The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in     reweight_entity Syzbot found a GPF in reweight_entity. This has been bisected to commit 4ef0c5c6b5ba     (kernel/sched: Fix sched_fork() access an invalid sched_task_group) There is a race between     sched_post_fork() and setpriority(PRIO_PGRP) within a thread group that causes a null-ptr-deref in     reweight_entity() in CFS. The scenario is that the main process spawns number of new threads, which then     call setpriority(PRIO_PGRP, 0, -20), wait, and exit. For each of the new threads the copy_process() gets     invoked, which adds the new task_struct and calls sched_post_fork() for it. In the above scenario there is     a possibility that setpriority(PRIO_PGRP) and set_one_prio() will be called for a thread in the group that     is just being created by copy_process(), and for which the sched_post_fork() has not been executed yet.
    This will trigger a null pointer dereference in reweight_entity(), as it will try to access the run queue     pointer, which hasn't been set. Before the mentioned change the cfs_rq pointer for the task has been set     in sched_fork(), which is called much earlier in copy_process(), before the new task is added to the     thread_group. Now it is done in the sched_post_fork(), which is called after that. To fix the issue the     remove the update_load param from the update_load param() function and call reweight_task() only if the     task flag doesn't have the TASK_NEW flag set. (CVE-2022-48921)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-48921

medium Nessus Plugin ID 225682

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Jul 18, 2026, 3:00 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202607181500
Version 1.3 Aug 31, 2025, 7:32 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508311932
Version 1.1 Mar 5, 2025, 4:35 PM New Plugin Feed: 202503051635