The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_68507 advisory.

    * kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number (CVE-2024-58007)

    * kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)

    * kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)

    * kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)

    * kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)

    * kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)

    * kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)

    * kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)

    * kernel: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (CVE-2026-63923)

    * kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)

    * kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)

    * kernel: netfilter: handle unreadable frags (CVE-2026-64414)

    * kernel: hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456)

    * kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation     (CVE-2026-68200)

    * kernel: Linux kernel SLIP: Out-of-bounds write due to race condition during MTU change (CVE-2026-68143)

    * kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)

    * kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash     (CVE-2026-68363)

    * kernel: net: qrtr: restrict socket creation to the initial network namespace (CVE-2026-68294)

    * kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)

    Bug Fix(es) and Enhancement(s):

    * nouveau vga_switcheroo binding holds Realtek ALC245 converter stream open ? analog output (device 0)     returns EBUSY [rhel-10.2.z] (JIRA:Rocky Linux-239776)

    * Rocky Linux 9.8: Multiuser Kerberized DFS shares fail to mount with UID mount option [rhel-10.2.z]     (JIRA:Rocky Linux-254105)

    * RHIVOS - [backport] S32G Fix STM driver linking failing modpost (JIRA:Rocky Linux-255225)

    * RHIVOS - [backport] S32G Driver Enablement - OCOTP (JIRA:Rocky Linux-255516)

    * RHIVOS - [backport] S32G Driver Enablement - INA231 (JIRA:Rocky Linux-255518)

    * RHIVOS - [backport] S32G Driver Enablement - PIT (JIRA:Rocky Linux-255519)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
356351	Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_68507)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
233213	Photon OS 4.0: Linux PHSA-2025-4.0-0771	Nessus	PhotonOS Local Security Checks	2025/3/22	2026/11/2	high

検出

プラグインの検索

high

high