The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1488 advisory.

    - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
    - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
    - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
    - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
    - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
    - [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139]     {CVE-2019-3896}
    - [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
    - [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}
    - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387     1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386     1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387     1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387     1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387     1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126     CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388]     {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126     CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387     1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126     CVE-2018-12127 CVE-2018-12130}
    - [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126     CVE-2018-12127 CVE-2018-12130}
    - [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126     CVE-2018-12127 CVE-2018-12130}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 : kernel (ELSA-2019-1488)

high Nessus Plugin ID 126023

Version 1.11

Version 1.10

Version 1.9

Version 1.11 Feb 10, 2026, 11:15 AM Detection (updated detection logic) Plugin Feed: 202602101115
Version 1.10 Oct 23, 2024, 12:00 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410230000
Version 1.9 Dec 6, 2022, 1:01 AM Reference Plugin Feed: 202212060101