Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - net更好地追踪核心通訊端的存留期若在 pernet_operations->exit() 期間卸除核心通訊端其釋放可能因仍保留在 qdisc 或裝置佇列中的任何 tx 封包而延遲這是因為 skb_set_owner_w() 先前的呼叫所致。然後這會觸發來自 ref_tracker_dir_exit() 的下列警告 [1] 若要修正此問題請確定核心通訊端擁有 net->passive 上的參照。新增 sk_net_refcnt_upgrade() 協助程式每當核心通訊端轉換為 refcount 通訊端時使用。 [1] [136.263918][ T35] ref_trackernet notrefcnt@ffff8880638f01e0 在 [ 136.263918][ T35] sk_alloc+0x2b3/0x370 有 1/2 位使用者 [ 136.263918][ T35] inet6_create+0x6ce/0x10f0 [ 136.263918][ T35]
    __sock_create+0x4c0/0xa30 [ 136.263918][ T35] inet_ctl_sock_create+0xc2/0x250 [ 136.263918][ T35] igmp6_net_init+0x39/0x390 [ 136.263918][ T35] ops_init+0x31e/0x590 [ 136.263918][ T35] setup_net+0x287/0x9e0 [ 136.263918][ T35] copy_net_ns+0x33f/0x570 [ 136.263918][ T35] create_new_namespaces+0x425/0x7b0 [ 136.263918][ T35] unshare_nsproxy_namespaces+0x124/0x180 [136.263918] [ T35] ksys_unshare+0x57d/0xa70 [ 136.263918][ T35] __x64_sys_unshare+0x38/0x40 [ 136.263918][T35] do_syscall_64+0xf3/0x230 [ 136.263918][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.263918][T35] [ 136.343488][ T35] ref_trackernet notrefcnt@ffff8880638f01e0 在 [ 136.343488][ T35] sk_alloc+0x2b3/0x370 有 1/2 位使用者 [ 136.343488][ T35] inet6_create+0x6ce /0x10f0 [ 136.343488][ T35]
    __sock_create+0x4c0/0xa30 [ 136.343488][ T35] inet_ctl_sock_create+0xc2/0x250 [ 136.343488][ T35] ndisc_net_init+0xa7/0x2b0 [ 136.343488][ T35] ops_init+0x31e/0x590 [ 136.343488][ T35] setup_net+0x287/0x9e0 [ 136.343488][ T35] copy_net_ns+0x33f/0x570 [ 136.343488][ T35] create_new_namespaces+0x425/0x7b0 [ 136.343488][ T35] unshare_nsproxy_namespaces+0x124/0x180 [136.343488] [ T35] ksys_unshare+0x57d/0xa70 [ 136.343488][ T35] __x64_sys_unshare+0x38/0x40 [ 136.343488][T35] do_syscall_64+0xf3/0x230 [ 136.343488][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f (CVE-2025-21884)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-21884

medium Nessus Plugin ID 245603

版本 1.18

版本 1.17

版本 1.16

版本 1.15

版本 1.14

版本 1.13

版本 1.12

版本 1.11

版本 1.10

版本 1.9

版本 1.8

版本 1.3

版本 1.2

版本 1.18 Feb 13, 2026, 5:22 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602130522
版本 1.17 Feb 12, 2026, 3:03 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602121503
版本 1.16 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
版本 1.15 Jan 30, 2026, 9:16 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601300916
版本 1.14 Jan 21, 2026, 5:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211700
版本 1.13 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
版本 1.12 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
版本 1.11 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
版本 1.10 Nov 23, 2025, 4:41 AM CVSS metrics ("CVSSv3 score" set to 5.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H") Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
版本 1.9 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
版本 1.8 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
版本 1.3 Sep 1, 2025, 10:01 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509012201
版本 1.2 Aug 22, 2025, 7:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508220729