CentOS Linux 8 [TuxCare] 安全更新：bpftool / kernel / kernel-core / kernel-cross-headers / 等多个漏洞 （CENTOS-STREAM8：CLSA-2026：1789141176）
high Nessus 插件 ID 361969
语言：
简介
CentOS Linux 主机缺少一个或多个安全更新。描述
如 TuxCare CENTOS-STREAM8：CLSA-2026：1789141176公告所述，CentOS Linux 8 主机上存在安装的程序包，该漏洞会受到多个漏洞的影响。- 已修复 Linux 内核中的下列漏洞：bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns
-EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero. Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.
(CVE-2022-50490)
- 已修复 Linux 内核中的下列漏洞：scsi: hpsa: Fix possible memory leak in hpsa_init_one() The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map. Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly. (CVE-2022-50646)
- prctl syscall 的当前实现不会在 syscall 期间立即发出 IBPB。ib_prctl_set 函数会更新任务的线程信息标记 (TIF)，并更新 __speculation_ctrl_update 函数的 SPEC_CTRL MSR，但仅在检查 TIF 位时，才会根据下一个计划发布 IBPB。这使受害者容易受到 prctl syscall 之前已在 BTB 中注入的值影响。通过 prctl (ib_prctl_set) 添加有条件缓解支持的修补程序可追溯至内核 4.9.176。我们建议升级过去的提交 a664ec9158eeddd75121d39c9a0758016097fa96 (CVE-2023-0045)
- 在 Linux 内核的用于转换数据包的 IP 框架（XFRM 子系统）中发现一个缺陷。此问题可能允许具有 CAP_NET_ADMIN 权限的恶意用户在解析 netlink 属性时造成 XFRMA_MTIMER_THRESH 的 4 字节越界读取，从而导致敏感堆数据可能泄漏到用户空间。(CVE-2023-3773)
- 已修复 Linux 内核中的下列漏洞：fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev with deferred I/O is once opened and closed, the dirty pages still remain queued in the pageref list, and eventually later those may be processed in the delayed work.
This may lead to a corruption of pages, hitting an Oops. This patch makes sure to cancel the delayed work and clean up the pageref list at closing the device for addressing the bug. A part of the cleanup code is factored out as a new helper function that is called from the common fb_release(). (CVE-2023-52731)
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
根据 TuxCare 公告 CENTOS-STREAM8：CLSA-2026：1789141176 中的指南更新受影响的程序包。另见
插件详情
严重性: High
ID: 361969
文件名: tuxcare_centos_8_CLSA-2026-1789141176.nasl
版本: 1.1
类型: Local
代理: unix
发布时间: 2026/10/1
最近更新时间: 2026/10/1
支持的传感器: Continuous Assessment, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
风险信息
VPR
风险因素: High
分数: 7.9
百分位: 99.35
Vendor
Vendor Severity: Important
CVSS v2
风险因素: High
基本分数: 8.3
时间分数: 6.5
矢量: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C
CVSS 分数来源: CVE-2026-23395
CVSS v3
风险因素: High
基本分数: 8.8
时间分数: 7.9
矢量: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
时间矢量: CVSS:3.0/E:P/RL:O/RC:C
CVSS v4
风险因素: High
Base Score: 7.3
Threat Score: 6.4
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 分数来源: CVE-2025-54518
漏洞信息
必需的 KB 项: Host/OS/extended-third-party, Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
可利用: true
易利用性: Exploits are available
补丁发布日期: 2026/9/11
漏洞发布日期: 2021/7/21
参考资料信息
CVE: CVE-2022-49961, CVE-2022-50490, CVE-2022-50646, CVE-2023-0045, CVE-2023-3773, CVE-2023-52474, CVE-2023-52621, CVE-2023-52697, CVE-2023-52731, CVE-2023-52935, CVE-2023-53235, CVE-2023-53252, CVE-2023-53473, CVE-2023-53543, CVE-2023-53987, CVE-2023-54177, CVE-2023-54258, CVE-2024-39480, CVE-2024-47672, CVE-2024-49861, CVE-2024-53099, CVE-2024-53174, CVE-2025-21761, CVE-2025-21762, CVE-2025-37913, CVE-2025-37915, CVE-2025-38046, CVE-2025-38108, CVE-2025-38111, CVE-2025-38117, CVE-2025-38146, CVE-2025-38248, CVE-2025-38342, CVE-2025-38593, CVE-2025-38676, CVE-2025-39689, CVE-2025-39810, CVE-2025-39835, CVE-2025-39860, CVE-2025-39880, CVE-2025-39957, CVE-2025-39977, CVE-2025-40071, CVE-2025-54518, CVE-2025-68291, CVE-2025-68363, CVE-2025-68742, CVE-2025-71089, CVE-2026-23054, CVE-2026-23208, CVE-2026-23262, CVE-2026-23315, CVE-2026-23318, CVE-2026-23395, CVE-2026-23447, CVE-2026-23454, CVE-2026-31399, CVE-2026-31493, CVE-2026-43049, CVE-2026-43116, CVE-2026-43449, CVE-2026-43453, CVE-2026-46006, CVE-2026-46174, CVE-2026-46218, CVE-2026-52962, CVE-2026-52998, CVE-2026-53186, CVE-2026-53253, CVE-2026-53329, CVE-2026-63829, CVE-2026-63884, CVE-2026-64219, CVE-2026-64268, CVE-2026-64298, CVE-2026-64322, CVE-2026-64340, CVE-2026-64343, CVE-2026-64344, CVE-2026-64423, CVE-2026-64496, CVE-2026-64572, CVE-2026-64574, CVE-2026-64579, CVE-2026-64582, CVE-2026-68093, CVE-2026-68121, CVE-2026-68123, CVE-2026-68142, CVE-2026-68143, CVE-2026-68153, CVE-2026-68155, CVE-2026-68156, CVE-2026-68158, CVE-2026-68160, CVE-2026-68175, CVE-2026-68176, CVE-2026-68189, CVE-2026-68202, CVE-2026-68214, CVE-2026-68226, CVE-2026-68313, CVE-2026-68315, CVE-2026-68320, CVE-2026-68355, CVE-2026-68363, CVE-2026-68376, CVE-2026-68388, CVE-2026-68414, CVE-2026-68426, CVE-2026-72472, CVE-2026-74470, CVE-2026-74499, CVE-2026-74565, CVE-2026-74587, CVE-2026-74588, CVE-2026-74589, CVE-2026-74597, CVE-2026-74609, CVE-2026-74630, CVE-2026-74641, CVE-2026-74656, CVE-2026-74660, CVE-2026-74667, CVE-2026-74669, CVE-2026-74682, CVE-2026-74688, CVE-2026-74700, CVE-2026-74705, CVE-2026-74720, CVE-2026-80558
CLSA: 2026:1789141176