AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791741836)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(364688);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/12");

  script_cve_id(
    "CVE-2022-3542",
    "CVE-2022-48862",
    "CVE-2022-49182",
    "CVE-2022-49781",
    "CVE-2022-50550",
    "CVE-2024-26747",
    "CVE-2024-26830",
    "CVE-2024-49891",
    "CVE-2024-49940",
    "CVE-2024-50280",
    "CVE-2024-53197",
    "CVE-2024-55881",
    "CVE-2024-56770",
    "CVE-2025-21938",
    "CVE-2025-21978",
    "CVE-2025-22097",
    "CVE-2025-22125",
    "CVE-2025-37889",
    "CVE-2025-38170",
    "CVE-2025-38455",
    "CVE-2025-38465",
    "CVE-2025-39682",
    "CVE-2025-39964",
    "CVE-2025-39969",
    "CVE-2025-39980",
    "CVE-2025-40019",
    "CVE-2025-40026",
    "CVE-2025-40049",
    "CVE-2025-40103",
    "CVE-2025-40115",
    "CVE-2025-40173",
    "CVE-2025-40178",
    "CVE-2025-40198",
    "CVE-2025-40231",
    "CVE-2025-40252",
    "CVE-2025-40254",
    "CVE-2025-68241",
    "CVE-2025-68264",
    "CVE-2025-68740",
    "CVE-2025-68764",
    "CVE-2026-23310",
    "CVE-2026-23475",
    "CVE-2026-31446",
    "CVE-2026-31505",
    "CVE-2026-31570",
    "CVE-2026-31678",
    "CVE-2026-31680",
    "CVE-2026-43253",
    "CVE-2026-43309",
    "CVE-2026-43333",
    "CVE-2026-43405",
    "CVE-2026-43428",
    "CVE-2026-46199",
    "CVE-2026-46230",
    "CVE-2026-46327",
    "CVE-2026-52910",
    "CVE-2026-52961",
    "CVE-2026-52984",
    "CVE-2026-53060",
    "CVE-2026-53069",
    "CVE-2026-53221",
    "CVE-2026-53266",
    "CVE-2026-63919",
    "CVE-2026-63946",
    "CVE-2026-63971",
    "CVE-2026-64034",
    "CVE-2026-64097",
    "CVE-2026-64319",
    "CVE-2026-64379",
    "CVE-2026-64438",
    "CVE-2026-64545",
    "CVE-2026-68123",
    "CVE-2026-68162",
    "CVE-2026-68201",
    "CVE-2026-68236",
    "CVE-2026-68273",
    "CVE-2026-68288",
    "CVE-2026-68362",
    "CVE-2026-68436",
    "CVE-2026-68446",
    "CVE-2026-72098",
    "CVE-2026-72129",
    "CVE-2026-72130",
    "CVE-2026-72243",
    "CVE-2026-72261",
    "CVE-2026-74287",
    "CVE-2026-74469",
    "CVE-2026-74480",
    "CVE-2026-74635",
    "CVE-2026-74637",
    "CVE-2026-74657",
    "CVE-2026-74671",
    "CVE-2026-74680",
    "CVE-2026-74701",
    "CVE-2026-74717",
    "CVE-2026-74726",
    "CVE-2026-74736",
    "CVE-2026-74743",
    "CVE-2026-74748",
    "CVE-2026-80534",
    "CVE-2026-80574",
    "CVE-2026-80589",
    "CVE-2026-80726",
    "CVE-2026-80844",
    "CVE-2026-89643",
    "CVE-2026-89682",
    "CVE-2026-89711",
    "CVE-2026-89817",
    "CVE-2026-89846",
    "CVE-2026-90067",
    "CVE-2026-90228",
    "CVE-2026-90413",
    "CVE-2026-93185",
    "CVE-2026-93228",
    "CVE-2026-97417",
    "CVE-2026-97517",
    "CVE-2026-97555",
    "CVE-2026-97964",
    "CVE-2026-97991",
    "CVE-2026-98016",
    "CVE-2026-98031",
    "CVE-2026-98075",
    "CVE-2026-98154",
    "CVE-2026-98161",
    "CVE-2026-98374",
    "CVE-2026-100075"
  );
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/04/30");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2026/09/21");
  script_xref(name:"CLSA", value:"2026:1791741836");

