AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1743193221)
10
10
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(361440);
script_version("1.2");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/02");
script_cve_id(
"CVE-2019-25162",
"CVE-2021-47101",
"CVE-2021-47185",
"CVE-2021-47383",
"CVE-2021-47515",
"CVE-2022-0480",
"CVE-2022-2977",
"CVE-2022-3534",
"CVE-2022-3594",
"CVE-2022-36402",
"CVE-2022-38096",
"CVE-2022-40982",
"CVE-2022-42895",
"CVE-2022-48627",
"CVE-2022-48637",
"CVE-2022-48655",
"CVE-2022-48672",
"CVE-2022-48804",
"CVE-2022-48988",
"CVE-2022-49011",
"CVE-2023-1073",
"CVE-2023-1074",
"CVE-2023-1075",
"CVE-2023-1076",
"CVE-2023-1077",
"CVE-2023-1079",
"CVE-2023-1206",
"CVE-2023-1855",
"CVE-2023-2269",
"CVE-2023-3161",
"CVE-2023-3212",
"CVE-2023-3358",
"CVE-2023-3772",
"CVE-2023-4133",
"CVE-2023-4194",
"CVE-2023-4273",
"CVE-2023-4622",
"CVE-2023-5717",
"CVE-2023-6176",
"CVE-2023-6546",
"CVE-2023-6622",
"CVE-2023-21102",
"CVE-2023-26545",
"CVE-2023-28464",
"CVE-2023-28866",
"CVE-2023-30456",
"CVE-2023-33203",
"CVE-2023-39189",
"CVE-2023-39191",
"CVE-2023-39193",
"CVE-2023-39194",
"CVE-2023-39198",
"CVE-2023-42754",
"CVE-2023-46813",
"CVE-2023-51779",
"CVE-2023-52474",
"CVE-2023-52475",
"CVE-2023-52477",
"CVE-2023-52494",
"CVE-2023-52501",
"CVE-2023-52504",
"CVE-2023-52513",
"CVE-2023-52519",
"CVE-2023-52520",
"CVE-2023-52528",
"CVE-2023-52531",
"CVE-2023-52562",
"CVE-2023-52594",
"CVE-2023-52595",
"CVE-2023-52612",
"CVE-2023-52614",
"CVE-2023-52628",
"CVE-2023-52635",
"CVE-2023-52637",
"CVE-2023-52651",
"CVE-2023-52667",
"CVE-2023-52679",
"CVE-2023-52707",
"CVE-2023-52735",
"CVE-2023-52741",
"CVE-2023-52751",
"CVE-2023-52752",
"CVE-2023-52809",
"CVE-2023-52812",
"CVE-2023-52818",
"CVE-2023-52837",
"CVE-2023-52840",
"CVE-2023-52854",
"CVE-2023-52859",
"CVE-2023-52880",
"CVE-2023-52884",
"CVE-2023-52885",
"CVE-2024-0841",
"CVE-2024-25742",
"CVE-2024-25744",
"CVE-2024-26582",
"CVE-2024-26584",
"CVE-2024-26593",
"CVE-2024-26595",
"CVE-2024-26602",
"CVE-2024-26603",
"CVE-2024-26610",
"CVE-2024-26615",
"CVE-2024-26629",
"CVE-2024-26642",
"CVE-2024-26643",
"CVE-2024-26664",
"CVE-2024-26665",
"CVE-2024-26668",
"CVE-2024-26669",
"CVE-2024-26673",
"CVE-2024-26689",
"CVE-2024-26704",
"CVE-2024-26734",
"CVE-2024-26735",
"CVE-2024-26737",
"CVE-2024-26743",
"CVE-2024-26744",
"CVE-2024-26754",
"CVE-2024-26779",
"CVE-2024-26782",
"CVE-2024-26800",
"CVE-2024-26804",
"CVE-2024-26828",
"CVE-2024-26852",
"CVE-2024-26853",
"CVE-2024-26855",
"CVE-2024-26872",
"CVE-2024-26882",
"CVE-2024-26883",
"CVE-2024-26884",
"CVE-2024-26885",
