NewStart CGSL MAIN 6.06 : kernel Multiple Vulnerabilities (NS-SA-2026-0063)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from ZTE advisory NS-SA-2026-0063. The text
# itself is copyright (C) ZTE, Inc.
##

include('compat.inc');

if (description)
{
  script_id(330511);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/29");

  script_cve_id(
    "CVE-2022-48971",
    "CVE-2022-48982",
    "CVE-2022-49023",
    "CVE-2023-0240",
    "CVE-2023-2163",
    "CVE-2023-4206",
    "CVE-2023-4207",
    "CVE-2023-4244",
    "CVE-2023-4622",
    "CVE-2023-5178",
    "CVE-2023-6817",
    "CVE-2023-20569",
    "CVE-2023-45871",
    "CVE-2023-52439",
    "CVE-2023-52448",
    "CVE-2023-52464",
    "CVE-2023-52469",
    "CVE-2024-0646",
    "CVE-2024-8805",
    "CVE-2024-25744",
    "CVE-2024-26584",
    "CVE-2024-26882",
    "CVE-2024-26883",
    "CVE-2024-26884",
    "CVE-2024-26900",
    "CVE-2024-26901",
    "CVE-2024-26903",
    "CVE-2024-26907",
    "CVE-2024-26934",
    "CVE-2024-27020",
    "CVE-2024-35984",
    "CVE-2024-35997",
    "CVE-2024-36015",
    "CVE-2024-36476",
    "CVE-2024-36940",
    "CVE-2024-36946",
    "CVE-2024-42253",
    "CVE-2024-42281",
    "CVE-2024-42305",
    "CVE-2024-43860",
    "CVE-2024-43889",
    "CVE-2024-44995",
    "CVE-2024-46714",
    "CVE-2024-46722",
    "CVE-2024-46725",
    "CVE-2024-46731",
    "CVE-2024-46745",
    "CVE-2024-46777",
    "CVE-2024-46815",
    "CVE-2024-46818",
    "CVE-2024-46819",
    "CVE-2024-50131",
    "CVE-2024-50302",
    "CVE-2024-56369",
    "CVE-2024-56719",
    "CVE-2024-56767",
    "CVE-2024-56769",
    "CVE-2024-56787",
    "CVE-2024-57792",
    "CVE-2024-57802",
    "CVE-2024-57834",
    "CVE-2024-57890",
    "CVE-2024-57892",
    "CVE-2024-57893",
    "CVE-2024-57899",
    "CVE-2024-57901",
    "CVE-2024-57904",
    "CVE-2024-57906",
    "CVE-2024-57907",
    "CVE-2024-57913",
    "CVE-2024-57922",
    "CVE-2024-57926",
    "CVE-2024-58010",
    "CVE-2024-58069",
    "CVE-2025-21689",
    "CVE-2025-21694",
    "CVE-2025-21704",
    "CVE-2025-21719",
    "CVE-2025-21731",
    "CVE-2025-21750",
    "CVE-2025-21767",
    "CVE-2025-21776",
    "CVE-2025-21782",
    "CVE-2025-21796",
    "CVE-2025-21802",
    "CVE-2025-21993"
  );
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/03/25");

  script_name(english:"NewStart CGSL MAIN 6.06 : kernel Multiple Vulnerabilities (NS-SA-2026-0063)");

  script_set_attribute(attribute:"synopsis", value:
"The remote NewStart CGSL host is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The remote NewStart CGSL host, running version MAIN 6.06, has kernel packages installed that are affected by multiple
vulnerabilities:

  - BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This
    vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of
    BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the
    implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to
    allowing access to functionality. An attacker can leverage this vulnerability to execute code in the
    context of the current user. Was ZDI-CAN-25177. (CVE-2024-8805)

  - A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a
    logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause
    a use-after-free and double-free problem, which may permit remote code execution or lead to local
    privilege escalation. (CVE-2023-5178)

  - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when
    bt_init fails bt_init() calls bt_leds_init() to register led, but if it fails later, bt_leds_cleanup() is
    not called to unregister it. This can cause panic if the argument bluetooth-power in text is freed and
    then another led_trigger_register() tries to access it: BUG: unable to handle page fault for address:
    ffffffffc06d3bc0 RIP: 0010:strcmp+0xc/0x30 Call Trace: <TASK> led_trigger_register+0x10d/0x4f0
    led_trigger_register_simple+0x7d/0x100 bt_init+0x39/0xf7 [bluetooth] do_one_initcall+0xd0/0x4e0
    (CVE-2022-48971)

  - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging
    CSR fake controllers It seems fake CSR 5.0 clones can cause the suspend notifier to be registered twice
    causing the following kernel panic: [ 71.986122] Call Trace: [ 71.986124] <TASK> [ 71.986125]
    blocking_notifier_chain_register+0x33/0x60 [ 71.986130] hci_register_dev+0x316/0x3d0 [bluetooth
    99b5497ea3d09708fa1366c1dc03288bf3cca8da] [ 71.986154] btusb_probe+0x979/0xd85 [btusb
    e1e0605a4f4c01984a4b9c8ac58c3666ae287477] [ 71.986159] ? __pm_runtime_set_status+0x1a9/0x300 [ 71.986162]
    ? ktime_get_mono_fast_ns+0x3e/0x90 [ 71.986167] usb_probe_interface+0xe3/0x2b0 [ 71.986171]
    really_probe+0xdb/0x380 [ 71.986174] ? pm_runtime_barrier+0x54/0x90 [ 71.986177]
    __driver_probe_device+0x78/0x170 [ 71.986180] driver_probe_device+0x1f/0x90 [ 71.986183]
    __device_attach_driver+0x89/0x110 [ 71.986186] ? driver_allows_async_probing+0x70/0x70 [ 71.986189]
    bus_for_each_drv+0x8c/0xe0 [ 71.986192] __device_attach+0xb2/0x1e0 [ 71.986195] bus_probe_device+0x92/0xb0
    [ 71.986198] device_add+0x422/0x9a0 [ 71.986201] ? sysfs_merge_group+0xd4/0x110 [ 71.986205]
    usb_set_configuration+0x57a/0x820 [ 71.986208] usb_generic_driver_probe+0x4f/0x70 [ 71.986211]
    usb_probe_device+0x3a/0x110 [ 71.986213] really_probe+0xdb/0x380 [ 71.986216] ?
    pm_runtime_barrier+0x54/0x90 [ 71.986219] __driver_probe_device+0x78/0x170 [ 71.986221]
    driver_probe_device+0x1f/0x90 [ 71.986224] __device_attach_driver+0x89/0x110 [ 71.986227] ?
    driver_allows_async_probing+0x70/0x70 [ 71.986230] bus_for_each_drv+0x8c/0xe0 [ 71.986232]
    __device_attach+0xb2/0x1e0 [ 71.986235] bus_probe_device+0x92/0xb0 [ 71.986237] device_add+0x422/0x9a0 [
    71.986239] ? _dev_info+0x7d/0x98 [ 71.986242] ? blake2s_update+0x4c/0xc0 [ 71.986246]
    usb_new_device.cold+0x148/0x36d [ 71.986250] hub_event+0xa8a/0x1910 [ 71.986255]
    process_one_work+0x1c4/0x380 [ 71.986259] worker_thread+0x51/0x390 [ 71.986262] ?
    rescuer_thread+0x3b0/0x3b0 [ 71.986264] kthread+0xdb/0x110 [ 71.986266] ?
    kthread_complete_and_exit+0x20/0x20 [ 71.986268] ret_from_fork+0x1f/0x30 [ 71.986273] </TASK> [ 71.986274]
    ---[ end trace 0000000000000000 ]--- [ 71.986284] btusb: probe of 2-1.6:1.0 failed with error -17
    (CVE-2022-48982)

  - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix buffer overflow in
    elem comparison For vendor elements, the code here assumes that 5 octets are present without checking.
    Since the element itself is already checked to fit, we only need to check the length. (CVE-2022-49023)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/notice/NS-SA-2026-0063");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2022-48971");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2022-48982");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2022-49023");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-0240");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-20569");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-2163");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-4206");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-4207");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-4244");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-45871");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-4622");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-5178");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-52439");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-52448");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-52464");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-52469");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2023-6817");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-0646");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-25744");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26584");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26882");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26883");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26884");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26900");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26901");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26903");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26907");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26934");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-27020");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-35984");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-35997");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-36015");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-36476");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-36940");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-36946");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-39501");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-42253");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-42281");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-42305");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-43860");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-43889");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-44995");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46714");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46722");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46725");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46731");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46745");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46756");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46758");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46777");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46815");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46818");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46819");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50131");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50302");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-56369");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-56719");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-56767");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-56769");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-56787");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57792");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57802");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57834");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57890");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57892");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57893");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57899");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57901");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57904");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57906");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57907");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57913");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57922");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57926");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-58010");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-58069");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-8805");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21689");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21694");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21704");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21719");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21731");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21750");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21767");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21776");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21782");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21796");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21802");
  script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21993");
  script_set_attribute(attribute:"solution", value:
"Upgrade the vulnerable CGSL kernel packages. Note that updated packages may not be available yet. Please contact ZTE for
more information.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-5178");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2024-8805");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/07/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/07/27");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/29");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:bpftool");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kata-linux-container");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-headers");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-modules");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-modules-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-tools-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-virt-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:perf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:python3-perf");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:zte:cgsl_main:6");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"NewStart CGSL Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/ZTE-CGSL/release", "Host/ZTE-CGSL/rpm-list", "Host/cpu");

  exit(0);
}

include('rpm2.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var os_release = get_kb_item('Host/ZTE-CGSL/release');
if (isnull(os_release) || os_release !~ "^CGSL (MAIN|CORE)") audit(AUDIT_OS_NOT, 'NewStart Carrier Grade Server Linux');

if (os_release !~ "CGSL\sMAIN\s6\.06")
  audit(AUDIT_OS_NOT, 'NewStart CGSL MAIN 6.06');

if (!get_kb_item('Host/ZTE-CGSL/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'NewStart Carrier Grade Server Linux', cpu);

var flag = 0;

var pkgs = {
  'CGSL MAIN 6.06': [
    'bpftool-5.10.134-14.zncgsl6.tm65.0',
    'kata-linux-container-5.10.134-14.zncgsl6.tm65.0',
    'kernel-5.10.134-14.zncgsl6.tm65.0',
    'kernel-core-5.10.134-14.zncgsl6.tm65.0',
    'kernel-devel-5.10.134-14.zncgsl6.tm65.0',
    'kernel-headers-5.10.134-14.zncgsl6.tm65.0',
    'kernel-modules-5.10.134-14.zncgsl6.tm65.0',
    'kernel-modules-extra-5.10.134-14.zncgsl6.tm65.0',
    'kernel-tools-5.10.134-14.zncgsl6.tm65.0',
    'kernel-tools-libs-5.10.134-14.zncgsl6.tm65.0',
    'kernel-virt-core-5.10.134-14.zncgsl6.tm65.0',
    'perf-5.10.134-14.zncgsl6.tm65.0',
    'python3-perf-5.10.134-14.zncgsl6.tm65.0'
  ]
};
var pkg_list = pkgs[os_release];
var pkg;
foreach (pkg in pkg_list)
  if (rpm_check(reference:pkg, release:'ZTE ' + os_release, rpm_spec_vers_cmp:TRUE)) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'kernel');
}