Detections
Analytics

MiracleLinux 9 : kernel-5.14.0-687.17.1.el9_8 (AXSA:2026-1389:56)

high Nessus Plugin ID 331024

Synopsis

The remote MiracleLinux host is missing one or more security updates.

Description

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1389:56 advisory.

 * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
 * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)
 * kernel: xen/privcmd: fix double free via VMA splitting (CVE-2026-31787)
 * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
 * kernel: bnxt_en: Fix RSS context delete logic (CVE-2026-43260)
 * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)
 * kernel: scsi: qla2xxx: Completely fix fcport double free (CVE-2026-43414)
 * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
 * kernel: gfs2: Fix use-after-free in iomap inline data write path (CVE-2026-45984)
 * kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
 * kernel: wifi: mac80211: drop stray 'static' from fast-RX rx_result (CVE-2026-46152)
 * kernel: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CVE-2026-46117)
 * kernel: RDMA/mana: Validate rx_hash_key_len (CVE-2026-46145)
 * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
 * kernel: exit: prevent preemption of oopsing TASK_DEAD task (CVE-2026-46173)
 * kernel: wifi: mac80211: use safe list iteration in radar detect work (CVE-2026-46166)
 * kernel: nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://tsn.miraclelinux.com/en/node/24214

Plugin Details

Severity: High

ID: 331024

File Name: miracle_linux_AXSA-2026-1389.nasl

Version: 1.1

Type: Local

Published: 7/30/2026

Updated: 7/30/2026

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.9

Percentile: 99.35

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-43260

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:miracle:linux:9, p-cpe:/a:miracle:linux:kernel-abi-stablelists, p-cpe:/a:miracle:linux:kernel-core, p-cpe:/a:miracle:linux:kernel-cross-headers, p-cpe:/a:miracle:linux:kernel-debug-core, p-cpe:/a:miracle:linux:kernel-debug-devel-matched, p-cpe:/a:miracle:linux:kernel-debug-devel, p-cpe:/a:miracle:linux:kernel-debug-modules-core, p-cpe:/a:miracle:linux:kernel-debug-modules-extra, p-cpe:/a:miracle:linux:kernel-debug-modules, p-cpe:/a:miracle:linux:kernel-debug-uki-virt, p-cpe:/a:miracle:linux:kernel-debug, p-cpe:/a:miracle:linux:kernel-devel-matched, p-cpe:/a:miracle:linux:kernel-devel, p-cpe:/a:miracle:linux:kernel-headers, p-cpe:/a:miracle:linux:kernel-modules-core, p-cpe:/a:miracle:linux:kernel-modules-extra, p-cpe:/a:miracle:linux:kernel-modules, p-cpe:/a:miracle:linux:kernel-rt-core, p-cpe:/a:miracle:linux:kernel-rt-debug-core, p-cpe:/a:miracle:linux:kernel-rt-debug-devel, p-cpe:/a:miracle:linux:kernel-rt-debug-modules-core, p-cpe:/a:miracle:linux:kernel-rt-debug-modules-extra, p-cpe:/a:miracle:linux:kernel-rt-debug-modules, p-cpe:/a:miracle:linux:kernel-rt-debug, p-cpe:/a:miracle:linux:kernel-rt-devel, p-cpe:/a:miracle:linux:kernel-rt-modules-core, p-cpe:/a:miracle:linux:kernel-rt-modules-extra, p-cpe:/a:miracle:linux:kernel-rt-modules, p-cpe:/a:miracle:linux:kernel-rt, p-cpe:/a:miracle:linux:kernel-tools-libs-devel, p-cpe:/a:miracle:linux:kernel-tools-libs, p-cpe:/a:miracle:linux:kernel-tools, p-cpe:/a:miracle:linux:kernel-uki-virt-addons, p-cpe:/a:miracle:linux:kernel-uki-virt, p-cpe:/a:miracle:linux:kernel, p-cpe:/a:miracle:linux:libperf, p-cpe:/a:miracle:linux:perf, p-cpe:/a:miracle:linux:python3-perf, p-cpe:/a:miracle:linux:rtla, p-cpe:/a:miracle:linux:rv

Required KB Items: Host/local_checks_enabled, Host/MiracleLinux/release, Host/MiracleLinux/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/30/2026

Vulnerability Publication Date: 4/1/2026

Reference Information

CVE: CVE-2026-31474, CVE-2026-31669, CVE-2026-31772, CVE-2026-31787, CVE-2026-43260, CVE-2026-43279, CVE-2026-43414, CVE-2026-45984, CVE-2026-46056, CVE-2026-46117, CVE-2026-46125, CVE-2026-46135, CVE-2026-46145, CVE-2026-46152, CVE-2026-46166, CVE-2026-46173, CVE-2026-46331