The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: xen-netback: take a reference to the     RX task thread Do this in order to prevent the task from being freed if the thread returns (which can be     triggered by the frontend) before the call to kthread_stop done as part of the backend tear down. Not     taking the reference will lead to a use-after-free in that scenario. Such reference was taken before but     dropped as part of the rework done in 2ac061ce97f4. Reintroduce the reference taking and add a comment     this time explaining why it's needed. This is XSA-374 / CVE-2021-28691. (CVE-2021-47111)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
246652	Linux Distros Unpatched Vulnerability : CVE-2021-47111	Nessus	Misc.	8/9/2025	8/9/2025	high
160459	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	5/2/2022	6/23/2025	high

Detections

Analytics

Plugins Search

high

high