The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4341 advisory.

    - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Chris Leech) [RHEL-87479]     {CVE-2025-21927}
    - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-75438] {CVE-2024-42322}
    - bonding: fix null pointer deref in bond_ipsec_offload_ok (CKI Backport Bot) [RHEL-75453]     {CVE-2024-44990}
    - kobject_uevent: Fix OOB access within zap_modalias_env() (CKI KWF BOT) [RHEL-75435] {CVE-2024-42292}
    - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-75456] {CVE-2024-46826}
    - smb: client: fix double put of @cfile in smb2_set_path_size() (Paulo Alcantara) [RHEL-79342]     {CVE-2024-46796}
    - smb: client: fix double put of @cfile in smb2_rename_path() (Paulo Alcantara) [RHEL-79342]     {CVE-2024-46736}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
235056	Oracle Linux 9 : kernel (ELSA-2025-4341)	Nessus	Oracle Linux Local Security Checks	5/1/2025	2/9/2026	high
236908	EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2025-1562)	Nessus	Huawei Local Security Checks	5/17/2025	9/25/2025	critical
237278	Alibaba Cloud Linux 3 : 0075: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2025:0075)	Nessus	Alibaba Cloud Linux Local Security Checks	5/27/2025	9/23/2025	critical

Detections

Analytics

Plugins Search

high

critical

critical