The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory     due to a use after free. This could lead to local escalation of privilege with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android     kernelAndroid ID: A-187527909References: Upstream kernel (CVE-2021-0929)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database     (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
    (CVE-2020-26541)

  - An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux     kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped.
    However, the handler may not have time to run if the frontend quickly toggles between the states connect     and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving     guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege     escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
    (CVE-2020-29569)

  - In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This     could lead to local escalation of privilege with System execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References:
    Upstream kernel (CVE-2021-0920)

  - In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory     due to a use after free. This could lead to local escalation of privilege with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android     kernelAndroid ID: A-187527909References: Upstream kernel (CVE-2021-0929)

  - In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This     could lead to local escalation of privilege with System execution privileges needed. User interaction is     not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References:
    Upstream kernel (CVE-2021-0941)

  - A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket     file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race     condition. This flaw allows a local user to crash the system or escalate their privileges on the system.
    This flaw affects Linux kernel versions prior to 5.16-rc4. (CVE-2021-4083)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - ion_dma_buf_end_cpu_access および ion.c の関連する関数では、use-after-free のためにメモリが破損される可能性があります。これにより、追加の実行権限が不要になり、ローカルで権限が昇格される可能性があります。悪用にユーザーインタラクションは必要ありません。製品AndroidバージョンAndroidカーネルAndroid IDA-187527909参照UpstreamカーネルCVE-2021-0929

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 ion.c 的 ion_dma_buf_end_cpu_access 和相關函式中存在一個因釋放後使用而導致記憶體損毀的可能方式。這可能會導致本機特權提升，且不需額外的執行權限。不需要使用者互動即可惡意利用。產品AndroidVersionsAndroid 核心Android IDA-187527909參照上游核心 (CVE-2021-0929)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在ion.c 的 ion_dma_buf_end_cpu_access 和相关函数中存在一种可能的方式通过释放后使用来损坏内存。这可能会导致本地权限提升，且无需其他执行权限。恶意利用无需用户交互。Product: AndroidVersions: Android 内核Android ID: A-187527909References: 上游内核 (CVE-2021-0929)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
243682	Linux Distros Unpatched Vulnerability : CVE-2021-0929	Nessus	Misc.	2025/8/5	2025/8/5	high
158524	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1292)	Nessus	Huawei Local Security Checks	2022/3/2	2023/4/25	high
243682	Linux Distros のパッチ未適用の脆弱性: CVE-2021-0929	Nessus	Misc.	2025/8/5	2025/8/5	high
243682	Linux Distros 未修補的弱點：CVE-2021-0929	Nessus	Misc.	2025/8/5	2025/8/5	high
243682	Linux Distros 未修补的漏洞：CVE-2021-0929	Nessus	Misc.	2025/8/5	2025/8/5	high

检测

插件搜索

high

high

high

high

high