93046",
    "CVE-2026-93048",
    "CVE-2026-93054",
    "CVE-2026-93055",
    "CVE-2026-93095",
    "CVE-2026-93108",
    "CVE-2026-93110",
    "CVE-2026-93138",
    "CVE-2026-93188",
    "CVE-2026-93189",
    "CVE-2026-93206",
    "CVE-2026-93213",
    "CVE-2026-93222",
    "CVE-2026-93226",
    "CVE-2026-93256",
    "CVE-2026-93262",
    "CVE-2026-93268",
    "CVE-2026-98130",
    "CVE-2026-100070",
    "CVE-2026-100075"
  );

  script_name(english:"Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-135)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Amazon Linux 2 host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The version of kernel installed on the remote host is prior to 5.10.270-271.1109. It is, therefore, affected by multiple
vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-135 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet (CVE-2026-100070)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (CVE-2026-100075)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: clear sock_ops cb flags before force-closing a child socket (CVE-2026-74268)

    In the Linux kernel, the following vulnerability has been resolved:

    perf sched: Fix register_pid() overflow, strcpy, and BUG_ON (CVE-2026-80671)

    In the Linux kernel, the following vulnerability has been resolved:

    selinux: reject an unclaimed class value in security_get_classes() (CVE-2026-80912)

    In the Linux kernel, the following vulnerability has been resolved:

    vsock/virtio: flush works in dependency order (CVE-2026-80932)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-stats: fix a crash if allocation of per-cpu data fails (CVE-2026-80963)

    In the Linux kernel, the following vulnerability has been resolved:

    seg6: reset IP6CB after IPv6 decapsulation (CVE-2026-80976)

    In the Linux kernel, the following vulnerability has been resolved:

    net: skbuff: don't touch shared zerocopy state in skb_tx_error() (CVE-2026-80977)

    In the Linux kernel, the following vulnerability has been resolved:

    net: cap advertised IP tunnel headroom (CVE-2026-80978)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: fix flow mask use-after-free on flow deletion (CVE-2026-80994)

    In the Linux kernel, the following vulnerability has been resolved:

    slip: fix use-after-free in sl_sync() (CVE-2026-81001)

    In the Linux kernel, the following vulnerability has been resolved:

    xdp: fix zero-copy frame layout (CVE-2026-81002)

    In the Linux kernel, the following vulnerability has been resolved:

    ipmi: si: Fix NULL pointer dereference after failed registration (CVE-2026-81005)

    In the Linux kernel, the following vulnerability has been resolved:

    mmc: via-sdmmc: stop card-detect handling on probe failure (CVE-2026-89440)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: fix stream->outcnt underflow on duplicate RECONF responses

    A cached RECONF chunk may contain more than one request parameter.  Aduplicate response can therefore find
    and process the same ADD_OUT requestagain while another parameter is still outstanding, rolling back
    outcnttwice and possibly underflowing it.

    Track outstanding request types as bits and clear each bit after its firstresponse.  Later responses for
    the same request are then ignored. (CVE-2026-89476)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: fix NULL deref on untransmitted RECONF completion (CVE-2026-89477)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: drop a chunk if its transport was removed (CVE-2026-89478)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: stop processing a packet once its association is deleted (CVE-2026-89479)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (CVE-2026-89482)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme: zero the discard fallback page (CVE-2026-89483)

    In the Linux kernel, the following vulnerability has been resolved:

    lockd: pin next file across nlm_inspect_file lock-drop (CVE-2026-89485)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: only skb_tx_error() a packet we are about to drop (CVE-2026-89487)

    In the Linux kernel, the following vulnerability has been resolved:

    openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/ucma: Lock the handler in ucma_set_ib_path() (CVE-2026-89508)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/cxgb4: Cancel reg_work before freeing device on remove

    c4iw_uld_state_change() queues reg_work to register the RDMA device.c4iw_remove() can free ctx->dev while
    this work is pending or running,leaving c4iw_register_device() accessing the freed device.

    Cancel reg_work before removing the device.  The registration work cantear down ctx->dev when registration
    fails, so do not unregister ordeallocate it again in that case.

    This issue was found by an in-house static analysis tool. (CVE-2026-89510)

    In the Linux kernel, the following vulnerability has been resolved:

    qede: Fix NULL pointer dereference in TPA fragment processing

    Under memory pressure, the qede driver encounters NULL pointerdereferences when processing TPA
    continuation fragments.

