/ Register

Join the community today
Become a Member

AlmaLinux cmsec reporting indeterminate for CVE's on AlmaLinux 9.8 kernel 5.14.0-687.12.1.el9_8

Discussion in 'Bug Reports' started by iaTa, Jun 8, 2026 at 3:21 PM.

Previous Thread Next Thread
Loading...
  1. Jun 8, 2026 at 3:21 PM #1
    iaTa

    iaTa Member

    90
    16
    8
    Mar 26, 2018
    Ratings:
    +32
    Local Time:
    9:58 AM
    Nginx 1.31.x
    MariaDB 10.11.x
    • CentOS Version: AlmaLinux 9.8
    • Centmin Mod Version Installed: 140.00beta01.b351
    Code (Text):
    [XX] cmsec: kernel 5.14.0-687.12.1.el9_8.x86_64 — 5/5 checked: 0 patched, 1 n/a, 0 VULNERABLE, 4 indeterminate
[XX] cmsec INDETERMINATE: CVE-2026-31431, CVE-2026-43284, CVE-2026-46300, CVE-2026-46333

RESULT: The running kernel and the known fixed version are from different package families, and the running kernel's changelog does not record...

    It looks like those CVE's have been removed from the latest changelog and so cmsec reports "indeterminate".
     
Previous Thread Next Thread
Loading...

.