The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Sashiko points out the radix_tree itself is RCU safe,     but nothing ever frees the mlx4_srq struct with RCU, and it isn't even accessed within the RCU critical     section. It also will crash if an event is delivered before the srq object is finished initializing. Use     the spinlock since it isn't easy to make RCU work, use refcount_inc_not_zero() to protect against     partially initialized objects, and order the refcount_set() to be after the srq is fully initialized.
    (CVE-2026-46181)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:35863 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or     privilege escalation (CVE-2026-23270)

    * kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

    * kernel: mptcp: fix slab-use-after-free in __inet_lookup_established (CVE-2026-31669)

    * kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVE-2026-43279)

    * kernel: tcp: fix potential race in tcp_v6_syn_recv_sock() (CVE-2026-43198)

    * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)

    * kernel: netfilter: flowtable: strictly check for maximum number of actions (CVE-2026-43329)

    * kernel: ALSA: aloop: Fix peer runtime UAF during format-change stop (CVE-2026-46090)

    * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)

    * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)

    Bug Fix(es) and Enhancement(s):

    * NVMe-FC: Panic during NVMe Controller Reset tests (JIRA:RHEL-178449)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:25121 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)

    * kernel: smc: Fix use-after-free in tcp_write_timer_handler() (CVE-2023-53781)

    * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)

    * kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)

    * kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)

    * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)

    * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)

    * kernel: smb: client: fix OOB reads parsing symlink error response (CVE-2026-31613)

    * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)

    * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)

    * kernel: dlm: validate length in dlm_search_rsb_tree (CVE-2026-43125)

    * kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)

    * kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (CVE-2026-46181)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
317542	Linux Distros Unpatched Vulnerability : CVE-2026-46181	Nessus	Misc.	2026/5/29	2026/7/29	high
325164	RHEL 8 : kernel (RHSA-2026:35863)	Nessus	Red Hat Local Security Checks	2026/7/6	2026/7/6	critical
320531	RHEL 8 : kernel (RHSA-2026:25121)	Nessus	Red Hat Local Security Checks	2026/6/11	2026/6/11	high

检测

插件搜索

high

critical

high