The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data stream corruption     Maxim reported several issues when forcing a TCP transparent proxy to use the MPTCP protocol for the     inbound connections. He also provided a clean reproducer. The problem boils down to     'mptcp_frag_can_collapse_to()' assuming that only MPTCP will use the given page_frag. If others - e.g. the     plain TCP protocol - allocate page fragments, we can end-up re-using already allocated memory for     mptcp_data_frag. Fix the issue ensuring that the to-be-expanded data fragment is located at the current     page frag end. v1 -> v2: - added missing fixes tag (Mat) (CVE-2021-47152)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
230203	Linux Distros Unpatched Vulnerability : CVE-2021-47152	Nessus	Misc.	3/5/2025	9/4/2025	medium
160459	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	5/2/2022	11/7/2025	high

Detections

Analytics

Plugins Search

medium

high