The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-612:33 advisory.

    * kernel: nvme: avoid double free special payload (CVE-2024-41073)
      * kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()     (CVE-2025-40252)
      * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
      * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
      * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table     entry handling (CVE-2026-23401)
      * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)
      * kernel: Dirty Frag is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux     kernel (CVE-2026-43284)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 8 : kernel-4.18.0-553.123.1.el8_10 (AXSA:2026-612:33)

high Nessus Plugin ID 314498

Version 1.4