Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - mm/memory-failure修正記憶體解除毒害時的 VM_BUG_ON_PAGE(PagePoisoned(page)) 我進行記憶體失敗測試時發生了下列錯誤頁面已轉儲存因為 VM_BUG_ON_PAGE(PagePoisoned(page)) 核心在 include/linux/page-flags 發生錯誤.h:616! Oops無效 opcode0000 [#1] PREEMPT SMP NOPTI CPU3 PID720 Comm
    bash 未受污染 6.10.0-rc1-00195-g148743902568 #40 RIP 0010:unpoison_memory+0x2f3/0x590 RSP
    0018:ffffa57fc8787d60 EFLAGS: 00000246 RAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0 RBP: 0000000000300000 R08:
     R09ffffffffb4956f88  : 0000000000009ffb R10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000 R13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe FS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2:
    0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0 Call Trace: <TASK> unpoison_memory+0x2f3/0x590 simple_attr_write_xsigned.constprop.0.isra.0+0xb3/0x110 debugfs_attr_write+0x42/0x60 full_proxy_write+0x5b/0x80 vfs_write+0xd5/0x540 ksys_write+0x64/0xe0 do_syscall_64+0xb9/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f08f0314887 RSP
    002b:00007ffece710078 EFLAGS00000246 ORIG_RAX: 0000000000000001 RAXffffffffffffffda RBX
    0000000000000009 RCX: 00007f08f0314887 RDX: 0000000000000009 RSI: 0000564787a30410 RDI: 0000000000000001 RBP: 0000564787a30410 R08: 000000000000fefe R09: 000000007fffffff R10: 0000000000000000 R11:
    0000000000000246 R120000000000000009 R1300007f08f041b780 R1400007f08f0417600 R1500007f08f0416a00 </TASK> 連結於 hwpoison_inject 的模組 --- 0 ---[ 結束追踪 00000000000000
    0010:unpoison_memory+0x2f3/0x590 RSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246 RAX: 0000000000000037 RBX
    0000000000000009 RCX: ffff9be25fcdc9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0 RBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb R10: 0000000000000284 R11:
     R12ffffffffb4926fa0  : ffffe6b00c000000 R13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe FS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564787a30410 CR3: 000000010d4e2000 CR400000000000006f0 核心錯誤 - 未同步嚴重例外狀況核心位移0x31c00000 來自 0xffffffff81000000 (重新配置範圍
    0xffffffff80000000-0xffffffffbfffffff) ---[ end 核心錯誤 - 未同步嚴重例外狀況 ]--- 根本原因是 unpoison_memory() 嘗試檢查未初始化頁面的 PG_HWPoison 旗標。因此會觸發 VM_BUG_ON_PAGE(PagePoisoned(page))。透過下列步驟可重現此情形 1.Offline 記憶體區塊 echo離線 > /sys/devices/system/memory/memory12/state 2.取得離線記憶體 pfn: page-types -bn
    -rlN 3. 寫入 pfn 至 unpoison-pfn echo <pfn> > /sys/kernel/debug/hwpoison/unpoison-pfn 此狀況可由傳回 NULL 的 pfn_to_online_page() 識別。且 ZONE_DEVICE 頁面絕不會出現因此我們可以直接在 pfn_to_online_page() == NULL 失敗來修正錯誤。 (CVE-2025-39883)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-39883

high Nessus Plugin ID 265881

版本 1.35