The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:22405 advisory.

    * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
      * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)
      * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
      * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
      * kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)
      * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
      * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
      * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9 : kernel (ALSA-2025:22405)

high Nessus Plugin ID 277923

Version 1.2

Version 1.1

Version 1.2 Feb 26, 2026, 8:51 AM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202602260851
Version 1.1 Dec 10, 2025, 9:29 AM New Plugin Feed: 202512100929