NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2026-0086)
10
10
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from ZTE advisory NS-SA-2026-0086. The text
# itself is copyright (C) ZTE, Inc.
##
include('compat.inc');
if (description)
{
script_id(343556);
script_version("1.1");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/08");
script_cve_id(
"CVE-2024-26900",
"CVE-2024-35939",
"CVE-2024-36886",
"CVE-2024-36898",
"CVE-2024-40927",
"CVE-2024-46713",
"CVE-2024-49568",
"CVE-2024-50033",
"CVE-2024-50035",
"CVE-2024-50074",
"CVE-2024-50115",
"CVE-2024-50154",
"CVE-2024-50155",
"CVE-2024-50159",
"CVE-2024-50257",
"CVE-2024-50261",
"CVE-2024-50267",
"CVE-2024-53057",
"CVE-2024-53099",
"CVE-2024-53106",
"CVE-2024-53139",
"CVE-2024-53162",
"CVE-2024-53166",
"CVE-2024-53173",
"CVE-2024-53213",
"CVE-2024-54683",
"CVE-2024-56616",
"CVE-2024-56628",
"CVE-2024-57929",
"CVE-2025-21742",
"CVE-2025-37890",
"CVE-2025-38000",
"CVE-2025-38052",
"CVE-2025-38249",
"CVE-2025-38352",
"CVE-2025-38401",
"CVE-2025-38456",
"CVE-2025-38476",
"CVE-2025-38490",
"CVE-2025-38595",
"CVE-2025-39744",
"CVE-2025-68284",
"CVE-2025-68297",
"CVE-2026-23401",
"CVE-2026-31431",
"CVE-2026-43279",
"CVE-2026-43284",
"CVE-2026-43456",
"CVE-2026-43499",
"CVE-2026-46333",
"CVE-2026-52972",
"CVE-2026-52991",
"CVE-2026-53002",
"CVE-2026-53006",
"CVE-2026-53359",
"CVE-2026-63940",
"CVE-2026-63985",
"CVE-2026-63992",
"CVE-2026-64000",
"CVE-2026-64002",
"CVE-2026-64007",
"CVE-2026-64009",
"CVE-2026-64012",
"CVE-2026-64015",
"CVE-2026-64046",
"CVE-2026-64048",
"CVE-2026-64600"
);
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/09/25");
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2026/05/15");
script_name(english:"NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2026-0086)");
script_set_attribute(attribute:"synopsis", value:
"The remote NewStart CGSL host is affected by multiple vulnerabilities.");
script_set_attribute(attribute:"description", value:
"The remote NewStart CGSL host, running version MAIN 7.02, has kernel packages installed that are affected by multiple
vulnerabilities:
- In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in
dmabuf_exp_from_pages() [dma_buf_fd() fixes; no preferences regarding the tree it goes through - up to xen
folks] As soon as we'd inserted a file reference into descriptor table, another thread could close it.
