Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - qed未收集過多保護覆寫 GRC 元素在保護覆寫轉儲存路徑中韌體可傳回過多 GRC 元素進而導致嘗試在超過先前 kmalloc 之轉儲存緩衝區的結尾處寫入。這將導致核心錯誤原因如下錯誤無法在 ADDRESS 處理核心分頁要求其中 ADDRESS 剛好超過保護覆寫轉儲存緩衝區的結尾。緩衝區的起始位址為
    p_hwfn->cdev->dbg_features[DBG_FEATURE_PROTECTION_OVERRIDE].dump_buf 且緩衝區大小為 buf_size (相同資料結構)。The panic can be arrived at from either the qede Ethernet driver path: [exception RIP: qed_grc_dump_addr_range+0x108] qed_protection_override_dump at ffffffffc02662ed [qed] qed_dbg_protection_override_dump at ffffffffc0267792 [qed] qed_dbg_feature at ffffffffc026aa8f [qed] qed_dbg_all_data at ffffffffc026b211 [qed] qed_fw_fatal_reporter_dump at ffffffffc027298a [ qed] devlink_health_do_dump at ffffffff82497f61 devlink_health_report at ffffffff8249cf29 qed_report_fatal_error at ffffffffc0272baf [qed] qede_sp_task at ffffffffc045ed32 [qede] process_one_work at ffffffff81d19783 or the qedf storage driver path: [exception RIP: qed_grc_dump_addr_range+0x108] qed_protection_override_dump at ffffffffc068b2ed [qed] qed_dbg_protection_override_dump at ffffffffc068c792 [qed] ffffffffc068fa8f 的 qed_dbg_feature [qed] ffffffffc0690211 的 qed_dbg_all_data [qed] ffffffffc069798a 的 qed_fw_fatal_reporter_dump [qed] ffffffff8aa95e51 的 devlink_health_do_dump ffffffff8aa95e51 的 devlink_health_report ffffffff8aa9ae19e d_report_fatal_error at ffffffffc0697baf [qed] qed_hw_err_notify at ffffffffc06d32d7 [qed] qed_spq_post at ffffffffc06b1011 [qed] qed_fcoe_destroy_conn at ffffffffc06b2e91 [qed] qedf_cleanup_fcport at ffffffffc05e7597 [qedf] qedf_rport_event_handler at ffffffffc05e7bf7 [qedf] fc_rport_work at ffffffffc02da715 [libfc] process_one_work at ffffffff8a319663 Resolve this by clamping the韌體的傳回值設定為韌體應傳回的最大合法元素數。 (CVE-2025-39949)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-39949

medium Nessus Plugin ID 269447

版本 1.21