    Commit 8a8633978b84 (qede: Add build_skb() support.) accidentallydropped the assignment of
    tpa_info->buffer.data in qede_tpa_start().

    When memory pressure causes an SKB allocation failure in qede_tpa_start(),the driver sets tpa_start_fail =
    true and attempts to recycle the physicalpage later in qede_tpa_end() via qede_reuse_page(). However,
    becausebuffer.data was left uninitialized (NULL), qede_reuse_page() pushes aghost BD (valid DMA mapping
    but NULL data pointer) back into theactive Rx ring.

    The next time the hardware uses this ring slot, it passes a NULL pageto qede_fill_frag_skb(), causing a
    kernel panic.

    Example crash from production system:BUG: unable to handle kernel NULL pointer dereference at 0x8RIP:
    qede_fill_frag_skb+0x96/0x430 [qede]Call
    Trace:qede_rx_int+0xb06/0x1de0qede_poll+0x2f4/0x6c0__napi_poll+0x2d/0x130

    Fix the root cause by restoring the tpa_info->buffer.data assignmentin qede_tpa_start(), ensuring valid
    pages are correctly tracked andrecycled. Additionally, update the stale comment forstruct
    qede_agg_info::buffer to reflect its current usage. (CVE-2026-89511)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() (CVE-2026-89515)

    In the Linux kernel, the following vulnerability has been resolved:

    udf: reject VAT indexes equal to the entry count (CVE-2026-89525)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (CVE-2026-89538)

    In the Linux kernel, the following vulnerability has been resolved:

    sunrpc: init gssp_lock before publishing proc entry (CVE-2026-89540)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: harden gss_unwrap_resp_priv length checks (CVE-2026-89541)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (CVE-2026-89542)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: always drain cache_cleaner before destroying a cache_detail (CVE-2026-89548)

    In the Linux kernel, the following vulnerability has been resolved:

    sunrpc: route to a populated pool in svc_pool_for_cpu() (CVE-2026-89549)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (CVE-2026-89551)

    In the Linux kernel, the following vulnerability has been resolved:

    mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (CVE-2026-89554)

    In the Linux kernel, the following vulnerability has been resolved:

    mpls: reload header after pskb_may_pull()

    mpls_select_multipath() calls mpls_multipath_hash() to choose a nexthopwhen an MPLS route has multiple
    nexthops.  While walking the MPLS labelstack, the hash routine caches hdr for the current label.  After
    findingthe bottom-of-stack label, it calls pskb_may_pull() before reading theinner IP header.

    If an skb is constructed with the inner IP header in nonlinear data andinsufficient tailroom in the linear
    head, pskb_may_pull() callspskb_expand_head() to replace the skb head and free the old one.  Thisleaves
    hdr pointing to freed memory.  The IPv6 path can invalidate hdragain when it performs a second pull for
    the larger header.

    The issue was found through static analysis.  A reproducer sending a legalGeneve packet through a
    bareudp/MPLS multipath setup triggered the sameKASAN report in 2 of 2 unpatched runs:

    BUG: KASAN: slab-use-after-free in mpls_select_multipathRead of size 1 at addr ffff88800ecc6e20 by task
    ksoftirqd/1/23

    Call Trace:mpls_select_multipathmpls_forward__netif_receive_skb_list_corenetif_receive_skb_list_internalna
    pi_complete_donegro_cell_poll__napi_pollnet_rx_action

    Freed by task 23:kfreepskb_expand_head__pskb_pull_tailmpls_select_multipath

    Reload hdr from the current skb head after each successful pull beforederiving the inner IPv4 or IPv6
    header pointer. (CVE-2026-89555)

    In the Linux kernel, the following vulnerability has been resolved:

    md: do overflow check for sb->bblog_shift in super_1_load() (CVE-2026-89557)

    In the Linux kernel, the following vulnerability has been resolved:

    libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (CVE-2026-89559)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_gre: fix hardware header length for NBMA tunnels (CVE-2026-89562)

    In the Linux kernel, the following vulnerability has been resolved:

    ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() (CVE-2026-89563)

    In the Linux kernel, the following vulnerability has been resolved:

    dm array: reject an array block whose value size is not the caller's (CVE-2026-89573)

    In the Linux kernel, the following vulnerability has been resolved:

    dm raid1: reserve space for NUL-terminator in build_constructor_string() (CVE-2026-89575)

