Detections
Analytics

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793866396)

high Nessus Plugin ID 376432

Synopsis

The Rocky Linux host is missing one or more security updates.

Description

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793866396 advisory.

 - In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with KASAN enabled triggers the following warning: BUG: KASAN:
 global-out-of-bounds in do_trace_event_raw_event_event_da_monitor+0xd6/0x1a0 Read of size 32 at addr ffffffffaada8980 by task ... Call Trace: <TASK> [...] do_trace_event_raw_event_event_da_monitor+0xd6/0x1a0 ? __pfx_do_trace_event_raw_event_event_da_monitor+0x10/0x10 ? trace_event_sncid+0x83/0x200 trace_event_sncid+0x163/0x200 [...] The buggy address belongs to the variable: automaton_snep+0x4e0/0x5e0 This is caused by the tracepoints reading 32 bytes __array instead of __string from the automata definition. Such strings are literals and reading 32 bytes ends up in out of bound memory accesses (e.g.
 the next automaton's data in this case). The error is harmless as, while printing the string, we stop at the null terminator, but it should still be fixed. Use the __string facilities while defining the tracepoints to avoid reading out of bound memory. (CVE-2025-38636)

 - In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevent ALIGN() overflow When allocating IOVA the candidate range gets aligned to the target alignment. If the range is close to ULONG_MAX then the ALIGN() can wrap resulting in a corrupted iova. Open code the ALIGN() using get_add_overflow() to prevent this. This simplifies the checks as we don't need to check for length earlier either. Consolidate the two copies of this code under a single helper. This bug would allow userspace to create a mapping that overlaps with some other mapping or a reserved range. (CVE-2025-38688)

 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() If ab->fw.m3_data points to data, then fw pointer remains null. Further, if m3_mem is not allocated, then fw is dereferenced to be passed to ath11k_err function. Replace fw->size by m3_len.
 Found by Linux Verification Center (linuxtesting.org) with SVACE. (CVE-2025-39991)

 - In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of- bounds writes in handle_auth_session_key() The len field originates from untrusted network packets.
 Boundary checks have been added to prevent potential out-of-bounds writes when decrypting the connection secret or processing service tickets. [ idryomov: changelog ] (CVE-2025-68284)

 - In the Linux kernel, the following vulnerability has been resolved: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG The GRP_ACK_MSG handler in tipc_group_proto_rcv() currently decrements bc_ackers on every inbound group ACK, even when the same member has already acknowledged the current broadcast round.
 Because bc_ackers is a u16, a duplicate ACK received after the last legitimate ACK wraps the counter to 65535. Once wrapped, tipc_group_bc_cong() keeps reporting congestion and later group broadcasts on the affected socket stay blocked until the group is recreated. Fix this by ignoring duplicate or stale ACKs before touching bc_acked or bc_ackers. This makes repeated GRP_ACK_MSG handling idempotent and prevents the underflow path. (CVE-2026-31662)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages based on the guidance in TuxCare advisory ALMALINUX9.6:CLSA-2026:1793866396.

