In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing lag dev It could be the lag dev is null so stop processing the event. In bond_enslave() the active/backup slave being set before setting the upper dev so first event is without an upper dev. After setting the upper dev with bond_master_upper_dev_link() there is a second event and in that event we have an upper dev.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing     lag dev It could be the lag dev is null so stop processing the event. In bond_enslave() the active/backup     slave being set before setting the upper dev so first event is without an upper dev. After setting the     upper dev with bond_master_upper_dev_link() there is a second event and in that event we have an upper     dev. (CVE-2021-47164)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
239841	TencentOS Server 4: kernel (TSSA-2024:0960)	Nessus	Tencent Local Security Checks	critical
230144	Linux Distros Unpatched Vulnerability : CVE-2021-47164	Nessus	Misc.	medium
160459	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2021-47164

medium

Tenable Plugins

critical

medium

high