Detections
Analytics
Linux Distros Unpatched Vulnerability : CVE-2021-47652
medium Nessus Plugin ID 224307
Synopsis
The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be patched.Description
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.- In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr- deref in ufx_usb_probe() I got a null-ptr-deref report: BUG: kernel NULL pointer dereference, address:
0000000000000000 ... RIP: 0010:fb_destroy_modelist+0x38/0x100 ... Call Trace:
ufx_usb_probe.cold+0x2b5/0xac1 [smscufx] usb_probe_interface+0x1aa/0x3c0 [usbcore] really_probe+0x167/0x460 ... ret_from_fork+0x1f/0x30 If fb_alloc_cmap() fails in ufx_usb_probe(), fb_destroy_modelist() will be called to destroy modelist in the error handling path. But modelist has not been initialized yet, so it will result in null-ptr-deref. Initialize modelist before calling fb_alloc_cmap() to fix this bug. (CVE-2021-47652)
Note that Nessus relies on the presence of the package as reported by the vendor.
Solution
There is no known solution at this time.Plugin Details
Severity: Medium
ID: 224307
File Name: unpatched_CVE_2021_47652.nasl
Version: 1.1
Type: local
Agent: unix
Family: Misc.
Published: 3/5/2025
Updated: 3/5/2025
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 4.9
Temporal Score: 3.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2021-47652
CVSS v3
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Required KB Items: Host/cpu, Host/local_checks_enabled, global_settings/vendor_unpatched
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/26/2025
Reference Information
CVE: CVE-2021-47652