In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data leakage through speculative execution. Fixup register state as if the Safe-RET sequence executed successfully by "emulating" it, in a manner of speaking, and avoid executing a RET instruction after returning from the interrupt.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b79a5390a7 advisory.

    The 7.1.7 stable kernel update contains a fix for CVE-2026-68480

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c3d9971785 advisory.

    The 7.1.7 stable kernel update contains a fix for CVE-2026-68480

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the     Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence,     potentially leading to data leakage through speculative execution. Fixup register state as if the Safe-RET     sequence executed successfully by emulating it, in a manner of speaking, and avoid executing a RET     instruction after returning from the interrupt. (CVE-2026-68480)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500136 advisory.

    - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832992]     {CVE-2026-68480}
    - xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39776792]     {CVE-2026-64600}
    - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39567287]     {CVE-2026-46331}
    - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)  [Orabug: 39452261]     {CVE-2026-46043}
    - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39426001]     {CVE-2026-43499}
    - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)  [Orabug: 39300930]     {CVE-2026-43038}
    - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39619389]     {CVE-2026-52943}
    - net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39250953]     {CVE-2026-31504}
    - net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)     [Orabug: 39526882]  {CVE-2022-50073}
    - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548666]     {CVE-2025-10263}
    - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39300926]  {CVE-2026-43037}
    - batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262375]  {CVE-2026-31657}
    - smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669]     {CVE-2026-46243}
    - ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459]     {CVE-2026-46333}
    - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug:
    39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
    - net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828]     {CVE-2026-46300}
    - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718]     {CVE-2026-31402}
    - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug:
    38985173,39368732] {CVE-2026-23216}
    - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug:
    38970455,39368774] {CVE-2026-23193}
    - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147]     {CVE-2026-43284}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500135 advisory.

    - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)     [Orabug: 39832878]  {CVE-2026-64561}
    - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832867]     {CVE-2026-68480}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500137 advisory.

    - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)     [Orabug: 39832946]  {CVE-2026-64561}
    - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39784615]     {CVE-2026-68480}
    - net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819143]     {CVE-2026-64531}
    - rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39706512]     {CVE-2026-43499}
    - net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39668793]     {CVE-2026-46331}
    - net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39648952]     {CVE-2026-52943}
    - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548689]     {CVE-2025-10263}
    - net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)     [Orabug: 39526881]  {CVE-2022-50073}
    - batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262374]  {CVE-2026-31657}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
333517	Fedora 43 : kernel (2026-b79a5390a7)	Nessus	Fedora Local Security Checks	high
333516	Fedora 44 : kernel (2026-c3d9971785)	Nessus	Fedora Local Security Checks	high
333183	Linux Distros Unpatched Vulnerability : CVE-2026-68480	Nessus	Misc.	high
333182	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500136)	Nessus	Oracle Linux Local Security Checks	high
333178	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500135)	Nessus	Oracle Linux Local Security Checks	high
333177	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500137)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2026-68480

high

Tenable Plugins

high

high

high

high

high

high