Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Oracle Linux Security Advisory ELSA-2026-500248.
##

include('compat.inc');

if (description)
{
  script_id(343049);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/04");

  script_cve_id(
    "CVE-2025-10263",
    "CVE-2025-21807",
    "CVE-2025-23131",
    "CVE-2025-38525",
    "CVE-2025-39729",
    "CVE-2025-39936",
    "CVE-2025-68299",
    "CVE-2025-68768",
    "CVE-2026-23247",
    "CVE-2026-31419",
    "CVE-2026-31732",
    "CVE-2026-43010",
    "CVE-2026-43116",
    "CVE-2026-43197",
    "CVE-2026-43216",
    "CVE-2026-43303",
    "CVE-2026-45850",
    "CVE-2026-45897",
    "CVE-2026-45901",
    "CVE-2026-45907",
    "CVE-2026-45944",
    "CVE-2026-46054",
    "CVE-2026-46093",
    "CVE-2026-46252",
    "CVE-2026-52908",
    "CVE-2026-52909",
    "CVE-2026-52910",
    "CVE-2026-52917",
    "CVE-2026-52923",
    "CVE-2026-52924",
    "CVE-2026-52927",
    "CVE-2026-52929",
    "CVE-2026-52930",
    "CVE-2026-52934",
    "CVE-2026-52942",
    "CVE-2026-52946",
    "CVE-2026-52947",
    "CVE-2026-52948",
    "CVE-2026-52975",
    "CVE-2026-52995",
    "CVE-2026-53005",
    "CVE-2026-53078",
    "CVE-2026-53090",
    "CVE-2026-53101",
    "CVE-2026-53131",
    "CVE-2026-53132",
    "CVE-2026-53134",
    "CVE-2026-53135",
    "CVE-2026-53136",
    "CVE-2026-53137",
    "CVE-2026-53138",
    "CVE-2026-53142",
    "CVE-2026-53143",
    "CVE-2026-53144",
    "CVE-2026-53146",
    "CVE-2026-53147",
    "CVE-2026-53148",
    "CVE-2026-53149",
    "CVE-2026-53150",
    "CVE-2026-53151",
    "CVE-2026-53154",
    "CVE-2026-53156",
    "CVE-2026-53167",
    "CVE-2026-53168",
    "CVE-2026-53175",
    "CVE-2026-53176",
    "CVE-2026-53177",
    "CVE-2026-53180",
    "CVE-2026-53181",
    "CVE-2026-53182",
    "CVE-2026-53183",
    "CVE-2026-53184",
    "CVE-2026-53185",
    "CVE-2026-53186",
    "CVE-2026-53189",
    "CVE-2026-53190",
    "CVE-2026-53191",
    "CVE-2026-53192",
    "CVE-2026-53193",
    "CVE-2026-53194",
    "CVE-2026-53195",
    "CVE-2026-53196",
    "CVE-2026-53199",
    "CVE-2026-53207",
    "CVE-2026-53208",
    "CVE-2026-53209",
    "CVE-2026-53210",
    "CVE-2026-53212",
    "CVE-2026-53213",
    "CVE-2026-53214",
    "CVE-2026-53215",
    "CVE-2026-53216",
    "CVE-2026-53217",
    "CVE-2026-53218",
    "CVE-2026-53219",
    "CVE-2026-53220",
    "CVE-2026-53221",
    "CVE-2026-53223",
    "CVE-2026-53225",
    "CVE-2026-53226",
    "CVE-2026-53227",
    "CVE-2026-53228",
    "CVE-2026-53229",
    "CVE-2026-53230",
    "CVE-2026-53232",
    "CVE-2026-53233",
    "CVE-2026-53235",
    "CVE-2026-53236",
    "CVE-2026-53237",
    "CVE-2026-53238",
    "CVE-2026-53239",
    "CVE-2026-53241",
    "CVE-2026-53245",
    "CVE-2026-53249",
    "CVE-2026-53251",
    "CVE-2026-53252",
    "CVE-2026-53253",
    "CVE-2026-53254",
    "CVE-2026-53255",
    "CVE-2026-53256",
    "CVE-2026-53260",
    "CVE-2026-53261",
    "CVE-2026-53262",
    "CVE-2026-53263",
    "CVE-2026-53264",
    "CVE-2026-53266",
    "CVE-2026-53267",
    "CVE-2026-53268",
    "CVE-2026-53269",
    "CVE-2026-53270",
    "CVE-2026-53272",
    "CVE-2026-53273",
    "CVE-2026-53275",
    "CVE-2026-53325",
    "CVE-2026-53328",
    "CVE-2026-53329",
    "CVE-2026-53337",
    "CVE-2026-53341",
    "CVE-2026-53345",
    "CVE-2026-53347",
    "CVE-2026-53349",
    "CVE-2026-53350",
    "CVE-2026-53352",
    "CVE-2026-53353",
    "CVE-2026-53354",
    "CVE-2026-53356",
    "CVE-2026-53358",
    "CVE-2026-53360",
    "CVE-2026-53361",
    "CVE-2026-53364",
    "CVE-2026-53365",
    "CVE-2026-53381",
    "CVE-2026-53384",
    "CVE-2026-53385",
    "CVE-2026-53388",
    "CVE-2026-53391",
    "CVE-2026-53392",
    "CVE-2026-53393",
    "CVE-2026-53394",
    "CVE-2026-53397",
    "CVE-2026-53398",
    "CVE-2026-53399",
    "CVE-2026-53400",
    "CVE-2026-53402",
    "CVE-2026-53403",
    "CVE-2026-63794",
    "CVE-2026-63795",
    "CVE-2026-63796",
    "CVE-2026-63800",
    "CVE-2026-63801",
    "CVE-2026-63802",
    "CVE-2026-63803",
    "CVE-2026-63804",
    "CVE-2026-63806",
    "CVE-2026-63807",
    "CVE-2026-63808",
    "CVE-2026-63809",
    "CVE-2026-63810",
    "CVE-2026-63821",
    "CVE-2026-63822",
    "CVE-2026-63823",
    "CVE-2026-63824",
    "CVE-2026-63826",
    "CVE-2026-63829",
    "CVE-2026-63830",
    "CVE-2026-63831",
    "CVE-2026-63834",
    "CVE-2026-63835",
    "CVE-2026-63836",
    "CVE-2026-63867",
    "CVE-2026-63868",
    "CVE-2026-63869",
    "CVE-2026-63870",
    "CVE-2026-63871",
    "CVE-2026-63875",
    "CVE-2026-63881",
    "CVE-2026-63882",
    "CVE-2026-63884",
    "CVE-2026-63891",
    "CVE-2026-63892",
    "CVE-2026-63893",
    "CVE-2026-63897",
    "CVE-2026-63898",
    "CVE-2026-63899",
    "CVE-2026-63900",
    "CVE-2026-63901",
    "CVE-2026-63902",
    "CVE-2026-63903",
    "CVE-2026-63904",
    "CVE-2026-63908",
    "CVE-2026-63912",
    "CVE-2026-63913",
    "CVE-2026-63914",
    "CVE-2026-63916",
    "CVE-2026-63917",
    "CVE-2026-63918",
    "CVE-2026-63919",
    "CVE-2026-63920",
    "CVE-2026-63921",
    "CVE-2026-63922",
    "CVE-2026-63924",
    "CVE-2026-63925",
    "CVE-2026-63926",
    "CVE-2026-63927",
    "CVE-2026-63928",
    "CVE-2026-63929",
    "CVE-2026-63937",
    "CVE-2026-63938",
    "CVE-2026-63939",
    "CVE-2026-63940",
    "CVE-2026-63942",
    "CVE-2026-63944",
    "CVE-2026-63945",
    "CVE-2026-63946",
    "CVE-2026-63947",
    "CVE-2026-63948",
    "CVE-2026-63949",
    "CVE-2026-63952",
    "CVE-2026-63956",
    "CVE-2026-63957",
    "CVE-2026-63958",
    "CVE-2026-63961",
    "CVE-2026-63962",
    "CVE-2026-63963",
    "CVE-2026-63968",
    "CVE-2026-63969",
    "CVE-2026-63970",
    "CVE-2026-63971",
    "CVE-2026-63973",
    "CVE-2026-63974",
    "CVE-2026-63975",
    "CVE-2026-63976",
    "CVE-2026-63978",
    "CVE-2026-63980",
    "CVE-2026-63981",
    "CVE-2026-63982",
    "CVE-2026-63983",
    "CVE-2026-63984",
    "CVE-2026-63985",
    "CVE-2026-63987",
    "CVE-2026-63990",
    "CVE-2026-63992",
    "CVE-2026-63993",
    "CVE-2026-63994",
    "CVE-2026-63995",
    "CVE-2026-63996",
    "CVE-2026-63997",
    "CVE-2026-64000",
    "CVE-2026-64002",
    "CVE-2026-64003",
    "CVE-2026-64007",
    "CVE-2026-64009",
    "CVE-2026-64012",
    "CVE-2026-64014",
    "CVE-2026-64090",
    "CVE-2026-64091",
    "CVE-2026-64093",
    "CVE-2026-64094",
    "CVE-2026-64095",
    "CVE-2026-64122",
    "CVE-2026-64123",
    "CVE-2026-64131",
    "CVE-2026-64187",
    "CVE-2026-64189",
    "CVE-2026-64191",
    "CVE-2026-64192",
