The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:38491 advisory.

    * kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling (CVE-2026-22979)
      * kernel: rtmutex: Use waiter::task instead of current in remove_waiter() (CVE-2026-43499)
      * kernel: net: bridge: use a stable FDB dst snapshot in RCU readers (CVE-2026-46086)
      * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
      * kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock     (CVE-2026-53166)


    Bug Fix(es) and Enhancement(s):

      * Kernel panic very early during boot while reading a tracefs file (available_filter_functions) due to     invalid module name pointer [9.8.z] (JIRA:AlmaLinux-183236)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9 : kernel (ALSA-2026:38491)

medium Nessus Plugin ID 326560

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Sep 14, 2026, 6:39 PM CVSSv2 score source (changed from "CVE-2026-22979" to "CVE-2026-46086") CVSSv3 score source (changed from "CVE-2026-46086" to none) Plugin Feed: 202609141839
Version 1.2 Jul 27, 2026, 10:22 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202607271022
Version 1.1 Jul 14, 2026, 8:07 AM New Plugin Feed: 202607140807