In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null pointer dereference in svc_rqst_free() When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page pointer will be dereferenced when calling put_page() in svc_rqst_free(). Fix it by adding a null check. Addresses-Coverity: ("Dereference after null check")

SUNRPC: null pointer dereference in svc_rqst_free(). When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page pointer will be dereferenced when calling put_page() in svc_rqst_free().

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null pointer dereference     in svc_rqst_free() When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page     pointer will be dereferenced when calling put_page() in svc_rqst_free(). Fix it by adding a null check.
    Addresses-Coverity: (Dereference after null check) (CVE-2021-47002)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Severity
503605	Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2021-47002)	Tenable OT Security	Tenable.ot	medium
245827	Linux Distros Unpatched Vulnerability : CVE-2021-47002	Nessus	Misc.	medium
204097	Photon OS 4.0: Linux PHSA-2024-4.0-0655	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2021-47002

medium

Tenable Plugins

medium

medium

high