    "CVE-2026-64205",
    "CVE-2026-64206",
    "CVE-2026-64227",
    "CVE-2026-64235",
    "CVE-2026-64237",
    "CVE-2026-64239",
    "CVE-2026-64241",
    "CVE-2026-64244",
    "CVE-2026-64245",
    "CVE-2026-64247",
    "CVE-2026-64251",
    "CVE-2026-64253",
    "CVE-2026-64256",
    "CVE-2026-64257",
    "CVE-2026-64265",
    "CVE-2026-64266",
    "CVE-2026-64270",
    "CVE-2026-64271",
    "CVE-2026-64272",
    "CVE-2026-64275",
    "CVE-2026-64276",
    "CVE-2026-64279",
    "CVE-2026-64284",
    "CVE-2026-64286",
    "CVE-2026-64287",
    "CVE-2026-64289",
    "CVE-2026-64294",
    "CVE-2026-64296",
    "CVE-2026-64298",
    "CVE-2026-64299",
    "CVE-2026-64304",
    "CVE-2026-64305",
    "CVE-2026-64306",
    "CVE-2026-64307",
    "CVE-2026-64308",
    "CVE-2026-64309",
    "CVE-2026-64310",
    "CVE-2026-64312",
    "CVE-2026-64313",
    "CVE-2026-64317",
    "CVE-2026-64319",
    "CVE-2026-64320",
    "CVE-2026-64321",
    "CVE-2026-64322",
    "CVE-2026-64323",
    "CVE-2026-64324",
    "CVE-2026-64326",
    "CVE-2026-64330",
    "CVE-2026-64332",
    "CVE-2026-64333",
    "CVE-2026-64334",
    "CVE-2026-64335",
    "CVE-2026-64336",
    "CVE-2026-64338",
    "CVE-2026-64340",
    "CVE-2026-64341",
    "CVE-2026-64342",
    "CVE-2026-64343",
    "CVE-2026-64344",
    "CVE-2026-64348",
    "CVE-2026-64351",
    "CVE-2026-64352",
    "CVE-2026-64354",
    "CVE-2026-64355",
    "CVE-2026-64357",
    "CVE-2026-64362",
    "CVE-2026-64363",
    "CVE-2026-64364",
    "CVE-2026-64365",
    "CVE-2026-64368",
    "CVE-2026-64370",
    "CVE-2026-64371",
    "CVE-2026-64372",
    "CVE-2026-64373",
    "CVE-2026-64374",
    "CVE-2026-64375",
    "CVE-2026-64376",
    "CVE-2026-64378",
    "CVE-2026-64379",
    "CVE-2026-64380",
    "CVE-2026-64381",
    "CVE-2026-64382",
    "CVE-2026-64383",
    "CVE-2026-64384",
    "CVE-2026-64385",
    "CVE-2026-64386",
    "CVE-2026-64387",
    "CVE-2026-64401",
    "CVE-2026-64403",
    "CVE-2026-64404",
    "CVE-2026-64405",
    "CVE-2026-64406",
    "CVE-2026-64408",
    "CVE-2026-64411",
    "CVE-2026-64412",
    "CVE-2026-64413",
    "CVE-2026-64414",
    "CVE-2026-64415",
    "CVE-2026-64416",
    "CVE-2026-64418",
    "CVE-2026-64420",
    "CVE-2026-64422",
    "CVE-2026-64423",
    "CVE-2026-64424",
    "CVE-2026-64425",
    "CVE-2026-64427",
    "CVE-2026-64433",
    "CVE-2026-64434",
    "CVE-2026-64435",
    "CVE-2026-64436",
    "CVE-2026-64438",
    "CVE-2026-64448",
    "CVE-2026-64450",
    "CVE-2026-64452",
    "CVE-2026-64455",
    "CVE-2026-64456",
    "CVE-2026-64457",
    "CVE-2026-64458",
    "CVE-2026-64461",
    "CVE-2026-64465",
    "CVE-2026-64470",
    "CVE-2026-64471",
    "CVE-2026-64472",
    "CVE-2026-64473",
    "CVE-2026-64474",
    "CVE-2026-64475",
    "CVE-2026-64476",
    "CVE-2026-64477",
    "CVE-2026-64478",
    "CVE-2026-64479",
    "CVE-2026-64480",
    "CVE-2026-64481",
    "CVE-2026-64484",
    "CVE-2026-64486",
    "CVE-2026-64487",
    "CVE-2026-64489",
    "CVE-2026-64490",
    "CVE-2026-64496",
    "CVE-2026-64503",
    "CVE-2026-64504",
    "CVE-2026-64508",
    "CVE-2026-64510",
    "CVE-2026-64511",
    "CVE-2026-64512",
    "CVE-2026-64514",
    "CVE-2026-64523",
    "CVE-2026-64524",
    "CVE-2026-64527",
    "CVE-2026-64528",
    "CVE-2026-64529",
    "CVE-2026-64530",
    "CVE-2026-64531",
    "CVE-2026-64534",
    "CVE-2026-64535",
    "CVE-2026-64538",
    "CVE-2026-64539",
    "CVE-2026-64540",
    "CVE-2026-64542",
    "CVE-2026-64543",
    "CVE-2026-64544",
    "CVE-2026-64545",
    "CVE-2026-64546",
    "CVE-2026-64547",
    "CVE-2026-64548",
    "CVE-2026-64549",
    "CVE-2026-64551",
    "CVE-2026-64552",
    "CVE-2026-64553",
    "CVE-2026-64554",
    "CVE-2026-64555",
    "CVE-2026-64556",
    "CVE-2026-64557",
    "CVE-2026-64560",
    "CVE-2026-64561",
    "CVE-2026-64562",
    "CVE-2026-64563",
    "CVE-2026-64564",
    "CVE-2026-64567",
    "CVE-2026-64568",
    "CVE-2026-64569",
    "CVE-2026-64570",
    "CVE-2026-64571",
    "CVE-2026-64572",
    "CVE-2026-64574",
    "CVE-2026-64575",
    "CVE-2026-64576",
    "CVE-2026-64577",
    "CVE-2026-64579",
    "CVE-2026-64580",
    "CVE-2026-64582",
    "CVE-2026-64586",
    "CVE-2026-64589",
    "CVE-2026-64593",
    "CVE-2026-64597",
    "CVE-2026-64598",
    "CVE-2026-64599",
    "CVE-2026-64600",
    "CVE-2026-64603",
    "CVE-2026-64604",
    "CVE-2026-68085",
    "CVE-2026-68091",
    "CVE-2026-68092",
    "CVE-2026-68093",
    "CVE-2026-68096",
    "CVE-2026-68102",
    "CVE-2026-68106",
    "CVE-2026-68107",
    "CVE-2026-68108",
    "CVE-2026-68110",
    "CVE-2026-68111",
    "CVE-2026-68112",
    "CVE-2026-68113",
    "CVE-2026-68115",
    "CVE-2026-68116",
    "CVE-2026-68117",
    "CVE-2026-68118",
    "CVE-2026-68119",
    "CVE-2026-68121",
    "CVE-2026-68123",
    "CVE-2026-68125",
    "CVE-2026-68126",
    "CVE-2026-68128",
    "CVE-2026-68129",
    "CVE-2026-68131",
    "CVE-2026-68133",
    "CVE-2026-68136",
    "CVE-2026-68138",
    "CVE-2026-68139",
    "CVE-2026-68142",
    "CVE-2026-68143",
    "CVE-2026-68145",
    "CVE-2026-68146",
    "CVE-2026-68148",
    "CVE-2026-68149",
    "CVE-2026-68153",
    "CVE-2026-68154",
    "CVE-2026-68155",
    "CVE-2026-68156",
    "CVE-2026-68157",
    "CVE-2026-68158",
    "CVE-2026-68160",
    "CVE-2026-68161",
    "CVE-2026-68162",
    "CVE-2026-68164",
    "CVE-2026-68165",
    "CVE-2026-68166",
    "CVE-2026-68169",
    "CVE-2026-68180",
    "CVE-2026-68181",
    "CVE-2026-68184",
    "CVE-2026-68186",
    "CVE-2026-68187",
    "CVE-2026-68188",
    "CVE-2026-68189",
    "CVE-2026-68192",
    "CVE-2026-68193",
    "CVE-2026-68194",
    "CVE-2026-68197",
    "CVE-2026-68198",
    "CVE-2026-68199",
    "CVE-2026-68200",
    "CVE-2026-68201",
    "CVE-2026-68202",
    "CVE-2026-68205",
    "CVE-2026-68206",
    "CVE-2026-68212",
    "CVE-2026-68213",
    "CVE-2026-68214",
    "CVE-2026-68216",
    "CVE-2026-68217",
    "CVE-2026-68218",
    "CVE-2026-68226",
    "CVE-2026-68227",
    "CVE-2026-68234",
    "CVE-2026-68235",
    "CVE-2026-68236",
    "CVE-2026-68243",
    "CVE-2026-68244",
    "CVE-2026-68245",
    "CVE-2026-68246",
    "CVE-2026-68247",
    "CVE-2026-68248",
    "CVE-2026-68249",
    "CVE-2026-68250",
    "CVE-2026-68251",
    "CVE-2026-68252",
    "CVE-2026-68253",
    "CVE-2026-68254",
    "CVE-2026-68255",
    "CVE-2026-68256",
    "CVE-2026-68257",
    "CVE-2026-68259",
    "CVE-2026-68264",
    "CVE-2026-68266",
    "CVE-2026-68267",
    "CVE-2026-68269",
    "CVE-2026-68271",
    "CVE-2026-68272",
