EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4332)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(364820);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/13");

  script_cve_id(
    "CVE-2025-54518",
    "CVE-2026-23247",
    "CVE-2026-23442",
    "CVE-2026-31424",
    "CVE-2026-31466",
    "CVE-2026-31592",
    "CVE-2026-31663",
    "CVE-2026-31665",
    "CVE-2026-31671",
    "CVE-2026-31681",
    "CVE-2026-31684",
    "CVE-2026-31700",
    "CVE-2026-31752",
    "CVE-2026-43107",
    "CVE-2026-43116",
    "CVE-2026-43136",
    "CVE-2026-43139",
    "CVE-2026-43143",
    "CVE-2026-43223",
    "CVE-2026-43266",
    "CVE-2026-43314",
    "CVE-2026-43448",
    "CVE-2026-43456",
    "CVE-2026-43470",
    "CVE-2026-45983",
    "CVE-2026-46065",
    "CVE-2026-46150",
    "CVE-2026-46153",
    "CVE-2026-46165",
    "CVE-2026-46174",
    "CVE-2026-46252",
    "CVE-2026-46266",
    "CVE-2026-46274",
    "CVE-2026-46292",
    "CVE-2026-46302",
    "CVE-2026-46303",
    "CVE-2026-46304",
    "CVE-2026-46312",
    "CVE-2026-46322",
    "CVE-2026-46324",
    "CVE-2026-46328",
    "CVE-2026-46331",
    "CVE-2026-52909",
    "CVE-2026-52910",
    "CVE-2026-52912",
    "CVE-2026-52915",
    "CVE-2026-52917",
    "CVE-2026-52920",
    "CVE-2026-52921",
    "CVE-2026-52923",
    "CVE-2026-52924",
    "CVE-2026-52925",
    "CVE-2026-52927",
    "CVE-2026-52929",
    "CVE-2026-52930",
    "CVE-2026-52933",
    "CVE-2026-52936",
    "CVE-2026-52937",
    "CVE-2026-52942",
    "CVE-2026-52943",
    "CVE-2026-52946",
    "CVE-2026-52948",
    "CVE-2026-52954",
    "CVE-2026-52955",
    "CVE-2026-52957",
    "CVE-2026-52958",
    "CVE-2026-52962",
    "CVE-2026-52970",
    "CVE-2026-52972",
    "CVE-2026-52975",
    "CVE-2026-52981",
    "CVE-2026-52982",
    "CVE-2026-52984",
    "CVE-2026-52985",
    "CVE-2026-52986",
    "CVE-2026-52988",
    "CVE-2026-52989",
    "CVE-2026-52991",
    "CVE-2026-52993",
    "CVE-2026-52998",
    "CVE-2026-52999",
    "CVE-2026-53001",
    "CVE-2026-53002",
    "CVE-2026-53003",
    "CVE-2026-53004",
    "CVE-2026-53006",
    "CVE-2026-53009",
    "CVE-2026-53012",
    "CVE-2026-53016",
    "CVE-2026-53021",
    "CVE-2026-53036",
    "CVE-2026-53037",
    "CVE-2026-53049",
    "CVE-2026-53050",
    "CVE-2026-53053",
    "CVE-2026-53059",
    "CVE-2026-53060",
    "CVE-2026-53061",
    "CVE-2026-53062",
    "CVE-2026-53063",
    "CVE-2026-53064",
    "CVE-2026-53074",
    "CVE-2026-53075",
    "CVE-2026-53076",
    "CVE-2026-53078",
    "CVE-2026-53083",
    "CVE-2026-53089",
    "CVE-2026-53090",
    "CVE-2026-53091",
    "CVE-2026-53111",
    "CVE-2026-53129",
    "CVE-2026-53131",
    "CVE-2026-53133",
    "CVE-2026-53134",
    "CVE-2026-53138",
    "CVE-2026-53146",
    "CVE-2026-53148",
    "CVE-2026-53149",
    "CVE-2026-53150",
    "CVE-2026-53163",
    "CVE-2026-53167",
    "CVE-2026-53168",
    "CVE-2026-53175",
    "CVE-2026-53176",
    "CVE-2026-53177",
    "CVE-2026-53186",
    "CVE-2026-53189",
    "CVE-2026-53194",
    "CVE-2026-53195",
    "CVE-2026-53196",
    "CVE-2026-53199",
    "CVE-2026-53218",
    "CVE-2026-53219",
    "CVE-2026-53220",
    "CVE-2026-53221",
    "CVE-2026-53223",
    "CVE-2026-53224",
    "CVE-2026-53225",
    "CVE-2026-53227",
    "CVE-2026-53228",
    "CVE-2026-53229",
    "CVE-2026-53230",
    "CVE-2026-53232",
    "CVE-2026-53236",
    "CVE-2026-53238",
    "CVE-2026-53239",
    "CVE-2026-53245",
    "CVE-2026-53246",
    "CVE-2026-53249",
    "CVE-2026-53264",
    "CVE-2026-53265",
    "CVE-2026-53266",
    "CVE-2026-53267",
    "CVE-2026-53268",
    "CVE-2026-53269",
    "CVE-2026-53270",
    "CVE-2026-53275",
    "CVE-2026-53287",
    "CVE-2026-53289",
    "CVE-2026-53295",
    "CVE-2026-53304",
    "CVE-2026-53314",
    "CVE-2026-53330",
    "CVE-2026-53337",
    "CVE-2026-53349",
    "CVE-2026-53352",
    "CVE-2026-53369",
    "CVE-2026-53381",
    "CVE-2026-53385",
    "CVE-2026-53388",
    "CVE-2026-53392",
    "CVE-2026-53397",
    "CVE-2026-53399",
