The version of kernel installed on the remote host is prior to 5.10.253-251.1014. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-117 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: fix race on port output (CVE-2023-53188)

    In the Linux kernel, the following vulnerability has been resolved:

    ipvs: properly dereference pe in ip_vs_add_service (CVE-2024-42322)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: drop extent cache when splitting extent fails (CVE-2026-45899)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: fix dirtyclusters double decrement on fs shutdown (CVE-2026-45920)

    In the Linux kernel, the following vulnerability has been resolved:

    ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (CVE-2026-45985)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-117 (ALASKERNEL-5.10-2026-117)

high Nessus Plugin ID 314569

Version 1.2