Detections
Analytics

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1743193221)

medium Nessus Plugin ID 361440

Synopsis

The AlmaLinux host is missing one or more security updates.

Description

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1743193221 advisory.

 - In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 BUG: KMSAN: uninit-value in asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497 asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497 (CVE-2021-47101)

 - A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks. (CVE-2022-0480)

 - A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.
 (CVE-2022-3594)

 - In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec. Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.
 (CVE-2022-48804)

 - A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec->tx_ready. (CVE-2023-1075)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages based on the guidance in TuxCare advisory ALMALINUX9.2:CLSA-2025:1743193221.

See Also

https://cve.tuxcare.com/els/releases/CLSA-2025:1743193221

http://www.nessus.org/u?0bc82a96

Plugin Details

Severity: Medium

ID: 361440

File Name: tuxcare_alma_linux_9.2_CLSA-2025-1743193221.nasl

Version: 1.1

Type: Local

Published: 10/1/2026

Updated: 10/1/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.2

Percentile: 99.76

Vendor

Vendor Severity: Critical

CVSS v2

Risk Factor: Medium

Base Score: 4.9

Temporal Score: 4.3

Vector: CVSS2#AV:A/AC:M/Au:S/C:P/I:P/A:P

CVSS Score Source: CVE-2022-3534

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 8.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

CVSS Score Source: CVE-2024-47685

CVSS v4

Risk Factor: Medium

Base Score: 5.1

Threat Score: 5.1

Threat Vector: CVSS:4.0/E:A

Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Vulnerability Information

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/AlmaLinux/release, Host/AlmaLinux/rpm-list, Host/OS/extended-third-party

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/28/2025

Vulnerability Publication Date: 7/21/2021

CISA Known Exploited Vulnerability Due Dates: 8/28/2024, 2/26/2025, 3/25/2025, 4/30/2025

