Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - scsiqla2xxx釋放錯誤路徑中的 sp 以修正系統當機在迴圈的載入/卸載測試期間看到系統當機[61110.449331] qla2xxx [0000:27:00.0]-0042:0已停用 MSI-X。 [61110.467494] ============================================== =============================== [61110.467498] qla2xxx_srbs 錯誤 (受污染的 G OE -------- --- )在 __kmem_cache_shutdown() 上 qla2xxx_srbs 中剩餘的物件 [61110.467501] --------------------------------- -------------------------------------------------------- [61110.467502] Slab 0x000000000ffc8162 objects=51 used=1 fp=0x00000000e25d3d85 flags=0x57ffffc0010200(slab|head|node=1|zone=2|lastcpupid=0x1fffff) [61110.467509] CPU: 53 PID: 455206 Comm: rmmod Kdump: 已載入 污染: G OE ------ -- --- 5.14.0-284.11.1.el9_2.x86_64 #1 [61110.467513] 硬體名稱HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2、BIOS A42 2023 年 8 月 17 日 [61110.467515] 呼叫追踪 [61110.467516] <TASK> [61110.467519] dump_stack_lvl+0x34/0x48 [61110.467526] slab_err.cold+0x53/0x67 [61110.467534] __kmem_cache_shutdown+0x16e/0x320 [61110.467540] kmem_cache_destroy+0x51/0x160 [61110.467544] qla2x00_module_exit+0x93/0x99 [qla2xxx] [61110.467607] ?
    __do_sys_delete_module.constprop.0+0x178/0x280 [61110.467613] ? syscall_trace_enter.constprop.0+0x145/0x1d0 [61110.467616] do_syscall_64+0x5c/0x90 [61110.467619] ? exc_page_fault+0x62/0x150 [61110.467622] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [61110.467626] </TASK> [61110.467627] 因核心污染而停用鎖定除錯 [61110.467635] 物件 0x0000000026f7e6e6 @offset=16000 [61110.467639] ------------[ 此處刪除]------------ [61110.467639] kmem_cache_destroy qla2xxx_srbs從 qla2x00_module_exit+0x93/0x99 呼叫時Slab 快取仍有物件 [qla2xxx] [61110.467659] 警告 CPU: 53 PID: 455206@mm /slab_common.c:520 kmem_cache_destroy+0x14d/0x160 [61110.467718] CPU53 PID 455206 Comm rmmod Kdump已載入 污染的 GB OE -------- --- 5.14.0-284.11.1。 el9_2.x86_64 #1 [61110.467720] 硬體名稱HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2、BIOS A42 2023 年 8 月 17 日 [61110.467721] RIP 0010:kmem_cache_destroy+0x14d/0x160 [61110.467724] 程式碼99 7d 07 00 48 89 ef e8 e1 6a 07 00 eb b3 48 8b 55 60 48 8b 4c 24 20 48 c7 c6 70 fc 66 90 48 c7 c7 f8 ef a1 90 e8 e1 ed 7c 00 <0f> 0b eb 93 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 55 48 89 [61110.467725] RSP0018:ffffa304e489fe80 EFLAGS00010282 [61110.467727] RAX 0000000000000000 RBX
    ffffffffc0d9a860 RCX0000000000000027 [61110.467729] RDXffff8fd5ff9598a8 RSI 0000000000000001 RDI
    ffff8fd5ff9598a0 [61110.467730] RBPffff8fb6aaf78700 R080000000000000000 R090000000100d863b7 [61110.467731] R10ffffa304e489fd20 R11ffffffff913bef48 R12[] 000000  00400 [61110.467731000000  R1300400
     R140000000000000000  : 0000000000000000 R15: 0000000000000000 [61110.467733] FS: 00007f64c89fb740(0000) GS:ffff8fd5ff940000(0000) knlGS:0000000000000000 [61110.467734] CS: 0010 DS: 0000 ES: 0000 CR0:
    0000000080050033 [61110.467735] CR2: 00007f0f02bfe000 CR3: 00000020ad6dc005 CR4: 0000000000770ee0 [61110.467736] PKRU: 55555554 [61110.467737] Call Trace: [61110.467738] <TASK> [61110.467739] qla2x00_module_exit+0x93/0x99 [qla2xxx] [61110.467755] ? __do_sys_delete_module.constprop.0+0x178/0x280 釋放錯誤路徑中的 sp 以修正損毀問題。 (CVE-2025-71232)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-71232

medium Nessus Plugin ID 299462

版本 1.9