The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50007 advisory.

    - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima)  [Orabug: 38788585]     {CVE-2025-40280}
    - fs/proc: fix uaf in proc_readdir_de() (Wei Yang)  [Orabug: 38788587]  {CVE-2025-40271}
    - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj)  [Orabug: 38788594]     {CVE-2025-40248}
    - mm/hugetlb: add option to allows disabling CVE-2025-38085 mitigation (Joe Jin)  [Orabug: 38728358]
    - netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso)  [Orabug: 38389767]     {CVE-2025-38678}
    - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Pradyumn Rahar) [Orabug:
    37961220,38730620] {CVE-2025-40250}
    - bnxt_en: Fix memory corruption when FW resources change during ifdown (Sreekanth Reddy) [Orabug:
    38440240] {CVE-2025-39810}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50007)

high Nessus Plugin ID 283569

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Feb 10, 2026, 11:15 AM Detection (updated detection logic) Plugin Feed: 202602101115
Version 1.2 Jan 14, 2026, 9:57 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601142157
Version 1.1 Jan 14, 2026, 5:08 AM New Plugin Feed: 202601140508