The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792215398 advisory.

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. (CVE-2022-2874)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0260. (CVE-2022-2982)

  - Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages     using the `:redir` ex command to register, variables and files. It also allows to show the contents of     registers using the `:registers` or `:display` ex command. When redirecting the output of `:display` to a     register, Vim will free the register content before storing the new content in the register. Now when     redirecting the `:display` command to a register that is being displayed, Vim will free the content while     shortly afterwards trying to access it, which leads to a use-after-free. Vim pre 9.1.1115 checks in the     ex_display() function, that it does not try to redirect to a register while displaying this register at     the same time. However this check is not complete, and so Vim does not check the `+` and `*` registers     (which typically donate the X11/clipboard registers, and when a clipboard connection is not possible will     fall back to use register 0 instead. In Patch 9.1.1115 Vim will therefore skip outputting to register zero     when trying to redirect to the clipboard registers `*` or `+`. Users are advised to upgrade. There are no     known workarounds for this vulnerability. (CVE-2025-26603)

  - Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in     runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped     typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command     separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with     CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in     version 9.2.0845. (CVE-2026-73073)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792215398)

high Nessus Plugin ID 366754

Version 1.2

Version 1.1

Version 1.2 Oct 27, 2026, 3:42 AM CVE (set "CVE" coverage to "CVE-2022-2874,CVE-2022-2982,CVE-2025-26603,CVE-2026-73073") CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin metadata Plugin Feed: 202610270342
Version 1.1 Oct 17, 2026, 2:21 PM New Plugin Feed: 202610171421