SUNRPC: null pointer dereference in svc_rqst_free(). When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page pointer will be dereferenced when calling put_page() in svc_rqst_free().

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null pointer dereference     in svc_rqst_free() When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page     pointer will be dereferenced when calling put_page() in svc_rqst_free(). Fix it by adding a null check.
    Addresses-Coverity: (Dereference after null check) (CVE-2021-47002)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
503605	Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2021-47002)	Tenable OT Security	Tenable.ot	10/27/2025	10/29/2025	medium
204097	Photon OS 4.0: Linux PHSA-2024-4.0-0655	Nessus	PhotonOS Local Security Checks	7/24/2024	3/3/2026	high
245827	Linux Distros Unpatched Vulnerability : CVE-2021-47002	Nessus	Misc.	8/8/2025	8/8/2025	medium

Detections

Analytics

Plugins Search

medium

high

medium