See Also

https://cve.tuxcare.com/els/releases/CLSA-2026:1793866396

http://www.nessus.org/u?63f39ed5

Plugin Details

Severity: High

ID: 376432

File Name: tuxcare_rocky_linux_9.6_CLSA-2026-1793866396.nasl

Version: 1.1

Type: Local

Published: 11/5/2026

Updated: 11/5/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.7

Percentile: 98.82

Vendor

Vendor Severity: Critical

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-64245

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party

Exploit Ease: No known exploits are available

Patch Publication Date: 11/5/2026

Vulnerability Publication Date: 7/21/2021

Reference Information

CVE: CVE-2023-54189, CVE-2025-38216, CVE-2025-38636, CVE-2025-38640, CVE-2025-38688, CVE-2025-39991, CVE-2025-40056, CVE-2025-40061, CVE-2025-40099, CVE-2025-40162, CVE-2025-40169, CVE-2025-40201, CVE-2025-40218, CVE-2025-40272, CVE-2025-40292, CVE-2025-40293, CVE-2025-40297, CVE-2025-40359, CVE-2025-68170, CVE-2025-68198, CVE-2025-68283, CVE-2025-68284, CVE-2025-68770, CVE-2025-68775, CVE-2025-68822, CVE-2026-23178, CVE-2026-23239, CVE-2026-23240, CVE-2026-31662, CVE-2026-31779, CVE-2026-43016, CVE-2026-43019, CVE-2026-45836, CVE-2026-45846, CVE-2026-46116, CVE-2026-53144, CVE-2026-53194, CVE-2026-53264, CVE-2026-53393, CVE-2026-53403, CVE-2026-63822, CVE-2026-63829, CVE-2026-63830, CVE-2026-63831, CVE-2026-63851, CVE-2026-63852, CVE-2026-63869, CVE-2026-63870, CVE-2026-63879, CVE-2026-63889, CVE-2026-63890, CVE-2026-63893, CVE-2026-63898, CVE-2026-63901, CVE-2026-63919, CVE-2026-63920, CVE-2026-63925, CVE-2026-63940, CVE-2026-63944, CVE-2026-63946, CVE-2026-63947, CVE-2026-63952, CVE-2026-63958, CVE-2026-63964, CVE-2026-63976, CVE-2026-64024, CVE-2026-64047, CVE-2026-64118, CVE-2026-64125, CVE-2026-64127, CVE-2026-64155, CVE-2026-64178, CVE-2026-64179, CVE-2026-64223, CVE-2026-64224, CVE-2026-64245, CVE-2026-64289, CVE-2026-64332, CVE-2026-64333, CVE-2026-64413, CVE-2026-64436, CVE-2026-64455, CVE-2026-64524, CVE-2026-64538, CVE-2026-64547, CVE-2026-64580, CVE-2026-64581, CVE-2026-68111, CVE-2026-68112, CVE-2026-68117, CVE-2026-68128, CVE-2026-68154, CVE-2026-68157, CVE-2026-68161, CVE-2026-68249, CVE-2026-68252, CVE-2026-68255, CVE-2026-68328, CVE-2026-68375, CVE-2026-68392, CVE-2026-68403, CVE-2026-68404, CVE-2026-68409, CVE-2026-72019, CVE-2026-72024, CVE-2026-72053, CVE-2026-72054, CVE-2026-72066, CVE-2026-72136, CVE-2026-72297, CVE-2026-72307, CVE-2026-72312, CVE-2026-72339, CVE-2026-72347, CVE-2026-72361, CVE-2026-72425, CVE-2026-72449, CVE-2026-72450, CVE-2026-74255, CVE-2026-74256, CVE-2026-74270, CVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74300, CVE-2026-74302, CVE-2026-74308, CVE-2026-74380, CVE-2026-74406, CVE-2026-74410, CVE-2026-74411, CVE-2026-74436, CVE-2026-74443, CVE-2026-74445, CVE-2026-74456, CVE-2026-74457, CVE-2026-74458, CVE-2026-74464, CVE-2026-74465, CVE-2026-74473, CVE-2026-74474, CVE-2026-74475, CVE-2026-74488, CVE-2026-74490, CVE-2026-74507, CVE-2026-74512, CVE-2026-74537, CVE-2026-74540, CVE-2026-74544, CVE-2026-74564, CVE-2026-74614, CVE-2026-74680, CVE-2026-74695, CVE-2026-74700, CVE-2026-74701, CVE-2026-74740, CVE-2026-80522, CVE-2026-80540, CVE-2026-80572, CVE-2026-80586, CVE-2026-80603, CVE-2026-80637, CVE-2026-80664, CVE-2026-80667, CVE-2026-80678, CVE-2026-80686, CVE-2026-80700, CVE-2026-80702, CVE-2026-80703, CVE-2026-80705, CVE-2026-80715, CVE-2026-80717, CVE-2026-80737, CVE-2026-80842, CVE-2026-80866, CVE-2026-80888, CVE-2026-80947, CVE-2026-80977, CVE-2026-80994, CVE-2026-81002, CVE-2026-81