    "CVE-2026-53400",
    "CVE-2026-53402",
    "CVE-2026-53403",
    "CVE-2026-63794",
    "CVE-2026-63800",
    "CVE-2026-63801",
    "CVE-2026-63806",
    "CVE-2026-63809",
    "CVE-2026-63810",
    "CVE-2026-63823",
    "CVE-2026-63824",
    "CVE-2026-63826",
    "CVE-2026-63827",
    "CVE-2026-63828",
    "CVE-2026-63829",
    "CVE-2026-63830",
    "CVE-2026-63860",
    "CVE-2026-63868",
    "CVE-2026-63887",
    "CVE-2026-63888",
    "CVE-2026-63891",
    "CVE-2026-63893",
    "CVE-2026-63897",
    "CVE-2026-63898",
    "CVE-2026-63899",
    "CVE-2026-63900",
    "CVE-2026-63901",
    "CVE-2026-63902",
    "CVE-2026-63903",
    "CVE-2026-63904",
    "CVE-2026-63912",
    "CVE-2026-63913",
    "CVE-2026-63914",
    "CVE-2026-63917",
    "CVE-2026-63918",
    "CVE-2026-63919",
    "CVE-2026-63920",
    "CVE-2026-63921",
    "CVE-2026-63922",
    "CVE-2026-63924",
    "CVE-2026-63925",
    "CVE-2026-63926",
    "CVE-2026-63928",
    "CVE-2026-63942",
    "CVE-2026-63956",
    "CVE-2026-63957",
    "CVE-2026-63961",
    "CVE-2026-63963",
    "CVE-2026-63968",
    "CVE-2026-63969",
    "CVE-2026-63971",
    "CVE-2026-63984",
    "CVE-2026-63990",
    "CVE-2026-63992",
    "CVE-2026-63993",
    "CVE-2026-63994",
    "CVE-2026-64002",
    "CVE-2026-64006",
    "CVE-2026-64007",
    "CVE-2026-64009",
    "CVE-2026-64012",
    "CVE-2026-64015",
    "CVE-2026-64025",
    "CVE-2026-64028",
    "CVE-2026-64046",
    "CVE-2026-64047",
    "CVE-2026-64098",
    "CVE-2026-64106",
    "CVE-2026-64109",
    "CVE-2026-64112",
    "CVE-2026-64113",
    "CVE-2026-64114",
    "CVE-2026-64118",
    "CVE-2026-64165",
    "CVE-2026-64170",
    "CVE-2026-64185",
    "CVE-2026-64187",
    "CVE-2026-64189",
    "CVE-2026-64191",
    "CVE-2026-64210",
    "CVE-2026-64237",
    "CVE-2026-64252",
    "CVE-2026-64266",
    "CVE-2026-64279",
    "CVE-2026-64298",
    "CVE-2026-64299",
    "CVE-2026-64304",
    "CVE-2026-64305",
    "CVE-2026-64306",
    "CVE-2026-64312",
    "CVE-2026-64313",
    "CVE-2026-64317",
    "CVE-2026-64320",
    "CVE-2026-64322",
    "CVE-2026-64323",
    "CVE-2026-64332",
    "CVE-2026-64333",
    "CVE-2026-64334",
    "CVE-2026-64335",
    "CVE-2026-64340",
    "CVE-2026-64341",
    "CVE-2026-64342",
    "CVE-2026-64343",
    "CVE-2026-64344",
    "CVE-2026-64351",
    "CVE-2026-64362",
    "CVE-2026-64371",
    "CVE-2026-64375",
    "CVE-2026-64378",
    "CVE-2026-64379",
    "CVE-2026-64380",
    "CVE-2026-64388",
    "CVE-2026-64412",
    "CVE-2026-64413",
    "CVE-2026-64422",
    "CVE-2026-64424",
    "CVE-2026-64435",
    "CVE-2026-64436",
    "CVE-2026-64438",
    "CVE-2026-64448",
    "CVE-2026-64450",
    "CVE-2026-64456",
    "CVE-2026-64463",
    "CVE-2026-64465",
    "CVE-2026-64475",
    "CVE-2026-64496",
    "CVE-2026-64510",
    "CVE-2026-64512",
    "CVE-2026-64513",
    "CVE-2026-64514",
    "CVE-2026-64529",
    "CVE-2026-64530",
    "CVE-2026-64534",
    "CVE-2026-64538",
    "CVE-2026-64540",
    "CVE-2026-64543",
    "CVE-2026-64544",
    "CVE-2026-64546",
    "CVE-2026-64547",
    "CVE-2026-64548",
    "CVE-2026-64551",
    "CVE-2026-64553",
    "CVE-2026-64554",
    "CVE-2026-64560",
    "CVE-2026-64564",
    "CVE-2026-64582",
    "CVE-2026-64600",
    "CVE-2026-68154",
    "CVE-2026-68160",
    "CVE-2026-68300",
    "CVE-2026-68376",
    "CVE-2026-68425",
    "CVE-2026-68434",
    "CVE-2026-68477",
    "CVE-2026-72020",
    "CVE-2026-72021",
    "CVE-2026-72052",
    "CVE-2026-72054",
    "CVE-2026-72055",
    "CVE-2026-72061",
    "CVE-2026-72083",
    "CVE-2026-72105",
    "CVE-2026-72107",
    "CVE-2026-72129",
    "CVE-2026-72136",
    "CVE-2026-72299",
    "CVE-2026-72310",
    "CVE-2026-72316",
    "CVE-2026-72318",
    "CVE-2026-72319",
    "CVE-2026-72339",
    "CVE-2026-72472",
    "CVE-2026-74287",
    "CVE-2026-74391",
    "CVE-2026-74394",
    "CVE-2026-74471",
    "CVE-2026-74480",
    "CVE-2026-74601"
  );
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2026/09/21");

