The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49030 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVE-2025-40026)

    * kernel: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (CVE-2026-63807)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 10 : kernel (RHSA-2026:49030)

high Nessus Plugin ID 331504

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Aug 10, 2026, 9:45 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 score source (changed from "CVE-2026-63807" to "CVE-2026-64561") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202608100945
Version 1.2 Aug 7, 2026, 5:10 PM CVE (set "CVE" coverage to "CVE-2025-40026,CVE-2026-63807,CVE-2026-64561") Detection (updated detection logic) Reference Plugin Feed: 202608071710
Version 1.1 Aug 1, 2026, 6:58 AM New Plugin Feed: 202608010658