The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:72623 advisory.

    * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)

    * kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325)

    * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)

    * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341)

    * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875)

    * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)

    * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556)

    * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522)

    * kernel: perf: Reject exited events as group leaders (CVE-2026-74753)

    Bug Fix(es) and Enhancement(s):

    * KVM: s390: Limit adapter indicator access to mapped page [rhel-9.8.z] (JIRA:Rocky Linux-188656)

    * crypto: xxhash64 should not be fips approved [rhel-9.8.z] (JIRA:Rocky Linux-256437)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72623 advisory.

    - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875}
    - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753}
    - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556}
    - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942}
    - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972}
    - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391]     {CVE-2026-53341}
    - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot)     [RHEL-254308] {CVE-2026-80522}
    - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788]     {CVE-2026-46325}
    - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566]     {CVE-2026-64102}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion     for MR page sizes != PAGE_SIZE The current implementation incorrectly handles memory regions (MRs) with     page sizes different from the system PAGE_SIZE. The core issue is that rxe_set_page() is called with     mr->page_size step increments, but the page_list stores individual struct page pointers, each representing     PAGE_SIZE of memory. ib_sg_to_page() has ensured that when i>=1 either a) SG[i-1].dma_end and     SG[i].dma_addr are contiguous or b) SG[i-1].dma_end and SG[i].dma_addr are mr->page_size aligned. This     leads to incorrect iova-to-va conversion in scenarios: 1) page_size < PAGE_SIZE (e.g., MR: 4K, system:
    64K): ibmr->iova = 0x181800 sg[0]: dma_addr=0x181800, len=0x800 sg[1]: dma_addr=0x173000, len=0x1000     Access iova = 0x181800 + 0x810 = 0x182010 Expected VA: 0x173010 (second SG, offset 0x10) Before fix: -     index = (0x182010 >> 12) - (0x181800 >> 12) = 1 - page_offset = 0x182010 & 0xFFF = 0x10 - xarray[1] stores     system page base 0x170000 - Resulting VA: 0x170000 + 0x10 = 0x170010 (wrong) 2) page_size > PAGE_SIZE     (e.g., MR: 64K, system: 4K): ibmr->iova = 0x18f800 sg[0]: dma_addr=0x18f800, len=0x800 sg[1]:
    dma_addr=0x170000, len=0x1000 Access iova = 0x18f800 + 0x810 = 0x190010 Expected VA: 0x170010 (second SG,     offset 0x10) Before fix: - index = (0x190010 >> 16) - (0x18f800 >> 16) = 1 - page_offset = 0x190010 &     0xFFFF = 0x10 - xarray[1] stores system page for dma_addr 0x170000 - Resulting VA: system page of 0x170000     + 0x10 = 0x170010 (wrong) Yi Zhang reported a kernel panic[1] years ago related to this defect. Solution:
    1. Replace xarray with pre-allocated rxe_mr_page array for sequential indexing (all MR page indices are     contiguous) 2. Each rxe_mr_page stores both struct page* and offset within the system page 3. Handle MR     page_size != PAGE_SIZE relationships: - page_size > PAGE_SIZE: Split MR pages into multiple system pages -     page_size <= PAGE_SIZE: Store offset within system page 4. Add boundary checks and compatibility     validation This ensures correct iova-to-va conversion regardless of MR page size and system PAGE_SIZE     relationship, while improving performance through array-based sequential access. Tests on 4K and 64K     PAGE_SIZE hosts: - rdma-core/pytests $ ./build/bin/run_tests.py --dev eth0_rxe - blktest: $ TIMEOUT=30     QUICK_RUN=1 USE_RXE=1 NVMET_TRTYPES=rdma ./check nvme srp rnbd [1]     https://lore.kernel.org/all/CAHj4cs9XRqE25jyVw9rj9YugffLn5+f=1znaBEnu1usLOciD+g@mail.gmail.com/T/     (CVE-2026-46325)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8630-2 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - x86 architecture;

    - InfiniBand drivers;

    - Network drivers;

    - Mellanox network drivers;

    - File systems infrastructure;

    - IPv4 networking;

    - Network traffic control;

    - TCP network protocol;

    - B.A.T.M.A.N. meshing protocol;

    - IPv6 networking;

    - Multipath TCP;

    - Netfilter;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets; (CVE-2026-43083, CVE-2026-43197, CVE-2026-43198, CVE-2026-43465, CVE-2026-46242,     CVE-2026-46325, CVE-2026-46331, CVE-2026-52914, CVE-2026-52924, CVE-2026-52931, CVE-2026-53151,     CVE-2026-53176, CVE-2026-53212, CVE-2026-53215, CVE-2026-53225, CVE-2026-53228, CVE-2026-53359)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72623 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)

    * kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325)

    * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)

    * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341)

    * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875)

    * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)

    * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556)

    * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522)

    * kernel: perf: Reject exited events as group leaders (CVE-2026-74753)

    Bug Fix(es) and Enhancement(s):

    * KVM: s390: Limit adapter indicator access to mapped page [rhel-9.8.z] (JIRA:RHEL-188656)

    * crypto: xxhash64 should not be fips approved [rhel-9.8.z] (JIRA:RHEL-256437)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8508-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - S390 architecture;

    - Block layer subsystem;

    - Cryptographic API;

    - DMA engine subsystem;

    - GPU drivers;

    - InfiniBand drivers;

    - Ethernet bonding driver;

    - STMicroelectronics network drivers;

    - Network drivers;

    - NVME drivers;

    - SCSI subsystem;

    - USB over IP driver;