    "CVE-2026-68273",
    "CVE-2026-68276",
    "CVE-2026-68277",
    "CVE-2026-68278",
    "CVE-2026-68279",
    "CVE-2026-68284",
    "CVE-2026-68293",
    "CVE-2026-68294",
    "CVE-2026-68296",
    "CVE-2026-68297",
    "CVE-2026-68299",
    "CVE-2026-68300",
    "CVE-2026-68301",
    "CVE-2026-68304",
    "CVE-2026-68307",
    "CVE-2026-68309",
    "CVE-2026-68310",
    "CVE-2026-68311",
    "CVE-2026-68313",
    "CVE-2026-68315",
    "CVE-2026-68317",
    "CVE-2026-68318",
    "CVE-2026-68319",
    "CVE-2026-68320",
    "CVE-2026-68325",
    "CVE-2026-68326",
    "CVE-2026-68328",
    "CVE-2026-68329",
    "CVE-2026-68336",
    "CVE-2026-68338",
    "CVE-2026-68339",
    "CVE-2026-68343",
    "CVE-2026-68344",
    "CVE-2026-68346",
    "CVE-2026-68348",
    "CVE-2026-68349",
    "CVE-2026-68350",
    "CVE-2026-68351",
    "CVE-2026-68352",
    "CVE-2026-68353",
    "CVE-2026-68355",
    "CVE-2026-68362",
    "CVE-2026-68363",
    "CVE-2026-68365",
    "CVE-2026-68372",
    "CVE-2026-68373",
    "CVE-2026-68374",
    "CVE-2026-68376",
    "CVE-2026-68377",
    "CVE-2026-68378",
    "CVE-2026-68386",
    "CVE-2026-68388",
    "CVE-2026-68391",
    "CVE-2026-68392",
    "CVE-2026-68394",
    "CVE-2026-68398",
    "CVE-2026-68402",
    "CVE-2026-68403",
    "CVE-2026-68405",
    "CVE-2026-68406",
    "CVE-2026-68407",
    "CVE-2026-68408",
    "CVE-2026-68410",
    "CVE-2026-68411",
    "CVE-2026-68413",
    "CVE-2026-68414",
    "CVE-2026-68416",
    "CVE-2026-68419",
    "CVE-2026-68422",
    "CVE-2026-68425",
    "CVE-2026-68427",
    "CVE-2026-68428",
    "CVE-2026-68429",
    "CVE-2026-68430",
    "CVE-2026-68432",
    "CVE-2026-68433",
    "CVE-2026-68434",
    "CVE-2026-68439",
    "CVE-2026-68442",
    "CVE-2026-68444",
    "CVE-2026-68445",
    "CVE-2026-68446",
    "CVE-2026-68450",
    "CVE-2026-68456",
    "CVE-2026-68461",
    "CVE-2026-68469",
    "CVE-2026-68475",
    "CVE-2026-68476",
    "CVE-2026-68477",
    "CVE-2026-68479",
    "CVE-2026-68480",
    "CVE-2026-72004",
    "CVE-2026-72005",
    "CVE-2026-72010",
    "CVE-2026-72012",
    "CVE-2026-72014",
    "CVE-2026-72015",
    "CVE-2026-72017",
    "CVE-2026-72019",
    "CVE-2026-72020",
    "CVE-2026-72021",
    "CVE-2026-72024",
    "CVE-2026-72027",
    "CVE-2026-72029",
    "CVE-2026-72030",
    "CVE-2026-72032",
    "CVE-2026-72034",
    "CVE-2026-72035",
    "CVE-2026-72036",
    "CVE-2026-72037",
    "CVE-2026-72039",
    "CVE-2026-72040",
    "CVE-2026-72045",
    "CVE-2026-72046",
    "CVE-2026-72049",
    "CVE-2026-72051",
    "CVE-2026-72052",
    "CVE-2026-72053",
    "CVE-2026-72054",
    "CVE-2026-72055",
    "CVE-2026-72056",
    "CVE-2026-72057",
    "CVE-2026-72059",
    "CVE-2026-72061",
    "CVE-2026-72063",
    "CVE-2026-72065",
    "CVE-2026-72066",
    "CVE-2026-72067",
    "CVE-2026-72068",
    "CVE-2026-72070",
    "CVE-2026-72083",
    "CVE-2026-72084",
    "CVE-2026-72085",
    "CVE-2026-72086",
    "CVE-2026-72087",
    "CVE-2026-72088",
    "CVE-2026-72096",
    "CVE-2026-72099",
    "CVE-2026-72100",
    "CVE-2026-72101",
    "CVE-2026-72102",
    "CVE-2026-72103",
    "CVE-2026-72105",
    "CVE-2026-72106",
    "CVE-2026-72107",
    "CVE-2026-72108",
    "CVE-2026-72110",
    "CVE-2026-72111",
    "CVE-2026-72113",
    "CVE-2026-72114",
    "CVE-2026-72115",
    "CVE-2026-72116",
    "CVE-2026-72117",
    "CVE-2026-72118",
    "CVE-2026-72119",
    "CVE-2026-72120",
    "CVE-2026-72121",
    "CVE-2026-72122",
    "CVE-2026-72123",
    "CVE-2026-72124",
    "CVE-2026-72125",
    "CVE-2026-72126",
    "CVE-2026-72127",
    "CVE-2026-72129",
    "CVE-2026-72130",
    "CVE-2026-72132",
    "CVE-2026-72135",
    "CVE-2026-72136",
    "CVE-2026-72138",
    "CVE-2026-72144",
    "CVE-2026-72151",
    "CVE-2026-72152",
    "CVE-2026-72155",
    "CVE-2026-72157",
    "CVE-2026-72159",
    "CVE-2026-72160",
    "CVE-2026-72161",
    "CVE-2026-72163",
    "CVE-2026-72164",
    "CVE-2026-72165",
    "CVE-2026-72166",
    "CVE-2026-72170",
    "CVE-2026-72172",
    "CVE-2026-72174",
    "CVE-2026-72175",
    "CVE-2026-72176",
    "CVE-2026-72177",
    "CVE-2026-72178",
    "CVE-2026-72182",
    "CVE-2026-72183",
    "CVE-2026-72212",
    "CVE-2026-72213",
    "CVE-2026-72217",
    "CVE-2026-72218",
    "CVE-2026-72219",
    "CVE-2026-72221",
    "CVE-2026-72222",
    "CVE-2026-72223",
    "CVE-2026-72224",
    "CVE-2026-72225",
    "CVE-2026-72226",
    "CVE-2026-72227",
    "CVE-2026-72228",
    "CVE-2026-72229",
    "CVE-2026-72230",
    "CVE-2026-72231",
    "CVE-2026-72232",
    "CVE-2026-72233",
    "CVE-2026-72234",
    "CVE-2026-72235",
    "CVE-2026-72237",
    "CVE-2026-72240",
    "CVE-2026-72241",
    "CVE-2026-72242",
    "CVE-2026-72243",
    "CVE-2026-72245",
    "CVE-2026-72247",
    "CVE-2026-72250",
    "CVE-2026-72251",
    "CVE-2026-72252",
    "CVE-2026-72253",
    "CVE-2026-72254",
    "CVE-2026-72255",
    "CVE-2026-72256",
    "CVE-2026-72261",
    "CVE-2026-72262",
    "CVE-2026-72265",
    "CVE-2026-72266",
    "CVE-2026-72272",
    "CVE-2026-72273",
    "CVE-2026-72280",
    "CVE-2026-72282",
    "CVE-2026-72284",
    "CVE-2026-72286",
    "CVE-2026-72289",
    "CVE-2026-72297",
    "CVE-2026-72298",
    "CVE-2026-72299",
    "CVE-2026-72300",
    "CVE-2026-72301",
    "CVE-2026-72302",
    "CVE-2026-72304",
    "CVE-2026-72305",
    "CVE-2026-72306",
    "CVE-2026-72307",
    "CVE-2026-72308",
    "CVE-2026-72310",
    "CVE-2026-72314",
    "CVE-2026-72316",
    "CVE-2026-72317",
    "CVE-2026-72318",
    "CVE-2026-72319",
    "CVE-2026-72320",
    "CVE-2026-72322",
    "CVE-2026-72323",
    "CVE-2026-72324",
    "CVE-2026-72325",
    "CVE-2026-72326",
    "CVE-2026-72330",
    "CVE-2026-72333",
    "CVE-2026-72335",
    "CVE-2026-72336",
    "CVE-2026-72338",
    "CVE-2026-72339",
    "CVE-2026-72342",
    "CVE-2026-72343",
    "CVE-2026-72347",
    "CVE-2026-72348",
    "CVE-2026-72349",
    "CVE-2026-72350",
    "CVE-2026-72351",
    "CVE-2026-72356",
    "CVE-2026-72360",
    "CVE-2026-72361",
    "CVE-2026-72362",
    "CVE-2026-72364",
    "CVE-2026-72371",
    "CVE-2026-72372",
    "CVE-2026-72373",
    "CVE-2026-72374",
    "CVE-2026-72376",
    "CVE-2026-72378",
    "CVE-2026-72379",
    "CVE-2026-72389",
    "CVE-2026-72390",
    "CVE-2026-72392",
    "CVE-2026-72395",
    "CVE-2026-72396",
    "CVE-2026-72400",
    "CVE-2026-72405",
    "CVE-2026-72406",
    "CVE-2026-72409",
    "CVE-2026-72416",
    "CVE-2026-72418",
    "CVE-2026-72419",
    "CVE-2026-72420",
    "CVE-2026-72421",
    "CVE-2026-72425",
