The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500572 advisory.

    - NFSD: Define actions for the new time_deleg FATTR4 attributes (Chuck Lever)  [Orabug: 39004166]     {CVE-2025-40326}
    - ipv4: free inet_opt and ireq_opt after an RCU grace period (Eric Dumazet)  [Orabug: 40165787]     {CVE-2026-98432}
    - ipv4: validate checksum_start before completing checksum (Michael S. Tsirkin)  [Orabug: 40165809]     {CVE-2026-99999}
    - mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (Hyunwoo Kim)  [Orabug: 40022020]     {CVE-2026-89754}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
373466	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3335)	Nessus	Amazon Linux Local Security Checks	2026/10/29	2026/11/4	medium
375469	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500572)	Nessus	Oracle Linux Local Security Checks	2026/11/3	2026/11/3	medium

検出

プラグインの検索

medium

medium