远程 CentOS Linux 9 主机安装的程序包受到 kernel-5.14.0-677.el9 版本变更日志中提及的漏洞影响。

  - 已修复 Linux 内核中的下列漏洞：audit: fix out-of-bounds read in audit_compare_dname_path() When a watch on dir=/ is combined with an fsnotify event for a single-character name directly under / (e.g., creating /a), an out-of-bounds read can occur in audit_compare_dname_path().
    The helper parent_len() returns 1 for /. In audit_compare_dname_path(), when parentlen equals the full path length (1), the code sets p = path + 1 and pathlen = 1 - 1 = 0. The subsequent loop then dereferences p[pathlen - 1] (i.e., p[-1]), causing an out-of-bounds read. Fix this by adding a pathlen > 0 check to the while loop condition to prevent the out-of-bounds access. [PM: subject tweak, sign-off email fixes] (CVE-2025-39840)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

检测

CentOS 9kernel-5.14.0-677.el9

high Nessus 插件 ID 298400

版本 1.1