    "CVE-2026-72427",
    "CVE-2026-72428",
    "CVE-2026-72430",
    "CVE-2026-72433",
    "CVE-2026-72434",
    "CVE-2026-72435",
    "CVE-2026-72436",
    "CVE-2026-72437",
    "CVE-2026-72441",
    "CVE-2026-72443",
    "CVE-2026-72444",
    "CVE-2026-72447",
    "CVE-2026-72449",
    "CVE-2026-72450",
    "CVE-2026-72451",
    "CVE-2026-72452",
    "CVE-2026-72464",
    "CVE-2026-72465",
    "CVE-2026-72466",
    "CVE-2026-72467",
    "CVE-2026-72468",
    "CVE-2026-72469",
    "CVE-2026-72472",
    "CVE-2026-72473",
    "CVE-2026-72476",
    "CVE-2026-72481",
    "CVE-2026-72487",
    "CVE-2026-72491",
    "CVE-2026-72502",
    "CVE-2026-74255",
    "CVE-2026-74256",
    "CVE-2026-74259",
    "CVE-2026-74263",
    "CVE-2026-74265",
    "CVE-2026-74267",
    "CVE-2026-74270",
    "CVE-2026-74271",
    "CVE-2026-74278",
    "CVE-2026-74279",
    "CVE-2026-74281",
    "CVE-2026-74282",
    "CVE-2026-74283",
    "CVE-2026-74284",
    "CVE-2026-74287",
    "CVE-2026-74288",
    "CVE-2026-74290",
    "CVE-2026-74296",
    "CVE-2026-74297",
    "CVE-2026-74300",
    "CVE-2026-74302",
    "CVE-2026-74305",
    "CVE-2026-74306",
    "CVE-2026-74307",
    "CVE-2026-74308",
    "CVE-2026-74310",
    "CVE-2026-74312",
    "CVE-2026-74313",
    "CVE-2026-74316",
    "CVE-2026-74318",
    "CVE-2026-74320",
    "CVE-2026-74321",
    "CVE-2026-74327",
    "CVE-2026-74329",
    "CVE-2026-74330",
    "CVE-2026-74331",
    "CVE-2026-74332",
    "CVE-2026-74339",
    "CVE-2026-74340",
    "CVE-2026-74341",
    "CVE-2026-74346",
    "CVE-2026-74348",
    "CVE-2026-74349",
    "CVE-2026-74351",
    "CVE-2026-74352",
    "CVE-2026-74353",
    "CVE-2026-74356",
    "CVE-2026-74359",
    "CVE-2026-74362",
    "CVE-2026-74363",
    "CVE-2026-74365",
    "CVE-2026-74376",
    "CVE-2026-74377",
    "CVE-2026-74378",
    "CVE-2026-74379",
    "CVE-2026-74380",
    "CVE-2026-74381",
    "CVE-2026-74382",
    "CVE-2026-74384",
    "CVE-2026-74386",
    "CVE-2026-74387",
    "CVE-2026-74390",
    "CVE-2026-74391",
    "CVE-2026-74393",
    "CVE-2026-74394",
    "CVE-2026-74395",
    "CVE-2026-74397",
    "CVE-2026-74398",
    "CVE-2026-74399",
    "CVE-2026-74401",
    "CVE-2026-74404",
    "CVE-2026-74406",
    "CVE-2026-74408",
    "CVE-2026-74410",
    "CVE-2026-74411",
    "CVE-2026-74416",
    "CVE-2026-74417",
    "CVE-2026-74424",
    "CVE-2026-74425",
    "CVE-2026-74426",
    "CVE-2026-74427",
    "CVE-2026-74432",
    "CVE-2026-74435",
    "CVE-2026-74436",
    "CVE-2026-74439",
    "CVE-2026-74440",
    "CVE-2026-74441",
    "CVE-2026-74442",
    "CVE-2026-74443",
    "CVE-2026-74444",
    "CVE-2026-74445",
    "CVE-2026-74446",
    "CVE-2026-74447",
    "CVE-2026-74448",
    "CVE-2026-74453",
    "CVE-2026-74454",
    "CVE-2026-74455",
    "CVE-2026-74456",
    "CVE-2026-74457",
    "CVE-2026-74458",
    "CVE-2026-74460",
    "CVE-2026-74464",
    "CVE-2026-74465",
    "CVE-2026-74469",
    "CVE-2026-74470",
    "CVE-2026-74471",
    "CVE-2026-74472",
    "CVE-2026-74473",
    "CVE-2026-74475",
    "CVE-2026-74476",
    "CVE-2026-74479",
    "CVE-2026-74480",
    "CVE-2026-74481",
    "CVE-2026-74482",
    "CVE-2026-74484",
    "CVE-2026-74485",
    "CVE-2026-74486",
    "CVE-2026-74487",
    "CVE-2026-74488",
    "CVE-2026-74490",
    "CVE-2026-74492",
    "CVE-2026-74495",
    "CVE-2026-74497",
    "CVE-2026-74498",
    "CVE-2026-74499",
    "CVE-2026-74500",
    "CVE-2026-74501",
    "CVE-2026-74502",
    "CVE-2026-74503",
    "CVE-2026-74504",
    "CVE-2026-74505",
    "CVE-2026-74507",
    "CVE-2026-74508",
    "CVE-2026-74509",
    "CVE-2026-74510",
    "CVE-2026-74512",
    "CVE-2026-74516",
    "CVE-2026-74517",
    "CVE-2026-74518",
    "CVE-2026-74519",
    "CVE-2026-74523",
    "CVE-2026-74531",
    "CVE-2026-74532",
    "CVE-2026-74535",
    "CVE-2026-74536",
    "CVE-2026-74540",
    "CVE-2026-74541",
    "CVE-2026-74543",
    "CVE-2026-74546",
    "CVE-2026-74547",
    "CVE-2026-74548",
    "CVE-2026-74549",
    "CVE-2026-74550",
    "CVE-2026-74552",
    "CVE-2026-74553",
    "CVE-2026-74555",
    "CVE-2026-74556",
    "CVE-2026-74557",
    "CVE-2026-74564",
    "CVE-2026-74565",
    "CVE-2026-74566",
    "CVE-2026-74567",
    "CVE-2026-74569",
    "CVE-2026-74572",
    "CVE-2026-74574",
    "CVE-2026-74575",
    "CVE-2026-74577",
    "CVE-2026-74579",
    "CVE-2026-74580",
    "CVE-2026-74581",
    "CVE-2026-74582",
    "CVE-2026-74583",
    "CVE-2026-74584",
    "CVE-2026-74585",
    "CVE-2026-74586",
    "CVE-2026-74587",
    "CVE-2026-74588",
    "CVE-2026-74589",
    "CVE-2026-74590",
    "CVE-2026-74592",
    "CVE-2026-74594",
    "CVE-2026-74595",
    "CVE-2026-74597",
    "CVE-2026-74598",
    "CVE-2026-74603",
    "CVE-2026-74604",
    "CVE-2026-74606",
    "CVE-2026-74607",
    "CVE-2026-74608",
    "CVE-2026-74609",
    "CVE-2026-74610",
    "CVE-2026-74612",
    "CVE-2026-74613",
    "CVE-2026-74614",
    "CVE-2026-74615",
    "CVE-2026-74616",
    "CVE-2026-74618",
    "CVE-2026-74619",
    "CVE-2026-74620",
    "CVE-2026-74621",
    "CVE-2026-74622",
    "CVE-2026-74623",
    "CVE-2026-74624",
    "CVE-2026-74625",
    "CVE-2026-74630",
    "CVE-2026-74632",
    "CVE-2026-74634",
    "CVE-2026-74635",
    "CVE-2026-74636",
    "CVE-2026-74641",
    "CVE-2026-74642",
    "CVE-2026-74644",
    "CVE-2026-74654",
    "CVE-2026-74656",
    "CVE-2026-74657",
    "CVE-2026-74658",
    "CVE-2026-74660",
    "CVE-2026-74661",
    "CVE-2026-74663",
    "CVE-2026-74664",
    "CVE-2026-74665",
    "CVE-2026-74666",
    "CVE-2026-74667",
    "CVE-2026-74668",
    "CVE-2026-74669",
    "CVE-2026-74670",
    "CVE-2026-74671",
    "CVE-2026-74673",
    "CVE-2026-74675",
    "CVE-2026-74676",
    "CVE-2026-74677",
    "CVE-2026-74678",
    "CVE-2026-74680",
    "CVE-2026-74682",
    "CVE-2026-74683",
    "CVE-2026-74684",
    "CVE-2026-74688",
    "CVE-2026-74689",
    "CVE-2026-74691",
    "CVE-2026-74696",
    "CVE-2026-74700",
    "CVE-2026-74701",
    "CVE-2026-74704",
    "CVE-2026-74705",
    "CVE-2026-74710",
    "CVE-2026-74712",
    "CVE-2026-74714",
    "CVE-2026-74717",
    "CVE-2026-74718",
    "CVE-2026-74720",
    "CVE-2026-74722",
    "CVE-2026-74724",
    "CVE-2026-74725",
    "CVE-2026-74726",
    "CVE-2026-74730",
    "CVE-2026-74732",
    "CVE-2026-80590"
  );

  script_name(english:"Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2026-500248)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Oracle Linux host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the
ELSA-2026-500248 advisory.