    In the Linux kernel, the following vulnerability has been resolved:

    dm-era: fix shadowed superblock leak on take-snap failure (CVE-2026-89576)

    In the Linux kernel, the following vulnerability has been resolved:

    bnx2x: fix double free in bnx2x_init_firmware() error path (CVE-2026-89582)

    In the Linux kernel, the following vulnerability has been resolved:

    ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes (CVE-2026-89586)

    In the Linux kernel, the following vulnerability has been resolved:

    fsnotify: Fix stale object mask after concurrent mark updates (CVE-2026-89595)

    In the Linux kernel, the following vulnerability has been resolved:

    entry: Fix seccomp bypass after ptrace with TSYNC (CVE-2026-89603)

    In the Linux kernel, the following vulnerability has been resolved:

    ecryptfs: reject too-small tag 70 packets (CVE-2026-89606)

    In the Linux kernel, the following vulnerability has been resolved:

    ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet (CVE-2026-89607)

    In the Linux kernel, the following vulnerability has been resolved:

    ecryptfs: pass packet set buffer size to parser (CVE-2026-89608)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: roccat: free buffered reports when destroying device (CVE-2026-89627)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: picolcd: clamp eeprom debugfs read to bytes actually received (CVE-2026-89628)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (CVE-2026-89637)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: avoid dropping live tree ref on fsnotify rule autoremove

    audit_del_rule() is used for both netlink deletion templates and internalfsnotify autoremove.  The former
    passes a parsed template which owns atemporary tree reference; the latter passes the installed entry
    itself.

    The unconditional audit_put_tree() at the end of audit_del_rule() assumesthe template case.  For mixed
    AUDIT_DIR plus AUDIT_EXE rules, an fsnotifyautoremove event therefore drops the installed rule's live tree
    reference.Repeating this across rules sharing the same tree can free the tree whileanother rule still
    references it, and a later autoremove dereferences thefreed pathname while comparing rules.

    Move the temporary-tree put to audit_rule_change(), the caller that ownsdeletion templates.  Keep it in
    the AUDIT_DEL_RULE cleanup so bothsuccessful deletion and -ENOENT still release the parser-owned tree.
    (CVE-2026-89643)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: bound xattr value length in __build_xattrs() (CVE-2026-89649)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: bound num_export_targets array for mds info v2/v3 (CVE-2026-89650)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: bound copied dentry name length in NFS export get_name

    ceph_get_name() copies the MDS-supplied name into the caller'sNAME_MAX-sized buffer with memcpy(name,
    rinfo->dname, rinfo->dname_len)and then writes name[rinfo->dname_len] = 0, without checking
    dname_lenagainst NAME_MAX. A malicious or buggy MDS that returns a LOOKUPNAME replywith dname_len >
    NAME_MAX overflows the buffer. __get_snap_name() copiesrde->name / rde->name_len the same unchecked way.

    Impact: a malicious or compromised Ceph MDS overflows the NAME_MAX namebuffer in a client's NFS-export
    get_name path, a slab out-of-bounds writereported by KASAN. Reachable when a CephFS mount is re-exported
    over NFS.

    Add ceph_export_copy_name(), which rejects lengths above NAME_MAX with-ENAMETOOLONG before the copy, and
    use it in both ceph_get_name() and__get_snap_name(). (CVE-2026-89652)

    In the Linux kernel, the following vulnerability has been resolved:

    ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock (CVE-2026-89655)

    In the Linux kernel, the following vulnerability has been resolved:

    libceph: reject buckets with mismatched CRUSH ids (CVE-2026-89656)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: Prevent lock owner use-after-free during client teardown (CVE-2026-89662)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: revoke copy-notify stateids before dropping their reference (CVE-2026-89663)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: initialize copy-notify stateid before publishing it (CVE-2026-89669)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (CVE-2026-89673)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (CVE-2026-89674)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: fix cpntf publish race in nfs4_init_cp_state

    nfs4_alloc_init_cpntf_state() published the new cpntf entry into thes2s_cp_stateids IDR (with cs_type set)
    in one s2s_cp_lock section, thentook the lock again to list_add() it onto p_stid->sc_cp_list. In the
    gapthe entry is reachable by so_id but cp_list is still {NULL,NULL} fromkzalloc. A racing OFFLOAD_CANCEL
    (so_id is echoed to the client ascnr_stateid, so any NFSv4.2 client can drive it)
    reachesmanage_cpntf_state() -> _free_cpntf_state_locked() and does list_del() onthe zeroed list_head,
    oopsing the server.

