The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49031 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

    * kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception     level resources (CVE-2025-10263)

    * kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923)

    Bug Fix(es) and Enhancement(s):

    * [RFE] Requesting FOU and GUE/GRE support in RHEL 9 [rhel-9.6.z] (JIRA:RHEL-144986)

    * dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() [rhel-9.6.z] (JIRA:RHEL-212060)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : kernel (RHSA-2026:49031)

high Nessus Plugin ID 331498

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Aug 10, 2026, 9:45 AM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv3 score source (set to "CVE-2026-64561") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202608100945
Version 1.2 Aug 7, 2026, 5:10 PM CVE (set "CVE" coverage to "CVE-2025-10263,CVE-2025-40026,CVE-2026-52923,CVE-2026-64561") Detection (updated detection logic) Plugin Feed: 202608071710
Version 1.1 Aug 1, 2026, 6:58 AM New Plugin Feed: 202608010658