    - inet: frags: strip GSO state from fragments before reassembly (Xinyang Ge)  [Orabug: 39974840]
    {CVE-2026-80590}
    - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs (Weiming Shi)  [Orabug: 39931938]
    {CVE-2026-74517}
    - tcp: challenge ACK for non-exact RST in SYN-RECEIVED (Yuxiang Yang)  [Orabug: 39931929]
    {CVE-2026-68118}
    - mm/damon/ops-common: putback folios on invalid migrate nid (liyouhong)  [Orabug: 39931902]
    {CVE-2026-74644}
    - KVM: SVM: Serialize accesses to the owner and mirror list with separate lock (Paolo Bonzini)  [Orabug:
    39931893]  {CVE-2026-74607}
    - binfmt_misc: restore write access when removing an entry (Christian Brauner)  [Orabug: 39931874]
    {CVE-2026-74487}
    - binfmt_misc: use exe_file_deny_write_access() for the interpreter clone (Christian Brauner)  [Orabug:
    39931874] {CVE-2026-74486}
    - net: pktgen: fix proc entry use-after-free (Chengfeng Ye)  [Orabug: 39931868]  {CVE-2026-74479}
    - userfaultfd: prevent registration of special VMAs (Mike Rapoport (Microsoft))  [Orabug: 39931866]
    {CVE-2026-68166}
    - net/sched: serialize qdisc_rtab_list against concurrent get/put (Aldo Ariel Panzardo)  [Orabug:
    39931864]  {CVE-2026-68138}
    - thunderbolt: Fix bandwidth group reservation indexing (Xu Rao) {CVE-2026-80736}
    - thunderbolt: Bound the DROM dual link port number before indexing sw->ports (Bryam Vargas)
    {CVE-2026-74585}
    - sctp: clear new_transport when removing a peer (Qing Ming) {CVE-2026-74586}
    - sctp: fix use-after-free of cached ASCONF chunk (Yuxiang Yang) {CVE-2026-74587}
    - sctp: keep chunk->transport in step with the list it is queued on (Baul Lee) {CVE-2026-74588}
    - bpf, sockmap: Fix sk_redir use-after-free in send verdict (Chengfeng Ye) {CVE-2026-74589}
    - fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (Eric Biggers) {CVE-2026-74590}
    - ima: Instantiate file_truncate and path_truncate hooks (Mimi Zohar) {CVE-2026-74592}
    - sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (Tejun Heo) {CVE-2026-74594}
    - fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (Zhan Xusheng)
    {CVE-2026-74595}
    - ip6_tunnel: clear skb2->cb[] in ip6ip6_err() (Zhiling Zou) {CVE-2026-74597}
    - ipv6: fix Route Information option length validation (Yuejie Shi) {CVE-2026-74598}
    - ptp: ocp: Fix board ID over-read (Ahmad Byagowi) {CVE-2026-74603}
    - Revert 'thermal/drivers/hwmon: Cleanup coding style a bit' (Rafael J. Wysocki) {CVE-2026-74604}
    - eventfs: Fix use-after-free in eventfs_remove_rec() (Shuangpeng Bai) {CVE-2026-74606}
    - KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (Sean Christopherson)
    {CVE-2026-80726}
    - smb: client: Fix use-after-free in cifs_try_adding_channels() (Shuangpeng Bai) {CVE-2026-74608}
    - tipc: read le->link under the node lock in tipc_node_link_down() (Jun Yang) {CVE-2026-74609}
    - tls: don't leave a full plaintext sk_msg ring unpushed (chanyoung) {CVE-2026-74610}
    - vhost: reset the vring metadata cache on vring reconfiguration (Jun Yang) {CVE-2026-74580}
    - veth: fix skb length accounting after XDP frag adjustment (Sun Jian) {CVE-2026-74612}
    - vsock/virtio: avoid refilling the RX queue after teardown (Weiming Shi) {CVE-2026-74613}
    - vsock/virtio: read virtqueues under worker locks (Weiming Shi) {CVE-2026-74614}
    - vxlan: do not arm the ageing timer on a device that is down (Baul Lee) {CVE-2026-74615}
    - xdp: reject clones that overrun skb_shared_info tailroom (Zhiling Zou) {CVE-2026-74616}
    - Revert 'drm/amdgpu: fix aperture mapping leak' (Asad Kamal) {CVE-2026-80728}
    - binfmt_misc: don't warn when the mount is completed from another user namespace (Christian Brauner)
    {CVE-2026-74618}
    - ovl: don't warn when the mount is completed from another user namespace (Christian Brauner)
    {CVE-2026-74619}
    - net/sched: act_gact, act_police: range check the fallback control action (Hyunjung Ko) {CVE-2026-74620}
    - net/sched: act_ct: fix sk_buff leak when the header checks reject a packet (Hyunjung Ko)
    {CVE-2026-74621}
    - net: atlantic: free RX pages of consumed but not refilled buffers (Yangyu Chen) {CVE-2026-74622}
    - net: atlantic: free stranded TX buffers on ring deinit (Yangyu Chen) {CVE-2026-74623}
    - netfilter: nf_conntrack: defer invalid log until after unlock (Zihan Xi) {CVE-2026-74624}
    - netfilter: bridge: release template ct on non-IP path (Zhiling Zou) {CVE-2026-74625}
    - ipv6: prevent in6_dev_get() from resurrecting inet6_dev (Kyle Zeng) {CVE-2026-74630}
    - net: smc: fix splice entry lifetime imbalance in smc_rx_splice (Daming Li) {CVE-2026-74631}
    - ring-buffer: Prevent subbuf order change when resizing is disabled (Vincent Donnefort) {CVE-2026-74634}
    - fbdev: bitblit: bound-check glyph index in bit_cursor() (Rik van Riel) {CVE-2026-74635}
    - tracing: Fix race between update_event_fields and, event_define_fields (Michael Wu) {CVE-2026-74636}
    - ALSA: usx2y: bound the hwdep mmap fault offset (Baul Lee) {CVE-2026-74641}
    - ALSA: usb: Fix UAF at delayed release of MIDI2 EPs (Takashi Iwai) {CVE-2026-74642}
    - ring-buffer: Fix crash passing ERR_PTR to kthread_stop() (Hui Su) {CVE-2026-80730}
    - misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke (Junrui Luo) {CVE-2026-74646}
    - misc: fastrpc: Remove buffer from list prior to unmap operation (Ekansh Gupta) {CVE-2026-74647}
    - staging: rtl8723bs: validate monitor transmit frame lengths (Mariano Baragiola) {CVE-2026-74648}
    - staging: rtl8723bs: fix missing shared-key auth challenge length check (Panagiotis Petrakopoulos)
    {CVE-2026-74649}
    - staging: rtl8723bs: fix OOB read in WMM_param_handler() (Muhammad Bilal) {CVE-2026-74650}
    - staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() (Muhammad Bilal) {CVE-2026-74651}
    - serial: 8250_dma: Clear stale RX state on shutdown (Cunhao Lu) {CVE-2026-74654}
    - serial: qcom-geni: fix TX DMA buffer flush (Jan Sebastian Gotte) {CVE-2026-74655}
    - ipv4: fix use-after-free in fib_nhc_update_mtu() (Chengfeng Ye) {CVE-2026-74656}
    - ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops (Zihan Xi) {CVE-2026-74657}
    - futex: Prevent robust futex exit race some more (Keno Fischer) {CVE-2026-74658}
    - KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (Farhan Ali) {CVE-2026-74514}
    - net: bridge: mrp: fix uninitialised bytes on the wire (Baul Lee) {CVE-2026-74659}
    - netfilter: ebt_nflog: pin the NFLOG backend (Chengfeng Ye) {CVE-2026-74660}
    - mac802154: fix netdev use-after-free in beacon worker (Zihan Xi) {CVE-2026-74661}
    - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Qihang Tang) {CVE-2026-80731}
    - net/sched: reject overly deep qdisc hierarchies (Zijie Huang) {CVE-2026-74663}
    - net: openvswitch: reallocate update replies for mismatched IDs (Zhiling Zou) {CVE-2026-74664}
    - net: fix skb length accounting after generic XDP frag adjustment (Sun Jian) {CVE-2026-74665}
    - packet: synchronize pressure clearing with ring reconfiguration (Zihan Xi) {CVE-2026-74666}
    - net/packet: reset the MAC header on the packet-socket transmit path (Doruk Tan Ozturk) {CVE-2026-74667}
    - packet: use consistent hard_header_len in TX_RING send path (Qihang Tang) {CVE-2026-74668}
    - packet: use consistent hard_header_len in non-ring send paths (Qihang Tang) {CVE-2026-74582}
    - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Kyle Zeng) {CVE-2026-74669}
    - ipvs: stop estimator after disabled calc phase (Zhiling Zou) {CVE-2026-74670}
    - ima: fix out-of-bounds read in xattr_verify() (Lincoln Wallace) {CVE-2026-74671}
    - Input: evdev - fix information leak in evdev_pass_values() (Dmitry Torokhov) {CVE-2026-74673}
    - vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (Joshua Rogers) {CVE-2026-74675}
    - vt: add permission check for KDSKBMETA ioctl (Joshua Rogers) {CVE-2026-74676}
    - net: usb: ipheth: fix carrier_work UAF on disconnect (Doruk Tan Ozturk) {CVE-2026-74677}
    - net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() (Yi Cong) {CVE-2026-74678}
    - usb: gadget: f_ncm: Use unsigned int for ndp_index (Sonali Pradhan) {CVE-2026-74679}
    - usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() (Aleksandr Nogikh) {CVE-2026-74680}
    - ALSA: usb-audio: fix OOB write on Type II inbound URBs (Baul Lee) {CVE-2026-74682}
    - Input: evdev - sanitize event type index when fetching event masks (Dmitry Torokhov) {CVE-2026-74683}
    - hwmon: (ltc4282) Clamp negative current limits (Guenter Roeck) {CVE-2026-74685}
    - sctp: clear control chunk transport if it is being removed (Xin Long) {CVE-2026-74688}
    - net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (Eric Dumazet) {CVE-2026-74689}
    - ata: pata_sl82c105: fix bridge revision use-after-free (Hongyan Xu) {CVE-2026-80732}
    - net: thunderbolt: Tear down DMA paths before stopping the rings (Fan XinRan) {CVE-2026-74691}
