Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - bpf防止在 func_proto 中參照 decl_tag Syzkaller 能夠命中下列問題
    ------------[cut here ]------------ 警告 CPU: 0 PID: 3609 at kernel/bpf/btf.c:1946 btf_type_id_size+0x2d5/ 0x9d0 kernel/bpf/btf.c:1946 連結於的模組CPU0 PID3609 通訊syz-executor361 未受污染的 6.0.0-syzkaller-02734-g0326074ff465 #0 硬體名稱Google Google Compute Engine/Google Compute Engine BIOS Google 09/22/2022 RIP0010:btf_type_id_size+0x2d5/0x9d0 kernel/bpf/btf.c:1946 程式碼ef e8 7f 8e e4 ff 41 83 ff 0b 77 28 f6 44 24 10 18 75 3f e8 6d 91 e4 ff 44 89 fe bf 0e 00 00 00 e8 20 8e e4 ff e8 5b 91 e4 ff <0f> 0b 45 31 f6 e9 98 02 00 00 41 83 ff 12 74 18 e8 46 91 e4 ff 44 RSP: 0018: ffffc900003f 4 ff 44 RSP: 0018: ffffc900003010 29 3. RAX0000000000000000 RBX000000000000002 RCX
    0000000000000000 RDX: ffff8880259c0000 RSI: ffffffff81968415 RDI: 0000000000000005 RBP: ffff88801270ca00 R08: 0000000000000005 R09: 000000000000000e R10: 0000000000000011 R11: 0000000000000000 R12:
    0000000000000000 R130000000000000011 R14ffff888026ee6424 R150000000000000011 FS
    000055555641b300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0
    0000000080050033 CR2: 0000000000f2e258 CR3: 000000007110e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
    0000000000000400 呼叫追踪 <TASK> btf_func_proto_check kernel/bpf/btf.c:4447 [內嵌] btf_check_all_types kernel/bpf/btf.c:4723 [內嵌] btf_parse_type_sec kernel/bpf/btf.c:4752 [內嵌] btf_parse kernel/bpf/ btf.c:5026 [內嵌] btf_new_fd+0x1926/0x1e70 kernel/bpf/btf.c:6892 bpf_btf_load kernel/bpf/syscall.c:4324 [內嵌] __sys_bpf+0xb7d/0x4cf0 kernel/bpf/syscall.c:5010 __do_sys_bpf kernel/bpf/syscall.c:5069 [內嵌] __se_sys_bpf kernel/bpf/syscall.c:5067 [內嵌] __x64_sys_bpf+0x75/0xb0 kernel/bpf/syscall.c:5067 do_syscall_x64 arch/x86/entry/common.c 50 [內嵌] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP 0033:0x7f0fbae41c69 程式碼28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 480 0 000 00 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 RSP
    002b:00007ffc8aeb6228 EFLAGS00000246 ORIG_RAX: 0000000000000141 RAXffffffffffffffda RBX
    0000000000000000 RCX: 00007f0fbae41c69 RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 RBP: 00007f0fbae05e10 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11:
    0000000000000246 R1200007f0fbae05ea0 R13000000000000000 R140000000000000000 R150000000000000000 </TASK> 看起來它會嘗試建立傳回類型為 decl_tag 的 func_proto。如需詳細資訊請參閱 Martin 在 [0] 中指出的分析。 0 https://lore.kernel.org/bpf/CAKH8qBuQDLva_hHxxBuZzyAcYNO4ejhovz6TQeVSk8HY-2SO6g@mail.gmail.com/T/#mea6524b3fcd6298347432226e81b1e6155efc62c (CVE-2022-50862)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2022-50862

high Nessus Plugin ID 281542

版本 1.4

版本 1.3

版本 1.2

版本 1.1

版本 1.4 Jan 7, 2026, 1:59 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601071359
版本 1.3 Jan 6, 2026, 11:29 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601062329
版本 1.2 Jan 5, 2026, 2:31 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv2 score source (set to "CVE-2022-50862") Detection (updated detection logic) Plugin metadata Plugin Feed: 202601051431
版本 1.1 Jan 1, 2026, 1:21 AM New Plugin Feed: 202601010121