The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1886 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: mac80211: fix potential double free on mesh join (CVE-2022-49290)

    * kernel: cifs: fix oops during encryption (CVE-2022-50341)

    * kernel: i40e: fix idx validation in config queues msg (CVE-2025-39971)

    * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)

    * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)

    * kernel: Linux kernel Bluetooth L2CAP: Kernel crash due to use-after-free via race condition     (CVE-2023-53751)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22914 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: use after free flaw in l2cap_conn_del in net/bluetooth/l2cap_core.c (CVE-2022-3640)

    * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

    * kernel: Bluetooth: L2CAP: Fix use-after-free (CVE-2023-53305)

    * kernel: cifs: fix oops during encryption (CVE-2022-50341)

    * kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (CVE-2023-53365)

    * kernel: Bluetooth: L2CAP: Fix user-after-free (CVE-2022-50386)

    * kernel: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (CVE-2022-50408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992942 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    cifs: fix oops during encryption

    When running xfstests against Azure the following oops occurred on an     arm64 system

      Unable to handle kernel write to read-only memory at virtual address       ffff0001221cf000       Mem abort info:
        ESR = 0x9600004f         EC = 0x25: DABT (current EL), IL = 32 bits         SET = 0, FnV = 0         EA = 0, S1PTW = 0         FSC = 0x0f: level 3 permission fault       Data abort info:
        ISV = 0, ISS = 0x0000004f         CM = 0, WnR = 1       swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000294f3000       [ffff0001221cf000] pgd=18000001ffff8003, p4d=18000001ffff8003,       pud=18000001ff82e003, pmd=18000001ff71d003, pte=00600001221cf787       Internal error: Oops: 9600004f [#1] PREEMPT SMP       ...
      pstate: 80000005 (Nzcv daif -PAN -UAO -TCO BTYPE=--)       pc : __memcpy+0x40/0x230       lr : scatterwalk_copychunks+0xe0/0x200       sp : ffff800014e92de0       x29: ffff800014e92de0 x28: ffff000114f9de80 x27: 0000000000000008       x26: 0000000000000008 x25: ffff800014e92e78 x24: 0000000000000008       x23: 0000000000000001 x22: 0000040000000000 x21: ffff000000000000       x20: 0000000000000001 x19: ffff0001037c4488 x18: 0000000000000014       x17: 235e1c0d6efa9661 x16: a435f9576b6edd6c x15: 0000000000000058       x14: 0000000000000001 x13: 0000000000000008 x12: ffff000114f2e590       x11: ffffffffffffffff x10: 0000040000000000 x9 : ffff8000105c3580       x8 : 2e9413b10000001a x7 : 534b4410fb86b005 x6 : 534b4410fb86b005       x5 : ffff0001221cf008 x4 : ffff0001037c4490 x3 : 0000000000000001       x2 : 0000000000000008 x1 : ffff0001037c4488 x0 : ffff0001221cf000       Call trace:
       __memcpy+0x40/0x230        scatterwalk_map_and_copy+0x98/0x100        crypto_ccm_encrypt+0x150/0x180        crypto_aead_encrypt+0x2c/0x40        crypt_message+0x750/0x880        smb3_init_transform_rq+0x298/0x340        smb_send_rqst.part.11+0xd8/0x180        smb_send_rqst+0x3c/0x100        compound_send_recv+0x534/0xbc0        smb2_query_info_compound+0x32c/0x440        smb2_set_ea+0x438/0x4c0        cifs_xattr_set+0x5d4/0x7c0

    This is because in scatterwalk_copychunks(), we attempted to write to     a buffer (@sign) that was allocated in the stack (vmalloc area) by     crypt_message() and thus accessing its remaining 8 (x2) bytes ended up     crossing a page boundary.

    To simply fix it, we could just pass @sign kmalloc'd from     crypt_message() and then we're done.  Luckily, we don't seem to pass     any other vmalloc'd buffers in smb_rqst::rq_iov...

    Instead, let's map the correct pages and offsets from vmalloc buffers     as well in cifs_sg_set_buf() and then avoiding such oopses.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22072 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CVE-2025-38729)

    * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

    * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)

    * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)

    * kernel: Bluetooth: L2CAP: fix bad unlock balance in l2cap_disconnect_rsp (CVE-2023-53297)

    * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)

    * kernel: cifs: fix oops during encryption (CVE-2022-50341)

    * kernel: scsi: qla2xxx: Wait for io return on terminate rport (CVE-2023-53322)

    * kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (CVE-2023-53365)

    * kernel: skbuff: skb_segment, Call zero copy functions before using skbuff frags (CVE-2023-53354)

    * kernel: Bluetooth: Fix potential use-after-free when clear keys (CVE-2023-53386)

    * kernel: ext4: fix undefined behavior in bit shift for ext4_check_flag_values (CVE-2022-50403)

    * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22006 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ethtool: check device is present when getting link settings (CVE-2024-46679)

    * kernel: ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CVE-2025-38729)

    * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

    * kernel: NFS: Fix a race when updating an existing write (CVE-2025-39697)

    * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)

    * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)

    * kernel: wifi: mac80211: check S1G action frame size (CVE-2023-53257)

    * kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (CVE-2023-53232)

    * kernel: Bluetooth: L2CAP: fix bad unlock balance in l2cap_disconnect_rsp (CVE-2023-53297)

    * kernel: cifs: fix oops during encryption (CVE-2022-50341)

    * kernel: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (CVE-2023-53365)

    * kernel: net: sched: sfb: fix null pointer access issue when sfb_init() fails (CVE-2022-50356)

    * kernel: skbuff: skb_segment, Call zero copy functions before using skbuff frags (CVE-2023-53354)

    * kernel: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (CVE-2023-53393)

    * kernel: Bluetooth: L2CAP: Fix user-after-free (CVE-2022-50386)

    * kernel: ext4: fix undefined behavior in bit shift for ext4_check_flag_values (CVE-2022-50403)

    * kernel: NFSD: Protect against send buffer overflow in NFSv2 READ (CVE-2022-50410)

    * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
297808	RHEL 8 : kernel (RHSA-2026:1886)	Nessus	Red Hat Local Security Checks	2026/2/4	2026/2/10	high
277934	RHEL 7 : kernel-rt (RHSA-2025:22914)	Nessus	Red Hat Local Security Checks	2025/12/9	2025/12/9	high
281390	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992942)	Nessus	Unity Linux Local Security Checks	2025/12/31	2025/12/31	medium
276781	RHEL 8 : kernel (RHSA-2025:22072)	Nessus	Red Hat Local Security Checks	2025/11/25	2026/3/3	high
276686	RHEL 8 : kernel (RHSA-2025:22006)	Nessus	Red Hat Local Security Checks	2025/11/25	2026/3/6	high
171848	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2023-042 (ALASKERNEL-5.4-2023-042)	Nessus	Amazon Linux Local Security Checks	2023/2/23	2026/2/11	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/3/23	high

检测

插件搜索

high

high

medium

high

high

high

high