    - File systems infrastructure;

    - Ext4 file system;

    - Network file system (NFS) server daemon;

    - SMB network file system;

    - Kernel thread helper (kthread);

    - Distributed Switch Architecture;

    - IPv6 networking;

    - Netfilter;

    - Tracing infrastructure;

    - Control group (cgroup);

    - Kernel exit() syscall;

    - Scatterlist API;

    - Memory management;

    - B.A.T.M.A.N. meshing protocol;

    - Ethernet bridge;

    - Ceph Core library;

    - IPv4 networking;

    - MAC80211 subsystem;

    - Multipath TCP;

    - Packet sockets;

    - RxRPC session sockets;

    - SMC sockets;

    - TLS protocol;

    - Unix domain sockets;

    - X.25 network layer;

    - AppArmor security module; (CVE-2025-71088, CVE-2025-71090, CVE-2025-71127, CVE-2025-71134,     CVE-2025-71141, CVE-2025-71142, CVE-2025-71144, CVE-2025-71152, CVE-2025-71155, CVE-2026-22984,     CVE-2026-23112, CVE-2026-23231, CVE-2026-23272, CVE-2026-23273, CVE-2026-23274, CVE-2026-23278,     CVE-2026-23351, CVE-2026-23392, CVE-2026-23394, CVE-2026-23427, CVE-2026-23428, CVE-2026-23450,     CVE-2026-23455, CVE-2026-31402, CVE-2026-31418, CVE-2026-31419, CVE-2026-31436, CVE-2026-31448,     CVE-2026-31478, CVE-2026-31504, CVE-2026-31533, CVE-2026-31607, CVE-2026-31635, CVE-2026-31637,     CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31682,     CVE-2026-31685, CVE-2026-31718, CVE-2026-43011, CVE-2026-43033, CVE-2026-43037, CVE-2026-43038,     CVE-2026-43071, CVE-2026-43077, CVE-2026-43078, CVE-2026-43083, CVE-2026-43114, CVE-2026-43117,     CVE-2026-43125, CVE-2026-43186, CVE-2026-43197, CVE-2026-43304, CVE-2026-43341, CVE-2026-43376,     CVE-2026-43378, CVE-2026-43383, CVE-2026-43384, CVE-2026-43402, CVE-2026-43406, CVE-2026-43407,     CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45898, CVE-2026-45966, CVE-2026-45988,     CVE-2026-46028, CVE-2026-46039, CVE-2026-46043, CVE-2026-46115, CVE-2026-46119, CVE-2026-46135,     CVE-2026-46185, CVE-2026-46195, CVE-2026-46243, CVE-2026-46244, CVE-2026-46266, CVE-2026-46289,     CVE-2026-46316, CVE-2026-46325)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2240:115 advisory.

    * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)
      * kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (CVE-2026-46325)
      * kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
      * kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (CVE-2026-53341)
      * kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875)
      * kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)
      * kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556)
      * kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CVE-2026-80522)
      * kernel: perf: Reject exited events as group leaders (CVE-2026-74753)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8656-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - x86 architecture;

    - InfiniBand drivers;

    - Network drivers;

    - Mellanox network drivers;

    - File systems infrastructure;

    - IPv4 networking;

    - Network traffic control;

    - TCP network protocol;

    - B.A.T.M.A.N. meshing protocol;

    - IPv6 networking;

    - Multipath TCP;

    - Netfilter;

    - Open vSwitch;

    - RxRPC session sockets;

    - SCTP protocol;

    - SMC sockets; (CVE-2026-43083, CVE-2026-43197, CVE-2026-43198, CVE-2026-43465, CVE-2026-46242,     CVE-2026-46325, CVE-2026-46331, CVE-2026-52914, CVE-2026-52924, CVE-2026-52931, CVE-2026-53151,     CVE-2026-53176, CVE-2026-53212, CVE-2026-53215, CVE-2026-53224, CVE-2026-53225, CVE-2026-53228,     CVE-2026-53246, CVE-2026-53247, CVE-2026-53359, CVE-2026-64531)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
351446	RockyLinux 9 : kernel (RLSA-2026:72623)	Nessus	Rocky Linux Local Security Checks	2026/9/30	2026/9/30	medium
351477	Oracle Linux 9 : kernel (ELSA-2026-72623)	Nessus	Oracle Linux Local Security Checks	2026/9/30	2026/9/30	medium
320144	Linux Distros Unpatched Vulnerability : CVE-2026-46325	Nessus	Misc.	2026/6/9	2026/11/13	critical
369932	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8630-2)	Nessus	Ubuntu Local Security Checks	2026/10/21	2026/10/22	critical
351102	RHEL 9 : kernel (RHSA-2026:72623)	Nessus	Red Hat Local Security Checks	2026/9/29	2026/9/30	medium
374982	Photon OS 5.0: Linux PHSA-2026-5.0-92-1013	Nessus	PhotonOS Local Security Checks	2026/11/2	2026/11/2	critical
325425	Ubuntu 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8508-1)	Nessus	Ubuntu Local Security Checks	2026/7/7	2026/7/30	critical
375769	MiracleLinux 9 : kernel-5.14.0-687.53.1.el9_8 (AXSA:2026-2240:115)	Nessus	Miracle Linux Local Security Checks	2026/11/4	2026/11/4	medium
340687	Ubuntu 22.04 LTS / Pro Realtime 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-8656-1)	Nessus	Ubuntu Local Security Checks	2026/8/26	2026/9/24	critical

检测

插件搜索

medium

medium

critical

critical

medium

critical

critical

medium

critical