    Fold the cs_type assignment and the list_add() into the same criticalsection as idr_alloc_cyclic(), so a
    concurrent lookup either misses theentry or sees a fully linked cp_list. INIT_LIST_HEAD() the entry
    afterallocation and switch _free_cpntf_state_locked() to list_del_init() so astale unlink is a no-op.
    nfs4_init_copy_state() passes NULL p_stid andskips the list_add, preserving NFS4_COPY_STID semantics.
    (CVE-2026-89684)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: check client ownership when cancelling a copy-notify stateid (CVE-2026-89694)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (CVE-2026-89696)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: validate symlink target length in NFSv4 CREATE (CVE-2026-89699)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: sample writeback error cursor before async COPY loop (CVE-2026-89704)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: Reset write verifier when async COPY writeback fails (CVE-2026-89706)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check (CVE-2026-89711)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (CVE-2026-89712)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation (CVE-2026-89723)

    In the Linux kernel, the following vulnerability has been resolved:

    lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (CVE-2026-89726)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature (CVE-2026-89729)

    In the Linux kernel, the following vulnerability has been resolved:

    Revert media: v4l2-dev: fix error handling in __video_register_device() (CVE-2026-89741)

    In the Linux kernel, the following vulnerability has been resolved:

    mm: memcg: stop reclaim when a limit update is superseded (CVE-2026-89752)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() (CVE-2026-89753)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/pci: clear vdev->msi_perm after freeing it on init failure (CVE-2026-89777)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full (CVE-2026-89783)

    In the Linux kernel, the following vulnerability has been resolved:

    SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (CVE-2026-89784)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (CVE-2026-89816)

    In the Linux kernel, the following vulnerability has been resolved:

    drm: fix race between partial drm_dev_register() failure and ioctl (CVE-2026-89823)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (CVE-2026-89843)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (CVE-2026-89845)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Avoid double completion in async IOCB timeout (CVE-2026-89847)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Don't query firmware state while chip is down (CVE-2026-89850)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (CVE-2026-89851)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (CVE-2026-89852)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (CVE-2026-89853)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (CVE-2026-89854)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Serialize flash version read in reset handler (CVE-2026-89855)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (CVE-2026-89856)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (CVE-2026-89858)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (CVE-2026-89861)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (CVE-2026-89864)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (CVE-2026-89865)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (CVE-2026-89927)

    In the Linux kernel, the following vulnerability has been resolved:

    nvdimm/btt: reject an arena whose nfree is below the lane count (CVE-2026-89965)

    In the Linux kernel, the following vulnerability has been resolved:

    nvme-tcp: check the data direction of a C2HData PDU (CVE-2026-89973)

    In the Linux kernel, the following vulnerability has been resolved:

    i2c: mux: Fix channel node leak on adapter add failure (CVE-2026-89982)

    In the Linux kernel, the following vulnerability has been resolved:

    perf/x86/intel: Fix kernel address leakages in LBR stack (CVE-2026-89984)

    In the Linux kernel, the following vulnerability has been resolved:

    dm: fix resume-vs-remove race (CVE-2026-89997)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (CVE-2026-89999)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: rmi: fix OOB access with undersized RMI reports (CVE-2026-90000)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: target: iscsi: Reserve a terminator byte for the login payload (CVE-2026-90011)

    In the Linux kernel, the following vulnerability has been resolved:

    xhci: fix lost bounce buffers on TDs spanning several ring segments (CVE-2026-90015)

    In the Linux kernel, the following vulnerability has been resolved:

    usb-storage: ene_ub6250: fix race between scan work and probe (CVE-2026-90031)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: image: mdc800: change kmalloc() to kzalloc() (CVE-2026-90034)

    In the Linux kernel, the following vulnerability has been resolved:

    net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() (CVE-2026-90049)

    In the Linux kernel, the following vulnerability has been resolved:

    tcp: fix corruption of urgent data on multi-segment retransmit (CVE-2026-90054)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup (CVE-2026-90058)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: move hardware offload step after building the chain blob (CVE-2026-90062)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sch_teql: restore skb->dev on the slave failure path (CVE-2026-90071)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: sfq: clamp quantum to avoid signed overflow soft lockup (CVE-2026-90072)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: hhf: clamp quantum before hhf_change() to avoid overflow (CVE-2026-90073)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: fq_codel: clamp default quantum and mtu (CVE-2026-90075)

