The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nfsd: call op_release, even when op_func returns an error For ops with trivial replies,     nfsd4_encode_operation will shortcut most of the encoding work and skip to just marshalling up the status.
    One of the things it skips is calling op_release. This could cause a memory leak in the layoutget codepath     if there is an error at an inopportune time. Have the compound processing engine always call op_release,     even when op_func sets an error in op->status. With this change, we also need     nfsd4_block_get_device_info_scsi to set the gd_device pointer to NULL on error to avoid a double free.
    (CVE-2023-53241)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-53241

medium Nessus Plugin ID 265147

Version 1.5

Version 1.4

Version 1.3

Version 1.5 Sep 30, 2025, 5:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509301708
Version 1.4 Sep 30, 2025, 12:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509300041
Version 1.3 Sep 25, 2025, 11:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509252329