In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer size did not take the tag size into account during decryption. Fix this by adding the required extra length.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:14339 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

    * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)

    * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

    * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table     entry handling (CVE-2026-23401)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

    * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13932 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)

    * kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential     privilege escalation. (CVE-2025-71238)

    * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table     entry handling (CVE-2026-23401)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

    * kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:14230 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)

    * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table     entry handling (CVE-2026-23401)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:14137 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (CVE-2025-37861)

    * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)

    * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)

    * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)

    * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

    * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table     entry handling (CVE-2026-23401)

    * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - crypto: algif_aead - Fix minimum RX size check for decryption The check for the minimum receive buffer     size did not take the tag size into account during decryption. Fix this by adding the required extra     length. (CVE-2026-43077)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:13577 advisory.

    * kernel: nvme: avoid double free special payload (CVE-2024-41073)

    * kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()     (CVE-2025-40252)

    * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

    * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

    * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table     entry handling (CVE-2026-23401)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13887 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13681 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)

    * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)

    * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13577 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: nvme: avoid double free special payload (CVE-2024-41073)

    * kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()     (CVE-2025-40252)

    * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

    * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

    * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table     entry handling (CVE-2026-23401)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13565 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state     (CVE-2026-23136)

    * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or     privilege escalation (CVE-2026-23270)

    * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
312840	RHEL 9 : kernel (RHSA-2026:14339)	Nessus	Red Hat Local Security Checks	high
312663	RHEL 9 : kernel (RHSA-2026:13932)	Nessus	Red Hat Local Security Checks	high
312656	RHEL 8 : kernel (RHSA-2026:14230)	Nessus	Red Hat Local Security Checks	high
312654	RHEL 9 : kernel-rt (RHSA-2026:14137)	Nessus	Red Hat Local Security Checks	high
312604	Linux Distros Unpatched Vulnerability : CVE-2026-43077	Nessus	Misc.	high
312380	RockyLinux 8 : kernel (RLSA-2026:13577)	Nessus	Rocky Linux Local Security Checks	high
312288	RHEL 10 : kernel (RHSA-2026:13887)	Nessus	Red Hat Local Security Checks	high
312180	RHEL 8 : kernel (RHSA-2026:13681)	Nessus	Red Hat Local Security Checks	high
312110	RHEL 8 : kernel (RHSA-2026:13577)	Nessus	Red Hat Local Security Checks	high
312100	RHEL 9 : kernel (RHSA-2026:13565)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2026-43077

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high