    In the Linux kernel, the following vulnerability has been resolved:

    net/rds: use wq_has_sleeper() in rds_cong_map_updated() (CVE-2026-90081)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4/pnfs: key the data server cache on the NFS version (CVE-2026-90102)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (CVE-2026-90103)

    In the Linux kernel, the following vulnerability has been resolved:

    net: bridge: Reject descending VLAN tunnel ranges (CVE-2026-90114)

    In the Linux kernel, the following vulnerability has been resolved:

    rtc: pcf8563: fix clock provider leak on unbind (CVE-2026-90126)

    In the Linux kernel, the following vulnerability has been resolved:

    ipvs: fix integer overflow in ftp helper port/address parsing (CVE-2026-90141)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4: remove callback IDR entry on client allocation failure (CVE-2026-90151)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf: Reject negative optlen in cgroup getsockopt hook (CVE-2026-90157)

    In the Linux kernel, the following vulnerability has been resolved:

    lwt_bpf: Restore reserved headroom after xmit program (CVE-2026-90160)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (CVE-2026-90202)

    In the Linux kernel, the following vulnerability has been resolved:

    Squashfs: check block offset is not negative (CVE-2026-90203)

    In the Linux kernel, the following vulnerability has been resolved:

    ubi: Fix rollback for explicit UBI device numbers (CVE-2026-90216)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/cma: Fix WARNING in res_to_rt (CVE-2026-90218)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/cxgb4: Free debugfs on registration failure (CVE-2026-90219)

    In the Linux kernel, the following vulnerability has been resolved:

    hugetlbfs: release subpool on fill_super failure (CVE-2026-90283)

    In the Linux kernel, the following vulnerability has been resolved:

    firmware_loader: do not queue completed sysfs fallback requests (CVE-2026-90284)

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (CVE-2026-90285)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: hibernate: Restore DAIF state on error (CVE-2026-90290)

    In the Linux kernel, the following vulnerability has been resolved:

    IB/isert: post the full-feature receive buffers after session registration (CVE-2026-90293)

    In the Linux kernel, the following vulnerability has been resolved:

    IB/isert: delay the final Login Response until the session is registered (CVE-2026-90294)

    In the Linux kernel, the following vulnerability has been resolved:

    RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (CVE-2026-90307)

    In the Linux kernel, the following vulnerability has been resolved:

    fat: release buffer he ...

  Please note that the description has been truncated due to length. Please refer to vendor advisory for the full
description.

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com//AL2/ALAS2KERNEL-5.10-2026-135.html");
  script_set_attribute(attribute:"see_also", value:"https://alas.aws.amazon.com/faqs.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-100070.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-100075.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-74268.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-80671.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-80912.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-80932.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-80963.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-80976.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-80977.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-80978.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-80994.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-81001.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-81002.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-81005.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89440.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89476.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89477.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89478.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89479.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89482.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89483.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89485.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89487.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89488.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89508.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89510.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89511.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89515.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89525.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89538.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89540.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89541.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89542.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89548.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89549.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89551.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89554.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89555.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89557.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89559.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89562.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89563.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89573.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89575.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89576.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89582.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89586.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89595.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89603.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89606.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89607.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89608.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89627.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89628.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89637.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89643.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89649.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89650.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89652.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89655.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89656.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89662.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89663.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89669.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89673.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89674.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89684.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89694.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89696.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89699.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89704.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89706.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89711.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89712.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89723.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89726.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89729.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89741.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89752.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89753.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89777.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89783.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89784.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89816.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89823.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89843.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89845.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89846.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89847.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89850.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89851.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89852.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89853.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89854.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89855.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89856.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89858.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89861.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89864.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89865.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89927.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89965.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89973.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89982.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89984.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89997.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-89999.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90000.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90011.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90015.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90031.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90034.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90049.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90054.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90058.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90062.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90071.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90072.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90073.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90075.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90081.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90102.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90103.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90114.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90126.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90141.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90151.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90157.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90160.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90202.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90203.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90216.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90218.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90219.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90283.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90284.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90285.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90290.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90293.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90294.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90307.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90318.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90329.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90334.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90360.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90388.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90393.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90413.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90414.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90415.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90416.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90419.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90420.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90434.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-90435.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-92501.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-92521.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-92522.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-92524.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93046.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93048.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93054.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93055.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93095.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93108.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93110.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93138.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93188.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93189.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93206.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93213.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93222.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93226.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93256.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93262.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-93268.html");
  script_set_attribute(attribute:"see_also", value:"https://explore.alas.aws.amazon.com/CVE-2026-98130.html");
  script_set_attribute(attribute:"solution", value:
"Run 'yum update kernel' or
  or 'yum update --advisory ALAS2KERNEL-5.10-2026-135' to update your system.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-90151");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/15");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/10/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/17");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:bpftool");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:bpftool-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-debuginfo-common-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-debuginfo-common-x86_64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-headers");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-livepatch-5.10.270-271.1109");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-tools-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:kernel-tools-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:perf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:perf-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:python-perf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:amazon:linux:python-perf-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:amazon:linux:2");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Amazon Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl", "kpatch.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/AmazonLinux/release", "Host/AmazonLinux/rpm-list");