"CVE-2024-26886",
"CVE-2024-26897",
"CVE-2024-26898",
"CVE-2024-26901",
"CVE-2024-26903",
"CVE-2024-26907",
"CVE-2024-26908",
"CVE-2024-26923",
"CVE-2024-26925",
"CVE-2024-26929",
"CVE-2024-26931",
"CVE-2024-26933",
"CVE-2024-26934",
"CVE-2024-26946",
"CVE-2024-26958",
"CVE-2024-26961",
"CVE-2024-26964",
"CVE-2024-26973",
"CVE-2024-26989",
"CVE-2024-26993",
"CVE-2024-27014",
"CVE-2024-27016",
"CVE-2024-27020",
"CVE-2024-27030",
"CVE-2024-27043",
"CVE-2024-27045",
"CVE-2024-27046",
"CVE-2024-27052",
"CVE-2024-27059",
"CVE-2024-27395",
"CVE-2024-27397",
"CVE-2024-27415",
"CVE-2024-33621",
"CVE-2024-35789",
"CVE-2024-35791",
"CVE-2024-35823",
"CVE-2024-35845",
"CVE-2024-35847",
"CVE-2024-35852",
"CVE-2024-35855",
"CVE-2024-35861",
"CVE-2024-35862",
"CVE-2024-35863",
"CVE-2024-35864",
"CVE-2024-35866",
"CVE-2024-35867",
"CVE-2024-35868",
"CVE-2024-35885",
"CVE-2024-35890",
"CVE-2024-35895",
"CVE-2024-35896",
"CVE-2024-35898",
"CVE-2024-35905",
"CVE-2024-35962",
"CVE-2024-35979",
"CVE-2024-36012",
"CVE-2024-36017",
"CVE-2024-36020",
"CVE-2024-36025",
"CVE-2024-36270",
"CVE-2024-36883",
"CVE-2024-36886",
"CVE-2024-36897",
"CVE-2024-36899",
"CVE-2024-36901",
"CVE-2024-36902",
"CVE-2024-36904",
"CVE-2024-36929",
"CVE-2024-36940",
"CVE-2024-36941",
"CVE-2024-36960",
"CVE-2024-36971",
"CVE-2024-36978",
"CVE-2024-36979",
"CVE-2024-37353",
"CVE-2024-37356",
"CVE-2024-38384",
"CVE-2024-38538",
"CVE-2024-38552",
"CVE-2024-38555",
"CVE-2024-38558",
"CVE-2024-38559",
"CVE-2024-38562",
"CVE-2024-38570",
"CVE-2024-38579",
"CVE-2024-38581",
"CVE-2024-38586",
"CVE-2024-38588",
"CVE-2024-38601",
"CVE-2024-38619",
"CVE-2024-38627",
"CVE-2024-39277",
"CVE-2024-39471",
"CVE-2024-39476",
"CVE-2024-39494",
"CVE-2024-39502",
"CVE-2024-40905",
"CVE-2024-40911",
"CVE-2024-40912",
"CVE-2024-40914",
"CVE-2024-40927",
"CVE-2024-40929",
"CVE-2024-40941",
"CVE-2024-40954",
"CVE-2024-40956",
"CVE-2024-40978",
"CVE-2024-40983",
"CVE-2024-40984",
"CVE-2024-40995",
"CVE-2024-41000",
"CVE-2024-41013",
"CVE-2024-41023",
"CVE-2024-41039",
"CVE-2024-41040",
"CVE-2024-41041",
"CVE-2024-41044",
"CVE-2024-41049",
"CVE-2024-41057",
"CVE-2024-41058",
"CVE-2024-41071",
"CVE-2024-41073",
"CVE-2024-41076",
"CVE-2024-41087",
"CVE-2024-41090",
"CVE-2024-41091",
"CVE-2024-41092",
"CVE-2024-41096",
"CVE-2024-42082",
"CVE-2024-42096",
"CVE-2024-42110",
"CVE-2024-42131",
"CVE-2024-42136",
"CVE-2024-42148",
"CVE-2024-42152",
"CVE-2024-42154",
"CVE-2024-42159",
"CVE-2024-42161",
"CVE-2024-42225",
"CVE-2024-42228",
"CVE-2024-42243",
"CVE-2024-42284",
"CVE-2024-42285",
"CVE-2024-42301",
"CVE-2024-43830",
