The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warning below [1]     following a fault injection in nfs_fs_proc_net_init(). [0] When nfs_fs_proc_net_init() fails,     /proc/net/rpc/nfs is not removed. Later, rpc_proc_exit() tries to remove /proc/net/rpc, and the warning is     logged as the directory is not empty. Let's handle the error of nfs_fs_proc_net_init() properly. [0]:
    FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 UID:
    0 PID: 6120 Comm: syz.2.27 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) Hardware     name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: <TASK>     dump_stack_lvl (lib/dump_stack.c:123) should_fail_ex (lib/fault-inject.c:73 lib/fault-inject.c:174)     should_failslab (mm/failslab.c:46) kmem_cache_alloc_noprof (mm/slub.c:4178 mm/slub.c:4204) __proc_create     (fs/proc/generic.c:427) proc_create_reg (fs/proc/generic.c:554) proc_create_net_data     (fs/proc/proc_net.c:120) nfs_fs_proc_net_init (fs/nfs/client.c:1409) nfs_net_init (fs/nfs/inode.c:2600)     ops_init (net/core/net_namespace.c:138) setup_net (net/core/net_namespace.c:443) copy_net_ns     (net/core/net_namespace.c:576) create_new_namespaces (kernel/nsproxy.c:110) unshare_nsproxy_namespaces     (kernel/nsproxy.c:218 (discriminator 4)) ksys_unshare (kernel/fork.c:3123) __x64_sys_unshare     (kernel/fork.c:3190) do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)     entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) </TASK> [1]: remove_proc_entry: removing     non-empty directory 'net/rpc', leaking at least 'nfs' WARNING: CPU: 1 PID: 6120 at fs/proc/generic.c:727     remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727 Modules linked in: CPU: 1 UID: 0 PID: 6120 Comm:
    syz.2.27 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) Hardware name: Google     Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP:
    0010:remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727 Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00     00 00 4d 89 f0 4c 89 e9 48 c7 c6 40 ba a2 8b 48 c7 c7 60 b9 a2 8b e8 33 81 1d ff 90 <0f> 0b 90 90 e9 5f fe     ff ff e8 04 69 5e ff 90 48 b8 00 00 00 00 00 RSP: 0018:ffffc90003637b08 EFLAGS: 00010282 RAX:
    0000000000000000 RBX: ffff88805f534140 RCX: ffffffff817a92c8 RDX: ffff88807da99e00 RSI: ffffffff817a92d5     RDI: 0000000000000001 RBP: ffff888033431ac0 R08: 0000000000000001 R09: 0000000000000000 R10:
    0000000000000001 R11: 0000000000000001 R12: ffff888033431a00 R13: ffff888033431ae4 R14: ffff888033184724     R15: dffffc0000000000 FS: 0000555580328500(0000) GS:ffff888124a62000(0000) knlGS:0000000000000000 CS: 0010     DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f71733743e0 CR3: 000000007f618000 CR4: 00000000003526f0     DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6:
    00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> sunrpc_exit_net+0x46/0x90     net/sunrpc/sunrpc_syms.c:76 ops_exit_list net/core/net_namespace.c:200 [inline] ops_undo_list+0x2eb/0xab0     net/core/net_namespace.c:253 setup_net+0x2e1/0x510 net/core/net_namespace.c:457 copy_net_ns+0x2a6/0x5f0     net/core/net_namespace.c:574 create_new_namespaces+0x3ea/0xa90 kernel/nsproxy.c:110     unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:218 ksys_unshare+0x45b/0xa40 kernel/fork.c:3121
    __do_sys_unshare kernel/fork.c:3192 [inline] __se_sys_unshare kernel/fork.c:3190 [inline]
    __x64_sys_unshare+0x31/0x40 kernel/fork.c:3190 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]     do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP:
