The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: async_xor: increase src_offs when     dropping destination page Now we support sharing one page if PAGE_SIZE is not equal stripe size. To     support this, it needs to support calculating xor value with different offsets for each r5dev. One offset     array is used to record those offsets. In RMW mode, parity page is used as a source page. It sets     ASYNC_TX_XOR_DROP_DST before calculating xor value in ops_run_prexor5. So it needs to add src_list and     src_offs at the same time. Now it only needs src_list. So the xor value which is calculated is wrong. It     can cause data corruption problem. I can reproduce this problem 100% on a POWER8 machine. The steps are:
    mdadm -CR /dev/md0 -l5 -n3 /dev/sdb1 /dev/sdc1 /dev/sdd1 --size=3G mkfs.xfs /dev/md0 mount /dev/md0     /mnt/test mount: /mnt/test: mount(2) system call failed: Structure needs cleaning. (CVE-2021-47066)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
247809	Linux Distros Unpatched Vulnerability : CVE-2021-47066	Nessus	Misc.	8/10/2025	8/10/2025	medium
160459	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	5/2/2022	2/9/2026	high

Detections

Analytics

Plugins Search

medium

high