  script_name(english:"AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791741836)");

  script_set_attribute(attribute:"synopsis", value:
"The AlmaLinux host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare
ALMALINUX9.2:CLSA-2026:1791741836 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due to
    erroneous iotlb entries In vhost_iotlb_add_range_ctx(), range size can overflow to 0 when start is 0 and
    last is ULONG_MAX. One instance where it can happen is when userspace sends an IOTLB message with
    iova=size=uaddr=0 (vhost_process_iotlb_msg). So, an entry with size = 0, start = 0, last = ULONG_MAX ends
    up in the iotlb. Next time a packet is sent, iotlb_access_ok() loops indefinitely due to that erroneous
    entry. Call Trace: <TASK> iotlb_access_ok+0x21b/0x3e0 drivers/vhost/vhost.c:1340
    vq_meta_prefetch+0xbc/0x280 drivers/vhost/vhost.c:1366 vhost_transport_do_send_pkt+0xe0/0xfd0
    drivers/vhost/vsock.c:104 vhost_worker+0x23d/0x3d0 drivers/vhost/vhost.c:372 kthread+0x2e9/0x3a0
    kernel/kthread.c:377 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK> Reported by syzbot at:
    https://syzkaller.appspot.com/bug?extid=0abd373e2e50d704db87 To fix this, do two things: 1. Return -EINVAL
    in vhost_chr_write_iter() when userspace asks to map a range with size 0. 2. Fix
    vhost_iotlb_add_range_ctx() to handle the range [0, ULONG_MAX] by splitting it into two entries.
    (CVE-2022-48862)

  - In the Linux kernel, the following vulnerability has been resolved: net: hns3: add vlan list lock to
    protect vlan list When adding port base VLAN, vf VLAN need to remove from HW and modify the vlan state in
    vf VLAN list as false. If the periodicity task is freeing the same node, it may cause use after free
    error. This patch adds a vlan list lock to protect the vlan list. (CVE-2022-49182)

  - In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Fix crash due to race
    between amd_pmu_enable_all, perf NMI and throttling amd_pmu_enable_all() does: if (!test_bit(idx,
    cpuc->active_mask)) continue; amd_pmu_enable_event(cpuc->events[idx]); A perf NMI of another event can
    come between these two steps. Perf NMI handler internally disables and enables _all_ events, including the
    one which nmi-intercepted amd_pmu_enable_all() was in process of enabling. If that unintentionally enabled
    event has very low sampling period and causes immediate successive NMI, causing the event to be throttled,
    cpuc->events[idx] and cpuc->active_mask gets cleared by x86_pmu_stop(). This will result in
    amd_pmu_enable_event() getting called with event=NULL when amd_pmu_enable_all() resumes after handling the
    NMIs. This causes a kernel crash: BUG: kernel NULL pointer dereference, address: 0000000000000198 #PF:
    supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page [...] Call Trace: <TASK>
    amd_pmu_enable_all+0x68/0xb0 ctx_resched+0xd9/0x150 event_function+0xb8/0x130 ?
    hrtimer_start_range_ns+0x141/0x4a0 ? perf_duration_warn+0x30/0x30 remote_function+0x4d/0x60
    __flush_smp_call_function_queue+0xc4/0x500 flush_smp_call_function_queue+0x11d/0x1b0 do_idle+0x18f/0x2d0
    cpu_startup_entry+0x19/0x20 start_secondary+0x121/0x160 secondary_startup_64_no_verify+0xe5/0xeb </TASK>
    amd_pmu_disable_all()/amd_pmu_enable_all() calls inside perf NMI handler were recently added as part of
    BRS enablement but I'm not sure whether we really need them. We can just disable BRS in the beginning and
    enable it back while returning from NMI. This will solve the issue by not enabling those events whose
    active_masks are set but are not yet enabled in hw pmu. (CVE-2022-49781)

