The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77218 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)

    * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)

    * kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910)

    * kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)

    * kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)

    * kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114)

    * kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)

    * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)

    * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)

    * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

    * kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)

    * kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)

    * kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)

    * kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)

    * kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)

    * kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)

    * kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)

    * kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)

    * kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)

    * kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)

    * kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95212 advisory.

    * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)

    * kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541)

    * kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586)

    * kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)

    * kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)

    * kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)

    Bug Fix(es) and Enhancement(s):

    * Rocky Linux8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:Rocky Linux-298849)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95100 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)

    * kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541)

    * kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586)

    * kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)

    * kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)

    * kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)

    Bug Fix(es) and Enhancement(s):

    * RHEL8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:RHEL-298849)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_95100 advisory.

    * kernel: sctp: stream: fully roll back denied add-stream state (CVE-2026-52929)

    * kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (CVE-2026-64541)

    * kernel: sctp: clear new_transport when removing a peer (CVE-2026-74586)

    * kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (CVE-2026-80864)

    * kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (CVE-2026-80863)

    * kernel: openvswitch: Fix CT limit teardown use-after-free (CVE-2026-89488)

    Bug Fix(es) and Enhancement(s):

    * Rocky Linux8.10 - s390/smp: Remove conditional emergency signal usage (JIRA:Rocky Linux-298849)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
363822	RHEL 9 : kernel (RHSA-2026:77218)	Nessus	Red Hat Local Security Checks	2026/10/7	2026/10/21	critical
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	2026/11/5	2026/11/5	high
376447	RockyLinux 8 : kernel (RLSA-2026:95212)	Nessus	Rocky Linux Local Security Checks	2026/11/5	2026/11/5	critical
376942	RHEL 8 : kernel-rt (RHSA-2026:95100)	Nessus	Red Hat Local Security Checks	2026/11/6	2026/11/6	critical
377506	Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_95100)	Nessus	Rocky Linux Local Security Checks	2026/11/7	2026/11/7	critical

检测

插件搜索

critical

high

critical

critical

critical