In the Linux kernel, the following vulnerability has been resolved: x86/ioremap: Map EFI-reserved memory as encrypted for SEV Some drivers require memory that is marked as EFI boot services data. In order for this memory to not be re-used by the kernel after ExitBootServices(), efi_mem_reserve() is used to preserve it by inserting a new EFI memory descriptor and marking it with the EFI_MEMORY_RUNTIME attribute. Under SEV, memory marked with the EFI_MEMORY_RUNTIME attribute needs to be mapped encrypted by Linux, otherwise the kernel might crash at boot like below: EFI Variables Facility v0.08 2004-May-17 general protection fault, probably for non-canonical address 0x3597688770a868b2: 0000 [#1] SMP NOPTI CPU: 13 PID: 1 Comm: swapper/0 Not tainted 5.12.4-2-default #1 openSUSE Tumbleweed Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP: 0010:efi_mokvar_entry_next [...] Call Trace: efi_mokvar_sysfs_init ? efi_mokvar_table_init do_one_initcall ? __kmalloc kernel_init_freeable ? rest_init kernel_init ret_from_fork Expand the __ioremap_check_other() function to additionally check for this other type of boot data reserved at runtime and indicate that it should be mapped encrypted for an SEV guest. [ bp: Massage commit message. ]

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989446 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    x86/ioremap: Map EFI-reserved memory as encrypted for SEV

    Some drivers require memory that is marked as EFI boot services     data. In order for this memory to not be re-used by the kernel     after ExitBootServices(), efi_mem_reserve() is used to preserve it     by inserting a new EFI memory descriptor and marking it with the     EFI_MEMORY_RUNTIME attribute.

    Under SEV, memory marked with the EFI_MEMORY_RUNTIME attribute needs to     be mapped encrypted by Linux, otherwise the kernel might crash at boot     like below:

      EFI Variables Facility v0.08 2004-May-17       general protection fault, probably for non-canonical address 0x3597688770a868b2: 0000 [#1] SMP NOPTI       CPU: 13 PID: 1 Comm: swapper/0 Not tainted 5.12.4-2-default #1 openSUSE Tumbleweed       Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015       RIP: 0010:efi_mokvar_entry_next       [...]       Call Trace:
       efi_mokvar_sysfs_init        ? efi_mokvar_table_init        do_one_initcall        ? __kmalloc        kernel_init_freeable        ? rest_init        kernel_init        ret_from_fork

    Expand the __ioremap_check_other() function to additionally check for     this other type of boot data reserved at runtime and indicate that it     should be mapped encrypted for an SEV guest.

     [ bp: Massage commit message. ]

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986767 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    x86/ioremap: Map EFI-reserved memory as encrypted for SEV

    Some drivers require memory that is marked as EFI boot services     data. In order for this memory to not be re-used by the kernel     after ExitBootServices(), efi_mem_reserve() is used to preserve it     by inserting a new EFI memory descriptor and marking it with the     EFI_MEMORY_RUNTIME attribute.

    Under SEV, memory marked with the EFI_MEMORY_RUNTIME attribute needs to     be mapped encrypted by Linux, otherwise the kernel might crash at boot     like below:

      EFI Variables Facility v0.08 2004-May-17       general protection fault, probably for non-canonical address 0x3597688770a868b2: 0000 [#1] SMP NOPTI       CPU: 13 PID: 1 Comm: swapper/0 Not tainted 5.12.4-2-default #1 openSUSE Tumbleweed       Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015       RIP: 0010:efi_mokvar_entry_next       [...]       Call Trace:
       efi_mokvar_sysfs_init        ? efi_mokvar_table_init        do_one_initcall        ? __kmalloc        kernel_init_freeable        ? rest_init        kernel_init        ret_from_fork

    Expand the __ioremap_check_other() function to additionally check for     this other type of boot data reserved at runtime and indicate that it     should be mapped encrypted for an SEV guest.

     [ bp: Massage commit message. ]

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - x86/ioremap: Map EFI-reserved memory as encrypted for SEV Some drivers require memory that is marked as     EFI boot services data. In order for this memory to not be re-used by the kernel after ExitBootServices(),     efi_mem_reserve() is used to preserve it by inserting a new EFI memory descriptor and marking it with the     EFI_MEMORY_RUNTIME attribute. Under SEV, memory marked with the EFI_MEMORY_RUNTIME attribute needs to be     mapped encrypted by Linux, otherwise the kernel might crash at boot like below: EFI Variables Facility     v0.08 2004-May-17 general protection fault, probably for non-canonical address 0x3597688770a868b2: 0000     [#1] SMP NOPTI CPU: 13 PID: 1 Comm: swapper/0 Not tainted 5.12.4-2-default #1 openSUSE Tumbleweed Hardware     name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP: 0010:efi_mokvar_entry_next [...]     Call Trace: efi_mokvar_sysfs_init ? efi_mokvar_table_init do_one_initcall ? __kmalloc kernel_init_freeable     ? rest_init kernel_init ret_from_fork Expand the __ioremap_check_other() function to additionally check     for this other type of boot data reserved at runtime and indicate that it should be mapped encrypted for     an SEV guest. [ bp: Massage commit message. ] (CVE-2021-47228)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2185-1 advisory.

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
    - CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
    - CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
    - CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
    - CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
    - CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
    - CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
    - CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
    - CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
    - CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
    - CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
    - CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
    - CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
    - CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
    - CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
    - CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
    - CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
    - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve     local privilege escalation (bsc#1215420).
    - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve     local privilege escalation (bsc#1215420).
    - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
    - CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
273174	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989446)	Nessus	Unity Linux Local Security Checks	medium
268895	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986767)	Nessus	Unity Linux Local Security Checks	medium
247991	Linux Distros Unpatched Vulnerability : CVE-2021-47228	Nessus	Misc.	medium
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	high
200930	SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2185-1)	Nessus	SuSE Local Security Checks	critical
160459	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2021-47228

medium

Tenable Plugins

medium

medium

medium

high

critical

high