Detections
Analytics
MiracleLinux 8 : kernel-4.18.0-553.162.1.el8_10 (AXSA:2026-1898:82)
critical Nessus Plugin ID 349616
Synopsis
The remote MiracleLinux host is missing one or more security updates.Description
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1898:82 advisory.* kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset (CVE-2025-68745)
* kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
* kernel: netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)
* kernel: sctp: diag: reject stale associations in dump_one path (CVE-2026-52917)
* kernel: net: pull headers in qdisc_pkt_len_segs_init() (CVE-2026-53091)
* kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul (CVE-2026-52986)
* kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (CVE-2026-53246)
* kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (CVE-2026-63801)
* kernel: sctp: fix race between sctp_wait_for_connect and peeloff (CVE-2026-63971)
* kernel: security/keys: fix missed RCU read section on lookup (CVE-2026-64015)
* kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)
* kernel: sctp: fix auth_hmacs array size in struct sctp_cookie (CVE-2026-68376)
* kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (CVE-2026-68117)
* kernel: sctp: auth: verify auth requirement when auth_chunk is NULL (CVE-2026-68300)
* kernel: sctp: validate stream count in sctp_process_strreset_inreq() (CVE-2026-68315) Bug Fix(es) and Enhancement(s):
* scsi: mpt3sas: avoid freeing unallocated PCIe SGL buffers [rhel 8.6.z] (JIRA:RHEL-194117)
* gfs2: harden gfs2_glock_hold [RHEL-8] (JIRA:RHEL-240340)
Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Critical
ID: 349616
File Name: miracle_linux_AXSA-2026-1898.nasl
Version: 1.1
Type: Local
Published: 9/24/2026
Updated: 9/24/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7
Percentile: 98.3
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-68300
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:miracle:linux:8, p-cpe:/a:miracle:linux:bpftool, p-cpe:/a:miracle:linux:kernel-abi-stablelists, p-cpe:/a:miracle:linux:kernel-core, p-cpe:/a:miracle:linux:kernel-cross-headers, p-cpe:/a:miracle:linux:kernel-debug-core, p-cpe:/a:miracle:linux:kernel-debug-devel, p-cpe:/a:miracle:linux:kernel-debug-modules-extra, p-cpe:/a:miracle:linux:kernel-debug-modules, p-cpe:/a:miracle:linux:kernel-debug, p-cpe:/a:miracle:linux:kernel-devel, p-cpe:/a:miracle:linux:kernel-headers, p-cpe:/a:miracle:linux:kernel-modules-extra, p-cpe:/a:miracle:linux:kernel-modules, p-cpe:/a:miracle:linux:kernel-tools-libs-devel, p-cpe:/a:miracle:linux:kernel-tools-libs, p-cpe:/a:miracle:linux:kernel-tools, p-cpe:/a:miracle:linux:kernel, p-cpe:/a:miracle:linux:perf, p-cpe:/a:miracle:linux:python3-perf
Required KB Items: Host/local_checks_enabled, Host/MiracleLinux/release, Host/MiracleLinux/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/24/2026
Vulnerability Publication Date: 12/24/2025
Reference Information
CVE: CVE-2025-68745, CVE-2026-46149, CVE-2026-52917, CVE-2026-52942, CVE-2026-52986, CVE-2026-53091, CVE-2026-53246, CVE-2026-63801, CVE-2026-63971, CVE-2026-64015, CVE-2026-64113, CVE-2026-68117, CVE-2026-68300, CVE-2026-68315, CVE-2026-68376