Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500377)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500377 advisory. - tcp: fix potential race in tcpv6synrecvsock Eric Dumazet Orabug: 39331624 CVE-2026-43198 - RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe Bjoe...

Oracle Linux 10 : freerdp (ELSA-2026-75570)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75570 advisory. 2:3.10.3-12.14 - Backport several CVE fixes CVE-2026-85089, CVE-2026-91946, CVE-2026-91947, CVE-2026-91950, CVE-2026-91953, CVE-2026-91954,...

Oracle Linux 9 : vim (ELSA-2026-75768)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75768 advisory. - RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution during C omni-completion via crafted typeref - RHEL-253669 CVE-2026-28420 vim: buffer overflow...

Oracle Linux 8 : kernel (ELSA-2026-75747)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75747 advisory. - nvme/ioctl: check SUBMITIO with CAPSYSADMIN Chris Leech RHEL-269479 CVE-2026-90227 - nvme-pci: fix mempool alloc size Maurizio Lombardi RHEL-230386...

Oracle Linux 10 : nodejs22 (ELSA-2026-75864)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75864 advisory. 1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : kernel (ELSA-2026-72468)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72468 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257757 CVE-2026-72099 - net/liquidio: drop cached VF pcidev LUT Izabela Bakolla...

Oracle Linux 10 : rust-rpm-sequoia (ELSA-2026-76734)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-76734 advisory. 1.10.2.1-1 - Rebase to 1.10.2 and sequioa-openpgp with fixes for CVE-2026-42784 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : libpcap (ELSA-2026-76045)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-76045 advisory. - Fix CVE-2026-0799: add bounds checks for BPF scratch memory register indices in the BPF interpreter Tenable has extracted the preceding description block...

Oracle Linux 10 : sudo (ELSA-2026-75579)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75579 advisory. - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-10.2.z - Fix CVE-2026-82474: execveat2...

Oracle Linux 10 : kernel (ELSA-2026-72624)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72624 advisory. - perf: Reject exited events as group leaders Anubhav Shelat RHEL-258812 CVE-2026-74753 - perf/core: Detach event groups during removeonexec Anubhav...

Oracle Linux 10 : kernel (ELSA-2026-71233)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71233 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-242509 CVE-2026-68121 - nvme-tcp: fix host memory disclosure on R2T for a rea...

Oracle Linux 10 : kernel (ELSA-2026-71602)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71602 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-242509 CVE-2026-68121 - nvme-tcp: fix host memory disclosure on R2T for a rea...

kernel security, bug fix, and enhancement update

4.18.0-553.171.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 8 : kernel (ELSA-2026-71213)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71213 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237293 CVE-2026-68121 - nvme-tcp: reject a read that transferred too few bytes...

Oracle Linux 9 : gimp (ELSA-2026-75575)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75575 advisory. - fix CVE-2026-97185 - fix CVE-2026-92248 - fix CVE-2026-90947 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : kernel (ELSA-2026-74438)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74438 advisory. - futex: Prevent rcuwait use-after-free during requeue PI Waiman Long RHEL-263481 CVE-2026-90003 - futex: Fix race on the initial mm-futex.phash.ref...

Oracle Linux 9 : mariadb-connector-c (ELSA-2026-75673)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75673 advisory. 3.2.6-2 - CVE-2026-44172 fix Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 10 : bind (ELSA-2026-75577)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75577 advisory. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent memory leak on following HTTPS/SVCB RR CVE-2026-81563 -...

Oracle Linux 8 : kernel (ELSA-2026-74133)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74133 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257757 CVE-2026-72099 - net/liquidio: drop cached VF pcidev LUT Izabela Bakolla...

Oracle Linux 8 : mariadb-connector-c (ELSA-2026-75674)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75674 advisory. 3.1.11-3 - CVE-2026-44172 fix Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...