The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-707:07 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system.  The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2016-3134     The netfilter subsystem in the Linux kernel through 4.5.2 does not     validate certain offset fields, which allows local users to gain     privileges or cause a denial of service (heap memory corruption) via     an IPT_SO_SET_REPLACE setsockopt call.
    CVE-2016-4997     The compat IPT_SO_SET_REPLACE setsockopt implementation in the     netfilter subsystem in the Linux kernel before 4.6.3 allows local     users to gain privileges or cause a denial of service (memory     corruption) by leveraging in-container root access to provide a     crafted offset value that triggers an unintended decrement.
    CVE-2016-4998     The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter     subsystem in the Linux kernel before 4.6 allows local users to cause a     denial of service (out-of-bounds read) or possibly obtain sensitive     information from kernel heap memory by leveraging in-container root     access to provide a crafted offset value that leads to crossing a     ruleset blob boundary.
    Fixed bugs:
    * In some cases, running the ipmitool command caused a kernel panic due to a race condition in the ipmi     message handler. This update fixes the race condition, and the kernel panic no longer occurs in the     described scenario.
    * Previously, running I/O-intensive operations in some cases caused the system to terminate unexpectedly     after a null pointer dereference in the kernel. With this update, a set of patches has been applied to the     3w-9xxx and 3w-sas drivers that fix this bug. As a result, the system no longer crashes in the described     scenario.
    * Previously, the Stream Control Transmission Protocol (SCTP) sockets did not inherit the SELinux labels     properly. As a consequence, the sockets were labeled with the unlabeled_t SELinux type which caused SCTP     connections to fail. The underlying source code has been modified, and SCTP connections now works as     expected.
    * Previously, the bnx2x driver waited for transmission completions when recovering from a parity event,     which substantially increased the recovery time. With this update, bnx2x does not wait for transmission     completion in the described circumstances. As a result, the recovery of bnx2x after a parity event now     takes less time.
    Enhancements:
    * With this update, the audit subsystem enables filtering of processes by name besides filtering by PID.
    Users can now audit by executable name (with the -F exe=

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 7 : kernel-3.10.0-327.36.1.el7 (AXSA:2016-707:07)

high Nessus Plugin ID 289398

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Feb 9, 2026, 4:07 PM Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202602091607
Version 1.2 Jan 20, 2026, 4:27 AM Detection (updated detection logic) Plugin Feed: 202601200427
Version 1.1 Jan 16, 2026, 10:12 PM New Plugin Feed: 202601162212