Reference Information

CVE: CVE-2019-25162, CVE-2021-47101, CVE-2021-47185, CVE-2021-47383, CVE-2021-47515, CVE-2022-0480, CVE-2022-2977, CVE-2022-3534, CVE-2022-3594, CVE-2022-36402, CVE-2022-38096, CVE-2022-40982, CVE-2022-42895, CVE-2022-48627, CVE-2022-48637, CVE-2022-48655, CVE-2022-48672, CVE-2022-48804, CVE-2022-48988, CVE-2022-49011, CVE-2023-1073, CVE-2023-1074, CVE-2023-1075, CVE-2023-1076, CVE-2023-1077, CVE-2023-1079, CVE-2023-1206, CVE-2023-1855, CVE-2023-21102, CVE-2023-2269, CVE-2023-26545, CVE-2023-28464, CVE-2023-28866, CVE-2023-30456, CVE-2023-3161, CVE-2023-3212, CVE-2023-33203, CVE-2023-3358, CVE-2023-3772, CVE-2023-39189, CVE-2023-39191, CVE-2023-39193, CVE-2023-39194, CVE-2023-39198, CVE-2023-4133, CVE-2023-4194, CVE-2023-4273, CVE-2023-42754, CVE-2023-4622, CVE-2023-46813, CVE-2023-51779, CVE-2023-52474, CVE-2023-52475, CVE-2023-52477, CVE-2023-52494, CVE-2023-52501, CVE-2023-52504, CVE-2023-52513, CVE-2023-52519, CVE-2023-52520, CVE-2023-52528, CVE-2023-52531, CVE-2023-52562, CVE-2023-52594, CVE-2023-52595, CVE-2023-52612, CVE-2023-52614, CVE-2023-52628, CVE-2023-52635, CVE-2023-52637, CVE-2023-52651, CVE-2023-52667, CVE-2023-52679, CVE-2023-52707, CVE-2023-52735, CVE-2023-52741, CVE-2023-52751, CVE-2023-52752, CVE-2023-52809, CVE-2023-52812, CVE-2023-52818, CVE-2023-52837, CVE-2023-52840, CVE-2023-52854, CVE-2023-52859, CVE-2023-52880, CVE-2023-52884, CVE-2023-52885, CVE-2023-5717, CVE-2023-6176, CVE-2023-6546, CVE-2023-6622, CVE-2024-0841, CVE-2024-25742, CVE-2024-25744, CVE-2024-26582, CVE-2024-26584, CVE-2024-26593, CVE-2024-26595, CVE-2024-26602, CVE-2024-26603, CVE-2024-26610, CVE-2024-26615, CVE-2024-26629, CVE-2024-26642, CVE-2024-26643, CVE-2024-26664, CVE-2024-26665, CVE-2024-26668, CVE-2024-26669, CVE-2024-26673, CVE-2024-26689, CVE-2024-26704, CVE-2024-26734, CVE-2024-26735, CVE-2024-26737, CVE-2024-26743, CVE-2024-26744, CVE-2024-26754, CVE-2024-26779, CVE-2024-26782, CVE-2024-26800, CVE-2024-26804, CVE-2024-26828, CVE-2024-26852, CVE-2024-26853, CVE-2024-26855, CVE-2024-26872, CVE-2024-26882, CVE-2024-26883, CVE-2024-26884, CVE-2024-26885, CVE-2024-26886, CVE-2024-26897, CVE-2024-26898, CVE-2024-26901, CVE-2024-26903, CVE-2024-26907, CVE-2024-26908, CVE-2024-26923, CVE-2024-26925, CVE-2024-26929, CVE-2024-26931, CVE-2024-26933, CVE-2024-26934, CVE-2024-26946, CVE-2024-26958, CVE-2024-26961, CVE-2024-26964, CVE-2024-26973, CVE-2024-26989, CVE-2024-26993, CVE-2024-27014, CVE-2024-27016, CVE-2024-27020, CVE-2024-27030, CVE-2024-27043, CVE-2024-27045, CVE-2024-27046, CVE-2024-27052, CVE-2024-27059, CVE-2024-27395, CVE-2024-27397, CVE-2024-27415, CVE-2024-33621, CVE-2024-35789, CVE-2024-35791, CVE-2024-35823, CVE-2024-35845, CVE-2024-35847, CVE-2024-35852, CVE-2024-35855, CVE-2024-35861, CVE-2024-35862, CVE-2024-35863, CVE-2024-35864, CVE-2024-35866, CVE-2024-35867, CVE-2024-35868, CVE-2024-35885, CVE-2024-35890, CVE-2024-35895, CVE-2024-35896, CVE-2024-35898, CVE-2024-35905, CVE-2024-35962, CVE-2024-35979, CVE-2024-36012, CVE-2024-36017, CVE-2024-36020, CVE-2024-36025, CVE-2024-36270, CVE-2024-36883, CVE-2024-36886, CVE-2024-36897, CVE-2024-36899, CVE-2024-36901, CVE-2024-36902, CVE-2024-36904, CVE-2024-36929, CVE-2024-36940, CVE-2024-36941, CVE-2024-36960, CVE-2024-36971, CVE-2024-36978, CVE-2024-36979, CVE-2024-37353, CVE-2024-37356, CVE-2024-38384, CVE-2024-38538, CVE-2024-38552, CVE-2024-38555, CVE-2024-38558, CVE-2024-38559, CVE-2024-38562, CVE-2024-38570, CVE-2024-38579, CVE-2024-38581, CVE-2024-38586, CVE-2024-38588, CVE-2024-38601, CVE-2024-38619, CVE-2024-38627, CVE-2024-39277, CVE-2024-39471, CVE-2024-39476, CVE-2024-39494, CVE-2024-39502, CVE-2024-40905, CVE-2024-40911, CVE-2024-40912, CVE-2024-40914, CVE-2024-40927, CVE-2024-40929, CVE-2024-40941, CVE-2024-40954, CVE-2024-40956, CVE-2024-40978, CVE-2024-40983, CVE-2024-40984, CVE-2024-40995, CVE-2024-41000, CVE-2024-41013, CVE-2024-41023, CVE-2024-41039, CVE-2024-41040, CVE-2024-41041, CVE-2024-41044, CVE-2024-41049, CVE-2024-41057, CVE-2024-41058, CVE-2024-41071, CVE-2024-41073, CVE-2024-41076, CVE-2024-41087, CVE-2024-41090, CVE-2024-41091, CVE-2024-41092, CVE-2024-41096, CVE-2024-42082, CVE-2024-42096, CVE-2024-42110, CVE-2024-42131, CVE-2024-42136, CVE-2024-42148, CVE-2024-42152, CVE-2024-42154, CVE-2024-42159, CVE-2024-42161, CVE-2024-42225, CVE-2024-42228, CVE-2024-42243, CVE-2024-42284, CVE-2024-42285, CVE-2024-42301, CVE-2024-43830, CVE-2024-43882, CVE-2024-44970, CVE-2024-44977, CVE-2024-44987, CVE-2024-46673, CVE-2024-46700, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46725, CVE-2024-46731, CVE-2024-46738, CVE-2024-46743, CVE-2024-46744, CVE-2024-46746, CVE-2024-46747, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46759, CVE-2024-46800, CVE-2024-46811, CVE-2024-46813, CVE-2024-46818, CVE-2024-46821, CVE-2024-46853, CVE-2024-46858, CVE-2024-46859, CVE-2024-46871, CVE-2024-47685, CVE-2024-47698, CVE-2024-47701, CVE-2024-47742, CVE-2024-47745, CVE-2024-49860, CVE-2024-49882, CVE-2024-49883, CVE-2024-49884, CVE-2024-49889, CVE-2024-49894, CVE-2024-49895, CVE-2024-49930, CVE-2024-49950, CVE-2024-49960, CVE-2024-49967, CVE-2024-49969, CVE-2024-49989, CVE-2024-49991, CVE-2024-49995, CVE-2024-49996, CVE-2024-50033, CVE-2024-50035, CVE-2024-50036, CVE-2024-50047, CVE-2024-50055, CVE-2024-50067, CVE-2024-50073, CVE-2024-50074, CVE-2024-50115, CVE-2024-50124, CVE-2024-50125, CVE-2024-50127, CVE-2024-50131, CVE-2024-50143, CVE-2024-50150, CVE-2024-50151, CVE-2024-50154, CVE-2024-50262, CVE-2024-50264, CVE-2024-50267, CVE-2024-50278, CVE-2024-50279, CVE-2024-50301, CVE-2024-50302, CVE-2024-53057, CVE-2024-53059, CVE-2024-53103, CVE-2024-53104, CVE-2024-53141, CVE-2024-53142, CVE-2024-53150, CVE-2024-53156, CVE-2024-53173, CVE-2024-53179, CVE-2024-53239, CVE-2024-56538, CVE-2024-56551, CVE-2024-56600, CVE-2024-56601, CVE-2024-56602, CVE-2024-56603, CVE-2024-56604, CVE-2024-56605, CVE-2024-56606, CVE-2024-56608, CVE-2024-56614, CVE-2024-56615, CVE-2024-56631, CVE-2024-56642, CVE-2024-56658, CVE-2024-56662, CVE-2024-56664, CVE-2024-56672, CVE-2024-56708, CVE-2024-57798, CVE-2025-21692, CVE-2025-21795

CLSA: 2025:1743193221