Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - cifstlink 設定失敗時修正連線洩漏。如果 tlink 設定失敗失去放置連線然後因為 cifsd kthread 未結束模組 refcnt 洩漏。也會洩漏 fscache 資訊而且對於下次使用 fsc 的掛載它會列印下列錯誤CIFS快取磁碟區金鑰已在使用中 (cifs127.0.0.1:445TEST) 我們來檢查一下 tlink 設定的結果並進行一些清理。 (CVE-2022-49822)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

遠端 Debian 11 主機已安裝的套件會受到 dla-4664 公告中提及的多個弱點影響。

    ------------------------------------------------------------------------- Debian LTS 公告 DLA-4664-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Ben Hutchings 2026 年 7 月 3 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    套件：linux 版本：5.10.259-1 CVE ID：CVE-2021-47188 CVE-2021-47211 CVE-2022-48703 CVE-2022-49135 CVE-2022-49158 CVE-2022-49183 CVE-2022-49822 CVE-2022-50073 CVE-2022-50472 CVE-2022-50493 CVE-2022-50552 CVE-2023-53133 CVE-2023-53421 CVE-2023-53596 CVE-2023-54129 CVE-2024-43902 CVE-2025-10263 CVE-2025-21863 CVE-2025-22026 CVE-2025-22107 CVE-2025-38129 CVE-2025-38250 CVE-2025-38584 CVE-2025-38710 CVE-2025-39929 CVE-2025-40164 CVE-2025-68340 CVE-2026-23066 CVE-2026-23099 CVE-2026-23442 CVE-2026-23444 CVE-2026-31407 CVE-2026-31449 CVE-2026-31489 CVE-2026-31532 CVE-2026-31576 CVE-2026-31577 CVE-2026-31578 CVE-2026-31580 CVE-2026-31581 CVE-2026-31583 CVE-2026-31585 CVE-2026-31586 CVE-2026-31588 CVE-2026-31590 CVE-2026-31596 CVE-2026-31597 CVE-2026-31598 CVE-2026-31599 CVE-2026-31602 CVE-2026-31603 CVE-2026-31605 CVE-2026-31607 CVE-2026-31615 CVE-2026-31616 CVE-2026-31617 CVE-2026-31618 CVE-2026-31619 CVE-2026-31622 CVE-2026-31623 CVE-2026-31624 CVE-2026-31625 CVE-2026-31626 CVE-2026-31627 CVE-2026-31629 CVE-2026-31630 CVE-2026-31634 CVE-2026-31637 CVE-2026-31642 CVE-2026-31656 CVE-2026-31657 CVE-2026-31664 CVE-2026-31673 CVE-2026-31676 CVE-2026-31681 CVE-2026-31684 CVE-2026-31685 CVE-2026-31686 CVE-2026-31696 CVE-2026-31697 CVE-2026-31698 CVE-2026-31699 CVE-2026-31700 CVE-2026-31701 CVE-2026-31708 CVE-2026-31715 CVE-2026-43052 CVE-2026-43058 CVE-2026-43075 CVE-2026-43076 CVE-2026-43080 CVE-2026-43085 CVE-2026-43089 CVE-2026-43093 CVE-2026-43103 CVE-2026-43104 CVE-2026-43105 CVE-2026-43110 CVE-2026-43111 CVE-2026-43113 CVE-2026-43114 CVE-2026-43117 CVE-2026-43281 CVE-2026-43350 CVE-2026-43492 CVE-2026-43493 CVE-2026-43494 CVE-2026-43496 CVE-2026-43497 CVE-2026-43501 CVE-2026-43502 CVE-2026-45834 CVE-2026-45835 CVE-2026-45836 CVE-2026-45838 CVE-2026-45840 CVE-2026-45841 CVE-2026-45842 CVE-2026-45843 CVE-2026-45844 CVE-2026-45846 CVE-2026-45850 CVE-2026-45986 CVE-2026-45987 CVE-2026-45991 CVE-2026-45994 CVE-2026-46002 CVE-2026-46003 CVE-2026-46004 CVE-2026-46006 CVE-2026-46018 CVE-2026-46019 CVE-2026-46021 CVE-2026-46022 CVE-2026-46023 CVE-2026-46026 CVE-2026-46027 CVE-2026-46033 CVE-2026-46038 CVE-2026-46040 CVE-2026-46043 CVE-2026-46044 CVE-2026-46046 CVE-2026-46047 CVE-2026-46049 CVE-2026-46051 CVE-2026-46052 CVE-2026-46053 CVE-2026-46056 CVE-2026-46064 CVE-2026-46069 CVE-2026-46070 CVE-2026-46077 CVE-2026-46078 CVE-2026-46080 CVE-2026-46086 CVE-2026-46088 CVE-2026-46090 CVE-2026-46091 CVE-2026-46098 