Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - RDMA/核心修正 KASANib_register_device 問題中的 slab-use-after-free 讀取 呼叫追踪 __dump_stack lib/dump_stack.c:94 [內嵌] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/ report.c:408 [內嵌] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xe0/0x110 mm/kasan/report.c:634 strlen+0x93/0xa0 lib/string.c:420 __fortify_strlen 包含/linux/fortify-string.h:268 [內嵌] get_kobj_path_length lib/kobject.c:118 [內嵌] kobject_get_path+0x3f/0x2a0 lib/kobject.c:158 kobject_uevent_env+0x289/0x1870 lib/kobject_uevent.c:545 ib_register_device 驅動程式/infiniband/core/device.c:1472 [內嵌] ib_register_device+0x8cf/0xe00 drivers/infiniband/core/device.c:1393 rxe_register_device+0x275/0x320 drivers/infiniband/sw/rxe/rxe_verbs.c:1552 rxe_net_add+0x8e /0xe0 drivers/infiniband/sw/rxe/rxe_net.c:550 rxe_newlink+0x70/0x190 drivers/infiniband/sw/rxe/rxe.c:225 nldev_newlink+0x3a3/0x680 drivers/infiniband/core/nldev.c:1796 rdma_nl_rcv_msg +0x387/0x6e0 dr ivers/infiniband/core/netlink.c:195 rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [內嵌] netlink_unicast+0x53a/0x7f0 net/netlink/af_netlink.c 1339 netlink_sendmsg+0x8d1/0xdd0 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [內嵌] __sock_sendmsg net/socket.c:727 [內嵌]____sys_sendmsg+0xa95/0xc70 net/socket.c:2566 __sys_sendmsg +0x134/0x1d0 net/socket.c:2620
    __sys_sendmsg+0x16d/0x220 net/socket.c:2652 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [內嵌] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f 這個問題與提交 1d6a9e7449e2 (RDMA/核心重新命名裝置名稱時的釋放後使用修正) 修正的問題類似。根本原因為 ib_device_rename() 函式使用鎖定重新命名名稱。但在 kobject_uevent() 函式中同時可在沒有鎖定保護的情況下存取此名稱。解決方案是在函式 kobject_uevent() 中存取此名稱時新增鎖定保護。
    (CVE-2025-38022)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-38022

high Nessus Plugin ID 249031

版本 1.19

版本 1.17

版本 1.16

版本 1.15

版本 1.14

版本 1.13

版本 1.12

版本 1.11

版本 1.10

版本 1.9

版本 1.8

版本 1.7

版本 1.3

版本 1.2

版本 1.19 Feb 12, 2026, 7:05 AM CVSS metrics ("CVSSv2 score" set to 7.2. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 severity (based on CVE-2025-38022, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202602120705
版本 1.17 Feb 10, 2026, 11:15 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602101115
版本 1.16 Feb 9, 2026, 4:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602091607
版本 1.15 Feb 7, 2026, 9:06 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602070906
版本 1.14 Feb 3, 2026, 5:59 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602030559
版本 1.13 Feb 2, 2026, 1:44 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602021344
版本 1.12 Jan 30, 2026, 10:33 PM Detection (updated detection logic) Plugin Feed: 202601302233
版本 1.11 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
版本 1.10 Dec 15, 2025, 9:39 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512152139
版本 1.9 Nov 15, 2025, 1:05 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511150105
版本 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
版本 1.7 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510280902
版本 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
版本 1.2 Aug 31, 2025, 9:16 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508310916