The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-672670 advisory.

    [1.5.1-1.0.1]
    - Change distroname_ext in spec file to oracle

    [1.5.1-1]
    - Rebase to 1.5.1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67265 advisory.

    * libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk     boundaries (CVE-2026-71225)

    * libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path     (CVE-2026-71226)

    * libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled     io_getevents() timeout return (CVE-2026-71227)

    Bug Fix(es) and Enhancement(s):

    * libkcapi: AEAD Decrypt Auth Check Skipped for Zero-Length Input in `kcapi-enc` [rhel-9.8.z] (JIRA:Rocky     Linux-242667)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1845:02 advisory.

    * libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk     boundaries (CVE-2026-71225)
      * libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path     (CVE-2026-71226)
      * libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled     io_getevents() timeout return (CVE-2026-71227)     Bug Fix(es) and Enhancement(s):
      * libkcapi: AEAD Decrypt Auth Check Skipped for Zero-Length Input in `kcapi-enc` [rhel-9.8.z]     (JIRA:RHEL-242667)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69285 advisory.

    libkcapi allows user-space to access the Linux kernel crypto API.  This library uses the netlink interface     and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface     handling.  The library does not implement any cipher algorithms.  All consumer requests are sent to the     kernel for processing.  Results from the kernel crypto API are returned to the consumer via the library     API.  The kernel interface and therefore this library can be used by unprivileged processes.

    Security Fix(es):

    * libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk     boundaries (CVE-2026-71225)

    * libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path     (CVE-2026-71226)

    * libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled     io_getevents() timeout return (CVE-2026-71227)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_67266 advisory.

    * libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk     boundaries (CVE-2026-71225)

    * libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path     (CVE-2026-71226)

    * libkcapi: Infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled     io_getevents() timeout return (CVE-2026-71227)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
345988	Oracle Linux 10 : ELSA-2026-67267-0: / libkcapi (ELSA-2026-672670)	Nessus	Oracle Linux Local Security Checks	2026/9/15	2026/9/15	high
346029	RockyLinux 9 : libkcapi (RLSA-2026:67265)	Nessus	Rocky Linux Local Security Checks	2026/9/15	2026/9/15	high
346248	MiracleLinux 9 : libkcapi-1.4.0-3.el9_8.ML.1 (AXSA:2026-1845:02)	Nessus	Miracle Linux Local Security Checks	2026/9/16	2026/9/16	high
348595	RHEL 10 : libkcapi (RHSA-2026:69285)	Nessus	Red Hat Local Security Checks	2026/9/21	2026/9/21	high
355156	Rocky Linux 8 [CIQ] Security Update: libkcapi / libkcapi-debuginfo / libkcapi-debugsource / etc Multiple Vulnerabilities (crlsa-2026_67266)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

high

high

high

high

high