The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in     lpfc_unreg_rpi() routine An error is detected with the following report when unloading the driver: KASAN:
    use-after-free in lpfc_unreg_rpi+0x1b1b The NLP_REG_LOGIN_SEND nlp_flag is set in     lpfc_reg_fab_ctrl_node(), but the flag is not cleared upon completion of the login. This allows a second     call to lpfc_unreg_rpi() to proceed with nlp_rpi set to LPFC_RPI_ALLOW_ERROR. This results in a use after     free access when used as an rpi_ids array index. Fix by clearing the NLP_REG_LOGIN_SEND nlp_flag in     lpfc_mbx_cmpl_fc_reg_login(). (CVE-2021-47198)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2021-47198

high Nessus Plugin ID 230201

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Dec 19, 2025, 2:41 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv2 severity (based on CVE-2021-47198, severity increased from "Medium" to "High") CVSSv3 score source (set to "CVE-2021-47198") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512190241
Version 1.2 Aug 8, 2025, 1:31 AM CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) Detection (updated detection logic) Plugin metadata Plugin Feed: 202508080131
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723