Photon OS 5.0: Linux PHSA-2026-5.0-91-0837

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from VMware Security Advisory PHSA-2026-5.0-91-0837. The text
# itself is copyright (C) VMware, Inc.
##

include('compat.inc');

if (description)
{
  script_id(337084);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/18");

  script_cve_id(
    "CVE-2025-38704",
    "CVE-2025-38718",
    "CVE-2025-39863",
    "CVE-2025-39871",
    "CVE-2025-40248",
    "CVE-2025-40254",
    "CVE-2025-40257",
    "CVE-2025-68254",
    "CVE-2025-68255",
    "CVE-2025-68263",
    "CVE-2025-68291",
    "CVE-2025-68349",
    "CVE-2025-68362",
    "CVE-2025-68724",
    "CVE-2025-71071",
    "CVE-2025-71075",
    "CVE-2025-71077",
    "CVE-2025-71078",
    "CVE-2025-71079",
    "CVE-2025-71081",
    "CVE-2025-71082",
    "CVE-2025-71083",
    "CVE-2025-71084",
    "CVE-2025-71085",
    "CVE-2025-71086",
    "CVE-2025-71087",
    "CVE-2025-71089",
    "CVE-2025-71091",
    "CVE-2025-71093",
    "CVE-2025-71094",
    "CVE-2025-71095",
    "CVE-2025-71096",
    "CVE-2025-71097",
    "CVE-2025-71098",
    "CVE-2025-71102",
    "CVE-2025-71104",
    "CVE-2025-71105",
    "CVE-2025-71108",
    "CVE-2025-71111",
    "CVE-2025-71112",
    "CVE-2025-71113",
    "CVE-2025-71114",
    "CVE-2025-71118",
    "CVE-2025-71119",
    "CVE-2025-71121",
    "CVE-2025-71125",
    "CVE-2025-71130",
    "CVE-2025-71131",
    "CVE-2025-71132",
    "CVE-2025-71133",
    "CVE-2025-71136",
    "CVE-2025-71137",
    "CVE-2025-71180",
    "CVE-2025-71182",
    "CVE-2025-71183",
    "CVE-2025-71192",
    "CVE-2025-71232",
    "CVE-2025-71235",
    "CVE-2025-71237",
    "CVE-2025-71274",
    "CVE-2025-71287",
    "CVE-2025-71288",
    "CVE-2025-71291",
    "CVE-2025-71292",
    "CVE-2025-71295",
    "CVE-2025-71297",
    "CVE-2025-71304",
    "CVE-2025-71305",
    "CVE-2026-23001",
    "CVE-2026-23011",
    "CVE-2026-23019",
    "CVE-2026-23020",
    "CVE-2026-23021",
    "CVE-2026-23025",
    "CVE-2026-23047",
    "CVE-2026-23073",
    "CVE-2026-23139",
    "CVE-2026-23140",
    "CVE-2026-23204",
    "CVE-2026-23227",
    "CVE-2026-23229",
    "CVE-2026-23230",
    "CVE-2026-23268",
    "CVE-2026-23352",
    "CVE-2026-31411",
    "CVE-2026-31412",
    "CVE-2026-31540",
    "CVE-2026-31545",
    "CVE-2026-31546",
    "CVE-2026-31548",
    "CVE-2026-31549",
    "CVE-2026-31550",
    "CVE-2026-31551",
    "CVE-2026-31683",
    "CVE-2026-43060",
    "CVE-2026-43062",
    "CVE-2026-43123",
    "CVE-2026-43124",
    "CVE-2026-43128",
    "CVE-2026-43130",
    "CVE-2026-43132",
    "CVE-2026-43133",
    "CVE-2026-43134",
    "CVE-2026-43135",
    "CVE-2026-43136",
    "CVE-2026-43139",
    "CVE-2026-43140",
    "CVE-2026-43141",
    "CVE-2026-43143",
    "CVE-2026-43148",
    "CVE-2026-43149",
    "CVE-2026-43150",
    "CVE-2026-43152",
    "CVE-2026-43156",
    "CVE-2026-43157",
    "CVE-2026-43158",
    "CVE-2026-43159",
    "CVE-2026-43162",
    "CVE-2026-43163",
    "CVE-2026-43168",
    "CVE-2026-43171",
    "CVE-2026-43173",
    "CVE-2026-43180",
    "CVE-2026-43182",
    "CVE-2026-43183",
    "CVE-2026-43184",
    "CVE-2026-43186",
    "CVE-2026-43187",
    "CVE-2026-43190",
    "CVE-2026-43194",
    "CVE-2026-43196",
    "CVE-2026-43200",
    "CVE-2026-43202",
    "CVE-2026-43203",
    "CVE-2026-43205",
    "CVE-2026-43206",
    "CVE-2026-43207",
    "CVE-2026-43209",
    "CVE-2026-43212",
    "CVE-2026-43214",
    "CVE-2026-43218",
    "CVE-2026-43221",
    "CVE-2026-43223",
    "CVE-2026-43225",
    "CVE-2026-43226",