  exit(0);
}

include("rpm2.inc");
include("hotfixes.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var alas_release = get_kb_item("Host/AmazonLinux/release");
if (isnull(alas_release) || !strlen(alas_release)) audit(AUDIT_OS_NOT, "Amazon Linux");
var os_ver = pregmatch(pattern: "^AL(A|\d+|-\d+)", string:alas_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Amazon Linux");
os_ver = os_ver[1];
if (os_ver != "2")
{
  if (os_ver == 'A') os_ver = 'AMI';
  audit(AUDIT_OS_NOT, "Amazon Linux 2", "Amazon Linux " + os_ver);
}

if (!get_kb_item("Host/AmazonLinux/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

if (get_one_kb_item("Host/kpatch/kernel-cves"))
{
  var cve_list = make_list("CVE-2026-74268", "CVE-2026-80671", "CVE-2026-80912", "CVE-2026-80932", "CVE-2026-80963", "CVE-2026-80976", "CVE-2026-80977", "CVE-2026-80978", "CVE-2026-80994", "CVE-2026-81001", "CVE-2026-81002", "CVE-2026-81005", "CVE-2026-89440", "CVE-2026-89476", "CVE-2026-89477", "CVE-2026-89478", "CVE-2026-89479", "CVE-2026-89482", "CVE-2026-89483", "CVE-2026-89485", "CVE-2026-89487", "CVE-2026-89488", "CVE-2026-89508", "CVE-2026-89510", "CVE-2026-89511", "CVE-2026-89515", "CVE-2026-89525", "CVE-2026-89538", "CVE-2026-89540", "CVE-2026-89541", "CVE-2026-89542", "CVE-2026-89548", "CVE-2026-89549", "CVE-2026-89551", "CVE-2026-89554", "CVE-2026-89555", "CVE-2026-89557", "CVE-2026-89559", "CVE-2026-89562", "CVE-2026-89563", "CVE-2026-89573", "CVE-2026-89575", "CVE-2026-89576", "CVE-2026-89582", "CVE-2026-89586", "CVE-2026-89595", "CVE-2026-89603", "CVE-2026-89606", "CVE-2026-89607", "CVE-2026-89608", "CVE-2026-89627", "CVE-2026-89628", "CVE-2026-89637", "CVE-2026-89643", "CVE-2026-89649", "CVE-2026-89650", "CVE-2026-89652", "CVE-2026-89655", "CVE-2026-89656", "CVE-2026-89662", "CVE-2026-89663", "CVE-2026-89669", "CVE-2026-89673", "CVE-2026-89674", "CVE-2026-89684", "CVE-2026-89694", "CVE-2026-89696", "CVE-2026-89699", "CVE-2026-89704", "CVE-2026-89706", "CVE-2026-89711", "CVE-2026-89712", "CVE-2026-89723", "CVE-2026-89726", "CVE-2026-89729", "CVE-2026-89741", "CVE-2026-89752", "CVE-2026-89753", "CVE-2026-89777", "CVE-2026-89783", "CVE-2026-89784", "CVE-2026-89816", "CVE-2026-89823", "CVE-2026-89843", "CVE-2026-89845", "CVE-2026-89846", "CVE-2026-89847", "CVE-2026-89850", "CVE-2026-89851", "CVE-2026-89852", "CVE-2026-89853", "CVE-2026-89854", "CVE-2026-89855", "CVE-2026-89856", "CVE-2026-89858", "CVE-2026-89861", "CVE-2026-89864", "CVE-2026-89865", "CVE-2026-89927", "CVE-2026-89965", "CVE-2026-89973", "CVE-2026-89982", "CVE-2026-89984", "CVE-2026-89997", "CVE-2026-89999", "CVE-2026-90000", "CVE-2026-90011", "CVE-2026-90015", "CVE-2026-90031", "CVE-2026-90034", "CVE-2026-90049", "CVE-2026-90054", "CVE-2026-90058", "CVE-2026-90062", "CVE-2026-90071", "CVE-2026-90072", "CVE-2026-90073", "CVE-2026-90075", "CVE-2026-90081", "CVE-2026-90102", "CVE-2026-90103", "CVE-2026-90114", "CVE-2026-90126", "CVE-2026-90141", "CVE-2026-90151", "CVE-2026-90157", "CVE-2026-90160", "CVE-2026-90202", "CVE-2026-90203", "CVE-2026-90216", "CVE-2026-90218", "CVE-2026-90219", "CVE-2026-90283", "CVE-2026-90284", "CVE-2026-90285", "CVE-2026-90290", "CVE-2026-90293", "CVE-2026-90294", "CVE-2026-90307", "CVE-2026-90318", "CVE-2026-90329", "CVE-2026-90334", "CVE-2026-90360", "CVE-2026-90388", "CVE-2026-90393", "CVE-2026-90413", "CVE-2026-90414", "CVE-2026-90415", "CVE-2026-90416", "CVE-2026-90419", "CVE-2026-90420", "CVE-2026-90434", "CVE-2026-90435", "CVE-2026-92501", "CVE-2026-92521", "CVE-2026-92522", "CVE-2026-92524", "CVE-2026-93046", "CVE-2026-93048", "CVE-2026-93054", "CVE-2026-93055", "CVE-2026-93095", "CVE-2026-93108", "CVE-2026-93110", "CVE-2026-93138", "CVE-2026-93188", "CVE-2026-93189", "CVE-2026-93206", "CVE-2026-93213", "CVE-2026-93222", "CVE-2026-93226", "CVE-2026-93256", "CVE-2026-93262", "CVE-2026-93268", "CVE-2026-98130", "CVE-2026-100070", "CVE-2026-100075");
