Rocky Linux 9.6 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_1641)

high Nessus Plugin ID 366513

Synopsis

The Rocky Linux host is missing one or more security updates.

Description

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1641 advisory.

This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.6. It addresses 24 CVEs:
CVE-2026-53002, CVE-2026-63919, CVE-2026-74746, CVE-2025-21826, CVE-2026-98260, and 19 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages based on the guidance in CIQ advisory ciqsa-2026_1641.

See Also

https://github.com/ctrliq/advisories

http://www.nessus.org/u?0a0de5be

http://www.nessus.org/u?0bb73b91

http://www.nessus.org/u?11273843

http://www.nessus.org/u?136eebba

http://www.nessus.org/u?16332b0f

http://www.nessus.org/u?1ac8a7ca

http://www.nessus.org/u?24a0e561

http://www.nessus.org/u?27c3cacf

http://www.nessus.org/u?36929e46

http://www.nessus.org/u?369328da

http://www.nessus.org/u?43a65365

http://www.nessus.org/u?46f50531

http://www.nessus.org/u?5489a46f

http://www.nessus.org/u?635f56a2

http://www.nessus.org/u?9457c2c1

http://www.nessus.org/u?9e393172

http://www.nessus.org/u?ac744501

http://www.nessus.org/u?d16d1220

http://www.nessus.org/u?dce75851

http://www.nessus.org/u?e012d435

http://www.nessus.org/u?e75bf3e4

http://www.nessus.org/u?eb9fb8e1

http://www.nessus.org/u?f6e01124

http://www.nessus.org/u?fc4c177c

http://www.nessus.org/u?fdb3e010

Plugin Details

Severity: High

ID: 366513

File Name: ciq_rocky_linux_9_6_ciqsa-2026_1641.nasl

Version: 1.1

Type: Local

Published: 10/16/2026

Updated: 10/16/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.9

Percentile: 99.35

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-57990

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/16/2026

Vulnerability Publication Date: 7/21/2021

Reference Information

CVE: CVE-2022-49670, CVE-2024-57990, CVE-2025-21826, CVE-2026-23239, CVE-2026-43125, CVE-2026-43198, CVE-2026-43493, CVE-2026-52935, CVE-2026-52993, CVE-2026-53002, CVE-2026-53239, CVE-2026-63886, CVE-2026-63888, CVE-2026-63917, CVE-2026-63919, CVE-2026-63921, CVE-2026-64368, CVE-2026-64558, CVE-2026-64564, CVE-2026-68294, CVE-2026-74746, CVE-2026-80848, CVE-2026-80863, CVE-2026-98260