The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:0793 advisory.

    * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703)

    * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length     (CVE-2025-39933)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths     (CVE-2025-68287)

    * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:0453 advisory.

    * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)

    * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)

    * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)

    * kernel: net: phylink: add lock for serializing concurrent pl->phydev writes with resolver     (CVE-2025-39905)

    * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)

    * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)

    * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths     (CVE-2025-68287)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_0453 advisory.

    * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)

    * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)

    * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)

    * kernel: net: phylink: add lock for serializing concurrent pl->phydev writes with resolver     (CVE-2025-39905)

    * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)

    * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)

    * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths     (CVE-2025-68287)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1184 advisory.

    This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.4. It addresses 20 CVEs:
    CVE-2025-68287, CVE-2025-23142, CVE-2025-40277, CVE-2025-37891, CVE-2025-38724, and 15 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
296500	RockyLinux 9 : kernel (RLSA-2026:0793)	Nessus	Rocky Linux Local Security Checks	2026/1/24	2026/1/24	high
291297	RockyLinux 10 : kernel (RLSA-2026:0453)	Nessus	Rocky Linux Local Security Checks	2026/1/17	2026/1/17	high
354138	Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_0453)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
357244	Rocky Linux 9.4 [CIQ] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_1184)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical

偵測

搜尋 Plugin

high

high

high

critical