The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix NULL dereference in     nfs3svc_encode_getaclres In error cases the dentry may be NULL. Before 20798dfe249a, the encoder also     checked dentry and d_really_is_positive(dentry), but that looks like overkill to me--zero status should be     enough to guarantee a positive dentry. This isn't the first time we've seen an error-case NULL dereference     hidden in the initialization of a local variable in an xdr encoder. But I went back through the other     recent rewrites and didn't spot any similar bugs. (CVE-2021-47316)

Note that Nessus relies on the presence of the package as reported by the vendor.

nfsd: NULL dereference in nfs3svc_encode_getaclres.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
230099	Linux Distros Unpatched Vulnerability : CVE-2021-47316	Nessus	Misc.	3/5/2025	9/14/2025	medium
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	6/16/2025	12/4/2025	high
503651	Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2021-47316)	Tenable OT Security	Tenable.ot	10/27/2025	10/29/2025	medium

Detections

Analytics

Plugins Search

medium

high

medium