CVE-2026-46101 CVE-2026-46102 CVE-2026-46103 CVE-2026-46107 CVE-2026-46108 CVE-2026-46109 CVE-2026-46120 CVE-2026-46122 CVE-2026-46124 CVE-2026-46127 CVE-2026-46128 CVE-2026-46132 CVE-2026-46133 CVE-2026-46137 CVE-2026-46146 CVE-2026-46149 CVE-2026-46150 CVE-2026-46151 CVE-2026-46159 CVE-2026-46160 CVE-2026-46161 CVE-2026-46163 CVE-2026-46167 CVE-2026-46169 CVE-2026-46172 CVE-2026-46177 CVE-2026-46178 CVE-2026-46180 CVE-2026-46184 CVE-2026-46187 CVE-2026-46189 CVE-2026-46191 CVE-2026-46196 CVE-2026-46198 CVE-2026-46205 CVE-2026-46206 CVE-2026-46208 CVE-2026-46209 CVE-2026-46212 CVE-2026-46214 CVE-2026-46220 CVE-2026-46227 CVE-2026-46231 CVE-2026-46233 CVE-2026-46234 CVE-2026-46236 CVE-2026-46238 CVE-2026-46275 CVE-2026-46276 CVE-2026-46285 CVE-2026-46291 CVE-2026-46292 CVE-2026-46294 CVE-2026-46299 CVE-2026-46301 CVE-2026-46303 CVE-2026-46304 CVE-2026-46307 CVE-2026-46319 CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-52909 CVE-2026-52910 CVE-2026-52912 CVE-2026-52913 CVE-2026-52914 CVE-2026-52915 CVE-2026-52916 CVE-2026-52917 CVE-2026-52918 CVE-2026-52919 CVE-2026-52920 CVE-2026-52921 CVE-2026-52922 CVE-2026-52923 CVE-2026-52924 CVE-2026-52925 CVE-2026-52926 CVE-2026-52927 CVE-2026-52929 CVE-2026-52930 CVE-2026-52931 CVE-2026-52934 CVE-2026-52935 CVE-2026-52939 CVE-2026-52943 CVE-2026-52946 CVE-2026-52947 CVE-2026-52948 CVE-2026-52954 CVE-2026-52955 CVE-2026-52957 CVE-2026-52958 CVE-2026-52962 CVE-2026-52963 CVE-2026-52970 CVE-2026-52972 CVE-2026-52982 CVE-2026-52984 CVE-2026-52985 CVE-2026-52986 CVE-2026-52992 CVE-2026-52993 CVE-2026-52995 CVE-2026-52998 CVE-2026-52999 CVE-2026-53001 CVE-2026-53002 CVE-2026-53003 CVE-2026-53004 CVE-2026-53006 CVE-2026-53011 CVE-2026-53012 CVE-2026-53016 CVE-2026-53021 CVE-2026-53037 CVE-2026-53039 CVE-2026-53040 CVE-2026-53041 CVE-2026-53043 CVE-2026-53045 CVE-2026-53047 CVE-2026-53050 CVE-2026-53059 CVE-2026-53060 CVE-2026-53061 CVE-2026-53062 CVE-2026-53064 CVE-2026-53065 CVE-2026-53068 CVE-2026-53071 CVE-2026-53072 CVE-2026-53073 CVE-2026-53074 CVE-2026-53075 CVE-2026-53077 CVE-2026-53080 CVE-2026-53082 CVE-2026-53088 CVE-2026-53093 CVE-2026-53112 CVE-2026-53128 CVE-2026-53130 CVE-2026-53133 CVE-2026-53134 CVE-2026-53135 CVE-2026-53137 CVE-2026-53146 CVE-2026-53148 CVE-2026-53149 CVE-2026-53150 CVE-2026-53161 CVE-2026-53168 CVE-2026-53176 CVE-2026-53181 CVE-2026-53186 CVE-2026-53189 CVE-2026-53194 CVE-2026-53195 CVE-2026-53196 CVE-2026-53199 CVE-2026-53208 CVE-2026-53212 CVE-2026-53217 CVE-2026-53218 CVE-2026-53219 CVE-2026-53221 CVE-2026-53223 CVE-2026-53225 CVE-2026-53227 CVE-2026-53228 CVE-2026-53238 CVE-2026-53239 CVE-2026-53242 CVE-2026-53245 CVE-2026-53249 CVE-2026-53255 CVE-2026-53256 CVE-2026-53263 CVE-2026-53264 CVE-2026-53266 CVE-2026-53268 CVE-2026-53269 CVE-2026-53270 CVE-2026-53273 CVE-2026-53287 CVE-2026-53294 CVE-2026-53295 CVE-2026-53296 CVE-2026-53304 CVE-2026-53309 CVE-2026-53320 CVE-2026-53337 CVE-2026-53339 CVE-2026-53352 CVE-2026-53354 CVE-2026-53355 CVE-2026-53356 CVE-2026-53357 Debian 錯誤：1130365 1119093

    在 Linux 核心中發現數個弱點，這些弱點可能會導致特權提升、拒絕服務或資訊洩漏。

    針對 Debian 11 Bullseye，已在 5.10.259-1 版本中修正這些問題。此版本還包括來自穩定更新 5.10.258 和 5.10.259的更多錯誤修復。

    建議您升級 linux 套件。

    如需有關 linux 安全性狀態的詳細資訊，請參閱其安全追蹤頁面：
    https://security-tracker.debian.org/tracker/linux

    有關 Debian LTS 安全公告、如何將這些更新套用至您的系統以及常見問題的詳細資訊，請參閱：https://wiki.debian.org/LTSAttachment:signature.ascDescription: PGP signature

Tenable 已直接從 Debian 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

AlmaLinux 9.2 主機已安裝的套件會受到 TuxCare ALMALINUX9.2：CLSA-2026：1780516677 公告中提及的多個弱點影響。

  - 已解決 Linux 核心中的下列弱點：can: isotp: fix potential CAN frame reception race in isotp_rcv() When receiving a CAN frame the current code logic does not consider concurrently receiving processes which do not show up in real world usage. Ziyang Xuan writes: The following syz problem is one of the scenarios. so->rx.len is changed by isotp_rcv_ff() during isotp_rcv_cf(), so->rx.len equals 0 before alloc_skb() and equals 4096 after alloc_skb(). That will trigger skb_over_panic() in skb_put(). ======================================================= CPU: 1 PID:
    19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc8-syzkaller #0 RIP: 0010:skb_panic+0x16c/0x16e net/core/skbuff.c:113 Call Trace: <TASK> skb_over_panic net/core/skbuff.c:118 [inline] skb_put.cold+0x24/0x24 net/core/skbuff.c:1990 isotp_rcv_cf net/can/isotp.c:570 [inline] isotp_rcv+0xa38/0x1e30 net/can/isotp.c:668 deliver net/can/af_can.c:574 [inline] can_rcv_filter+0x445/0x8d0 net/can/af_can.c:635 can_receive+0x31d/0x580 net/can/af_can.c:665 can_rcv+0x120/0x1c0 net/can/af_can.c:696 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5465
    __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5579 Therefore we make sure the state changes and data structures stay consistent at CAN frame reception time by adding a spin_lock in isotp_rcv(). This fixes the issue reported by syzkaller but does not affect real world operation. (CVE-2022-48830)

  - 已解決 Linux 核心中的下列弱點：wifi: mac80211: sdata can be NULL during AMPDU start ieee80211_tx_ba_session_handle_start() may get NULL for sdata when a deauthentication is ongoing. Here a trace triggering the race with the hostapd test multi_ap_fronthaul_on_ap: (gdb) list
    *drv_ampdu_action+0x46 0x8b16 is in drv_ampdu_action (net/mac80211/driver-ops.c:396). 391 int ret =
    -EOPNOTSUPP; 392 393 might_sleep(); 394 395 sdata = get_bss_sdata(sdata); 396 if (!check_sdata_in_driver(sdata)) 397 return -EIO; 398 399 trace_drv_ampdu_action(local, sdata, params); 400 wlan0: moving STA 02:00:00:00:03:00 to state 3 wlan0: associated wlan0: deauthenticating from 02:00:00:00:03:00 by local choice (Reason: 3=DEAUTH_LEAVING) wlan3.sta1: Open BA session requested for 02:00:00:00:00:00 tid 0 wlan3.sta1: dropped frame to 02:00:00:00:00:00 (unauthorized port) wlan0: moving STA 02:00:00:00:03:00 to state 2 wlan0: moving STA 02:00:00:00:03:00 to state 1 wlan0: Removed STA 02:00:00:00:03:00 wlan0: Destroyed STA 02:00:00:00:03:00 BUG: unable to handle page fault for address:
    fffffffffffffb48 PGD 11814067 P4D 11814067 PUD 11816067 PMD 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 2 PID:
    133397 Comm: kworker/u16:1 Tainted: G W 6.1.0-rc8-wt+ #59 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-20220807_005459-localhost 04/01/2014 Workqueue: phy3 ieee80211_ba_session_work [mac80211] RIP: 0010:drv_ampdu_action+0x46/0x280 [mac80211] Code: 53 48 89 f3 be 89 01 00 00 e8 d6 43 bf ef e8 21 46 81 f0 83 bb a0 1b 00 00 04 75 0e 48 8b 9b 28 0d 00 00 48 81 eb 10 0e 00 00 <8b> 93 58 09 00 00 f6 c2 20 0f 84 3b 01 00 00 8b 05 dd 1c 0f 00 85 RSP: 0018:ffffc900025ebd20 EFLAGS: 00010287 RAX:
    0000000000000000 RBX: fffffffffffff1f0 RCX: ffff888102228240 RDX: 0000000080000000 RSI: ffffffff918c5de0 RDI: ffff888102228b40 RBP: ffffc900025ebd40 R08: 0000000000000001 R09: 0000000000000001 R10:
    0000000000000001 R11: 0000000000000000 R12: ffff888118c18ec0 R13: 0000000000000000 R14: ffffc900025ebd60 R15: ffff888018b7efb8 FS: 0000000000000000(0000) GS:ffff88817a600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffffffffffb48 CR3: 0000000105228006 CR4: 0000000000170ee0 Call Trace: <TASK> ieee80211_tx_ba_session_handle_start+0xd0/0x190 [mac80211] ieee80211_ba_session_work+0xff/0x2e0 [mac80211] process_one_work+0x29f/0x620 worker_thread+0x4d/0x3d0 ? process_one_work+0x620/0x620 kthread+0xfb/0x120 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 </TASK> (CVE-2022-48875)

  - 已解決 Linux 核心中的下列弱點：udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udf_delete_aext() for deleting extent to avoid some code duplication. (CVE-2022-48946)

  - 已解決 Linux 核心中的下列弱點：Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones can cause the suspend notifier to be registered twice causing the following kernel panic: [ 71.986122] Call Trace: [ 71.986124] <TASK> [ 71.986125] blocking_notifier_chain_register+0x33/0x60 [ 71.986130] hci_register_dev+0x316/0x3d0 [bluetooth 99b5497ea3d09708fa1366c1dc03288bf3cca8da] [ 71.986154] btusb_probe+0x979/0xd85 [btusb e1e0605a4f4c01984a4b9c8ac58c3666ae287477] [ 71.986159] ? __pm_runtime_set_status+0x1a9/0x300 [ 71.986162] ? ktime_get_mono_fast_ns+0x3e/0x90 [ 71.986167] usb_probe_interface+0xe3/0x2b0 [ 71.986171] really_probe+0xdb/0x380 [ 71.986174] ? pm_runtime_barrier+0x54/0x90 [ 71.986177]
    __driver_probe_device+0x78/0x170 [ 71.986180] driver_probe_device+0x1f/0x90 [ 71.986183]
    __device_attach_driver+0x89/0x110 [ 71.986186] ? driver_allows_async_probing+0x70/0x70 [ 71.986189] bus_for_each_drv+0x8c/0xe0 [ 71.986192] __device_attach+0xb2/0x1e0 [ 71.986195] bus_probe_device+0x92/0xb0 [ 71.986198] device_add+0x422/0x9a0 [ 71.986201] ? sysfs_merge_group+0xd4/0x110 [ 71.986205] usb_set_configuration+0x57a/0x820 [ 71.986208] usb_generic_driver_probe+0x4f/0x70 [ 71.986211] usb_probe_device+0x3a/0x110 [ 71.986213] really_probe+0xdb/0x380 [ 71.986216] ? pm_runtime_barrier+0x54/0x90 [ 71.986219] __driver_probe_device+0x78/0x170 [ 71.986221] driver_probe_device+0x1f/0x90 [ 71.986224] __device_attach_driver+0x89/0x110 [ 71.986227] ? driver_allows_async_probing+0x70/0x70 [ 71.986230] bus_for_each_drv+0x8c/0xe0 [ 71.986232]
    __device_attach+0xb2/0x1e0 [ 71.986235] bus_probe_device+0x92/0xb0 [ 71.986237] device_add+0x422/0x9a0 [71.986239] ? _dev_info+0x7d/0x98 [ 71.986242] ? blake2s_update+0x4c/0xc0 [ 71.986246] usb_new_device.cold+0x148/0x36d [ 71.986250] hub_event+0xa8a/0x1910 [ 71.986255] process_one_work+0x1c4/0x380 [ 71.986259] worker_thread+0x51/0x390 [ 71.986262] ? rescuer_thread+0x3b0/0x3b0 [ 71.986264] kthread+0xdb/0x110 [ 71.986266] ? kthread_complete_and_exit+0x20/0x20 [ 71.986268] ret_from_fork+0x1f/0x30 [ 71.986273] </TASK> [ 71.986274]
    ---[ end trace 0000000000000000 ]--- [ 71.986284] btusb: probe of 2-1.6:1.0 failed with error -17 (CVE-2022-48982)

  - 已解決 Linux 核心中的下列弱點：can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods In m_can_pci_remove() and error handling path of m_can_pci_probe(), m_can_class_free_dev() should be called to free resource allocated by m_can_class_allocate_dev(), otherwise there will be memleak. (CVE-2022-49024)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名稱	產品	系列	已發布	已更新	嚴重性
249743	Linux Distros 未修補的弱點：CVE-2022-49822	Nessus	Misc.	2025/8/15	2026/9/30	medium
170458	Amazon Linux 2：核心， --advisory ALAS2KERNEL-5。15-2023-012（ALASKERNEL-5。15-2023-012	Nessus	Amazon Linux Local Security Checks	2023/1/24	2026/6/4	high
325018	Debian dla-4664 ： ata-modules-5.10.0-43-armmp-di - 安全性更新	Nessus	Debian Local Security Checks	2026/7/3	2026/9/18	high
351689	AlmaLinux 9.2 [TuxCare] 安全性更新：bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc 多個弱點（ALMALINUX9.2：CLSA-2026：1780516677）	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/10/19	high

偵測

搜尋 Plugin

medium

high

high

high