The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47040 advisory.

    * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797)

    * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002)

    * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)

    * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)

    * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)

    Bug Fix(es) and Enhancement(s):

    * general protection fault during exportfs / nfsd4_revoke_states [rhel-9.8.z] (JIRA:Rocky Linux-188257)

    * Enable Pretimeout Watchdog Panic Functionality on x86 [rhel-9.8.z] (JIRA:Rocky Linux-193729)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:62642 advisory.

    This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the     code of a running kernel.  This patch module is targeted for kernel-6.12.0-211.16.1.el10_2.

    Security Fix(es):

    * kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114)

    * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)

    * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs     (CVE-2026-46323)

    * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)

    * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:47040 advisory.

    * kernel: xfrm: Duplicate SPI Handling (CVE-2025-39797)
      * kernel: lib/buildid: use __kernel_read() for sleepable context (CVE-2026-23002)
      * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
      * kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (CVE-2026-53281)
      * kernel: blk-mq: pop cached request if it is usable (CVE-2026-64017)


    Bug Fix(es) and Enhancement(s):

      * general protection fault during exportfs / nfsd4_revoke_states [almalinux-9.8.z]     (JIRA:AlmaLinux-188257)
      * Enable Pretimeout Watchdog Panic Functionality on x86 [almalinux-9.8.z] (JIRA:AlmaLinux-193729)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:62640 advisory.

    This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the     code of a running kernel.  This patch module is targeted for kernel-5.14.0-687.10.1.el9_8.

    Security Fix(es):

    * kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114)

    * kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)

    * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs     (CVE-2026-46323)

    * kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)

    * kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
340681	Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8663-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/26/2026	high
331314	RockyLinux 9 : kernel (RLSA-2026:47040)	Nessus	Rocky Linux Local Security Checks	7/30/2026	7/30/2026	high
342375	RHEL 10 : kpatch-patch-6_12_0-211_16_1 (RHSA-2026:62642)	Nessus	Red Hat Local Security Checks	9/2/2026	9/2/2026	high
331609	AlmaLinux 9 : kernel (ALSA-2026:47040)	Nessus	Alma Linux Local Security Checks	8/2/2026	8/2/2026	high
340045	Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8664-1)	Nessus	Ubuntu Local Security Checks	8/26/2026	8/26/2026	high
342453	RHEL 9 : kpatch-patch-5_14_0-687_10_1 (RHSA-2026:62640)	Nessus	Red Hat Local Security Checks	9/2/2026	9/2/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high