That's fine for the case when all we are doing is returning that descriptor to userland (it's a race, but
it's a userland race and there's nothing the kernel can do about it). However, if we follow fd_install()
with any kind of access to objects that would be destroyed on close (be it the struct file itself or
anything destroyed by its ->release()), we have a UAF. dma_buf_fd() is a combination of reserving a
descriptor and fd_install(). gntdev dmabuf_exp_from_pages() calls it and then proceeds to access the
objects destroyed on close - starting with gntdev_dmabuf itself. Fix that by doing reserving descriptor
before anything else and do fd_install() only when everything had been set up. (CVE-2025-38595)
- In the Linux kernel, the following vulnerability has been resolved: md: fix kmemleak of rdev->serial If
kobject_add() is fail in bind_rdev_to_array(), 'rdev->serial' will be alloc not be freed, and kmemleak
occurs. unreferenced object 0xffff88815a350000 (size 49152): comm mdadm, pid 789, jiffies 4294716910 hex
dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc f773277a): [<0000000058b0a453>]
kmemleak_alloc+0x61/0xe0 [<00000000366adf14>] __kmalloc_large_node+0x15e/0x270 [<000000002e82961b>]
__kmalloc_node.cold+0x11/0x7f [<00000000f206d60a>] kvmalloc_node+0x74/0x150 [<0000000034bf3363>]
rdev_init_serial+0x67/0x170 [<0000000010e08fe9>] mddev_create_serial_pool+0x62/0x220 [<00000000c3837bf0>]
bind_rdev_to_array+0x2af/0x630 [<0000000073c28560>] md_add_new_disk+0x400/0x9f0 [<00000000770e30ff>]
md_ioctl+0x15bf/0x1c10 [<000000006cfab718>] blkdev_ioctl+0x191/0x3f0 [<0000000085086a11>]
vfs_ioctl+0x22/0x60 [<0000000018b656fe>] __x64_sys_ioctl+0xba/0xe0 [<00000000e54e675e>]
do_syscall_64+0x71/0x150 [<000000008b0ad622>] entry_SYSCALL_64_after_hwframe+0x6c/0x74 (CVE-2024-26900)
- In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on
dma_set_decrypted() failure On TDX it is possible for the untrusted host to cause set_memory_encrypted()
or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared.
Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page
allocator, which could lead to functional or security issues. DMA could free decrypted/shared pages if
dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing
them. (CVE-2024-35939)
- In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page
(sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path:
BUG: KASAN: slab-use-after-free in kfree_skb_list_reason+0x47e/0x4c0 linux/net/core/skbuff.c:1183 Read of
size 8 at addr ffff88804d2a7c80 by task poc/8034 CPU: 1 PID: 8034 Comm: poc Not tainted 6.8.2 #1 Hardware
name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014 Call Trace: <IRQ>
__dump_stack linux/lib/dump_stack.c:88 dump_stack_lvl+0xd9/0x1b0 linux/lib/dump_stack.c:106
print_address_description linux/mm/kasan/report.c:377 print_report+0xc4/0x620 linux/mm/kasan/report.c:488
kasan_report+0xda/0x110 linux/mm/kasan/report.c:601 kfree_skb_list_reason+0x47e/0x4c0
linux/net/core/skbuff.c:1183 skb_release_data+0x5af/0x880 linux/net/core/skbuff.c:1026 skb_release_all
linux/net/core/skbuff.c:1094 __kfree_skb linux/net/core/skbuff.c:1108 kfree_skb_reason+0x12d/0x210
linux/net/core/skbuff.c:1144 kfree_skb linux/./include/linux/skbuff.h:1244 tipc_buf_append+0x425/0xb50
