The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - media: v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot bug report, mistakes in     the compat ioctl implementation can lead to uninitialized kernel stack data getting used as input for     driver ioctl handlers. The reported bug is now fixed, but it's possible that other related bugs are still     present or get added in the future. As the drivers need to check user input already, the possible impact     is fairly low, but it might still cause an information leak. To be on the safe side, always clear the     entire ioctl buffer before calling the conversion handler functions that are meant to initialize them.
    (CVE-2021-47339)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
229775	Linux Distros Unpatched Vulnerability : CVE-2021-47339	Nessus	Misc.	3/5/2025	5/14/2026	medium
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	6/16/2025	12/4/2025	high

Detections

Analytics

Plugins Search

medium

high