Oracle Linux 8：virt:kvm_utils3 (ELSA-2026-50239)
medium Nessus 插件 ID 310544
语言：
简介
远程 Oracle Linux 主机缺少一个或多个安全更新。描述
远程 Oracle Linux 8 主机上安装的程序包受到 ELSA-2026-50239 公告中提及的多个漏洞影响。- 在 ri 记录CVE-2021-3622中限制递归（）解析： rhbz#1976194
- 区块超过页长（CVE-2021-3504）的边界检查可解析： rhbz#1950501
- 修复 CVE-2022-40284
- 修复： CVE-2021-46790、 CVE-2022-30783、 CVE-2022-30784、 CVE-2022-30785、 CVE-2022-30786、 CVE-2022-30787、 CVE-2022-30788、 CVE-2022-30789 解决：rhbz#2127240 rhbz#2127248 （also： 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263）
- 修复 CVE-2021-33285、 CVE-2021-33286、 CVE-2021-33287、 CVE-2021-33289、 CVE-2021-35266、 CVE-2021-35267、 CVE-2021-35268、 CVE-2021-35269、 CVE-2021-39251、 CVE-2021-39252、 CVE-2021-39253、 CVE-2021-39254 修复：rhbz#2004490
- 为 CVE-2019-9755 修复（基于堆的缓冲区溢出导致本地根特权提升）修复：rhbz#1698503
- 修复 CVE-2024-7383 NBD 服务器不正确的证书验证，解决：RHEL-52728
- 修复 CVE-2022-0485：如果 NBD 读取或写入失败，则 nbdcopy 失败，解决了：rhbz#2045718
- 包含针对 NBD 协议降级攻击的补丁 (CVE-2019-14842)。
- 修复 CVE-2025-49133 已解决：RHEL-96251
- 回流端口 'tpm2：访问前检查缓冲区大小'（CVE-2023-1017 和 CVE-2023-1018）解析： rhbz#2173964 解析： rhbz#2173970
- 修复 CVE-2021-3746 libtpms：通过特制 TPM 2 命令数据包执行越界访问 已解决：rhbz#1999307
- 修复 CVE-2021-3623：尝试恢复 vTPM 状态时发生越界访问 已修复：rhbz#1976816
- 修复 CVE-2021-3716 STARTTLS 上的 NBD_OPT_STRUCTURED_REPLY 注入漏洞 已解决：rhbz#1994915
- 文档CVE（Mark Kanda）{CVE-2025-54566} {CVE-2025-54567} {CVE-2025-8860} {}CVE-2026-0665 {} {CVE-2026-3886}
- hw/usb/hcd-ohci：检查MPS=0以避免无限循环（Jenny Guanni Qu）[Orabug： 39160764] {CVE-2026-3890}
- hyperv/syndbg：由cpu_physical_memory_map（）（Paolo Bonzini）返回的校验长度 [Orabug： 39160749] {CVE-2026-3842}
- block/vmdk：修复vmdk_read_extent（）（Halil Oktay）中的OOB读取 [Orabug： 39160776] {CVE-2026-2243}
- cryptodev-builtin：限制最大大小（zhenwei pi） [Orabug： 39173335] {CVE-2025-14876}
- hw/virtio/virtio-crypto：验证非正称请求大小（zhenwei pi） [Orabug： 39173335] {CVE-2025-14876}
- io：修正 websocket 握手代码中自由后使用的问题（Daniel P. Berrange） [Orabug： 38687831] {CVE-2025-11234}
- hw/usb/hcd-uhci：不为非0端点的SETUP断言（Peter Maydell） [Orabug： 37517799] {CVE-2024-8354}
- 添加修正。CVE-2022-23645
已解决：rhbz#2056517
- 更新到 0.4.2，以解决潜在的符号链接漏洞 (CVE-2020-28407)。
已解决：rhbz#1906043
- 修复 --key 参数中的 CVE-2022-2211 拒绝服务，解决了：rhbz#2102720
Tenable 已直接从 Oracle Linux 安全公告中提取上述描述块。
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
更新受影响的程序包。另见
插件详情
严重性: Medium
ID: 310544
文件名: oraclelinux_ELSA-2026-50239.nasl
版本: 1.1
类型: Local
代理: unix
发布时间: 2026/4/27
最近更新时间: 2026/4/27
支持的传感器: Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Nessus
风险信息
VPR
风险因素: Medium
分数: 4.4
CVSS v2
风险因素: Medium
基本分数: 4.8
时间分数: 3.5
矢量: CVSS2#AV:A/AC:L/Au:N/C:N/I:P/A:P
CVSS 分数来源: CVE-2025-54567
CVSS v3
风险因素: Medium
基本分数: 5.4
时间分数: 4.7
矢量: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
时间矢量: CVSS:3.0/E:U/RL:O/RC:C
