Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - bpf停用 nf_hook_run_bpf() 中的移轉。 syzbot 報告可在未停用 xmit 路徑中的移轉的情況下呼叫 netfilter bpf prog。則 __bpf_prog_run() 中的宣告失敗進而觸發以下說明。 [0] 讓我們使用 nf_hook_run_bpf() 中的 bpf_prog_run_pin_on_cpu()。 [0]錯誤假設 ./include/linux/filter.h:703 為不可移轉的內容 in_atomic()0irqs_disabled()0、migration_disabled() 0 pid5829、名稱sshd-session 保留了 3 個鎖定報告者sshd-session/5829 #0
    ffff88807b4e4218 (sk_lock-AF_INET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1667 [內嵌] #0
    ffff88807b4e4218 (sk_lock-AF_INET){+.+.}-{0:0}位於tcp_sendmsg+0x20/0x50 net/ipv4/tcp.c:1395 #1
    ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [內嵌] #1: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3},在@rcu_read_lock include/linux/rcupdate.h:841 [內嵌] #1: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}、@__ip_queue_xmit+0x69/0x26c0 net/ipv4/ip_output.c:470 #2ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [內嵌] #2: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xb2/0x680 include/linux/netfilter。 h:241 CPU0 UID0 PID 5829 通訊sshd-session 未受污染 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(完整) 硬體名稱 Google Google Compute Engine/Google Compute Engine、BIOS Google 2025 年 5 月 7 日 呼叫追踪 <TASK> __dump_stack lib/dump_stack.c:94 [內嵌] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 __cant_migrate kernel/sched/core.c:8860 [inli ne]
    __cant_migrate+0x1c7/0x250 kernel/sched/core.c:8834 __bpf_prog_run include/linux/filter.h:703 [內嵌] bpf_prog_run include/linux/filter.h:725 [內嵌] nf_hook_run_bpf+0x83/0x1e0 net/netfilter/nf_bpf_link .c:20 nf_hook_entry_hookfn include/linux/netfilter.h:157 [內嵌] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:623 nf_hook+0x370/0x680 include/linux/netfilter.h:272 NF_HOOK_COND include/linux/ netfilter.h:305 [內嵌] ip_output+0x1bc/0x2a0 net/ipv4/ip_output.c:433 dst_output include/net/dst.h:459 [內嵌] ip_local_out net/ipv4/ip_output.c:129 [內嵌]
    __ip_queue_xmit+0x1d7d/0x26c0 net/ipv4/ip_output.c:527 __tcp_transmit_skb+0x2686/0x3e90 net/ipv4/tcp_output.c:1479 tcp_transmit_skb net/ipv4/tcp_output.c:1497 [內嵌] tcp_write_xmit+0x1274/xmit+0x1274/x40/net tcp_output.c:2838 __tcp_push_pending_frames+0xaf/0x390 net/ipv4/tcp_output.c:3021 tcp_push+0x225/0x700 net/ipv4/tcp.c:759 tcp_sendmsg_locked+0x1870/0x42b0 net/ipv4/tcp.c:1352xsendg+g /0x50 net/ipv4/tcp.c:1396 inet_sendmsg+0xb9/0x140 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:712 [內嵌] __sock_sendmsg net/socket.c:727 [內嵌] sock_write_iter+0x4aa /0x5b0 net/socket.c:1131 new_sync_write fs/read_write.c:593 [內嵌] vfs_write+0x6c7/0x1150 fs/read_write.c:686 ksys_write+0x1f8/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry /syscall_64.c:63 [內嵌] do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP0033:0x7fe7d365d407 代碼48 89 fa 4c 89 df e8 38 aa 00 00 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1 f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP(CVE-2025-38640)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-38640

medium Nessus Plugin ID 260283

版本 1.12

版本 1.11

版本 1.10

版本 1.9

版本 1.8

版本 1.7

版本 1.12 Dec 2, 2025, 7:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512020712
版本 1.11 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
版本 1.10 Nov 24, 2025, 10:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511242208
版本 1.9 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
版本 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
版本 1.7 Oct 27, 2025, 11:56 PM Detection (updated detection logic) Plugin Feed: 202510272356