Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - Red Hat Enterprise Linux - 核心：media：v4l2-core：明確清除 ioctl 輸入資料 Ubuntu Linux - 在 Linux 核心中，已解決下列弱點： media: v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot bug report, mistakes in the compat ioctl implementation can lead to uninitialized kernel stack data getting used as input for driver ioctl handlers. The reported bug is now fixed, but it's possible that other related bugs are still present or get added in the future. As the drivers need to check user input already, the possible impact is fairly low, but it might still cause an information leak. To be on the safe side, always clear the entire ioctl buffer before calling the conversion handler functions that are meant to initialize them. (CVE-2021-47339)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Red Hat Enterprise Linux - kernel： media： v4l2-core：明确清除 ioctl 输入数据 Ubuntu Linux - 在 Linux 内核中，以下漏洞已得到解决： media: v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot bug report, mistakes in the compat ioctl implementation can lead to uninitialized kernel stack data getting used as input for driver ioctl handlers. The reported bug is now fixed, but it's possible that other related bugs are still present or get added in the future. As the drivers need to check user input already, the possible impact is fairly low, but it might still cause an information leak. To be on the safe side, always clear the entire ioctl buffer before calling the conversion handler functions that are meant to initialize them. (CVE-2021-47339)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Red Hat Enterprise Linux - カーネル:メディア:v4l2-core:ioctl 入力データを明示的にクリア Ubuntu Linux - Linux カーネルで、次の脆弱性が解決されています: media: v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot bug report, mistakes in the compat ioctl implementation can lead to uninitialized kernel stack data getting used as input for driver ioctl handlers. The reported bug is now fixed, but it's possible that other related bugs are still present or get added in the future. As the drivers need to check user input already, the possible impact is fairly low, but it might still cause an information leak. To be on the safe side, always clear the entire ioctl buffer before calling the conversion handler functions that are meant to initialize them. (CVE-2021-47339)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: explicitly clear     ioctl input data As seen from a recent syzbot bug report, mistakes in the compat ioctl implementation can     lead to uninitialized kernel stack data getting used as input for driver ioctl handlers. The reported bug     is now fixed, but it's possible that other related bugs are still present or get added in the future. As     the drivers need to check user input already, the possible impact is fairly low, but it might still cause     an information leak. To be on the safe side, always clear the entire ioctl buffer before calling the     conversion handler functions that are meant to initialize them. (CVE-2021-47339)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
229775	Linux Distros 未修補弱點：CVE-2021-47339	Nessus	Misc.	3/5/2025	11/12/2026	medium
229775	Linux Distros 未修补的漏洞：CVE-2021-47339	Nessus	Misc.	3/5/2025	11/12/2026	medium
229775	Linux Distros のパッチ未適用の脆弱性: CVE-2021-47339	Nessus	Misc.	3/5/2025	11/12/2026	medium
229775	Linux Distros Unpatched Vulnerability : CVE-2021-47339	Nessus	Misc.	3/5/2025	11/12/2026	medium
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	6/16/2025	12/4/2025	high

Detections

Analytics

Plugins Search

medium

medium

medium

medium

high