Debian dla-4271linux-config-6.1 - 安全更新
medium Nessus 插件 ID 249178
语言：
简介
远程 Debian 主机上缺少一个或多个与安全相关的更新。描述
远程 Debian 11 主机上存在安装的程序包该程序包受到 dla-4271 公告中提及的多个漏洞的影响。-------------------------------------------------- ----------------------- Debian LTS 公告 DLA-4271-1 [email protected] https://www.debian.org/lts/security/Ben Hutchings 2025 年 8 月 13 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------
程序包linux-6.1 版本6.1.140-1~deb11u1 CVE ID CVE-2024-26618 CVE-2024-26783 CVE-2024-26807 CVE-2024-28956 CVE-2024-35790 CVE-2024-36903 CVE-2024-36927 CVE-2024-43840 CVE-2024-46751 CVE-2024-53203 CVE-2024-53209 CVE-2024-57945 CVE-2025-21645 CVE-2025-21839 CVE-2025-21931 CVE-2025-22062 CVE-2025-37819 CVE-2025-37890 CVE-2025-37897 CVE-2025-37901 CVE-2025-37903 CVE-2025-37905 CVE-2025-37909 CVE-2025-37911 CVE-2025-37912 CVE-2025-37913 CVE-2025-37914 CVE-2025-37915 CVE-2025-37917 CVE-2025-37921 CVE-2025-37923 CVE-2025-37924 CVE-2025-37927 CVE-2025-37928 CVE-2025-37929 CVE-2025-37930 CVE-2025-37932 CVE-2025-37936 CVE-2025-37947 CVE-2025-37948 CVE-2025-37949 CVE-2025-37951 CVE-2025-37953 CVE-2025-37959 CVE-2025-37961 CVE-2025-37962 CVE-2025-37963 CVE-2025-37964 CVE-2025-37967 CVE-2025-37969 CVE-2025-37970 CVE-2025-37972 CVE-2025-37990 CVE-2025-37991 CVE-2025-37992 CVE-2025-37994 CVE-2025-37995 CVE-2025-37997 CVE-2025-37998 CVE-2025-38005 CVE-2025-38007 CVE-2025-38009 CVE-2025-38015 CVE-2025-38018 CVE-2025-38020 CVE-2025-38023 CVE-2025-38024 CVE-2025-38027 CVE-2025-38094 CVE-2025-38095 CVE-2025-38177
在 Linux 内核中发现多个可能导致权限升级、拒绝服务或信息泄漏的漏洞。
对于 Debian 11 Bullseye这些问题已在 6.1.140-1~deb11u1 版本中修复。其中还额外包含了来自于稳定更新 6.1.138-6.1.140 的大量错误修复。
建议您升级 linux-6.1 程序包。
如需了解 linux-6.1 的详细安全状态，请参阅其安全跟踪页面：
https://security-tracker.debian.org/tracker/linux-6.1
有关 Debian LTS 安全公告、如何将这些更新应用到系统以及常见问题解答的更多信息，请访问以下网址：https://wiki.debian.org/LTSAttachment:signature.ascDescription: PGP signature
Tenable 已直接从 Debian 安全公告中提取上述描述块。
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
升级 linux-config-6.1 程序包。另见
https://security-tracker.debian.org/tracker/source-package/linux-6.1
https://security-tracker.debian.org/tracker/CVE-2024-26618
https://security-tracker.debian.org/tracker/CVE-2024-26783
https://security-tracker.debian.org/tracker/CVE-2024-26807
https://security-tracker.debian.org/tracker/CVE-2024-28956
https://security-tracker.debian.org/tracker/CVE-2024-35790
https://security-tracker.debian.org/tracker/CVE-2024-36903
https://security-tracker.debian.org/tracker/CVE-2024-36927
https://security-tracker.debian.org/tracker/CVE-2024-43840
https://security-tracker.debian.org/tracker/CVE-2024-46751
https://security-tracker.debian.org/tracker/CVE-2024-53203
https://security-tracker.debian.org/tracker/CVE-2024-53209
https://security-tracker.debian.org/tracker/CVE-2024-57945
https://security-tracker.debian.org/tracker/CVE-2025-21645
https://security-tracker.debian.org/tracker/CVE-2025-21839
https://security-tracker.debian.org/tracker/CVE-2025-21931
https://security-tracker.debian.org/tracker/CVE-2025-22062
https://security-tracker.debian.org/tracker/CVE-2025-37819
https://security-tracker.debian.org/tracker/CVE-2025-37890
https://security-tracker.debian.org/tracker/CVE-2025-37897
https://security-tracker.debian.org/tracker/CVE-2025-37901
https://security-tracker.debian.org/tracker/CVE-2025-37903
https://security-tracker.debian.org/tracker/CVE-2025-37905
https://security-tracker.debian.org/tracker/CVE-2025-37909
https://security-tracker.debian.org/tracker/CVE-2025-37911
https://security-tracker.debian.org/tracker/CVE-2025-37912
https://security-tracker.debian.org/tracker/CVE-2025-37913
https://security-tracker.debian.org/tracker/CVE-2025-37914
https://security-tracker.debian.org/tracker/CVE-2025-37915
https://security-tracker.debian.org/tracker/CVE-2025-37917
https://security-tracker.debian.org/tracker/CVE-2025-37921
https://security-tracker.debian.org/tracker/CVE-2025-37923
https://security-tracker.debian.org/tracker/CVE-2025-37924
https://security-tracker.debian.org/tracker/CVE-2025-37927
https://security-tracker.debian.org/tracker/CVE-2025-37928
https://security-tracker.debian.org/tracker/CVE-2025-37929
https://security-tracker.debian.org/tracker/CVE-2025-37930
https://security-tracker.debian.org/tracker/CVE-2025-37932
https://security-tracker.debian.org/tracker/CVE-2025-37936
https://security-tracker.debian.org/tracker/CVE-2025-37947