    "CVE-2026-43227",
    "CVE-2026-43230",
    "CVE-2026-43231",
    "CVE-2026-43232",
    "CVE-2026-43233",
    "CVE-2026-43236",
    "CVE-2026-43238",
    "CVE-2026-43240",
    "CVE-2026-43241",
    "CVE-2026-43246",
    "CVE-2026-43251",
    "CVE-2026-43255",
    "CVE-2026-43256",
    "CVE-2026-43257",
    "CVE-2026-43261",
    "CVE-2026-43262",
    "CVE-2026-43264",
    "CVE-2026-43265",
    "CVE-2026-43266",
    "CVE-2026-43268",
    "CVE-2026-43269",
    "CVE-2026-43270",
    "CVE-2026-43273",
    "CVE-2026-43275",
    "CVE-2026-43277",
    "CVE-2026-43278",
    "CVE-2026-43279",
    "CVE-2026-43281",
    "CVE-2026-43283",
    "CVE-2026-43287",
    "CVE-2026-43289",
    "CVE-2026-43295",
    "CVE-2026-43296",
    "CVE-2026-43302",
    "CVE-2026-43304",
    "CVE-2026-43312",
    "CVE-2026-43313",
    "CVE-2026-43314",
    "CVE-2026-43315",
    "CVE-2026-43316",
    "CVE-2026-43357",
    "CVE-2026-43359",
    "CVE-2026-43360",
    "CVE-2026-43361",
    "CVE-2026-43363",
    "CVE-2026-43365",
    "CVE-2026-43366",
    "CVE-2026-43370",
    "CVE-2026-43373",
    "CVE-2026-43377",
    "CVE-2026-43378",
    "CVE-2026-43380",
    "CVE-2026-43381",
    "CVE-2026-43383",
    "CVE-2026-43386",
    "CVE-2026-43387",
    "CVE-2026-43405",
    "CVE-2026-43406",
    "CVE-2026-43407",
    "CVE-2026-43411",
    "CVE-2026-43412",
    "CVE-2026-43420",
    "CVE-2026-43424",
    "CVE-2026-43425",
    "CVE-2026-43426",
    "CVE-2026-43427",
    "CVE-2026-43428",
    "CVE-2026-43429",
    "CVE-2026-43430",
    "CVE-2026-43432",
    "CVE-2026-43436",
    "CVE-2026-43437",
    "CVE-2026-43439",
    "CVE-2026-43441",
    "CVE-2026-43445",
    "CVE-2026-43448",
    "CVE-2026-43449",
    "CVE-2026-43450",
    "CVE-2026-43451",
    "CVE-2026-43452",
    "CVE-2026-43453",
    "CVE-2026-43455",
    "CVE-2026-43457",
    "CVE-2026-43458",
    "CVE-2026-43459",
    "CVE-2026-43466",
    "CVE-2026-43468",
    "CVE-2026-43469",
    "CVE-2026-43472",
    "CVE-2026-43473",
    "CVE-2026-43475",
    "CVE-2026-43476",
    "CVE-2026-43480",
    "CVE-2026-43483",
    "CVE-2026-43484",
    "CVE-2026-45847",
    "CVE-2026-45848",
    "CVE-2026-45856",
    "CVE-2026-45857",
    "CVE-2026-45858",
    "CVE-2026-45860",
    "CVE-2026-45862",
    "CVE-2026-45864",
    "CVE-2026-45865",
    "CVE-2026-45866",
    "CVE-2026-45867",
    "CVE-2026-45868",
    "CVE-2026-45869",
    "CVE-2026-45870",
    "CVE-2026-45871",
    "CVE-2026-45872",
    "CVE-2026-45873",
    "CVE-2026-45875",
    "CVE-2026-45879",
    "CVE-2026-45881",
    "CVE-2026-45883",
    "CVE-2026-45885",
    "CVE-2026-45886",
    "CVE-2026-45890",
    "CVE-2026-45891",
    "CVE-2026-45892",
    "CVE-2026-45899",
    "CVE-2026-45902",
    "CVE-2026-45905",
    "CVE-2026-45911",
    "CVE-2026-45912",
    "CVE-2026-45915",
    "CVE-2026-45916",
    "CVE-2026-45919",
    "CVE-2026-45920",
    "CVE-2026-45923",
    "CVE-2026-45935",
    "CVE-2026-45936",
    "CVE-2026-45941",
    "CVE-2026-45946",
    "CVE-2026-45948",
    "CVE-2026-45954",
    "CVE-2026-45958",
    "CVE-2026-45960",
    "CVE-2026-45962",
    "CVE-2026-45964",
    "CVE-2026-45965",
    "CVE-2026-45968",
    "CVE-2026-45969",
    "CVE-2026-45970",
    "CVE-2026-45974",
    "CVE-2026-45978",
    "CVE-2026-45981",
    "CVE-2026-45982",
    "CVE-2026-45983",
    "CVE-2026-45984",
    "CVE-2026-46247",
    "CVE-2026-46249",
    "CVE-2026-46250",
    "CVE-2026-46251",
    "CVE-2026-46253",
    "CVE-2026-46259",
    "CVE-2026-46265",
    "CVE-2026-46267",
    "CVE-2026-46270",
    "CVE-2026-46328"
  );