  script_name(english:"EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4332)");

  script_set_attribute(attribute:"synopsis", value:
"The remote EulerOS host is missing multiple security updates.");
  script_set_attribute(attribute:"description", value:
"According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by
the following vulnerabilities :

    fanotify: fix false positive on permission events(CVE-2026-46150)

    nfsd: never defer requests during idmap lookup(CVE-2026-45983)

    fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info(CVE-2026-46065)

    ipv6: add NULL checks for idev in SRv6 paths(CVE-2026-23442)

    net: bridge: stop fast-leave after deleting a port group(CVE-2026-74480)

    tracing: Bound synthetic-field strings with seq_buf(CVE-2026-74391)

    RDMA/srpt: fix integer overflow in immediate data length check(CVE-2026-74394)

    cifs: validate DFS referral string offsets(CVE-2026-72318)

    ring-buffer: Use current_context for safe per-CPU buffer swap(CVE-2026-74601)

    sctp: validate embedded address parameter length(CVE-2026-74287)

    RDMA/rxe: Fix a use-after-free problem in rxe_mmap(CVE-2026-64582)

    tipc: restrict socket queue dumps in enqueue tracepoints(CVE-2026-72299)

    ipvs: ensure inner headers in ICMP errors are in headroom(CVE-2026-72319)

    IB/mad: Drop unmatched RMPP responses before reassembly(CVE-2026-68425)

    libceph: reject zero bucket types in crush_decode(CVE-2026-68154)

    qede: fix off-by-one in BD ring consumption on build_skb failure(CVE-2026-72339)

    scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE(CVE-2026-72083)

    sctp: auth: verify auth requirement when auth_chunk is NULL(CVE-2026-68300)

    dm era: fix NULL pointer dereference in metadata_open()(CVE-2026-72316)

    sctp: don't free the ASCONF's own transport in DEL-IP processing(CVE-2026-64564)

    dm-log: fix a bitset_size overflow on 32bit machines(CVE-2026-72105)

    smb: client: fix overflow in passthrough ioctl bounds check(CVE-2026-72310)

    dm era: fix out-of-bounds memory access for non-zero start sector(CVE-2026-72107)

    nvmet-rdma: handle inline data with a nonzero offset(CVE-2026-72129)

    xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72136)

    net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72052)

    net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72054)

    net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72055)

    ipvs: fix more places with wrong ipv6 transport offsets(CVE-2026-68477)

    net: sit: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-72061)

    ipvs: reset full ip_vs_seq structs in ip_vs_conn_new(CVE-2026-72020)

    ipvs: use parsed transport offset in SCTP state lookup(CVE-2026-72021)

    tracing: Check return value of __register_event() in trace_module_add_events()(CVE-2026-74471)

    serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms(CVE-2026-68434)

    ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()(CVE-2026-68160)

    after commit 0460253913e5 ('NFSv4: nfs4_do_open() is incorrectly triggering(CVE-2026-72472)

    ipv6: fix possible infinite loop in fib6_select_path()(CVE-2026-63968)

    net: tls: prevent chain-after-chain in plain text SG(CVE-2026-64046)

    vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()(CVE-2026-63993)

    af_unix: Fix UAF read of tail-len in unix_stream_data_wait()(CVE-2026-64109)

    ipv6: fix possible infinite loop in rt6_fill_node()(CVE-2026-63969)

    thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()(CVE-2026-63893)

    thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()(CVE-2026-63891)

    apparmor: mediate the implicit connect of TCP fast open sendmsg(CVE-2026-63828)

    apparmor: fix use-after-free in rawdata dedup loop(CVE-2026-63827)

    KEYS: fix overflow in keyctl_pkey_params_get_2()(CVE-2026-63824)

    Input: elan_i2c - validate firmware size before use(CVE-2026-64237)

    sctp: fix auth_hmacs array size in struct sctp_cookie(CVE-2026-68376)

