Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - medianxpimx8-isim2m修正釋放時的資料流清理。被釋放。除此之外若輸入的行寬超過 2K則會觸發 WARN_ON(): [ 59.222120] ------------[cut here ]-------- ---- [ 59.226758] 警告
    drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c:631 at mxc_isi_channel_chain+0xa4/0x120 CPU#4
    v4l2-ctl/654 [ 59.238569] 連結於 ap1302 的模組 [ 59.242231] CPU4 UID 0 PID 654 通訊 v4l2-ctl 未受污染的 6.16.0-rc4-next-20250704-06511-gff0e002d480a-dirty #258 PREEMPT [ 59.253597] 硬體名稱NXP i。MX95 15X15 board (DT) [ 59.258720] pstate 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [59.265669] pc mxc_isi_channel_chain+0xa4/0x120 [ 59.270358] lr mxc_isi_channel_chain +0x44/0x120 [59.275047] spffff8000848c3b40 [ 59.278348] x29ffff8000848c3b40 x28ffff0000859b4c98 x27
    ffff800081939f00 [ 59.285472] x26: 000000000000000a x25: ffff0000859b4cb8 x24: 0000000000000001 [59.292597] x23: ffff0000816f4760 x22: ffff0000816f4258 x21: ffff000084ceb780 [ 59.299720] x20:
    ffff000084342ff8 x19ffff000084340000 x180000000000000000 [ 59.306845] x170000000000000000 x16
    000000000000000 x150000ffffdb369e1c [ 59.313969] x140000000000000000 x130000000000000000 x12
    0000000000000000 [ 59.321093] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [59.328217] x8 : ffff8000848c3d48 x7 : ffff800081930b30 x6 : ffff800081930b30 [ 59.335340] x5 :
    ffff0000859b6000 x4 ffff80008193ae80 x3 ffff800081022420 [ 59.342464] x2 ffff0000852f6900 x1
    0000000000000001 x0 : ffff000084341000 [ 59.349590] Call trace: [ 59.352025] mxc_isi_channel_chain+0xa4/0x120 (P) [ 59.356722] mxc_isi_m2m_streamon+0x160/0x20c [ 59.361072] v4l_streamon+0x24/0x30 [ 59.364556] __video_do_ioctl+0x40c/0x4a0 [ 59.368560] video_usercopy+0x2bc/0x690 [59.372382] video_ioctl2+0x18/0x24 [ 59.375857] v4l2_ioctl+0x40/0x60 [ 59.379168]
    __arm64_sys_ioctl+0xac/0x104 [ 59.383172] invoke_syscall+0x48/0x104 [ 59.386916] el0_svc_common.constprop.0+0xc0/0xe0 [ 59.391613] do_el0_svc+0x1c/0x28 [ 59.394915] el0_svc+0x34/0xf4 [59.397966] el0t_64_sync_handler +0xa0/0xe4 [ 59.402143] el0t_64_sync+0x198/0x19c [ 59.405801] ---[ end trace 0000000000000000 ]--- 將資料流準備和清理移至 vb2 .prepare_streaming() 和 .unprepare_streaming()以解決此問題作業。這也允許直接使用 v4l2_m2m_ioctl_streamon() 和 v4l2_m2m_ioctl_streamoff() 協助程式進而簡化驅動程式。 (CVE-2025-40165)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-40165

high Nessus Plugin ID 275201

版本 1.27