  - In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix memory leak on
    add_disk() failures When a gendisk is successfully initialized but add_disk() fails such as when a loop
    device has invalid number of minor device numbers specified, blkcg_init_disk() is called during init and
    then blkcg_exit_disk() during error handling. Unfortunately, iolatency gets initialized in the former but
    doesn't get cleaned up in the latter. This is because, in non-error cases, the cleanup is performed by
    del_gendisk() calling rq_qos_exit(), the assumption being that rq_qos policies, iolatency being one of
    them, can only be activated once the disk is fully registered and visible. That assumption is true for wbt
    and iocost, but not so for iolatency as it gets initialized before add_disk() is called. It is desirable
    to lazy-init rq_qos policies because they are optional features and add to hot path overhead once
    initialized - each IO has to walk all the registered rq_qos policies. So, we want to switch iolatency to
    lazy init too. However, that's a bigger change. As a fix for the immediate problem, let's just add an
    extra call to rq_qos_exit() in blkcg_exit_disk(). This is safe because duplicate calls to rq_qos_exit()
    become noop's. (CVE-2022-50550)

  - In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue
    when put module's reference In current design, usb role class driver will get usb_role_switch parent's
    module reference after the user get usb_role_switch device and put the reference after the user put the
    usb_role_switch device. However, the parent device of usb_role_switch may be removed before the user put
    the usb_role_switch. If so, then, NULL pointer issue will be met when the user put the parent module's
    reference. This will save the module pointer in structure of usb_role_switch. Then, we don't need to find
    module by iterating long relations. (CVE-2024-26747)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2026/clsa-2026_1791741836.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a42c3ffa");
  script_set_attribute(attribute:"see_also", value:"https://cve.tuxcare.com/els/releases/CLSA-2026:1791741836");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages based on the guidance in TuxCare advisory ALMALINUX9.2:CLSA-2026:1791741836.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-39682");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"vendor_severity", value:"Critical");

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/07/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/10/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Alma Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl");
  script_require_keys("Host/OS/extended-third-party", "Host/local_checks_enabled", "Host/AlmaLinux/release", "Host/AlmaLinux/rpm-list", "Host/cpu");

  exit(0);
}
include('rpm2.inc');

var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (empty_or_null(third_party_support) || third_party_support != 'TuxCare') exit(0, 'TuxCare support not enabled.');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'AlmaLinux' >!< os_product) audit(AUDIT_OS_NOT, 'AlmaLinux');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'AlmaLinux');
if (! preg(pattern:"^9.2([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'AlmaLinux 9.2', 'AlmaLinux ' + os_version);

if (!get_kb_item('Host/AlmaLinux/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('aarch64' >!< cpu && cpu !~ "^i[3-6]86$" && 'x86_64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'AlmaLinux', cpu);


var constraints = [
  {
    'release': '9',
    'sp': '2',
    'pkgs': [
      {'reference':'bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-devel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-modules-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-64k-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'i686', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'i686', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'libbpf-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'libbpf-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'i686', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'libbpf-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'i686', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'libbpf-static-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'libbpf-static-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'i686', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'libbpf-static-1.0.0-2.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE, 'epoch':'2'},
      {'reference':'perf-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'perf-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'rtla-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'aarch64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE},
      {'reference':'rtla-5.14.0-284.1101.el9_2.tuxcare.11.els15', 'sp':'2', 'cpu':'x86_64', 'el_string':'el9_2', 'rpm_spec_vers_cmp':TRUE}
    ]
  }
];

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
  # Check that the target release is equal to the affected release
  if (!empty_or_null(constraint['release'])){
    if (constraint['release'] != os_release) continue;
  }
  if (!empty_or_null(constraint['sp'])){
    if (constraint['sp'] != os_sp) continue;
  }
  foreach var pkg ( constraint['pkgs'] ) {
    reference = NULL;
    sp = NULL;
    _cpu = NULL;
    el_string = NULL;
    rpm_spec_vers_cmp = NULL;
    epoch = NULL;
    allowmaj = NULL;
    exists_check = NULL;
    cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        ## (no known rpm to check OR known rpm_exists)
        (!exists_check || rpm_exists(rpm:exists_check)) &&
        rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}


if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc');
}