  script_name(english:"Photon OS 5.0: Linux PHSA-2026-5.0-91-0837");

  script_set_attribute(attribute:"synopsis", value:
"The remote PhotonOS host is missing multiple security updates.");
  script_set_attribute(attribute:"description", value:
"An update of the linux package has been released.");
  script_set_attribute(attribute:"see_also", value:"https://github.com/vmware/photon/wiki/Security-Update-5.0-91-837.md");
  script_set_attribute(attribute:"solution", value:
"Update the affected Linux packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-46267");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/02/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/04/30");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:vmware:photonos:linux");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:vmware:photonos:5.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"PhotonOS Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/PhotonOS/release", "Host/PhotonOS/rpm-list");

  exit(0);
}

include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var _release = get_kb_item('Host/PhotonOS/release');
if (isnull(_release) || _release !~ "^VMware Photon") audit(AUDIT_OS_NOT, 'PhotonOS');
if (_release !~ "^VMware Photon (?:Linux|OS) 5\.0(\D|$)") audit(AUDIT_OS_NOT, 'PhotonOS 5.0');

if (!get_kb_item('Host/PhotonOS/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'PhotonOS', cpu);

var flag = 0;

if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-6.1.169-2.ph5')) flag++;
if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-devel-6.1.169-2.ph5')) flag++;
if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-docs-6.1.169-2.ph5')) flag++;
if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-drivers-intel-i40e-2.22.18-10.0601169002.ph5')) flag++;
if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-drivers-intel-i40e-docs-2.22.18-10.0601169002.ph5')) flag++;
if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-drivers-intel-iavf-4.9.5-9.0601169002.ph5')) flag++;
if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-drivers-intel-iavf-docs-4.9.5-9.0601169002.ph5')) flag++;
if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-drivers-intel-ice-1.13.7-9.0601169002.ph5')) flag++;
if (rpm_check(release:'PhotonOS-5.0', cpu:'x86_64', reference:'linux-esx-drivers-intel-ice-docs-1.13.7-9.0601169002.ph5')) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_WARNING,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'linux');
}