The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data stream corruption     Maxim reported several issues when forcing a TCP transparent proxy to use the MPTCP protocol for the     inbound connections. He also provided a clean reproducer. The problem boils down to     'mptcp_frag_can_collapse_to()' assuming that only MPTCP will use the given page_frag. If others - e.g. the     plain TCP protocol - allocate page fragments, we can end-up re-using already allocated memory for     mptcp_data_frag. Fix the issue ensuring that the to-be-expanded data fragment is located at the current     page frag end. v1 -> v2: - added missing fixes tag (Mat) (CVE-2021-47152)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Linux カーネルにおいて、以下の脆弱性は解決されました： mptcp: fix data stream corruption Maxim reported several issues when forcing a TCP transparent proxy to use the MPTCP protocol for the inbound connections. He also provided a clean reproducer. The problem boils down to 'mptcp_frag_can_collapse_to()' assuming that only MPTCP will use the given page_frag. If others - e.g. the plain TCP protocol - allocate page fragments, we can end-up re-using already allocated memory for mptcp_data_frag. Fix the issue ensuring that the to-be-expanded data fragment is located at the current page frag end. v1 -> v2: - added missing fixes tag (Mat) (CVE-2021-47152)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 Linux 核心中，已解決下列弱點： mptcp: fix data stream corruption Maxim reported several issues when forcing a TCP transparent proxy to use the MPTCP protocol for the inbound connections. He also provided a clean reproducer. The problem boils down to 'mptcp_frag_can_collapse_to()' assuming that only MPTCP will use the given page_frag. If others - e.g. the plain TCP protocol - allocate page fragments, we can end-up re-using already allocated memory for mptcp_data_frag. Fix the issue ensuring that the to-be-expanded data fragment is located at the current page frag end. v1 -> v2: - added missing fixes tag (Mat) (CVE-2021-47152)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Linux 内核中，已解决以下漏洞： mptcp: fix data stream corruption Maxim reported several issues when forcing a TCP transparent proxy to use the MPTCP protocol for the inbound connections. He also provided a clean reproducer. The problem boils down to 'mptcp_frag_can_collapse_to()' assuming that only MPTCP will use the given page_frag. If others - e.g. the plain TCP protocol - allocate page fragments, we can end-up re-using already allocated memory for mptcp_data_frag. Fix the issue ensuring that the to-be-expanded data fragment is located at the current page frag end. v1 -> v2: - added missing fixes tag (Mat) (CVE-2021-47152)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

ID	名稱	產品	系列	已發布	已更新	嚴重性
230203	Linux Distros Unpatched Vulnerability : CVE-2021-47152	Nessus	Misc.	2025/3/5	2025/8/6	medium
160459	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	2022/5/2	2025/6/23	high
230203	Linux Distros のパッチ未適用の脆弱性: CVE-2021-47152	Nessus	Misc.	2025/3/5	2025/8/6	medium
160459	Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	2022/5/2	2025/6/23	high
230203	Linux Distros 未修補弱點：CVE-2021-47152	Nessus	Misc.	2025/3/5	2025/8/6	medium
160459	Amazon Linux 2：kernel (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	2022/5/2	2025/6/23	high
230203	Linux Distros 未修补的漏洞: CVE-2021-47152	Nessus	Misc.	2025/3/5	2025/8/6	medium
160459	Amazon Linux 2：内核 (ALASKERNEL-5.10-2022-002)	Nessus	Amazon Linux Local Security Checks	2022/5/2	2025/6/23	high

偵測

搜尋 Plugin

medium

high

medium

high

medium

high

medium

high