linux/net/tipc/msg.c:186 tipc_link_input+0x224/0x7c0 linux/net/tipc/link.c:1324 tipc_link_rcv+0x76e/0x2d70
linux/net/tipc/link.c:1824 tipc_rcv+0x45f/0x10f0 linux/net/tipc/node.c:2159 tipc_udp_recv+0x73b/0x8f0
linux/net/tipc/udp_media.c:390 udp_queue_rcv_one_skb+0xad2/0x1850 linux/net/ipv4/udp.c:2108
udp_queue_rcv_skb+0x131/0xb00 linux/net/ipv4/udp.c:2186 udp_unicast_rcv_skb+0x165/0x3b0
linux/net/ipv4/udp.c:2346 __udp4_lib_rcv+0x2594/0x3400 linux/net/ipv4/udp.c:2422
ip_protocol_deliver_rcu+0x30c/0x4e0 linux/net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x2e4/0x520
linux/net/ipv4/ip_input.c:233 NF_HOOK linux/./include/linux/netfilter.h:314 NF_HOOK
linux/./include/linux/netfilter.h:308 ip_local_deliver+0x18e/0x1f0 linux/net/ipv4/ip_input.c:254 dst_input
linux/./include/net/dst.h:461 ip_rcv_finish linux/net/ipv4/ip_input.c:449 NF_HOOK
linux/./include/linux/netfilter.h:314 NF_HOOK linux/./include/linux/netfilter.h:308 ip_rcv+0x2c5/0x5d0
linux/net/ipv4/ip_input.c:569 __netif_receive_skb_one_core+0x199/0x1e0 linux/net/core/dev.c:5534
__netif_receive_skb+0x1f/0x1c0 linux/net/core/dev.c:5648 process_backlog+0x101/0x6b0
linux/net/core/dev.c:5976 __napi_poll.constprop.0+0xba/0x550 linux/net/core/dev.c:6576 napi_poll
linux/net/core/dev.c:6645 net_rx_action+0x95a/0xe90 linux/net/core/dev.c:6781 __do_softirq+0x21f/0x8e7
linux/kernel/softirq.c:553 do_softirq linux/kernel/softirq.c:454 do_softirq+0xb2/0xf0
linux/kernel/softirq.c:441 </IRQ> <TASK> __local_bh_enable_ip+0x100/0x120 linux/kernel/softirq.c:381
local_bh_enable linux/./include/linux/bottom_half.h:33 rcu_read_unlock_bh
linux/./include/linux/rcupdate.h:851 __dev_queue_xmit+0x871/0x3ee0 linux/net/core/dev.c:4378
dev_queue_xmit linux/./include/linux/netdevice.h:3169 neigh_hh_output linux/./include/net/neighbour.h:526
neigh_output linux/./include/net/neighbour.h:540 ip_finish_output2+0x169f/0x2550
linux/net/ipv4/ip_output.c:235 __ip_finish_output linux/net/ipv4/ip_output.c:313
__ip_finish_output+0x49e/0x950 linux/net/ipv4/ip_output.c:295 ip_finish_output+0x31/0x310
linux/net/ipv4/ip_output.c:323 NF_HOOK_COND linux/./include/linux/netfilter.h:303 ip_output+0x13b/0x2a0
linux/net/ipv4/ip_output.c:433 dst_output linux/./include/net/dst.h:451 ip_local_out
linux/net/ipv4/ip_output.c:129 ip_send_skb+0x3e5/0x560 linux/net/ipv4/ip_output.c:1492
udp_send_skb+0x73f/0x1530 linux/net/ipv4/udp.c:963 udp_sendmsg+0x1a36/0x2b40 linux/net/ipv4/udp.c:1250
inet_sendmsg+0x105/0x140 linux/net/ipv4/af_inet.c:850 sock_sendmsg_nosec linux/net/socket.c:730
__sock_sendmsg linux/net/socket.c:745 __sys_sendto+0x42c/0x4e0 linux/net/socket.c:2191 __do_sys_sendto
linux/net/socket.c:2203 __se_sys_sendto linux/net/socket.c:2199 __x64_sys_sendto+0xe0/0x1c0
linux/net/socket.c:2199 do_syscall_x64 linux/arch/x86/entry/common.c:52 do_syscall_ ---truncated---
(CVE-2024-36886)
- In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo
If a line is requested with debounce, and that results in debouncing in software, and the line is
subsequently reconfigured to enable edge detection then the allocation of the kfifo to contain edge events
is overlooked. This results in events being written to and read from an uninitialised kfifo. Read events
are returned to userspace. Initialise the kfifo in the case where the software debounce is already active.
