CentOS Linux 7 主机上存在安装的程序包，该程序包受到 TuxCare CENTOS7：CLSA-2026：1787291758公告中提及的多个漏洞的影响。

  - 已知源寄存器为 0 时，Linux 内核中的 bpf 验证程序未正确处理 mod32 目标寄存器截断。能够加载 bpf 程序的本地攻击者可利用此问题，在内核内存中造成越界读取，进而导致到信息泄露（内核内存），以及可能导致代码执行的越界写入。此问题已在上游内核的认可 9b00f1b78809（bpf：修复 mod32 dst reg wrt zero 的截断处理）和 Linux 稳定内核5.11.25.10.195.4.101中得到解决、 和 。（CVE-2021-3444）

  - 已修复 Linux 内核中的下列漏洞：sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, set once in sctp_rcv()). For an ASCONF located through its Address Parameter by __sctp_rcv_asconf_lookup(), that cached transport corresponds to the Address Parameter, which need not be the packet's source address. sctp_process_asconf_param() rejects a DEL-IP for the packet source address (ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but nothing protects asconf->transport. A single ASCONF can therefore carry, in order: [Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0] where L differs from the source. The DEL-IP for L passes the D8 check and calls sctp_assoc_rm_peer() on the transport that asconf->transport still points at, freeing it (RCU-deferred). The following wildcard DEL-IP then reuses the now-dangling asconf->transport in sctp_assoc_set_primary() and sctp_assoc_del_nonprimary_peers(): set_primary() dereferences the freed transport (->ipaddr, ->state) and plants the dangling pointer into asoc->peer.primary_path / active_path, and del_nonprimary_peers(), keeping only the pointer that is no longer on the list, removes every real transport, leaving the association with a transport_count of 0 and primary_path/active_path pointing at freed memory. Reject a DEL-IP that targets the transport the ASCONF is being processed against, mirroring the existing source-address guard, so the wildcard branch can never reuse a freed transport. (CVE-2026-64564)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

检测

CentOS Linux 7 [TuxCare] 安全更新：bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc 多个漏洞（CENTOS7：CLSA-2026：1787291758）

high Nessus 插件 ID 360159

版本 1.2

检测

CentOS Linux 7 [TuxCare] 安全更新：bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc 多个漏洞 （CENTOS7：CLSA-2026：1787291758）

high Nessus 插件 ID 360159

版本 1.2

CentOS Linux 7 [TuxCare] 安全更新：bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc 多个漏洞（CENTOS7：CLSA-2026：1787291758）