漏洞信息
CPE: cpe:/o:oracle:linux:8, p-cpe:/a:oracle:linux:qemu-img, p-cpe:/a:oracle:linux:qemu-kvm, p-cpe:/a:oracle:linux:qemu-kvm-common, p-cpe:/a:oracle:linux:libvirt, p-cpe:/a:oracle:linux:libvirt-devel, p-cpe:/a:oracle:linux:libguestfs, p-cpe:/a:oracle:linux:libguestfs-devel, p-cpe:/a:oracle:linux:libguestfs-java, p-cpe:/a:oracle:linux:libguestfs-java-devel, p-cpe:/a:oracle:linux:libguestfs-javadoc, p-cpe:/a:oracle:linux:libguestfs-tools, p-cpe:/a:oracle:linux:libguestfs-tools-c, p-cpe:/a:oracle:linux:perl-sys-guestfs, p-cpe:/a:oracle:linux:ruby-libguestfs, p-cpe:/a:oracle:linux:libvirt-client, p-cpe:/a:oracle:linux:libvirt-lock-sanlock, p-cpe:/a:oracle:linux:qemu-guest-agent, p-cpe:/a:oracle:linux:libvirt-daemon, p-cpe:/a:oracle:linux:libvirt-daemon-config-network, p-cpe:/a:oracle:linux:libvirt-daemon-config-nwfilter, p-cpe:/a:oracle:linux:libvirt-daemon-driver-interface, p-cpe:/a:oracle:linux:libvirt-daemon-driver-network, p-cpe:/a:oracle:linux:libvirt-daemon-driver-nodedev, p-cpe:/a:oracle:linux:libvirt-daemon-driver-nwfilter, p-cpe:/a:oracle:linux:libvirt-daemon-driver-qemu, p-cpe:/a:oracle:linux:libvirt-daemon-driver-secret, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage, p-cpe:/a:oracle:linux:libvirt-daemon-kvm, p-cpe:/a:oracle:linux:libvirt-docs, p-cpe:/a:oracle:linux:libvirt-nss, p-cpe:/a:oracle:linux:hivex, p-cpe:/a:oracle:linux:hivex-devel, p-cpe:/a:oracle:linux:libguestfs-bash-completion, p-cpe:/a:oracle:linux:libguestfs-gfs2, p-cpe:/a:oracle:linux:libguestfs-gobject, p-cpe:/a:oracle:linux:libguestfs-gobject-devel, p-cpe:/a:oracle:linux:libguestfs-inspect-icons, p-cpe:/a:oracle:linux:libguestfs-man-pages-ja, p-cpe:/a:oracle:linux:libguestfs-man-pages-uk, p-cpe:/a:oracle:linux:libguestfs-rescue, p-cpe:/a:oracle:linux:libguestfs-rsync, p-cpe:/a:oracle:linux:libguestfs-winsupport, p-cpe:/a:oracle:linux:libguestfs-xfs, p-cpe:/a:oracle:linux:libiscsi, p-cpe:/a:oracle:linux:libiscsi-devel, p-cpe:/a:oracle:linux:libiscsi-utils, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-core, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-disk, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-gluster, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-iscsi, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-logical, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-mpath, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-rbd, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-scsi, p-cpe:/a:oracle:linux:libvirt-dbus, p-cpe:/a:oracle:linux:libvirt-libs, p-cpe:/a:oracle:linux:lua-guestfs, p-cpe:/a:oracle:linux:nbdkit, p-cpe:/a:oracle:linux:nbdkit-bash-completion, p-cpe:/a:oracle:linux:nbdkit-basic-plugins, p-cpe:/a:oracle:linux:nbdkit-devel, p-cpe:/a:oracle:linux:nbdkit-example-plugins, p-cpe:/a:oracle:linux:netcf, p-cpe:/a:oracle:linux:netcf-devel, p-cpe:/a:oracle:linux:netcf-libs, p-cpe:/a:oracle:linux:perl-sys-virt, p-cpe:/a:oracle:linux:perl-hivex, p-cpe:/a:oracle:linux:python3-hivex, p-cpe:/a:oracle:linux:python3-libguestfs, p-cpe:/a:oracle:linux:python3-libvirt, p-cpe:/a:oracle:linux:qemu-kvm-block-curl, p-cpe:/a:oracle:linux:qemu-kvm-block-gluster, p-cpe:/a:oracle:linux:qemu-kvm-block-iscsi, p-cpe:/a:oracle:linux:qemu-kvm-block-rbd, p-cpe:/a:oracle:linux:qemu-kvm-block-ssh, p-cpe:/a:oracle:linux:qemu-kvm-core, p-cpe:/a:oracle:linux:ruby-hivex, p-cpe:/a:oracle:linux:seabios, p-cpe:/a:oracle:linux:seabios-bin, p-cpe:/a:oracle:linux:seavgabios-bin, p-cpe:/a:oracle:linux:sgabios, p-cpe:/a:oracle:linux:sgabios-bin, p-cpe:/a:oracle:linux:supermin, p-cpe:/a:oracle:linux:supermin-devel, p-cpe:/a:oracle:linux:virt-dib, p-cpe:/a:oracle:linux:virt-v2v, p-cpe:/a:oracle:linux:libnbd, p-cpe:/a:oracle:linux:libnbd-devel, p-cpe:/a:oracle:linux:libvirt-daemon-driver-storage-iscsi-direct, p-cpe:/a:oracle:linux:nbdfuse, p-cpe:/a:oracle:linux:nbdkit-basic-filters, p-cpe:/a:oracle:linux:nbdkit-curl-plugin, p-cpe:/a:oracle:linux:nbdkit-gzip-plugin, p-cpe:/a:oracle:linux:nbdkit-linuxdisk-plugin, p-cpe:/a:oracle:linux:nbdkit-python-plugin, p-cpe:/a:oracle:linux:nbdkit-server, p-cpe:/a:oracle:linux:nbdkit-ssh-plugin, p-cpe:/a:oracle:linux:nbdkit-vddk-plugin, p-cpe:/a:oracle:linux:nbdkit-xz-filter, p-cpe:/a:oracle:linux:python3-libnbd, p-cpe:/a:oracle:linux:libtpms, p-cpe:/a:oracle:linux:libtpms-devel, p-cpe:/a:oracle:linux:swtpm, p-cpe:/a:oracle:linux:swtpm-devel, p-cpe:/a:oracle:linux:swtpm-libs, p-cpe:/a:oracle:linux:swtpm-tools, p-cpe:/a:oracle:linux:libguestfs-appliance, p-cpe:/a:oracle:linux:libnbd-bash-completion, p-cpe:/a:oracle:linux:libvirt-wireshark, p-cpe:/a:oracle:linux:nbdkit-gzip-filter, p-cpe:/a:oracle:linux:nbdkit-nbd-plugin, p-cpe:/a:oracle:linux:nbdkit-tar-filter, p-cpe:/a:oracle:linux:nbdkit-tar-plugin, p-cpe:/a:oracle:linux:nbdkit-tmpdisk-plugin, p-cpe:/a:oracle:linux:swtpm-tools-pkcs11, p-cpe:/a:oracle:linux:virt-v2v-bash-completion, p-cpe:/a:oracle:linux:virt-v2v-man-pages-ja, p-cpe:/a:oracle:linux:virt-v2v-man-pages-uk, p-cpe:/a:oracle:linux:qemu-kvm-device-usb-host, p-cpe:/a:oracle:linux:qemu-virtiofsd, p-cpe:/a:oracle:linux:libvirt-client-qemu
必需的 KB 项: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/OracleLinux
易利用性: No known exploits are available
补丁发布日期: 2026/4/24
漏洞发布日期: 2025/7/25
参考资料信息
CVE: CVE-2025-14876, CVE-2025-54566, CVE-2025-54567, CVE-2025-8860, CVE-2026-0665, CVE-2026-2243