    MIPS: DEC: Prevent initial console buffer from landing in XKPHYS(CVE-2026-64252)

    sysfs: don't remove existing directory on update failure(CVE-2026-64185)

    drm/virtio: use uninterruptible resv lock for plane updates(CVE-2026-64098)

    tracing: Prevent out-of-bounds read in glob matching(CVE-2026-64299)

    usb: usbtmc: check URB actual_length for interrupt-IN notifications(CVE-2026-63904)

    crypto: pcrypt - restore callback for non-parallel fallback(CVE-2026-64312)

    crypto: qat - validate RSA CRT component lengths(CVE-2026-64304)

    audit: Fix data races of skb_queue_len() readers on audit_queue(CVE-2026-64435)

    isofs: bound Rock Ridge symlink components to the SL record(CVE-2026-64317)

    USB: serial: safe_serial: fix memory corruption with small endpoint(CVE-2026-63957)

    smb: client: restrict implied bcc[0] exemption to responses without data area(CVE-2026-64448)

    crypto: qat - remove unused character device and IOCTLs(CVE-2026-64529)

    fbdev: fix use-after-free in store_modes()(CVE-2026-63826)

    net: skmsg: preserve sg.copy across SG transforms(CVE-2026-63830)

    userfaultfd: gate must_wait writability check on pte_present()(CVE-2026-64514)

    parport: Fix race between port and client registration(CVE-2026-63942)

    bpf, skmsg: fix verdict sk_data_ready racing with ktls rx(CVE-2026-64025)

    tipc: fix out-of-bounds read in broadcast Gap ACK blocks(CVE-2026-64450)

    KVM: x86: Unconditionally recompute CR8 intercept on PPR update(CVE-2026-64513)

    net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()(CVE-2026-64351)

    sctp: validate STALE_COOKIE cause length before reading staleness(CVE-2026-64551)

    bonding: refuse to enslave CAN devices(CVE-2026-63990)

    net: psample: fix info leak in PSAMPLE_ATTR_DATA(CVE-2026-64553)

    netfilter: nf_tables: fix dst corruption in same register operation(CVE-2026-64006)

    tipc: fix use-after-free of the discoverer in tipc_disc_rcv()(CVE-2026-64543)

    usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()(CVE-2026-64540)

    smb/client: fix chown/chgrp with SMB3 POSIX Extensions(CVE-2026-64388)

    net: usb: net1080: validate packet_len before pad-byte access in rx_fixup(CVE-2026-64547)

    ACPI: CPPC: Suppress UBSAN warning caused by field misuse(CVE-2026-64512)

    net/mlx5e: xsk: Fix unlocked writing to ICOSQ(CVE-2026-64210)

    pNFS: Fix use-after-free in pnfs_update_layout()(CVE-2026-63800)

    proc: protect ptrace_may_access() with exec_update_lock (FD links)(CVE-2026-64375)

    ipv4: free net-ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()(CVE-2026-64002)

    proc: protect ptrace_may_access() with exec_update_lock (part 1)(CVE-2026-64371)

    usb: typec: tcpci_rt1711h: unregister TCPCI port with devres(CVE-2026-64463)

    i2c: core: fix adapter deregistration race(CVE-2026-64279)

    sctp: fix race between sctp_wait_for_connect and peeloff(CVE-2026-63971)

    NFSv4/flexfiles: reject zero filehandle version count(CVE-2026-53392)

    crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()(CVE-2026-64438)

    usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers(CVE-2026-63963)

    net: garp: fix unsigned integer underflow in garp_pdu_parse_attr(CVE-2026-63868)

    USB: serial: mxuport: fix memory corruption with small endpoint(CVE-2026-63899)

    vfio/pci: Release the VGA arbiter client on register_device() failure(CVE-2026-64475)

    USB: serial: mct_u232: fix memory corruption with small endpoint(CVE-2026-63898)

    crypto: qat - protect service table iterations with service_lock(CVE-2026-64305)

    ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup(CVE-2026-64510)

    drm/edid: fix OOB read in drm_parse_tiled_block()(CVE-2026-64546)

    netfilter: ipset: fix race between dump and ip_set_list resize(CVE-2026-64189)

    nfsd: release layout stid on setlease failure(CVE-2026-53399)

    l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname(CVE-2026-63918)

    KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path(CVE-2026-63794)

    block: Avoid mounting the bdev pseudo-filesystem in userspace(CVE-2026-63810)

    fuse: re-lock request before returning from fuse_ref_folio()(CVE-2026-64266)

    bpf: use kvfree() for replaced sysctl write buffer(CVE-2026-63809)

    netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()(CVE-2026-64554)

    USB: ulpi: fix memory leak on registration failure(CVE-2026-64332)

    fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()(CVE-2026-53402)

    fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var(CVE-2026-53403)

    netfilter: ebtables: zero chainstack array(CVE-2026-64413)

    bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()(CVE-2026-64548)

    crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents(CVE-2026-64544)

    posix-cpu-timers: Prevent UAF caused by non-leader exec() race(CVE-2026-64560)

    netfilter: ebtables: module names must be null-terminated(CVE-2026-64412)

    net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle(CVE-2026-64530)

    ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().(CVE-2026-64538)

    USB: legousbtower: fix use-after-free on disconnect race(CVE-2026-64340)

    USB: ldusb: fix use-after-free on disconnect race(CVE-2026-64343)

    i2c: core: fix adapter registration race(CVE-2026-53400)

