Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - clkzynqmp修正 strncpy` 錯誤中的堆疊超出邊界。KASANstrncpy+0x30/0x68 中的堆疊超出邊界。Linux-ATF 介面使用 16 位元組的 SMC 承載。如果時鐘名稱超過 15 個位元組Linux 將不會收到以字串結尾的 NULL 字元。在最後一個位元組新增明確的 NULL 字元以修正時鐘名稱較長時的問題。這可修正 KASAN 報告的下列錯誤
    ================================================== ================ 錯誤KASANstrncpy+0x30/0x68 中的堆疊超出邊界由工作 swapper/0/1 CPU1 讀取位於位址 ffff0008c89a7410 的大小 11 PID1 通訊
    swapper/0 未受污染的 5.4.0-00396-g81ef9e7-dirty #3 硬體名稱Xilinx Versal vck190 Eval board revA (QSPI) (DT) 呼叫追踪dump_backtrace+0x0/0x1e8 show_stack+0x14/0x20 dump_stack+0xd4/0x108 print_address_description .isra.0+0xbc/0x37c __kasan_report+0x144/0x198 kasan_report+0xc/0x18
    __asan_load1+0x5c/0x68 strncpy+0x30/0x68 zynqmp_clock_probe+0x238/0x7b8 platform_drv_probe+0x6c/0xc8 really_probe+0x14c/0x418 driver_probe_device+0x74/0x130 __device_attach_driver+0xc4/0xe8 bus_for_each_drv+0xec/0x150 __device_attach+0x160/0x1d8 device_initial_probe+0x10/0x18 bus_probe_device+0xe0/0xf0 device_add+0x528/0x950 of_device_add+0x5c/0x80 of_platform_device_create_pdata+0x120/0x168 of_platform_bus_create+0x244/0x4e0 of_platform_populate+0x50/0xe8 zynqmp_firmware_probe+0x370/0x3a8 platform_drv_probe+0x6c/0xc8 really_probe+0x14c/0x418 driver_probe_device+0x74/0x130 device_driver_attach+0x94/0xa0
    __driver_attach+0x70/0x108 bus_for_each_dev+0xe4/0x158 driver_attach+0x30/0x40 bus_add_driver+0x21c/0x2b8 driver_register+0xbc/0x1d0 __platform_driver_register+0x7c/0x88 zynqmp_firmware_driver_init+0x1c/0x24 do_one_initcall+0xa4/0x234 kernel_init_freeable+0x1b0/0x24c kernel_init+0x10/0x110 ret_from_fork+0x10/0x18 The buggy address belongs to the page: page:ffff0008f9be1c88 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 raw: 0008d00000000000 ffff0008f9be1c90 ffff0008f9be1c90 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff page dumped because: kasan: bad access detected addr ffff0008c89a7410位於 frame: 中位移 112 處的工作堆疊 swapper/0/1 中
    zynqmp_clock_probe+0x0/0x7b8 此框架具有 3 個物件[32, 44) 'response' [64, 80) 'ret_payload' [96, 112) 'name' 錯誤位址的記憶體狀態ffff0008c89a7300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff0008c89a7380: 00 00 00 00 f1 f1 f1 f1 00 04 f2 f2 00 00 f2 f2 >ffff0008c89a7400: 00 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 ^ ffff0008c89a7480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff0008c89a7500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ============== ================================================== (CVE-2022-50828)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2022-50828

medium Nessus Plugin ID 281736

版本 1.14

版本 1.13

版本 1.12

版本 1.11

版本 1.10

版本 1.8

版本 1.7

版本 1.5

版本 1.4

版本 1.3

版本 1.2

版本 1.1

版本 1.14 Jul 6, 2026, 3:53 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607061553
版本 1.13 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
版本 1.12 Jun 30, 2026, 12:42 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606300042
版本 1.11 Jun 28, 2026, 7:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606280750
版本 1.10 Jun 17, 2026, 2:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606171425
版本 1.8 May 14, 2026, 3:47 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605140347
版本 1.7 Feb 4, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602040631
版本 1.5 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
版本 1.4 Jan 10, 2026, 4:14 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601100414
版本 1.3 Jan 7, 2026, 1:59 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601071359
版本 1.2 Jan 6, 2026, 10:00 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601061000
版本 1.1 Jan 5, 2026, 2:31 PM New Plugin Feed: 202601051431