    - net/smc: fix TOCTOU race between smc_listen_out() and listener close (Sidraya Jayagond) {CVE-2026-74692}
    - net: remove WARN_ON_ONCE() from sk_mc_loop() (Eric Dumazet) {CVE-2026-80733}
    - net: prestera: validate firmware header length (Pengpeng Hou) {CVE-2026-74693}
    - net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (Henry Martin) {CVE-2026-74694}
    - tcp: fix TFO max_qlen accounting across reuseport migration (Jiayuan Chen) {CVE-2026-74696}
    - net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (Jamal Hadi Salim)
    {CVE-2026-74700}
    - net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter (Toke Hoiland-Jorgensen)
    {CVE-2026-74704}
    - udp: fix potential use-after-free in tunnel segmentation (Xuanqiang Luo) {CVE-2026-74705}
    - xsk: require at least 16 bytes of TX metadata (Stanislav Fomichev) {CVE-2026-74710}
    - vdpa/mlx5: Fix buffer length in create_direct_keys() (Christian Borntraeger) {CVE-2026-74712}
    - net/mlx5: fw_tracer, return NULL on create error (Michael Guralnik) {CVE-2026-74717}
    - devlink: fix net namespace reference leak in reload (Or Har-Toov) {CVE-2026-74718}
    - net/sched: cls_route: fix fastmap use-after-free on filter (Jamal Hadi Salim) {CVE-2026-74583}
    - net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (Mahanta
    Jambigi) {CVE-2026-74719}
    - bpf: Preserve pointer state for commuted arithmetic (Yiyang Chen) {CVE-2026-74720}
    - btrfs: fix memory leak in btrfs_do_encoded_write() (Dmitry Antipov) {CVE-2026-74722}
    - ipvs: avoid out-of-bounds write in ip_vs_nat_icmp (Julian Anastasov) {CVE-2026-74724}
    - net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (Shay Drory) {CVE-2026-80739}
    - enic: fix tx_hang_reset use-after-free on device removal (Satish Kharat) {CVE-2026-74725}
    - NFS: Pin the 'struct nfs_server' during a FREE_STATEID call (Anna Schumaker) {CVE-2026-74730}
    - s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() (Harald Freudenberger)
    {CVE-2026-80708}
    - drm/amd/display: Check for tg ops in dce110_set_avmute (Ray Wu) {CVE-2026-74732}
    - rxrpc: Fix irq-disabled in local_bh_enable() (David Howells) {CVE-2025-38525}
    - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Zongyao Bai) {CVE-2026-68264}
    - drm/i915/hdcp: check streams[] bounds before overflow (Jani Nikula) {CVE-2026-68253}
    - drm/xe: Hold a dma-buf reference for imported BOs (Nitin Gote) {CVE-2026-68266}
    - drm/i915/vrr: require valid min/max vfreq for VRR (Jani Nikula) {CVE-2026-68254}
    - drm/xe: Wait on external BO kernel fences in exec IOCTL (Matthew Brost) {CVE-2026-74440}
    - drm/amdgpu/gfx: fix cleaner shader IB buffer overflow (Asad Kamal) {CVE-2026-68276}
    - drm/amdgpu: Fix context pstate override handling (Tvrtko Ursulin) {CVE-2026-68273}
    - mptcp: pm: userspace: fix use-after-free in get_local_id (Geliang Tang) {CVE-2026-68169}
    - wifi: ath6kl: fix use-after-free in aggr_reset_state() (Daniel Hodges) {CVE-2026-68198}
    - wifi: brcmfmac: drain bus_reset work on device removal (Fan Wu) {CVE-2026-64586}
    - usb: typec: ucsi: Fix race condition and ordering in port unregistration (Andrei Kuchynski)
    {CVE-2026-74441}
    - usb: gadget: f_tcm: synchronize delayed set_alt with teardown (Cen Zhang) {CVE-2026-68367}
    - gpio: pch: use raw_spinlock_t for the register lock (Junjie Cao) {CVE-2026-74468}
    - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (Ashutosh Dixit) {CVE-2026-68267}
    - of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails (Wandun Chen)
    {CVE-2026-74352}
    - HID: logitech-dj: Fix maxfield check in DJ short report validation (HyeongJun An) {CVE-2026-64427}
    - drm/vmwgfx: validate external BO copy bounds for both stride paths (Zack Rusin) {CVE-2026-80700}
    - drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure (Zack Rusin) {CVE-2026-74442}
    - drm/vmwgfx: bound DMA command body size against suffix pointer (Zack Rusin) {CVE-2026-74443}
    - drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (Zack Rusin) {CVE-2026-74444}
    - drm/vmwgfx: reject DX_BIND_QUERY without a DX context (Zack Rusin) {CVE-2026-74445}
    - drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size (Zack Rusin) {CVE-2026-80702}
    - drm/amdkfd: hold event_mutex while checkpointing CRIU events (William Palacek) {CVE-2026-74446}
    - drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment (William Palacek) {CVE-2026-74447}
    - drm/amdkfd: fix QID bit leak in pqm_create_queue() (Vladimir Marioukhine) {CVE-2026-74448}
    - drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (Gang Ba) {CVE-2026-80703}
    - drm/panthor: validate firmware interface structure sizes (Osama Abdelkader) {CVE-2026-74451}
    - drm/panthor: reject firmware sections with oversized data (Osama Abdelkader) {CVE-2026-74452}
    - drm/vc4: Zero the tile state data array before each BIN job (Maira Canal) {CVE-2026-74453}
    - drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size (Jose Maria Casanova Crespo)
    {CVE-2026-74454}
    - can: peak_usb: validate uCAN receive record lengths (Pengpeng Hou) {CVE-2026-74455}
    - can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error (Maoyi Xie)
    {CVE-2026-74456}
    - can: peak_usb: add bounds check for USB channel index (James Gao) {CVE-2026-74457}
    - can: softing: fw_parse(): validate firmware record spans (Pengpeng Hou) {CVE-2026-80706}
    - can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents (Pengpeng Hou)
    {CVE-2026-74458}
    - can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (Oleksij Rempel)
    {CVE-2026-80707}
    - can: ems_usb: validate CPC message lengths (Pengpeng Hou) {CVE-2026-74460}
    - i2c: imx: Cancel hrtimer before clearing slave pointer (Liem) {CVE-2026-74461}
    - i2c: imx: Fix slave registration race and error handling (Liem) {CVE-2026-80678}
    - i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock (H. Nikolaus Schaller)
    {CVE-2026-74463}
    - net: openvswitch: fix skb leak on flow key update failure during ct (Ilya Maximets) {CVE-2026-74464}
    - net: openvswitch: fix potential UAF on meter attach failure (Ilya Maximets) {CVE-2026-74465}
    - s390/zcrypt: Validate length for CCA ECC private key requests (Holger Dengler) {CVE-2026-68451}
    - s390/zcrypt: Validate length for CCA AES cipher key requests (Holger Dengler) {CVE-2026-68452}
    - s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (Harald Freudenberger) {CVE-2026-80709}
    - s390/dasd: Fix undersized format-check buffer (Stefan Haberland) {CVE-2026-80710}
    - s390/dasd: Fix potential NULL pointer dereference (Jan Hoppner) {CVE-2026-80679}
    - s390/qeth: Check CAP_NET_ADMIN for private ioctls (Aswin Karuvally) {CVE-2026-74467}
    - power: supply: max17040: handle missing status supplier (Jianing Li) {CVE-2026-80711}
    - i2c: amd-mp2: Unregister callback on adapter add failure (Myeonghun Pak) {CVE-2026-80680}
    - sctp: prevent peer transport count overflow (Asim Viladi Oglu Manizada) {CVE-2026-74469}
    - scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write (Ibrahim Hashimov) {CVE-2026-74470}
    - ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() (Ming Lei) {CVE-2026-74472}
    - vxlan: use pskb_network_may_pull() in route_shortcircuit() (Eric Dumazet) {CVE-2026-74473}
    - vxlan: use neigh_ha_snapshot() in route_shortcircuit() (Eric Dumazet) {CVE-2026-74475}
    - vxlan: re-fetch eth header after route_shortcircuit() (Eric Dumazet) {CVE-2026-80681}
    - veth: convert frag_list skbs before running XDP (Matt Fleming) {CVE-2026-74476}
    - um: vector: fix use-after-free in vector_mmsg_rx() (Michael Bommarito) {CVE-2026-74478}
    - net: ipv6: clear suppressed fib6 rule result (Zhiling Zou) {CVE-2026-74581}
    - net: bridge: stop fast-leave after deleting a port group (Zhiling Zou) {CVE-2026-74480}
    - mm/page_reporting: use system_freezable_wq to fix UAF during suspend (Link Lin) {CVE-2026-74481}
    - binfmt_misc: don't let an 'F' entry pin its own instance (Christian Brauner) {CVE-2026-74484}
    - binfmt_misc: reject a flag character as the field delimiter (Christian Brauner) {CVE-2026-74485}
    - wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (Zhao Li) {CVE-2026-74488}
    - tipc: avoid use-after-free in poll trace queue dumps (Zihan Xi) {CVE-2026-74490}
    - netfilter: ipset: do not update comments from kernel-side hash adds (David Lee) {CVE-2026-74492}
    - net/smc: fix socket use-after-free during link group termination (Xuanqiang Luo) {CVE-2026-74493}
    - ipvs: do not propagate one-packet flag to synced conns (Zhiling Zou) {CVE-2026-80714}
    - igbvf: Fix leak in TX DMA error cleanup (Matt Vollrath) {CVE-2026-74495}
    - ALSA: usb-audio: Clamp frame size in implicit-feedback mode (Sonali Pradhan) {CVE-2026-74497}
    - ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (Sonali Pradhan)
    {CVE-2026-74498}
    - ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (Baul Lee) {CVE-2026-74499}