"CVE-2024-43882",
"CVE-2024-44970",
"CVE-2024-44977",
"CVE-2024-44987",
"CVE-2024-46673",
"CVE-2024-46700",
"CVE-2024-46722",
"CVE-2024-46723",
"CVE-2024-46724",
"CVE-2024-46725",
"CVE-2024-46731",
"CVE-2024-46738",
"CVE-2024-46743",
"CVE-2024-46744",
"CVE-2024-46746",
"CVE-2024-46747",
"CVE-2024-46756",
"CVE-2024-46757",
"CVE-2024-46758",
"CVE-2024-46759",
"CVE-2024-46800",
"CVE-2024-46811",
"CVE-2024-46813",
"CVE-2024-46818",
"CVE-2024-46821",
"CVE-2024-46853",
"CVE-2024-46858",
"CVE-2024-46859",
"CVE-2024-46871",
"CVE-2024-47685",
"CVE-2024-47698",
"CVE-2024-47701",
"CVE-2024-47742",
"CVE-2024-47745",
"CVE-2024-49860",
"CVE-2024-49882",
"CVE-2024-49883",
"CVE-2024-49884",
"CVE-2024-49889",
"CVE-2024-49894",
"CVE-2024-49895",
"CVE-2024-49930",
"CVE-2024-49950",
"CVE-2024-49960",
"CVE-2024-49967",
"CVE-2024-49969",
"CVE-2024-49989",
"CVE-2024-49991",
"CVE-2024-49995",
"CVE-2024-49996",
"CVE-2024-50033",
"CVE-2024-50035",
"CVE-2024-50036",
"CVE-2024-50047",
"CVE-2024-50055",
"CVE-2024-50067",
"CVE-2024-50073",
"CVE-2024-50074",
"CVE-2024-50115",
"CVE-2024-50124",
"CVE-2024-50125",
"CVE-2024-50127",
"CVE-2024-50131",
"CVE-2024-50143",
"CVE-2024-50150",
"CVE-2024-50151",
"CVE-2024-50154",
"CVE-2024-50262",
"CVE-2024-50264",
"CVE-2024-50267",
"CVE-2024-50278",
"CVE-2024-50279",
"CVE-2024-50301",
"CVE-2024-50302",
"CVE-2024-53057",
"CVE-2024-53059",
"CVE-2024-53103",
"CVE-2024-53104",
"CVE-2024-53141",
"CVE-2024-53142",
"CVE-2024-53150",
"CVE-2024-53156",
"CVE-2024-53173",
"CVE-2024-53179",
"CVE-2024-53239",
"CVE-2024-56538",
"CVE-2024-56551",
"CVE-2024-56600",
"CVE-2024-56601",
"CVE-2024-56602",
"CVE-2024-56603",
"CVE-2024-56604",
"CVE-2024-56605",
"CVE-2024-56606",
"CVE-2024-56608",
"CVE-2024-56614",
"CVE-2024-56615",
"CVE-2024-56631",
"CVE-2024-56642",
"CVE-2024-56658",
"CVE-2024-56662",
"CVE-2024-56664",
"CVE-2024-56672",
"CVE-2024-56708",
"CVE-2024-57798",
"CVE-2025-21692",
"CVE-2025-21795"
);
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2024/08/28");
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/02/26");
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/03/25");
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/04/30");
script_xref(name:"CLSA", value:"2025:1743193221");
script_name(english:"AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1743193221)");
script_set_attribute(attribute:"synopsis", value:
"The AlmaLinux host is missing one or more security updates.");
script_set_attribute(attribute:"description", value:
"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare
ALMALINUX9.2:CLSA-2025:1743193221 advisory.