  if (hotfix_cves_check(cve_list))
  {
    audit(AUDIT_PATCH_INSTALLED, "kpatch hotfix for ALASKERNEL-5.10-2026-135");
  }
  else
  {
    __rpm_report = hotfix_reporting_text();
  }
}

var REPOS_FOUND = TRUE;
var extras_list = get_kb_item("Host/AmazonLinux/extras_label_list");
if (isnull(extras_list)) REPOS_FOUND = FALSE;
var repository = '"amzn2extra-kernel-5.10"';
if (REPOS_FOUND && (repository >!< extras_list)) exit(0, AFFECTED_REPO_NOT_ENABLED);

var pkgs = [
    {'reference':'bpftool-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'bpftool-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'bpftool-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'bpftool-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-debuginfo-common-aarch64-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-debuginfo-common-x86_64-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-devel-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-devel-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-headers-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-headers-5.10.270-271.1109.amzn2', 'cpu':'i686', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-headers-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-livepatch-5.10.270-271.1109-1.0-0.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-livepatch-5.10.270-271.1109-1.0-0.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-tools-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-tools-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-tools-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-tools-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-tools-devel-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'kernel-tools-devel-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'perf-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'perf-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'perf-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'perf-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'python-perf-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'python-perf-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'python-perf-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'aarch64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'},
    {'reference':'python-perf-debuginfo-5.10.270-271.1109.amzn2', 'cpu':'x86_64', 'release':'AL2', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-5.10'}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var el_string = NULL;
  var rpm_spec_vers_cmp = NULL;
  var epoch = NULL;
  var allowmaj = NULL;
  var exists_check = NULL;
  var cves = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
  if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
  if (reference && _release && (!exists_check || rpm_exists(release:_release, rpm:exists_check))) {
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  var extra = rpm_report_get();
  if (!REPOS_FOUND) extra = rpm_report_get() + report_repo_caveat();
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : extra
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "bpftool / bpftool-debuginfo / kernel / etc");
}