(CVE-2024-36898)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/notice/NS-SA-2026-0086");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-26900");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-35939");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-36886");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-36898");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-40927");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-46713");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-49568");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50033");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50035");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50074");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50115");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50154");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50155");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50159");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50257");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50261");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-50267");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-53057");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-53099");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-53106");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-53139");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-53162");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-53166");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-53173");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-53213");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-54683");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-56616");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-56628");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2024-57929");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-21742");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-37890");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38000");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38052");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38249");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38352");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38401");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38456");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38476");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38490");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-38595");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-39744");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-68284");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2025-68297");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-23401");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-31431");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-43279");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-43284");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-43456");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-43499");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-46333");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-52972");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-52991");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-53002");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-53006");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-53359");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-63940");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-63985");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-63992");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64000");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64002");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64007");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64009");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64012");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64015");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64046");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64048");
script_set_attribute(attribute:"see_also", value:"https://security.gd-linux.com/info/CVE-2026-64600");
script_set_attribute(attribute:"solution", value:
"Upgrade the vulnerable CGSL kernel packages. Note that updated packages may not be available yet. Please contact ZTE for
more information.");
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:A");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-38595");
script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2026-31431");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2023/12/12");
script_set_attribute(attribute:"patch_publication_date", value:"2026/09/07");
script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/08");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:Zeal-kernel-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:Zeal-packet-cls");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:delaytop");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-headers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-hotfix-1752336");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-kasan");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-kasan-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-kasan-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-kasan-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-kasan-modules-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-kasan-modules-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-modules-extra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:kernel-modules-internal");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:ksm-utils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:system-enhance-cgslv7.25");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:zeal-multi-nic");
script_set_attribute(attribute:"cpe", value:"cpe:/o:zte:cgsl_main:7");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"NewStart CGSL Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl");
script_require_keys("Host/local_checks_enabled", "Host/ZTE-CGSL/release", "Host/ZTE-CGSL/rpm-list", "Host/cpu");
exit(0);
}
include('rpm2.inc');
if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/ZTE-CGSL/release');
if (isnull(os_release) || os_release !~ "^CGSL (MAIN|CORE)") audit(AUDIT_OS_NOT, 'NewStart Carrier Grade Server Linux');
if (os_release !~ "CGSL\sMAIN\s7\.02")
audit(AUDIT_OS_NOT, 'NewStart CGSL MAIN 7.02');
if (!get_kb_item('Host/ZTE-CGSL/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'NewStart Carrier Grade Server Linux', cpu);
var flag = 0;
var pkgs = {
'CGSL MAIN 7.02': [
'Zeal-kernel-tools-6.6.25-2.1.zncgsl7.2471',
'Zeal-packet-cls-6.6.25-2.1.zncgsl7.2471',
'delaytop-6.6.25-2.1.zncgsl7.2471',
'kernel-6.6.25-2.1.zncgsl7.2471',
'kernel-core-6.6.25-2.1.zncgsl7.2471',
'kernel-devel-6.6.25-2.1.zncgsl7.2471',
'kernel-headers-6.6.25-2.1.zncgsl7.2471',
'kernel-hotfix-1752336-6.6.25-2.1.zncgsl7.2471.1',
'kernel-kasan-6.6.25-2.1.zncgsl7.2471',
'kernel-kasan-core-6.6.25-2.1.zncgsl7.2471',
'kernel-kasan-devel-6.6.25-2.1.zncgsl7.2471',
'kernel-kasan-modules-6.6.25-2.1.zncgsl7.2471',
'kernel-kasan-modules-extra-6.6.25-2.1.zncgsl7.2471',
'kernel-kasan-modules-internal-6.6.25-2.1.zncgsl7.2471',
'kernel-modules-6.6.25-2.1.zncgsl7.2471',
'kernel-modules-extra-6.6.25-2.1.zncgsl7.2471',
'kernel-modules-internal-6.6.25-2.1.zncgsl7.2471',
'ksm-utils-6.6.25-2.1.zncgsl7.2471',
'system-enhance-cgslv7.25-6.6.25-2.1.zncgsl7.2471',
'zeal-multi-nic-6.6.25-2.1.zncgsl7.2471'
]
};
var pkg_list = pkgs[os_release];
var pkg;
foreach (pkg in pkg_list)
if (rpm_check(reference:pkg, release:'ZTE ' + os_release, rpm_spec_vers_cmp:TRUE)) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
var tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'kernel');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Sep 2026 00:00Current
CVSS 3.17.8 - 9.8
EPSS0.99907
SSVC