    - ALSA: usb-audio: fix stack info leak in RME Digiface status (Baul Lee) {CVE-2026-74500}
    - ALSA: usb-audio: fix use-after-free in ump_to_endpoint() (Baul Lee) {CVE-2026-74501}
    - ALSA: ump: fix double free of out_cvts on rawmidi error (Baul Lee) {CVE-2026-74502}
    - ALSA: seq: Fix division by zero in initialize_timer() (Norbert Szetei) {CVE-2026-74504}
    - ALSA: pcm: wake linked drain waiters on unlink (Norbert Szetei) {CVE-2026-80716}
    - ALSA: 6fire: Fix UAF at error handling during probe (Takashi Iwai) {CVE-2026-74505}
    - Bluetooth: HIDP: validate numbered report payloads (Sangho Lee) {CVE-2026-74507}
    - Bluetooth: HIDP: reject frames without a transaction header (Sangho Lee) {CVE-2026-74508}
    - Bluetooth: hci_sync: Fix advertising data UAFs (Chengfeng Ye) {CVE-2026-74509}
    - Bluetooth: mgmt: fix UAF in pair command cancellation (Zihan Xi) {CVE-2026-74510}
    - Bluetooth: mgmt: fix pending command UAF in EIR updates (Zihan Xi) {CVE-2026-74511}
    - audit: fix potential use-after-free in audit_del_rule() (Luxiao Xu) {CVE-2026-74512}
    - sctp: validate Adaptation Indication parameter length (Charles Vosburgh) {CVE-2026-80717}
    - KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (Farhan Ali) {CVE-2026-80684}
    - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (Farhan Ali) {CVE-2026-74515}
    - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Sean Christopherson)
    {CVE-2026-74516}
    - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Xiangfeng Cai) {CVE-2026-74518}
    - mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() (Zi Yan) {CVE-2026-80718}
    - mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE (Kefeng Wang) {CVE-2026-80686}
    - pinctrl: devicetree: don't free uninitialized dev_name on error path (Karl Mehltretter) {CVE-2026-74519}
    - ksmbd: fix use-after-free in __close_file_table_ids() (Namjae Jeon) {CVE-2026-74522}
    - qede: sync udp_tunnel ports outside qede_lock in the recovery path (Denis V. Lunev) {CVE-2026-74523}
    - riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove (Karl Mehltretter)
    {CVE-2026-74524}
    - net: sxgbe: free TX rings on RX allocation failure (Chenguang Zhao) {CVE-2026-74525}
    - scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE (TanZheng) {CVE-2026-80691}
    - Bluetooth: hci_conn: hold conn reference in abort_conn_sync() (Pauli Virtanen) {CVE-2026-74531}
    - Bluetooth: btintel: Validate length before parsing diagnostics TLV (Zijun Hu) {CVE-2026-74532}
    - Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (Pauli Virtanen) {CVE-2026-74535}
    - Bluetooth: ISO: fix leaking sk after socket release (Pauli Virtanen) {CVE-2026-74536}
    - Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (Jiale Yao) {CVE-2026-74540}
    - Bluetooth: ISO: clear iso_data always when detaching conn from hcon (Pauli Virtanen) {CVE-2026-74541}
    - net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (Chenguang Zhao)
    {CVE-2026-80694}
    - wifi: mac80211: validate individual TWT params before driver setup (Zhao Li) {CVE-2026-80722}
    - net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() (Eric Dumazet) {CVE-2026-74543}
    - rtase: fix double free of multi-frag skb on DMA map failure (Yun Lu) {CVE-2026-74545}
    - hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read (Luiz Angelo Daros de Luca)
    {CVE-2026-74546}
    - hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread (Luiz Angelo Daros de Luca)
    {CVE-2026-74547}
    - forcedeth: fix UAF of txrx_stats in nv_remove (Chenguang Zhao) {CVE-2026-74548}
    - hwmon: (nct6775-core) Prevent access to unsupported weight registers (Guenter Roeck) {CVE-2026-74549}
    - net: do not send ICMP/NDISC Redirects when peer allocation fails (Eric Dumazet) {CVE-2026-74550}
    - hwmon: (nzxt-smart2) DMA-align output buffer (Guenter Roeck) {CVE-2026-74551}
    - hwmon: (lm90) Only report alarms if driver is ready (Guenter Roeck) {CVE-2026-74552}
    - hwmon: (sht3x) Fix unaligned accesses (Guenter Roeck) {CVE-2026-80695}
    - hwmon: (ltc4282) Fix reading the minimum alarm voltage (Guenter Roeck) {CVE-2026-80696}
    - hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (Guenter Roeck) {CVE-2026-74553}
    - scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (Xingui Yang) {CVE-2026-74555}
    - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (HyeongJun An)
    {CVE-2026-74556}
    - scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (HyeongJun An) {CVE-2026-74557}
    - netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (Pablo Neira Ayuso)
    {CVE-2026-74564}
    - netfilter: nf_tables: make nft_object rhltable per table (Pablo Neira Ayuso) {CVE-2026-74565}
    - keys: make keyring key-chunk byte order agree with keyring_diff_objects() (Michael Bommarito)
    {CVE-2026-74566}
    - keys: fix out-of-bounds read in keyring_get_key_chunk() (Michael Bommarito) {CVE-2026-74567}
    - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (Xiang Mei)
    {CVE-2026-74569}
    - btrfs: zoned: fix deadlock between metadata writeback and transaction commit (Johannes Thumshirn)
    {CVE-2026-74572}
    - of: reserved_mem: prevent OOB when too many dynamic regions are defined (Sang-Heon Jeon)
    {CVE-2026-80723}
    - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (Yuho Choi) {CVE-2026-74574}
    - thunderbolt: Prevent XDomain delayed work use-after-free on disconnect (Michael Bommarito)
    {CVE-2026-74575}
    - netconsole: avoid OOB reads, msg is not nul-terminated (Jakub Kicinski) {CVE-2026-43197}
    - bpf: Reset register bounds before narrowing retval range in check_mem_access() (Tristan Madani)
    {CVE-2026-72111}
    - net: mpls: initialize rtm_tos in mpls_getroute() (Yehyeong Lee) {CVE-2026-74577}
    - KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug (Nikunj A Dadhania)
    {CVE-2026-68093}
    - Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() (Pavitra Jha) {CVE-2026-53364}
    - afs: handle CB.InitCallBackState3 requests without a server record (Nan Li) {CVE-2026-74425}
    - afs: Fix delayed allocation of a cell's anonymous key (David Howells) {CVE-2025-68299}
    - usb: musb: omap2430: Do not put borrowed of_node in probe (Guangshuo Li) {CVE-2026-68371}
    - net: macb: drop in-flight Tx SKBs on close (Theo Lebrun) {CVE-2026-72017}
    - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (Reinette Chatre)
    {CVE-2026-72015}
    - ata: libata-core: Reject an invalid concurrent positioning ranges count (Bryam Vargas) {CVE-2026-72030}
    - octeontx2-pf: fix SQB pointer leak on init failure (Dawei Feng) {CVE-2026-72023}
    - net/mlx5: HWS, fix matcher leak on resize target setup failure (Dawei Feng) {CVE-2026-72032}
    - ipmi: fix refcount leak in i_ipmi_request() (Wentao Liang) {CVE-2026-72040}
    - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Junrui Luo) {CVE-2026-72045}
    - gpio: mt7621: avoid corruption of shared interrupt trigger state (Sergio Paracuellos) {CVE-2026-72062}
    - gve: fix header buffer corruption with header-split and HW-GRO (Ankit Garg) {CVE-2026-72046}
    - net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (Maoyi Xie) {CVE-2026-72051}
    - net: mana: Validate the packet length reported by the NIC (Dexuan Cui) {CVE-2026-72065}
    - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Thomas Gleixner) {CVE-2026-72069}
    - wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (Maoyi Xie) {CVE-2026-72070}
    - dm: avoid leaking the caller's thread keyring via the table device file (Ingo Blechschmidt)
    {CVE-2026-72103}
    - dm-integrity: fix leaking uninitialized kernel memory (Mikulas Patocka) {CVE-2026-72101}
    - nvmet-auth: reject short AUTH_RECEIVE buffers (Michael Bommarito) {CVE-2026-72130}
    - tcp: defer md5sig_info kfree past RCU grace period in tcp_connect (Michael Bommarito) {CVE-2026-72139}
    - xfrm: nat_keepalive: avoid double free on send error (Qianyu Luo) {CVE-2026-72137}
    - dmaengine: dw-edma-pcie: Reject devices without driver data (Koichiro Den) {CVE-2026-72147}
    - mtd: maps: vmu-flash: fix fault in unaligned fixup (Florian Fuchs) {CVE-2026-72168}
    - landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path (Bryam Vargas) {CVE-2026-72183}
    - mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (Deepanshu Kartikey) {CVE-2026-72213}
    - gpu/buddy: bail out of try_harder when alignment cannot be honoured (Arunpravin Paneer Selvam)
    {CVE-2026-72244}
    - netfilter: nft_fib: reject fib expression on the netdev egress hook (Theodor Arsenij Larionov-Trichkine)
    {CVE-2026-72254}
    - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Pablo Neira Ayuso) {CVE-2026-72253}
    - ASoC: mediatek: mt8192: Check runtime resume during probe (Cassio Gabriel) {CVE-2026-72260}
    - VDUSE: avoid leaking information to userspace (Jason Wang) {CVE-2026-72305}
    - tipc: restrict socket queue dumps in enqueue tracepoints (Li Xiasong) {CVE-2026-72299}
    - rxrpc: serialize kernel accept preallocation with socke ...

