In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxd_cmd_exec that pass a null status pointer however a recent commit has added an assignment to *status that can end up with a null pointer dereference. The function expects a null status pointer sometimes as there is a later assignment to *status where status is first null checked. Fix the issue by null checking status before making the assignment. Addresses-Coverity: ("Explicit null dereferenced")

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989280 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    dmaengine: idxd: Fix potential null dereference on pointer status

    There are calls to idxd_cmd_exec that pass a null status pointer however     a recent commit has added an assignment to *status that can end up     with a null pointer dereference.  The function expects a null status     pointer sometimes as there is a later assignment to *status where     status is first null checked.  Fix the issue by null checking status     before making the assignment.

    Addresses-Coverity: (Explicit null dereferenced)

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987178 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    dmaengine: idxd: Fix potential null dereference on pointer status

    There are calls to idxd_cmd_exec that pass a null status pointer however     a recent commit has added an assignment to *status that can end up     with a null pointer dereference.  The function expects a null status     pointer sometimes as there is a later assignment to *status where     status is first null checked.  Fix the issue by null checking status     before making the assignment.

    Addresses-Coverity: (Explicit null dereferenced)

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null     dereference on pointer status There are calls to idxd_cmd_exec that pass a null status pointer however a     recent commit has added an assignment to *status that can end up with a null pointer dereference. The     function expects a null status pointer sometimes as there is a later assignment to *status where status is     first null checked. Fix the issue by null checking status before making the assignment. Addresses-     Coverity: (Explicit null dereferenced) (CVE-2021-47003)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
272881	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989280)	Nessus	Unity Linux Local Security Checks	medium
268681	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987178)	Nessus	Unity Linux Local Security Checks	medium
224412	Linux Distros Unpatched Vulnerability : CVE-2021-47003	Nessus	Misc.	medium

Detections

Analytics

CVE-2021-47003

medium

Tenable Plugins

medium

medium

medium