    USB: serial: digi_acceleport: fix write buffer corruption(CVE-2026-64333)

    usb: xhci: Fix sleep in atomic context in xhci_free_streams()(CVE-2026-64465)

    security/keys: fix missed RCU read section on lookup(CVE-2026-64015)

    USB: iowarrior: fix use-after-free on disconnect(CVE-2026-64342)

    iio: event: Fix event FIFO reset race(CVE-2026-64496)

    hwrng: virtio: clamp device-reported used.len at copy_data()(CVE-2026-64456)

    USB: serial: digi_acceleport: fix broken rx after throttle(CVE-2026-64335)

    i2c: stub: Reject I2C block transfers with invalid length(CVE-2026-64191)

    USB: serial: digi_acceleport: fix hard lockup on disconnect(CVE-2026-64334)

    nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path(CVE-2026-64534)

    USB: idmouse: fix use-after-free on disconnect race(CVE-2026-64344)

    HID: lg-g15: cancel pending work on remove to fix a use-after-free(CVE-2026-64362)

    crypto: ecc - Fix carry overflow in vli multiplication(CVE-2026-64313)

    crypto: drbg - Fix returning success on failure in CTR_DRBG(CVE-2026-64306)

    tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()(CVE-2026-63992)

    ARM: integrator: Fix early initialization(CVE-2026-64165)

    xfrm: esp: restore combined single-frag length gate(CVE-2026-63912)

    net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes(CVE-2026-64422)

    xfrm: input: hold netns during deferred transport reinjection(CVE-2026-63919)

    bpf: sockmap: fix tail fragment offset in bpf_msg_push_data(CVE-2026-63926)

    net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink(CVE-2026-63829)

    ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().(CVE-2026-63921)

    macsec: fix replay protection at XPN lower-PN wrap(CVE-2026-63925)

    ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()(CVE-2026-63984)

    net: af_key: initialize alg_key_len for IPComp states(CVE-2026-64436)

    tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()(CVE-2026-63994)

    netfilter: synproxy: refresh tcphdr after skb_ensure_writable(CVE-2026-64007)

    smb: client: mask server-provided mode to 07777 in modefromsid(CVE-2026-64379)

    udf: validate sparing table length as an entry count, not a byte count(CVE-2026-64322)

    openvswitch: vport: fix self-deadlock on release of tunnel ports(CVE-2026-46165)

    vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write(CVE-2026-53385)

    netpoll: fix a use-after-free on shutdown path(CVE-2026-64424)

    xfs: fail recovery on a committed log item with no regions(CVE-2026-64187)

    net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked(CVE-2026-64012)

    xfrm: Check for underflow in xfrm_state_mtu(CVE-2026-64009)

    ipv6: validate extension header length before copying to cmsg(CVE-2026-63920)

    tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done(CVE-2026-63801)

    rbd: eliminate a race in lock_dwork draining on unmap(CVE-2026-64112)

    NFSv4: include MAY_WRITE in open permission mask for O_TRUNC(CVE-2026-64298)

    ipv4: raw: reject IP_HDRINCL packets with ihl  5(CVE-2026-64114)

    keys: Pin request_key_auth payload in instantiate paths(CVE-2026-63823)

    fuse: re-lock request before replacing page cache folio(CVE-2026-53388)

    ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()(CVE-2026-63924)

    ip6: vti: Use ip6_tnl.net in vti6_changelink().(CVE-2026-63917)

    virtiofs: fix UAF on submount umount(CVE-2026-53381)

    xfs: resample the data fork mapping after cycling ILOCK(CVE-2026-64600)

    net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring(CVE-2026-64047)

    writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()(CVE-2026-64378)

    netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check(CVE-2026-63913)

    USB: iowarrior: fix use-after-free on disconnect race(CVE-2026-64341)

    nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page(CVE-2026-64320)

    xfrm: route MIGRATE notifications to caller's netns(CVE-2026-63914)

    udf: validate VAT header length against the VAT inode size(CVE-2026-64323)

    ipv6: exthdrs: refresh nh after handling HAO option(CVE-2026-63922)

    USB: serial: digi_acceleport: fix memory corruption with small endpoints(CVE-2026-63901)

    smb: client: harden POSIX SID length parsing(CVE-2026-64380)

    usb: typec: altmodes/displayport: validate count before reading Status Update VDO(CVE-2026-63961)

    USB: serial: belkin_sa: validate interrupt status length(CVE-2026-63903)

    USB: serial: keyspan: fix missing indat transfer sanity check(CVE-2026-63900)

    USB: serial: cypress_m8: fix memory corruption with small endpoint(CVE-2026-63956)

    KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()(CVE-2026-63806)

    bpf: Fix use-after-free in offloaded map/prog info fill(CVE-2026-53089)

    spi: qup: fix error pointer deref after DMA setup failure(CVE-2026-64170)

    net: bonding: fix NULL pointer dereference in bond_do_ioctl()(CVE-2026-53337)

    mm/huge_memory: fix folio isn't locked in softleaf_to_folio()(CVE-2026-31466)

    scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()(CVE-2026-63888)

    bpf: Fix RCU stall in bpf_fd_array_map_clear()(CVE-2026-53083)

    RDMA/core: Prefer NLA_NUL_STRING(CVE-2026-63860)

    KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits(CVE-2026-64106)

    nfsd: fix posix_acl leak on SETACL decode failure(CVE-2026-53397)

    tracing: Avoid NULL return from hist_field_name() on truncation(CVE-2026-64028)

    USB: serial: cypress_m8: validate interrupt packet headers(CVE-2026-63902)

    USB: serial: mct_u232: fix missing interrupt-in transfer sanity check(CVE-2026-63897)

    bpf: Fix OOB in pcpu_init_value(CVE-2026-53076)

    bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb(CVE-2026-53074)

    dm cache metadata: fix memory leak on metadata abort retry(CVE-2026-53060)

    quota: Fix race of dquot_scan_active() with quota deactivation(CVE-2026-53050)

    nfs: return EISDIR on nfs3_proc_create if d_alias is a dir(CVE-2026-43470)

    USB: serial: omninet: fix memory corruption with small endpoint(CVE-2026-63928)

    scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf(CVE-2026-63887)

    udf: reject descriptors with oversized CRC length(CVE-2026-53369)

    qed: fix double free in qed_cxt_tables_alloc()(CVE-2026-64118)

    ixgbevf: fix use-after-free in VEPA multicast source pruning(CVE-2026-64113)

    netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check(CVE-2026-52998)

    netfilter: nfnetlink_osf: fix out-of-bounds read on option matching(CVE-2026-52999)

    netfilter: nf_queue: hold bridge skb-dev while queued(CVE-2026-52912)

    netfilter: nft_ct: fix missing expect put in obj eval(CVE-2026-52970)

    nexthop: fix IPv6 route referencing IPv4 nexthop(CVE-2026-53012)

    netdevsim: zero initialize struct iphdr in dummy sk_buff(CVE-2026-52985)

    libceph: Fix potential out-of-bounds access in osdmap_decode()(CVE-2026-52958)

    nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers(CVE-2026-52989)

    net/sched: netem: fix queue limit check to include reordered packets(CVE-2026-52984)

    xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()(CVE-2026-53239)

    sctp: stream: fully roll back denied add-stream state(CVE-2026-52929)

    io-wq: check that the predecessor is hashed in io_wq_remove_pending()(CVE-2026-46274)

    thunderbolt: Clamp XDomain response data copy to allocation size(CVE-2026-53148)

    Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow
    an attacker to corrupt instructions executed at a different privilege level, potentially resulting in
    privilege escalation.(CVE-2025-54518)

    ice: fix NULL pointer dereference in ice_reset_all_vfs()(CVE-2026-53289)

    bpf: Fix ld_{abs,ind} failure path analysis in subprogs(CVE-2026-53090)

    netfilter: nft_exthdr: fix register tracking for F_PRESENT flag(CVE-2026-53218)

    RDMA/srp: bound SRP_RSP sense copy by the received length(CVE-2026-53186)

    tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR(CVE-2026-52937)

    media: videobuf2: Set vma_flags in vb2_dma_sg_mmap(CVE-2026-46312)

    crypto: jitterentropy - replace long-held spinlock with mutex(CVE-2026-52936)

    net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list(CVE-2026-53230)

    thunderbolt: Bound root directory content to block size(CVE-2026-53149)

    netfilter: nf_conntrack: destroy stale expectfn expectations on unregister(CVE-2026-53349)

    padata: Put CPU offline callback in ONLINE section to allow failure(CVE-2026-53314)

    bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap(CVE-2026-53111)

    fuse: reject fuse_notify() pagecache ops on directories(CVE-2026-53168)

    netfilter: require Ethernet MAC header before using eth_hdr()(CVE-2026-53131)

    bonding: 3ad: implement proper RCU rules for port-aggregator(CVE-2026-52975)

    inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush(CVE-2026-53175)

    fs/mbcache: cancel shrink work before destroying the cache(CVE-2026-53129)

    net: phy: clean the sfp upstream if phy probing fails(CVE-2026-53232)

    netfilter: x_tables: avoid leaking percpu counter pointers(CVE-2026-53219)

    netfilter: nf_log: validate MAC header was set before dumping it(CVE-2026-52942)

    netfilter: revalidate bridge ports(CVE-2026-53220)

    bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops(CVE-2026-53078)

    mm/huge_memory: update file PMD counter before folio_put()(CVE-2026-53189)

    thunderbolt: Reject zero-length property entries in validator(CVE-2026-53150)

    net: pull headers in qdisc_pkt_len_segs_init()(CVE-2026-53091)

    netfilter: nf_tables: use list_del_rcu for netlink hooks(CVE-2026-46324)

    bnxt_en: Fix NULL pointer dereference(CVE-2026-53177)

    thunderbolt: Limit XDomain response copy to actual frame size(CVE-2026-53146)

    net/sched: act_api: use RCU with deferred freeing for action lifecycle(CVE-2026-53264)

    ppp: require CAP_NET_ADMIN in target netns for unattached ioctls(CVE-2026-53075)

    netfilter: xt_policy: fix strict mode inbound policy matching(CVE-2026-52920)

    netfilter: ip6t_hbh: reject oversized option lists(CVE-2026-52915)

    signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()(CVE-2026-53352)

