The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-216:01 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system.  The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2014-9420     The rock_continue function in fs/isofs/rock.c in the Linux kernel     through 3.18.1 does not restrict the number of Rock Ridge continuation     entries, which allows local users to cause a denial of service     (infinite loop, and system crash or hang) via a crafted iso9660 image.
    CVE-2014-9529     Race condition in the key_gc_unused_keys function in     security/keys/gc.c in the Linux kernel through 3.18.2 allows local     users to cause a denial of service (memory corruption or panic) or     possibly have unspecified other impact via keyctl commands that     trigger access to a key structure member during garbage collection of     a key.
    CVE-2014-9584     The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the     Linux kernel before 3.18.2 does not validate a length value in the     Extensions Reference (ER) System Use Field, which allows local users     to obtain sensitive information from kernel memory via a crafted     iso9660 image.
    CVE-2015-1573
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-1593     The stack randomization feature in the Linux kernel before 3.19.1 on     64-bit platforms uses incorrect data types for the results of bitwise     left-shift operations, which makes it easier for attackers to bypass     the ASLR protection mechanism by predicting the address of the top of     the stack, related to the randomize_stack_top function in     fs/binfmt_elf.c and the stack_maxrandom_size function in     arch/x86/mm/mmap.c.
    CVE-2015-1805
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-2830     arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not     prevent the TS_COMPAT flag from reaching a user-mode task, which might     allow local users to bypass the seccomp or audit protection mechanism     via a crafted application that uses the (1) fork or (2) close system     call, as demonstrated by an attack against seccomp before 3.16.
    Version-Release number of selected component (if applicable):

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 7 : kernel-3.10.0-229.7.2.el7 (AXSA:2015-216:01)

medium Nessus Plugin ID 289483

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Feb 9, 2026, 4:07 PM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202602091607
Version 1.2 Jan 20, 2026, 4:27 AM Detection (updated detection logic) Plugin Feed: 202601200427
Version 1.1 Jan 16, 2026, 10:12 PM New Plugin Feed: 202601162212