https://security-tracker.debian.org/tracker/CVE-2025-37948
https://security-tracker.debian.org/tracker/CVE-2025-37949
https://security-tracker.debian.org/tracker/CVE-2025-37951
https://security-tracker.debian.org/tracker/CVE-2025-37953
https://security-tracker.debian.org/tracker/CVE-2025-37959
https://security-tracker.debian.org/tracker/CVE-2025-37961
https://security-tracker.debian.org/tracker/CVE-2025-37962
https://security-tracker.debian.org/tracker/CVE-2025-37963
https://security-tracker.debian.org/tracker/CVE-2025-37964
https://security-tracker.debian.org/tracker/CVE-2025-37967
https://security-tracker.debian.org/tracker/CVE-2025-37969
https://security-tracker.debian.org/tracker/CVE-2025-37970
https://security-tracker.debian.org/tracker/CVE-2025-37972
https://security-tracker.debian.org/tracker/CVE-2025-37990
https://security-tracker.debian.org/tracker/CVE-2025-37991
https://security-tracker.debian.org/tracker/CVE-2025-37992
https://security-tracker.debian.org/tracker/CVE-2025-37994
https://security-tracker.debian.org/tracker/CVE-2025-37995
https://security-tracker.debian.org/tracker/CVE-2025-37997
https://security-tracker.debian.org/tracker/CVE-2025-37998
https://security-tracker.debian.org/tracker/CVE-2025-38005
https://security-tracker.debian.org/tracker/CVE-2025-38007
https://security-tracker.debian.org/tracker/CVE-2025-38009
https://security-tracker.debian.org/tracker/CVE-2025-38015
https://security-tracker.debian.org/tracker/CVE-2025-38018
https://security-tracker.debian.org/tracker/CVE-2025-38020
https://security-tracker.debian.org/tracker/CVE-2025-38023
https://security-tracker.debian.org/tracker/CVE-2025-38024
https://security-tracker.debian.org/tracker/CVE-2025-38027
https://security-tracker.debian.org/tracker/CVE-2025-38094
https://security-tracker.debian.org/tracker/CVE-2025-38095
插件详情
严重性: Medium
ID: 249178
文件名: debian_DLA-4271.nasl
版本: 1.1
类型: local
代理: unix
发布时间: 2025/8/13
最近更新时间: 2025/8/13
支持的传感器: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus
风险信息
VPR
风险因素: Medium
分数: 6.7
CVSS v2
风险因素: Medium
基本分数: 6.8
时间分数: 5.3
矢量: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS 分数来源: CVE-2024-53203
CVSS v3
风险因素: High
基本分数: 7.8
时间分数: 7
矢量: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
时间矢量: CVSS:3.0/E:P/RL:O/RC:C
CVSS v4
风险因素: Medium
Base Score: 5.7
Threat Score: 4.7
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 分数来源: CVE-2024-28956
漏洞信息
CPE: p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-rt-arm64, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-armmp-lpae, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-armmp, cpe:/o:debian:debian_linux:11.0, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-common, p-cpe:/a:debian:debian_linux:linux-image-6.1-i386-signed-template, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-armmp-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-armmp, p-cpe:/a:debian:debian_linux:linux-config-6.1, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-armmp-lpae, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-armmp-lpae, p-cpe:/a:debian:debian_linux:linux-doc-6.1, p-cpe:/a:debian:debian_linux:linux-image-6.1-rt-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1-rt-armmp, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-rt-armmp-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-rt-armmp, p-cpe:/a:debian:debian_linux:linux-image-6.1-cloud-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-rt-686-pae, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-cloud-arm64, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-686-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-686, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-686, p-cpe:/a:debian:debian_linux:linux-headers-6.1-armmp, p-cpe:/a:debian:debian_linux:linux-headers-6.1-rt-armmp, p-cpe:/a:debian:debian_linux:linux-image-6.1-686-pae-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-rt-armmp, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-rt-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-armmp, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-rt-amd64, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-amd64-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-cloud-arm64, p-cpe:/a:debian:debian_linux:linux-image-6.1-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1-arm64-signed-template, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-