Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 藍牙L2CAP修正 l2cap_send_cmd 中的 slab-use-after-free 讀取在 hci 同步命令釋放 l2cap_conn 之後hci 接收資料工作佇列在傳送至上層時會參照釋放的 l2cap_conn。將 hci 裝置鎖定新增至 hci 接收資料工作佇列以同步兩者。 [1] 錯誤KASAN在 l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954 中發生大小為 8 的讀取作業 kworker/u9:2/5837 CPU: 0 UID 0 PID5837 通訊kworker/u9:2 未受污染 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 硬體名稱Google Google Compute Engine/Google Compute Engine、BIOS Google 09/13/2024 工作佇列hci1 hci_rx_work 呼叫Trace <TASK> __dump_stack lib/dump_stack.c:94 [內嵌] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [內嵌] print_report+0x169/0x550 mm/kasan/report .c:489 kasan_report+0x143/0x180 mm/kasan/report.c:602 l2cap_build_cmd net/bluetooth/l2cap_core.c:2964 [內嵌] l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954 l2cap_sig_send_rej net/bluetooth/ l2cap_core.c:5502 [內嵌] l2cap_sig_channel net/bluetooth/l2cap_core.c:5538 [內嵌] l2cap_recv_frame+0x221f/0x10db0 net/bluetooth/l2cap_core.c:6817 hci_acldata_packet net/bluetooth/hci_core.c:3797 [內嵌] hci_rx_w ork+0x508/0xdb0 net/bluetooth/hci_core.c:4040 process_one_work kernel/workqueue.c:3229 [內嵌] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread +0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK> 由工作 5837 配置kasan_save_stack mm/kasan/common.c:47 [內嵌] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 pox_kmalloc_redzone mm/kasan/common.c:377 [內嵌] __kasan_kmalloc+0x98/0xb0 mm/kasan/common .c:394 kasan_kmalloc include/linux/kasan.h:260 [內嵌] __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4329 kmalloc_noprof include/linux/slab.h:901 [內嵌] kzalloc_noprof include/linux/slab.h :1037 [內嵌] l2cap_conn_add+0xa9/0x8e0 net/bluetooth/l2cap_core.c:6860 l2cap_connect_cfm+0x115/0x1090 net/bluetooth/l2cap_core.c:7239 hci_connect_cfm include/net/bluetooth/hci_core.h:2057 [內嵌] hci_remote_features_evt+ 0x68e/0xac 0 net/bluetooth/hci_event.c:3726 hci_event_func net/bluetooth/hci_event.c:7473 [內嵌] hci_event_packet+0xac2/0x1540 net/bluetooth/hci_event.c:7525 hci_rx_work+0x3f3/0xdb0 net/bluetooth/hci_core.c 4035 process_one_work kernel/workqueue.c:3229 [內嵌] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+ 0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 已由工作 54 釋放
    kasan_save_stack mm/kasan/common.c:47 [內嵌] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582 pox_slab_object mm/kasan/common.c 247 [內嵌]
    __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [內嵌] slab_free_hook mm/slub.c:2353 [內嵌] slab_free mm/slub.c:4613 [內嵌] kfree +0x196/0x430 mm/slub.c:4761 l2cap_connect_cfm+0xcc/0x1090 net/bluetooth/l2cap_core.c:7235 hci_connect_cfm include/net/bluetooth/hci_core.h:2057 [內嵌] hci_conn_failed+0x287/0x400 net/bluetooth/hci_conn .c:1266 hci_abort_conn_sync+0x56c/0x11f0 net/bluetooth/hci_sync.c:5603 hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:332 process_one_work kernel/workqueue.c:3229 [line] process_scheduled_works+0xa66/0x1840 kernel//0x1840 workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entr ---truncated--- (CVE-2025-21969)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-21969

high Nessus Plugin ID 245887

版本 1.18

版本 1.17

版本 1.16

版本 1.15

版本 1.14

版本 1.13

版本 1.12

版本 1.11

版本 1.10

版本 1.9

版本 1.3

版本 1.2

版本 1.1

版本 1.18 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin Feed: 202602070906
版本 1.17 Jan 30, 2026, 4:02 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601301602
版本 1.16 Jan 21, 2026, 5:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211700
版本 1.15 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
版本 1.14 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
版本 1.13 Jan 3, 2026, 12:01 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601030001
版本 1.12 Dec 3, 2025, 8:52 PM Detection (updated detection logic) Plugin Feed: 202512032052
版本 1.11 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
版本 1.10 Oct 27, 2025, 3:15 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510271515
版本 1.9 Oct 14, 2025, 8:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510140803
版本 1.3 Sep 2, 2025, 6:30 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509020630
版本 1.2 Aug 23, 2025, 2:29 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508230229
版本 1.1 Aug 8, 2025, 11:45 PM New Plugin Feed: 202508082345