005, CVE-2026-89445, CVE-2026-89479, CVE-2026-89531, CVE-2026-89538, CVE-2026-89541, CVE-2026-89543, CVE-2026-89551, CVE-2026-89554, CVE-2026-89569, CVE-2026-89582, CVE-2026-89640, CVE-2026-89641, CVE-2026-89643, CVE-2026-89649, CVE-2026-89660, CVE-2026-89666, CVE-2026-89702, CVE-2026-89704, CVE-2026-89707, CVE-2026-89711, CVE-2026-89746, CVE-2026-89783, CVE-2026-89843, CVE-2026-89845, CVE-2026-89858, CVE-2026-89970, CVE-2026-89995, CVE-2026-90029, CVE-2026-90049, CVE-2026-90055, CVE-2026-90056, CVE-2026-90084, CVE-2026-90085, CVE-2026-90088, CVE-2026-90092, CVE-2026-90151, CVE-2026-90198, CVE-2026-90201, CVE-2026-90241, CVE-2026-90253, CVE-2026-90275, CVE-2026-90344, CVE-2026-90345, CVE-2026-90390, CVE-2026-90403, CVE-2026-92496, CVE-2026-93062, CVE-2026-93149, CVE-2026-93178, CVE-2026-93179, CVE-2026-93207, CVE-2026-93269, CVE-2026-93281, CVE-2026-93781, CVE-2026-93788, CVE-2026-93789, CVE-2026-93792, CVE-2026-93796, CVE-2026-93797, CVE-2026-93799, CVE-2026-93804, CVE-2026-93817, CVE-2026-97408, CVE-2026-97425, CVE-2026-97429, CVE-2026-97430, CVE-2026-97500, CVE-2026-97516, CVE-2026-97522, CVE-2026-97523, CVE-2026-97557, CVE-2026-97560, CVE-2026-97562, CVE-2026-97572, CVE-2026-97594, CVE-2026-97598, CVE-2026-97611, CVE-2026-97613, CVE-2026-97907, CVE-2026-97917, CVE-2026-97945, CVE-2026-97964, CVE-2026-97976, CVE-2026-97977, CVE-2026-97990, CVE-2026-97998, CVE-2026-98016, CVE-2026-98017, CVE-2026-98019, CVE-2026-98031, CVE-2026-98039, CVE-2026-98045, CVE-2026-98097, CVE-2026-98103, CVE-2026-98110, CVE-2026-98122, CVE-2026-98129, CVE-2026-98148, CVE-2026-98169, CVE-2026-98181, CVE-2026-98182, CVE-2026-98201, CVE-2026-98202, CVE-2026-98205, CVE-2026-98235, CVE-2026-98237, CVE-2026-98238, CVE-2026-98249, CVE-2026-98251, CVE-2026-98255, CVE-2026-98261, CVE-2026-98263, CVE-2026-98290, CVE-2026-98291, CVE-2026-98293, CVE-2026-98301, CVE-2026-98306, CVE-2026-98333, CVE-2026-98334, CVE-2026-98346, CVE-2026-98364, CVE-2026-98380, CVE-2026-98381, CVE-2026-98382, CVE-2026-98392, CVE-2026-98404, CVE-2026-98417, CVE-2026-98419, CVE-2026-98428, CVE-2026-98442, CVE-2026-98454, CVE-2026-98456, CVE-2026-98457, CVE-2026-98460, CVE-2026-98466, CVE-2026-98488, CVE-2026-98489, CVE-2026-98490, CVE-2026-98491, CVE-2026-98494, CVE-2026-98501, CVE-2026-98515, CVE-2026-98531, CVE-2026-98532, CVE-2026-98537, CVE-2026-98548, CVE-2026-98567, CVE-2026-98568, CVE-2026-98588, CVE-2026-98594, CVE-2026-98602, CVE-2026-98606, CVE-2026-98614, CVE-2026-98625, CVE-2026-98694, CVE-2026-98698, CVE-2026-98704, CVE-2026-98707, CVE-2026-98709, CVE-2026-98734, CVE-2026-98735, CVE-2026-98738, CVE-2026-98739, CVE-2026-98750, CVE-2026-98753, CVE-2026-98763, CVE-2026-98792, CVE-2026-98794, CVE-2026-98805, CVE-2026-98823, CVE-2026-98827, CVE-2026-98838, CVE-2026-98846, CVE-2026-98851, CVE-2026-98856, CVE-2026-98857, CVE-2026-98859, CVE-2026-98871, CVE-2026-98875, CVE-2026-98877, CVE-2026-98881, CVE-2026-98887, CVE-2026-98889, CVE-2026-98891, CVE-2026-98896, CVE-2026-98902, CVE-2026-98910, CVE-2026-98914, CVE-2026-98916, CVE-2026-98934, CVE-2026-98964, CVE-2026-98967, CVE-2026-98972, CVE-2026-98979, CVE-2026-99008, CVE-2026-99010, CVE-2026-99026, CVE-2026-99036, CVE-2026-99037, CVE-2026-99041, CVE-2026-99053, CVE-2026-99057, CVE-2026-99058, CVE-2026-99082, CVE-2026-99094, CVE-2026-99103, CVE-2026-99109, CVE-2026-99110, CVE-2026-99117, CVE-2026-99121, CVE-2026-99135, CVE-2026-99138, CVE-2026-99139, CVE-2026-99152, CVE-2026-99153, CVE-2026-99154, CVE-2026-99156, CVE-2026-99167, CVE-2026-99174, CVE-2026-99203

CLSA: 2026:1793866396