nfsd: NULL dereference in nfs3svc_encode_getaclres.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 Linux 核心中，已解決下列弱點： nfsd: fix NULL dereference in nfs3svc_encode_getaclres In error cases the dentry may be NULL. Before 20798dfe249a, the encoder also checked dentry and d_really_is_positive(dentry), but that looks like overkill to me--zero status should be enough to guarantee a positive dentry. This isn't the first time we've seen an error-case NULL dereference hidden in the initialization of a local variable in an xdr encoder. But I went back through the other recent rewrites and didn't spot any similar bugs. (CVE-2021-47316)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Linux 内核中，已解决以下漏洞： nfsd: fix NULL dereference in nfs3svc_encode_getaclres In error cases the dentry may be NULL. Before 20798dfe249a, the encoder also checked dentry and d_really_is_positive(dentry), but that looks like overkill to me--zero status should be enough to guarantee a positive dentry. This isn't the first time we've seen an error-case NULL dereference hidden in the initialization of a local variable in an xdr encoder. But I went back through the other recent rewrites and didn't spot any similar bugs. (CVE-2021-47316)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Linux カーネルにおいて、以下の脆弱性は解決されました： nfsd: fix NULL dereference in nfs3svc_encode_getaclres In error cases the dentry may be NULL. Before 20798dfe249a, the encoder also checked dentry and d_really_is_positive(dentry), but that looks like overkill to me--zero status should be enough to guarantee a positive dentry. This isn't the first time we've seen an error-case NULL dereference hidden in the initialization of a local variable in an xdr encoder. But I went back through the other recent rewrites and didn't spot any similar bugs. (CVE-2021-47316)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix NULL dereference in     nfs3svc_encode_getaclres In error cases the dentry may be NULL. Before 20798dfe249a, the encoder also     checked dentry and d_really_is_positive(dentry), but that looks like overkill to me--zero status should be     enough to guarantee a positive dentry. This isn't the first time we've seen an error-case NULL dereference     hidden in the initialization of a local variable in an xdr encoder. But I went back through the other     recent rewrites and didn't spot any similar bugs. (CVE-2021-47316)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
503651	Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2021-47316)	Tenable OT Security	Tenable.ot	2025/10/27	2026/2/12	medium
230099	Linux Distros 未修補弱點：CVE-2021-47316	Nessus	Misc.	2025/3/5	2026/7/17	medium
230099	Linux Distros 未修补的漏洞: CVE-2021-47316	Nessus	Misc.	2025/3/5	2026/7/17	medium
230099	Linux Distros のパッチ未適用の脆弱性: CVE-2021-47316	Nessus	Misc.	2025/3/5	2026/7/17	medium
230099	Linux Distros Unpatched Vulnerability : CVE-2021-47316	Nessus	Misc.	2025/3/5	2026/7/17	medium
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	high

検出

プラグインの検索

medium

medium

medium

medium

medium

high