- In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in
asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be
uninitialized. Fail log: BUG: KMSAN: uninit-value in asix_check_host_enable
drivers/net/usb/asix_common.c:82 [inline] BUG: KMSAN: uninit-value in asix_check_host_enable
drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 BUG: KMSAN: uninit-value in
asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497
asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] asix_check_host_enable
drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 asix_mdio_read+0x3c1/0xb00
drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497 (CVE-2021-47101)
- A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to
host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX)
file locks. (CVE-2022-0480)
- A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this
vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The
manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to
apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.
(CVE-2022-3594)
- In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in
vt_setactivate array_index_nospec ensures that an out-of-bounds value is set to zero on the transient
path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be
decreased first and then sanitized with array_index_nospec. Kasper Acknowledgements: Jakob Koschel, Brian
Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.
(CVE-2022-48804)
- A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness,
potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field
that overlaps with rec->tx_ready. (CVE-2023-1075)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
# https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2025/clsa-2025_1743193221.json
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?0bc82a96");
script_set_attribute(attribute:"see_also", value:"https://cve.tuxcare.com/els/releases/CLSA-2025:1743193221");
script_set_attribute(attribute:"solution", value:
"Update the affected packages based on the guidance in TuxCare advisory ALMALINUX9.2:CLSA-2025:1743193221.");
script_set_cvss_base_vector("CVSS2#AV:A/AC:M/Au:S/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N");
script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:A");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-3534");
script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2024-47685");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"exploit_framework_core", value:"true");
script_set_attribute(attribute:"exploited_by_malware", value:"true");
script_set_attribute(attribute:"vendor_severity", value:"Critical");
script_set_attribute(attribute:"vuln_publication_date", value:"2021/07/21");
script_set_attribute(attribute:"patch_publication_date", value:"2025/03/28");
script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/01");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Alma Linux Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl");
script_require_keys("Host/OS/extended-third-party", "Host/local_checks_enabled", "Host/AlmaLinux/release", "Host/AlmaLinux/rpm-list", "Host/cpu");
exit(0);
}
include('rpm2.inc');
var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (empty_or_null(third_party_support) || third_party_support != 'TuxCare') exit(0, 'TuxCare support not enabled.');
if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'AlmaLinux' >!< os_product) audit(AUDIT_OS_NOT, 'AlmaLinux');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'AlmaLinux');
if (! preg(pattern:"^9.2([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'AlmaLinux 9.2', 'AlmaLinux ' + os_version);
if (!get_kb_item('Host/AlmaLinux/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'AlmaLinux', cpu);
var constraints = [
{
'release': '9',
'sp': '2',
'pkgs': [
{'reference':'bpftool-7.0.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-core-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'perf-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'python3-perf-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
{'reference':'rtla-5.14.0-284.1101.el9_2.tuxcare.7', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE}
]
}
];
var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');
var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
# Check that the target release is equal to the affected release
if (!empty_or_null(constraint['release'])){
if (constraint['release'] != os_release) continue;
}
if (!empty_or_null(constraint['sp'])){
if (constraint['sp'] != os_sp) continue;
}
foreach var pkg ( constraint['pkgs'] ) {
reference = NULL;
sp = NULL;
_cpu = NULL;
el_string = NULL;
rpm_spec_vers_cmp = NULL;
epoch = NULL;
allowmaj = NULL;
exists_check = NULL;
cves = NULL;
if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
if (reference &&
## (no known rpm to check OR known rpm_exists)
(!exists_check || rpm_exists(rpm:exists_check)) &&
rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
}
}
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
var tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'bpftool / kernel / kernel-abi-stablelists / kernel-core / etc');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
02 Oct 2026 00:00Current
5.6Medium risk
Vulners AI Score5.6
CVSS 3.19.1 - 10
CVSS 24.9
CVSS 45.1
CVSS 35.5
EPSS0.03395
SSVC