Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - medianxpimx8-isi修正版本時的串流清理。目前的實作會在 mxc_isi_video_release() 中無條件地呼叫 mxc_isi_video_cleanup_streaming()。當在此類裝置上呼叫時這可導致任何釋放呼叫 (例如來自簡單 v4l2-ctl -l) 可釋放目前串流處理的佇列。在 i.MX8MP 板上透過使用 gstreamer 從 ISI 擷取裝置進行串流可重現此問題gst-launch-1.0 -v v4l2src device=/dev/videoX \ video/x-raw,format=GRAY8,width=1280,height=800,framerate=1/120 \ fakesink 當此資料流執行時查詢相同裝置的端點會引發錯誤狀態v4l2-ctl -l -d /dev/videoX 這會導致下列追踪 [ 155.452152] -------- ----[cut here ]------------ [ 155.452163] 警告CPU 0 PID
    1708 at drivers/media/platform/nxp/imx8-isi/imx8-isi-pipe.c:713 mxc_isi_pipe_irq_handler+0x19c/0x1b0 [imx8_isi] [ 157.004248] Modules linked in: cfg80211 rpmsg_ctrl rpmsg_char rpmsg_tty virtio_rpmsg_bus rpmsg_ns rpmsg_core rfkill nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables mcp251x6 [157.053499] CPU0 UID 0 PID 1708 通訊 python3 未受污染的 6.15.4-00114-g1f61ca5cad76 #1 PREEMPT [157.064369] 硬體名稱 imx8mp_board_01 (DT) [ 157.068205] pstate 400000c5 ( nZcv daIF -PAN -UAO -TCO
    -DIT -SSBS BTYPE=--) [ 157.075169] pc mxc_isi_pipe_irq_handler+0x19c/0x1b0 [imx8_isi] [ 157.081195] lr
    mxc_isi_pipe_irq_handler+0x38/0x1b0 [imx8_isi] [ 157.087126] spffff800080003ee0 [ 157.090438] x29
    ffff800080003ee0 x28ffff0000c3688000 x270000000000000000 [ 157.097580] x260000000000000000 x25
    ffff0000c1e7ac00 x24ffff800081b5ad50 [ 157.104723] x2300000000000000d1 x220000000000000000 x21
    ffff0000c25e4000 [ 157.111866] x20: 0000000060000200 x19: ffff80007a0608d0 x18: 0000000000000000 [157.119008] x17: ffff80006a4e3000 x16: ffff800080000000 x15: 0000000000000000 [ 157.126146] x14:
    0000000000000000 x130000000000000000 x120000000000000000 [ 157.133287] x110000000000000040 x10
    ffff0000c01445f0 x9 ffff80007a053a38 [ 157.140425] x8 ffff0000c04004b8 x7 0000000000000000 x6
    0000000000000000 [ 157.147567] x5 : ffff0000c0400490 x4 : ffff80006a4e3000 x3 : ffff0000c25e4000 [157.154706] x2 : 0000000000000000 x1 : ffff8000825c0014 x0 : 0000000060000200 [ 157.161850] Call trace: [157.164296] mxc_isi_pipe_irq_handler+0x19c/0x1b0 [imx8_isi] (P) [ 157.170319]
    __handle_irq_event_percpu+0x58/0x218 [ 157.175029] handle_irq_event+0x54/0xb8 [ 157.178867] handle_fasteoi_irq+0xac/0x248 [ 157.182968] handle_irq_desc+0x48/0x68 [ 157.186723] generic_handle_domain_irq+0x24/0x38 [ 157.191346] gic_handle_120irq+054/0xb8 [ 157.195098] call_on_irq_stack+0x24/0x30 [ 157.199027] do_interrupt_handler+0x88/0x98 [ 157.203212] el0_interrupt+0x44/0xc0 [ 157.206792] __el0_irq_handler_common+0x18/0x28 [ 157.211328] el0t_64_irq_handler+0x10/0x20 [ 157.215429] el00_6_ir +0x198/0x1a0 [ 157.219009] ---[ end trace 0000000000000000 ]--- 將資料流準備和清理移至 vb2 .prepare_streaming() 和 .unprepare_streaming() 作業以解決此問題。這也允許直接使用 vb2_ioctl_streamon() 和 vb2_ioctl_streamoff() 協助程式並從 mxc_isi_video_release() 移除手動清理進而簡化驅動程式。 (CVE-2025-68175)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-68175

medium Nessus Plugin ID 278913

版本 1.3