arm64, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-rt-686-pae, p-cpe:/a:debian:debian_linux:linux-image-6.1-rt-armmp-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-686-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-rt-armmp, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-cloud-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-armmp, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-arm64, p-cpe:/a:debian:debian_linux:linux-image-6.1-rt-686-pae-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-rt-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1-armmp-lpae, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-686-pae-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-amd64, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-armmp-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-cloud-amd64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1-amd64-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-common-rt, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-cloud-amd64, p-cpe:/a:debian:debian_linux:linux-support-6.1.0-0.deb11.37, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-armmp-lpae, p-cpe:/a:debian:debian_linux:linux-image-6.1-armmp-dbg, p-cpe:/a:debian:debian_linux:linux-source-6.1, p-cpe:/a:debian:debian_linux:linux-image-6.1-686-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-cloud-arm64-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-amd64, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-cloud-amd64, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-rt-armmp, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-686-pae, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-rt-686-pae-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-armmp-lpae-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-686-pae, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-common-rt, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-rt-armmp-dbg, p-cpe:/a:debian:debian_linux:linux-kbuild-6.1, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-rt-686-pae-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1-armmp-lpae, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-rt-amd64-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-rt-amd64, p-cpe:/a:debian:debian_linux:linux-image-6.1-armmp-lpae-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-armmp-lpae-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1-armmp, p-cpe:/a:debian:debian_linux:linux-image-6.1-amd64-signed-template, p-cpe:/a:debian:debian_linux:linux-image-6.1-rt-amd64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1-cloud-amd64-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.35-686-pae-dbg, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-cloud-amd64-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.37-common, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-rt-amd64-dbg, p-cpe:/a:debian:debian_linux:linux-headers-6.1.0-0.deb11.35-rt-arm64, p-cpe:/a:debian:debian_linux:linux-support-6.1.0-0.deb11.35, p-cpe:/a:debian:debian_linux:linux-image-6.1.0-0.deb11.37-amd64-dbg
必需的 KB 项: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
可利用: true
易利用性: Exploits are available
补丁发布日期: 2025/8/13
漏洞发布日期: 2024/2/29
参考资料信息
CVE: CVE-2024-26618, CVE-2024-26783, CVE-2024-26807, CVE-2024-28956, CVE-2024-35790, CVE-2024-36903, CVE-2024-36927, CVE-2024-43840, CVE-2024-46751, CVE-2024-53203, CVE-2024-53209, CVE-2024-57945, CVE-2025-21645, CVE-2025-21839, CVE-2025-21931, CVE-2025-22062, CVE-2025-37819, CVE-2025-37890, CVE-2025-37897, CVE-2025-37901, CVE-2025-37903, CVE-2025-37905, CVE-2025-37909, CVE-2025-37911, CVE-2025-37912, CVE-2025-37913, CVE-2025-37914, CVE-2025-37915, CVE-2025-37917, CVE-2025-37921, CVE-2025-37923, CVE-2025-37924, CVE-2025-37927, CVE-2025-37928, CVE-2025-37929, CVE-2025-37930, CVE-2025-37932, CVE-2025-37936, CVE-2025-37947, CVE-2025-37948, CVE-2025-37949, CVE-2025-37951, CVE-2025-37953, CVE-2025-37959, CVE-2025-37961, CVE-2025-37962, CVE-2025-37963, CVE-2025-37964, CVE-2025-37967, CVE-2025-37969, CVE-2025-37970, CVE-2025-37972, CVE-2025-37990, CVE-2025-37991, CVE-2025-37992, CVE-2025-37994, CVE-2025-37995, CVE-2025-37997, CVE-2025-37998, CVE-2025-38005, CVE-2025-38007, CVE-2025-38009, CVE-2025-38015, CVE-2025-38018, CVE-2025-38020, CVE-2025-38023, CVE-2025-38024, CVE-2025-38027, CVE-2025-38094, CVE-2025-38095, CVE-2025-38177