The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19074 advisory.

    - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}
    - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu)     [RHEL-172542] {CVE-2026-31431}
    - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172542]     {CVE-2026-23060}
    - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172542]     {CVE-2026-31677}
    - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172542] {CVE-2026-31431}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 10 : kernel (ELSA-2026-19074)

high Nessus Plugin ID 327074

Version 1.2

Version 1.1

Version 1.2 Jul 18, 2026, 3:00 PM Exploit attributes ("Exploit framework core" set to "True") Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202607181500
Version 1.1 Jul 16, 2026, 4:10 AM New Plugin Feed: 202607160410