The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1787572220 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU protection to     mld_newpack() mld_newpack() can be called without RTNL or RCU being held. Note that we no longer can use     sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep. Instead use     alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection. (CVE-2025-21758)

  - In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in     igmp6_send() igmp6_send() can be called without RTNL or RCU being held. Extend RCU protection so that we     can safely fetch the net pointer and avoid a potential UAF. Note that we no longer can use     sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep. Instead use     alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection. (CVE-2025-21759)

  - In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in     ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier,     so that we can use dev_net_rcu() and avoid a potential UAF. (CVE-2025-21760)

  - In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in     ovs_vport_cmd_fill_info() ovs_vport_cmd_fill_info() can be called without RTNL or RCU. Use RCU protection     and dev_net_rcu() to avoid potential UAF. (CVE-2025-21761)

  - In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit()     arp_xmit() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.
    (CVE-2025-21762)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1787572220)

critical Nessus Plugin ID 351684

Version 1.2

Version 1.1

Version 1.2 Oct 18, 2026, 10:57 AM CVE (set "CVE" coverage to "CVE-2025-21758,CVE-2025-21759,CVE-2025-21760,CVE-2025-21761,CVE-2025-21762,CVE-2025-21763,CVE-2025-21765,CVE-2025-40074,CVE-2025-68188,CVE-2026-23112,CVE-2026-31786,CVE-2026-31787,CVE-2026-43125,CVE-2026-43198,CVE-2026-64266,CVE-2026-64298,CVE-2026-64564,CVE-2026-68287") Detection (updated detection logic) Plugin Feed: 202610181057
Version 1.1 Sep 30, 2026, 9:32 PM New Plugin Feed: 202609302132