Detections
Analytics
Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-053347)
medium Nessus Plugin ID 381407
Synopsis
The Unity Linux host is missing one or more security updates.Description
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053347 advisory.In the Linux kernel, the following vulnerability has been resolved:
KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
Abort the walk of coalesced MMIO zones if kvm_io_bus_unregister_dev() fails to allocate memory for the new instance of the bus. If it can't instantiate a new bus, unregister_dev() destroys all devices _except_ the target device. But, it doesn't tell the caller that it obliterated the bus and invoked the destructor for all devices that were on the bus. In the coalesced MMIO case, this can result in a deleted list entry dereference due to attempting to continue iterating on coalesced_zones after future entries (in the walk) have been deleted.
Opportunistically add curly braces to the for-loop, which encompasses many lines but sneaks by without braces due to the guts being a single if statement.
Tenable has extracted the preceding description block directly from the Unity Linux security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected kernel package.See Also
https://nvd.nist.gov/vuln/detail/CVE-2021-47060
https://security-tracker.debian.org/tracker/CVE-2021-47060
http://www.nessus.org/u?219db354
http://www.nessus.org/u?30fd70ed
http://www.nessus.org/u?5e3bd47b
http://www.nessus.org/u?73ac698a
http://www.nessus.org/u?7abfe75a
Plugin Details
Severity: Medium
ID: 381407
File Name: unity_linux_UTSA-2026-053347.nasl
Version: 1.1
Type: Local
Published: 11/14/2026
Updated: 11/14/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.3
Percentile: 53.04
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2021-47060
CVSS v3
Risk Factor: Medium
Base Score: 6
Temporal Score: 5.2
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Required KB Items: Host/local_checks_enabled, Host/UOS-Server/release, Host/UOS-Server/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 7/27/2026
Vulnerability Publication Date: 1/28/2022
Reference Information
CVE: CVE-2021-47060