The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry()     get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs     to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use     rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles     and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

Note that Nessus relies on the presence of the package as reported by the vendor.

リモートの CentOS Linux 9 ホストには、kernel-5.14.0-620.el9 ビルド変更ログに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - Linux カーネルでは、以下の脆弱性が解決されています: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

  - Linux カーネルでは、以下の脆弱性が解決されています: fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an oopsable race... The rest of the callers are safe since they are holding namespace_sem and are guaranteed a positive refcount on the mount in question. Rename the current has_locked_children() to
    __has_locked_children(), make it static and switch the fs/namespace.c users to it. Make has_locked_children() a wrapper for __has_locked_children(), calling the latter under read_seqlock_excl(&mount_lock). (CVE-2025-38306)

  - Linux カーネルでは、以下の脆弱性が解決されています: do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2).
    (CVE-2025-38498)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 已解決 Linux 核心中的下列弱點：libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Linux カーネルでは、以下の脆弱性が解決されています: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

遠端 CentOS Linux 9 主機已安裝受到多個弱點影響的套件如 kernel-5.14.0-620.el9 版本變更記錄中所提及。

  - 已解決 Linux 核心中的下列弱點：libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

  - 已解決 Linux 核心中的下列弱點：fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an oopsable race... The rest of the callers are safe since they are holding namespace_sem and are guaranteed a positive refcount on the mount in question. Rename the current has_locked_children() to
    __has_locked_children(), make it static and switch the fs/namespace.c users to it. Make has_locked_children() a wrapper for __has_locked_children(), calling the latter under read_seqlock_excl(&mount_lock). (CVE-2025-38306)

  - 已解決 Linux 核心中的下列弱點：do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2).
    (CVE-2025-38498)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

远程 CentOS Linux 9 主机上存在安装的程序包该程序包受到 kernel-5.14.0-620.el9 版本变更日志中提及的多个漏洞的影响。

  - 已修复 Linux 内核中的下列漏洞：libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

  - 已修复 Linux 内核中的下列漏洞：fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an oopsable race... The rest of the callers are safe since they are holding namespace_sem and are guaranteed a positive refcount on the mount in question. Rename the current has_locked_children() to
    __has_locked_children(), make it static and switch the fs/namespace.c users to it. Make has_locked_children() a wrapper for __has_locked_children(), calling the latter under read_seqlock_excl(&mount_lock). (CVE-2025-38306)

  - 已修复 Linux 内核中的下列漏洞：do_change_type(): refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2).
    (CVE-2025-38498)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-620.el9 build changelog.

  - In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry()     get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs     to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use     rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles     and it communicates clearly that this expects rcu protection. (CVE-2024-46801)

  - In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of     has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an     oopsable race... The rest of the callers are safe since they are holding namespace_sem and are guaranteed     a positive refcount on the mount in question. Rename the current has_locked_children() to
    __has_locked_children(), make it static and switch the fs/namespace.c users to it. Make     has_locked_children() a wrapper for __has_locked_children(), calling the latter under     read_seqlock_excl(&mount_lock). (CVE-2025-38306)

  - In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on     unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the     caller's mount namespace. This change aligns permission checking with the rest of mount(2).
    (CVE-2025-38498)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
244283	Linux Distros Unpatched Vulnerability : CVE-2024-46801	Nessus	Misc.	2025/8/6	2025/8/6	medium
266320	CentOS 9kernel-5.14.0-620.el9	Nessus	CentOS Local Security Checks	2025/10/1	2025/10/1	medium
244283	Linux Distros 未修補的弱點：CVE-2024-46801	Nessus	Misc.	2025/8/6	2025/8/6	medium
244283	Linux Distros のパッチ未適用の脆弱性: CVE-2024-46801	Nessus	Misc.	2025/8/6	2025/8/6	medium
266320	CentOS 9kernel-5.14.0-620.el9	Nessus	CentOS Local Security Checks	2025/10/1	2025/10/1	medium
244283	Linux Distros 未修补的漏洞：CVE-2024-46801	Nessus	Misc.	2025/8/6	2025/8/6	medium
266320	CentOS 9kernel-5.14.0-620.el9	Nessus	CentOS Local Security Checks	2025/10/1	2025/10/1	medium
266320	CentOS 9 : kernel-5.14.0-620.el9	Nessus	CentOS Local Security Checks	2025/10/1	2025/10/1	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium