In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205573273References: Upstream kernel

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001110 advisory.

    In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could     lead to local escalation of privilege with no additional execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205573273References:
    Upstream kernel

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004435 advisory.

    In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could     lead to local escalation of privilege with no additional execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205573273References:
    Upstream kernel

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003843 advisory.

    In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could     lead to local escalation of privilege with no additional execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205573273References:
    Upstream kernel

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could     lead to local escalation of privilege with no additional execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205573273References:
    Upstream kernel (CVE-2021-39714)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5505-1 advisory.

    Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel     leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute     arbitrary code. (CVE-2021-3609)

    Likang Luo discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel,     leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2021-3752)

    It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in     its NFC Controller Interface (NCI) implementation. A local attacker could possibly use this to cause a     denial of service (system crash) or execute arbitrary code. (CVE-2021-3760)

    Szymon Heidrich discovered that the USB Gadget subsystem in the Linux kernel did not properly restrict the     size of control requests for certain gadget types, leading to possible out of bounds reads or writes. A     local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2021-39685)

    It was discovered that the Ion Memory Manager subsystem in the Linux kernel contained a use-after-free     vulnerability. A local attacker could possibly use this to cause a denial of service (system crash) or     execute arbitrary code. (CVE-2021-39714)

    Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not     perform permission checks correctly in some situations. A local attacker could possibly use this to gain     administrative privileges. (CVE-2021-4197)

    Lin Ma discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel contained a     race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a     denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-4202)

    Sushma Venkatesh Reddy discovered that the Intel i915 graphics driver in the Linux kernel did not perform     a GPU TLB flush in some situations. A local attacker could use this to cause a denial of service or     possibly execute arbitrary code. (CVE-2022-0330)

    It was discovered that the PF_KEYv2 implementation in the Linux kernel did not properly initialize kernel     memory in some situations. A local attacker could use this to expose sensitive information (kernel     memory). (CVE-2022-1353)

    It was discovered that the virtual graphics memory manager implementation in the Linux kernel was subject     to a race condition, potentially leading to an information leak. (CVE-2022-1419)

    Minh Yuan discovered that the floppy disk driver in the Linux kernel contained a race condition, leading     to a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service     (system crash) or execute arbitrary code. (CVE-2022-1652)

    It was discovered that the Atheros ath9k wireless device driver in the Linux kernel did not properly     handle some error conditions, leading to a use-after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1679)

    It was discovered that the Marvell NFC device driver implementation in the Linux kernel did not properly     perform memory cleanup operations in some situations, leading to a use-after-free vulnerability. A local     attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code.
    (CVE-2022-1734)

    It was discovered that some Intel processors did not completely perform cleanup actions on multi-core     shared buffers. A local attacker could possibly use this to expose sensitive information. (CVE-2022-21123)

    It was discovered that some Intel processors did not completely perform cleanup actions on     microarchitectural fill buffers. A local attacker could possibly use this to expose sensitive information.
    (CVE-2022-21125)

    It was discovered that some Intel processors did not properly perform cleanup during specific special     register write operations. A local attacker could possibly use this to expose sensitive information.
    (CVE-2022-21166)

    It was discovered that the USB Gadget file system interface in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-24958)

     discovered that the 802.2 LLC type 2 driver in the Linux kernel did not properly perform     reference counting in some error conditions. A local attacker could use this to cause a denial of service.
    (CVE-2022-28356)

    It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly     handle certain error conditions, leading to a double-free. A local attacker could possibly use this to     cause a denial of service (system crash). (CVE-2022-28388)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
290563	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001110)	Nessus	Unity Linux Local Security Checks	Local	high
290216	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004435)	Nessus	Unity Linux Local Security Checks	Local	high
288476	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003843)	Nessus	Unity Linux Local Security Checks	Local	high
245757	Linux Distros Unpatched Vulnerability : CVE-2021-39714	Nessus	Misc.	Local	high
162822	Ubuntu 16.04 ESM : Linux kernel vulnerabilities (USN-5505-1)	Nessus	Ubuntu Local Security Checks	Local	high

Detections

Analytics

CVE-2021-39714

high

Tenable Plugins

high

high

high

high

high