The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:26535 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: geneve: Fix use-after-free in geneve_find_dev(). (CVE-2025-21858)

    * kernel: sctp: fix a potential overflow in sctp_ifwdtsn_skip (CVE-2023-53372)

    * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)

    * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)

    * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)

    * kernel: nbd: defer config unlock in nbd_genl_connect (CVE-2025-68366)

    * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)

    * kernel: iommu: disable SVA when CONFIG_X86 is set (CVE-2025-71089)

    * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)

    * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)

    * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)

    * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CVE-2026-23216)

    * kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

    * kernel: netfilter: nf_tables: release flowtable after rcu grace period on error (CVE-2026-23392)

    * kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

    * kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)

    * kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)

    * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

    * kernel: wifi: brcmfmac: validate bsscfg indices in IF events (CVE-2026-43110)

    * kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

    * kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

    * kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

    * kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)

    * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

    Bug Fix(es) and Enhancement(s):

    * NFS client hangs while returning delegations (JIRA:RHEL-112276)

    * Rhel backport of upstream commit i40e: avoid redundant VF link state update (JIRA:RHEL-141908)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:27731 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: Use-after-free in BPF sockmap can lead to denial of service and privilege     escalation (CVE-2025-38154)

    * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)

    * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)

    * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)

    * kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state     (CVE-2026-23136)

    * kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)

    * kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)

    * kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)

    * kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs     (CVE-2026-46323)

    * kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)

    * kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)

    * kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)

    * kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)

    Bug Fix(es) and Enhancement(s):

    * libceph: CEPH_CRYPTO_AES256KRB5 (--key-type aes256k) support [rhel-10.0.z] (JIRA:RHEL-168933)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
321564	RHEL 8 : kernel (RHSA-2026:26535)	Nessus	Red Hat Local Security Checks	2026/6/20	2026/8/25	high
321938	RHEL 10 : kernel (RHSA-2026:27731)	Nessus	Red Hat Local Security Checks	2026/6/22	2026/7/3	high

検出

プラグインの検索

high

high