The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_13577 advisory.

    * kernel: nvme: avoid double free special payload (CVE-2024-41073)

    * kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()     (CVE-2025-40252)

    * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)

    * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

    * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table     entry handling (CVE-2026-23401)

    * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 8 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (crlsa-2026_13577)

high Nessus Plugin ID 355653

Version 1.2