    USB: serial: io_ti: fix heap overflow in get_manuf_info()(CVE-2026-53196)

    netfilter: ebtables: fix OOB read in compat_mtw_from_user(CVE-2026-52927)

    net: guard timestamp cmsgs to real error queue skbs(CVE-2026-53223)

    vrf: Fix a potential NPD when removing a port from a VRF(CVE-2026-52925)

    ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()(CVE-2026-53221)

    ipv6: fix possible UAF in icmpv6_rcv()(CVE-2026-53006)

    netfilter: ipset: stop hash:* range iteration at end(CVE-2026-52921)

    ipv6: sit: reload inner IPv6 header after GSO offloads(CVE-2026-53228)

    dm cache: fix null-deref with concurrent writes in passthrough mode(CVE-2026-53064)

    dm log: fix out-of-bounds write due to region_count overflow(CVE-2026-53059)

    crypto: ccp - copy IV using skcipher ivsize(CVE-2026-53016)

    libceph: Fix potential null-ptr-deref in decode_choose_args()(CVE-2026-52957)

    bpf, arm64: Fix off-by-one in check_imm signed range check(CVE-2026-53036)

    netfilter: xtables: restrict several matches to inet family(CVE-2026-53001)

    fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios(CVE-2026-53167)

    i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl(CVE-2026-52948)

    sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks(CVE-2026-53004)

    dm cache: fix dirty mapping checking in passthrough mode switching(CVE-2026-53061)

    audit: fix incorrect inheritable capability in CAPSET records(CVE-2026-53287)

    mailbox: add sanity check for channel array(CVE-2026-53295)

    HID: usbhid: fix deadlock in hid_post_reset()(CVE-2026-53037)

    net: openvswitch: fix possible kfree_skb of ERR_PTR(CVE-2026-53227)

    sctp: validate embedded INIT chunk and address list lengths in cookie(CVE-2026-53224)

    libceph: handle rbtree insertion error in decode_choose_args()(CVE-2026-52954)

    net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure(CVE-2026-53229)

    libceph: Fix potential out-of-bounds access in crush_decode()(CVE-2026-52955)

    sctp: diag: reject stale associations in dump_one path(CVE-2026-52917)

    sctp: purge outqueue on stale COOKIE-ECHO handling(CVE-2026-52924)

    sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing(CVE-2026-53246)

    iommu/amd: Fix clone_alias() to use the original device's devid(CVE-2026-53053)

    hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf(CVE-2026-53199)

    tipc: fix double-free in tipc_buf_append()(CVE-2026-52993)

    ceph: fix a buffer leak in __ceph_setxattr()(CVE-2026-52962)

    sched/psi: fix race between file release and pressure write(CVE-2026-52991)

    scsi: target: core: Fix integer overflow in UNMAP bounds check(CVE-2026-53021)

    netfilter: conntrack: remove sprintf usage(CVE-2026-53002)

    sctp: fix uninit-value in __sctp_rcv_asconf_lookup()(CVE-2026-53225)

    fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling(CVE-2026-52946)

    bpf: Free reuseport cBPF prog after RCU grace period.(CVE-2026-52910)

    dm cache policy smq: fix missing locks in invalidating cache blocks(CVE-2026-53062)

    net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()(CVE-2026-52982)

    ice: fix double-free of tx_buf skb(CVE-2026-53009)

    crypto: af_alg - Cap AEAD AD length to 0x80000000(CVE-2026-52972)

    drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()(CVE-2026-53330)

    netfilter: nft_fib: fix stale stack leak via the OIFNAME register(CVE-2026-53134)

    netfilter: nf_conntrack_sip: don't use simple_strtoul(CVE-2026-52986)

    drm/amd/display: Bound VBIOS record-chain walk loops(CVE-2026-53138)

    pppoe: drop PFC frames(CVE-2026-53003)

    RDMA/umem: Fix truncation for block sizes = 4G(CVE-2026-53133)

    selinux: allow multiple opens of /sys/fs/selinux/policy(CVE-2026-46302)

    io_uring/poll: fix signed comparison in io_poll_get_ownership()(CVE-2026-52933)

    locking/rtmutex: Skip remove_waiter() when waiter is not enqueued(CVE-2026-53163)

    net/sched: fix pedit partial COW leading to page cache corruption(CVE-2026-46331)

    netlabel: validate unlabeled address and mask attribute lengths(CVE-2026-53238)

    ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options(CVE-2026-53249)

    net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr(CVE-2026-53245)

    ip6_vti: set netns_immutable on the fallback device.(CVE-2026-52909)

    ipc/shm: serialize orphan cleanup with shm_nattch updates(CVE-2026-52930)

    tun: free page on build_skb failure in tun_xdp_one()(CVE-2026-46322)

    USB: serial: kl5kusb105: fix bulk-out buffer overflow(CVE-2026-53194)

    USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()(CVE-2026-53195)

    gfs2: add some missing log locking(CVE-2026-53049)

    ipvs: clear the svc scheduler ptr early on edit(CVE-2026-53270)

    netfilter: bridge: make ebt_snat ARP rewrite writable(CVE-2026-53266)

    netfilter: synproxy: add mutex to guard hook reference counting(CVE-2026-53269)

    netfilter: conntrack_irc: fix possible out-of-bounds read(CVE-2026-53268)

    dm cache: fix write hang in passthrough mode(CVE-2026-53063)

    IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN(CVE-2026-53176)

    ipc: limit next_id allocation to the valid ID range(CVE-2026-52923)

    scsi: sg: Resolve soft lockup issue when opening /dev/sgX(CVE-2026-53304)

    ipv6: mcast: Fix use-after-free when processing MLD queries(CVE-2026-53275)

    tcp: restrict SO_ATTACH_FILTER to priv users(CVE-2026-53236)

    netfilter: nft_ct: bail out on template ct in get eval(CVE-2026-53267)

    netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase(CVE-2026-52988)

    net: skbuff: fix missing zerocopy reference in pskb_carve helpers(CVE-2026-52943)

    pmdomain: core: Fix detach procedure for virtual devices in genpd(CVE-2026-46292)

    dm cache policy smq: check allocation under invalidate lock(CVE-2026-53265)

    apparmor: fix rlimit for posix cpu timers(CVE-2026-46328)

    neigh: let neigh_xmit take skb ownership(CVE-2026-52981)

    nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free(CVE-2026-46304)

    isofs: validate Rock Ridge CE continuation extent against volume size(CVE-2026-46303)

    inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP(CVE-2026-46266)

    regulator: core: fix locking in regulator_resolve_supply() error path(CVE-2026-46252)

    bonding: fix type confusion in bond_setup_by_slave()(CVE-2026-43456)

    x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache(CVE-2026-46174)

    8021q: delete cleared egress QoS mappings(CVE-2026-46153)

    netfilter: ctnetlink: ensure safe access to master conntrack(CVE-2026-43116)

    net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()(CVE-2026-31700)

    xfrm: hold dev ref until after transport_finish NF_HOOK(CVE-2026-31663)

    xfrm6: fix uninitialized saddr in xfrm6_get_saddr()(CVE-2026-43139)

    nvme-pci: Fix race bug in nvme_poll_irqdisable()(CVE-2026-43448)

    mfd: core: Add locking around 'mfd_of_node_list'(CVE-2026-43143)

    EFI/CPER: don't go past the ARM processor CPER record buffer(CVE-2026-43266)

    HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()(CVE-2026-43136)

    xfrm: account XFRMA_IF_ID in aevent size calculation(CVE-2026-43107)

    dm: remove fake timeout to avoid leak request(CVE-2026-43314)

    bridge: br_nd_send: validate ND option lengths(CVE-2026-31752)

    media: pvrusb2: fix URB leak in pvr2_send_request_ex(CVE-2026-43223)

    xfrm_user: fix info leak in build_report()(CVE-2026-31671)

    KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm-lock(CVE-2026-31592)

    net: sched: act_csum: validate nested VLAN headers(CVE-2026-31684)

    netfilter: xt_multiport: validate ra ...

  Please note that the description has been truncated due to length. Please refer to vendor advisory for the full
description.

Tenable has extracted the preceding description block directly from the EulerOS kernel security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2026-4332
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?0e768c80");
  script_set_attribute(attribute:"solution", value:
"Update the affected kernel packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:A");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-53196");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2026-64424");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2025-54518");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"exploit_framework_core", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/03/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/10/10");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:bpftool");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:kernel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:kernel-abi-stablelists");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:kernel-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:kernel-tools-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:kernel-tools-libs-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:perf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:python3-perf");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:2.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Huawei Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/sp");
  script_exclude_keys("Host/EulerOS/uvp_version");

  exit(0);
}

include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var _release = get_kb_item("Host/EulerOS/release");
if (isnull(_release) || _release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS");
var uvp = get_kb_item("Host/EulerOS/uvp_version");
if (_release !~ "^EulerOS release 2\.0(\D|$)") audit(AUDIT_OS_NOT, "EulerOS 2.0 SP11");

var sp = get_kb_item("Host/EulerOS/sp");
if (isnull(sp) || sp !~ "^(11)$") audit(AUDIT_OS_NOT, "EulerOS 2.0 SP11");

if (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, "EulerOS 2.0 SP11", "EulerOS UVP " + uvp);

if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu && "x86" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu);
if ("aarch64" >!< cpu) audit(AUDIT_ARCH_NOT, "aarch64", cpu);

var flag = 0;

var pkgs = [
  "bpftool-5.10.0-60.18.0.50.h2535.eulerosv2r11",
  "kernel-5.10.0-60.18.0.50.h2535.eulerosv2r11",
  "kernel-abi-stablelists-5.10.0-60.18.0.50.h2535.eulerosv2r11",
  "kernel-tools-5.10.0-60.18.0.50.h2535.eulerosv2r11",
  "kernel-tools-libs-5.10.0-60.18.0.50.h2535.eulerosv2r11",
  "kernel-tools-libs-devel-5.10.0-60.18.0.50.h2535.eulerosv2r11",
  "perf-5.10.0-60.18.0.50.h2535.eulerosv2r11",
  "python3-perf-5.10.0-60.18.0.50.h2535.eulerosv2r11"
];

foreach (var pkg in pkgs)
  if (rpm_check(release:"EulerOS-2.0", sp:"11", reference:pkg)) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "kernel");
}