  Please note that the description has been truncated due to length. Please refer to vendor advisory for the full
description.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://linux.oracle.com/errata/ELSA-2026-500248.html");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-53196");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2026-64433");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/02/27");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/04");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules-deprecated");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules-desktop");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules-extra-netfilter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules-usb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-debug-modules-wireless");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules-deprecated");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules-desktop");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules-extra-netfilter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules-usb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-modules-wireless");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-modules");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-modules-core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-modules-deprecated");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-modules-desktop");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-modules-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-modules-extra-netfilter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-modules-usb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:kernel-uek64k-modules-wireless");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Oracle Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("linux_alt_patch_detect.nasl", "ssh_get_info.nasl");
  script_require_keys("Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/local_checks_enabled");

  exit(0);
}


include('rpm2.inc');
include('ksplice.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:os_product)) audit(AUDIT_OS_NOT, 'Oracle Linux');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'Oracle Linux');
if (! preg(pattern:"^9([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'Oracle Linux 9.x', 'Oracle Linux ' + os_version);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Oracle Linux', cpu);

var machine_uptrack_level = get_one_kb_item('Host/livepatch-kernel-version');
var livepatch_source = get_one_kb_item('Host/livepatch-kernel-source');
if (empty_or_null(livepatch_source)) livepatch_source = 'KSplice';

if (machine_uptrack_level)
{
  var trimmed_uptrack_level = ereg_replace(string:machine_uptrack_level, pattern:"\.(x86_64|i[3-6]86|aarch64)$", replace:'');
  var fixed_uptrack_levels = ['6.12.0-206.104.3.3.el9uek'];
  foreach var fixed_uptrack_level ( fixed_uptrack_levels ) {
    if (rpm_spec_vers_cmp(a:trimmed_uptrack_level, b:fixed_uptrack_level) >= 0)
    {
      audit(AUDIT_PATCH_INSTALLED, livepatch_source + ' hotfix for ELSA-2026-500248');
    }
  }
  __rpm_report = 'Running ' + livepatch_source + ' level of ' + trimmed_uptrack_level + ' does not meet the minimum fixed level of ' + join(fixed_uptrack_levels, sep:' / ') + ' for this advisory.\n\n';
}

var kernel_major_minor = get_kb_item('Host/uname/major_minor');
if (empty_or_null(kernel_major_minor)) exit(1, 'Unable to determine kernel major-minor level.');
var expected_kernel_major_minor = '6.12';
if (kernel_major_minor != expected_kernel_major_minor)
  audit(AUDIT_OS_NOT, 'running kernel level ' + expected_kernel_major_minor + ', it is running kernel level ' + kernel_major_minor);

var constraints = [
  {
    'release': '9',
    'pkgs': [
      {'reference':'kernel-uek-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-6.12.0'},
      {'reference':'kernel-uek-core-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-core-6.12.0'},
      {'reference':'kernel-uek-debug-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-6.12.0'},
      {'reference':'kernel-uek-debug-core-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-core-6.12.0'},
      {'reference':'kernel-uek-debug-devel-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-devel-6.12.0'},
      {'reference':'kernel-uek-debug-modules-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-6.12.0'},
      {'reference':'kernel-uek-debug-modules-core-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-core-6.12.0'},
      {'reference':'kernel-uek-debug-modules-deprecated-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-deprecated-6.12.0'},
      {'reference':'kernel-uek-debug-modules-desktop-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-desktop-6.12.0'},
      {'reference':'kernel-uek-debug-modules-extra-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-extra-6.12.0'},
      {'reference':'kernel-uek-debug-modules-extra-netfilter-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-extra-netfilter-6.12.0'},
      {'reference':'kernel-uek-debug-modules-usb-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-usb-6.12.0'},
      {'reference':'kernel-uek-debug-modules-wireless-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-wireless-6.12.0'},
      {'reference':'kernel-uek-devel-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-devel-6.12.0'},
      {'reference':'kernel-uek-doc-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-doc-6.12.0'},
      {'reference':'kernel-uek-modules-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-6.12.0'},
      {'reference':'kernel-uek-modules-core-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-core-6.12.0'},
      {'reference':'kernel-uek-modules-deprecated-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-deprecated-6.12.0'},
      {'reference':'kernel-uek-modules-desktop-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-desktop-6.12.0'},
      {'reference':'kernel-uek-modules-extra-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-extra-6.12.0'},
      {'reference':'kernel-uek-modules-extra-netfilter-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-extra-netfilter-6.12.0'},
      {'reference':'kernel-uek-modules-usb-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-usb-6.12.0'},
      {'reference':'kernel-uek-modules-wireless-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-wireless-6.12.0'},
      {'reference':'kernel-uek-tools-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-tools-6.12.0'},
      {'reference':'kernel-uek64k-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-6.12.0'},
      {'reference':'kernel-uek64k-core-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-core-6.12.0'},
      {'reference':'kernel-uek64k-devel-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-devel-6.12.0'},
      {'reference':'kernel-uek64k-modules-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-modules-6.12.0'},
      {'reference':'kernel-uek64k-modules-core-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-modules-core-6.12.0'},
      {'reference':'kernel-uek64k-modules-deprecated-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-modules-deprecated-6.12.0'},
      {'reference':'kernel-uek64k-modules-desktop-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-modules-desktop-6.12.0'},
      {'reference':'kernel-uek64k-modules-extra-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-modules-extra-6.12.0'},
      {'reference':'kernel-uek64k-modules-extra-netfilter-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-modules-extra-netfilter-6.12.0'},
      {'reference':'kernel-uek64k-modules-usb-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-modules-usb-6.12.0'},
      {'reference':'kernel-uek64k-modules-wireless-6.12.0-206.104.3.3.el9uek', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek64k-modules-wireless-6.12.0'},
      {'reference':'kernel-uek-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-6.12.0'},
      {'reference':'kernel-uek-core-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-core-6.12.0'},
      {'reference':'kernel-uek-debug-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-6.12.0'},
      {'reference':'kernel-uek-debug-core-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-core-6.12.0'},
      {'reference':'kernel-uek-debug-devel-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-devel-6.12.0'},
      {'reference':'kernel-uek-debug-modules-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-6.12.0'},
      {'reference':'kernel-uek-debug-modules-core-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-core-6.12.0'},
      {'reference':'kernel-uek-debug-modules-deprecated-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-deprecated-6.12.0'},
      {'reference':'kernel-uek-debug-modules-desktop-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-desktop-6.12.0'},
      {'reference':'kernel-uek-debug-modules-extra-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-extra-6.12.0'},
      {'reference':'kernel-uek-debug-modules-extra-netfilter-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-extra-netfilter-6.12.0'},
      {'reference':'kernel-uek-debug-modules-usb-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-usb-6.12.0'},
      {'reference':'kernel-uek-debug-modules-wireless-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-debug-modules-wireless-6.12.0'},
      {'reference':'kernel-uek-devel-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-devel-6.12.0'},
      {'reference':'kernel-uek-doc-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-doc-6.12.0'},
      {'reference':'kernel-uek-modules-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-6.12.0'},
      {'reference':'kernel-uek-modules-core-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-core-6.12.0'},
      {'reference':'kernel-uek-modules-deprecated-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-deprecated-6.12.0'},
      {'reference':'kernel-uek-modules-desktop-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-desktop-6.12.0'},
      {'reference':'kernel-uek-modules-extra-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-extra-6.12.0'},
      {'reference':'kernel-uek-modules-extra-netfilter-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-extra-netfilter-6.12.0'},
      {'reference':'kernel-uek-modules-usb-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-usb-6.12.0'},
      {'reference':'kernel-uek-modules-wireless-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-modules-wireless-6.12.0'},
      {'reference':'kernel-uek-tools-6.12.0-206.104.3.3.el9uek', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'kernel-uek-tools-6.12.0'}
    ]
  }
];

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
  # Check that the target release is equal to the affected release
  if (!empty_or_null(constraint['release'])){
    if (constraint['release'] != os_release) continue;
  }
  if (!empty_or_null(constraint['sp'])){
    if (constraint['sp'] != os_sp) continue;
  }
  foreach var pkg ( constraint['pkgs'] ) {
    reference = NULL;
    sp = NULL;
    _cpu = NULL;
    el_string = NULL;
    rpm_spec_vers_cmp = NULL;
    epoch = NULL;
    allowmaj = NULL;
    exists_check = NULL;
    cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        ## (no known rpm to check OR known rpm_exists)
        (!exists_check || rpm_exists(rpm:exists_check)) &&
        rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'kernel-uek / kernel-uek-core / kernel-uek-debug / etc');
}