    0033:0x7fa1a6b8e929 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48     89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c ---truncated--- (CVE-2025-38400)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - nfsnfs_fs_proc_net_init() が失敗する際に、/proc/net/rpc/nfs をクリーンアップします。 syzbot は、nfs_fs_proc_net_init() の障害注入の後に、[1] 下の警告を報告しました。 [0] nfs_fs_proc_net_init() が失敗する場合、/proc/net/rpc/nfs は削除されません。後で rpc_proc_exit() が /proc/net/rpc を削除しようとし、ディレクトリが空でないために警告がログされます。nfs_fs_proc_net_init() のエラーを適切に処理します。 [0]:
    FAULT_INJECTION失敗を強制します。 name failslab、間隔 1、可能性 0、スペース 0、0 時間 0 CPU1 UID
    0 PID6120 Commsyz.2.27 汚染されていない 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) ハードウェア名 Google Google Compute Engine/Google Compute Engine、BIOS Google 05/07/2025 Call Trace <TASK> dump_stack_lvl (lib/dump_stack.c:123) should_fail_ex (lib/fault-inject.c:73 lib/fault-inject.c:174) should_failslab (mm/failslab.c:46) kmem_cache_alloc_noprof (mm/slub.c) :4178 mm/slub.c:4204__proc_create (fs/proc/generic.c:427) proc_create_reg (fs/proc/generic.c:554) proc_create_net_data (fs/proc/proc_net.c:120) nfs_fs_proc_net_init (fs/) nfs/client.c:1409nfs_net_initfs/nfs/inode.c:2600ops_initnet/core/net_namespace.c:138setup_netnet/core/net_namespace.c:443copy_net_nsnet/core/ net_namespace.c:576) create_new_namespaces (kernel/nsproxy.c:110) unshare_nsproxy_namespaceskernel/nsproxy.c:218 (discriminator 4) ksys_unsharekernel/fork.c:3123) __x64_sys_unsharekernel/fork.c:3190 do_syscall_64arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94entry_SYSCALL_64 _after_hwframearch/x86/entry/entry_64.S:130 </TASK> [1]remove_proc_entry空でないディレクトリ「net/rpc」を削除し、少なくとも「nfs」を漏洩します。警告CPU1 PID6120 at fs/ proc/generic.c:727 remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727 モジュールがリンクされています CPU1 UID0 PID6120 通信
    syz.2.27 汚染されていない 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(フル) ハードウェア名 Google Google Compute Engine/Google Compute Engine、BIOS Google 05/07/2025 RIP
    0010:redo 60 b9 a2 8b e8 33 81 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 04 69 5e ff 90 48 b8 00 00 00 00 RSP 0018 :ffffc90003637b08 EFLAGS : 00010282 RAX
    0000000000000000 RBX: ffff88805f534140 RCX: ffffffff817a92c8 RDX: ffff88807da99e00 RSI: ffffffff817a92d5 RDI: 0000000000000001 RBP: ffff888033431ac0 R08: 0000000000000001 R09: 0000000000000000 R10:
     R110000000000000001  : 0000000000000001 R12: ffff888033431a00 R13: ffff888033431ae4 R14: ffff888033184724 R15: dffffc0000000000 FS: 0000555580328500(0000) GS:ffff888124a62000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f71733743e0 CR3: 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
    00000000fffe0ff0 DR7: 000000000000400 Call Trace: <TASK> sunrpc_exit_net+0x46/0x90 net/sunrpc/sunrpc_syms.c:76 ops_exit_list net/core/net_namespace.c:200 [inline] ops_undo_list+0x2eb/0xab0 net/core/net2_name3.c setup_net+0x2e1/0x510 net/core/net_namespace.c:457 copy_net_ns+0x2a6/0x5f0 net/core/net_namespace.c:574 create_new_namespaces+0x3ea/0xa90 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c :218 ksys_unshare+0x45b/0xa40 kernel/fork.c:3121
    __do_sys_unshare kernel/fork.c:3192 [inline] __se_sys_unshare kernel/fork.c:3190 [inline]
    __x64_sys_unshare+0x31/0x40 kernel/fork.c:3190 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x77/0x77/0x77/0x77/0x77/0x7764
    0033:0x7fa1a6b8e929 コード: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b00840440 <48> [48044044] 01 f0 ff ff 73 01 c ---truncated---CVE-2025-38400

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - nfs当 nfs_fs_proc_net_init() 失败时清理 /proc/net/rpc/nfs。 syzbot 报告了在 nfs_fs_proc_net_init() 中发生错误注入之后在下面 [1] 的警告。 [0] 当 nfs_fs_proc_net_init() 失败时不删除 /proc/net/rpc/nfs。之后rpc_proc_exit() 尝试删除 /proc/net/rpc因为目录非空而记录警告。我们来正确处理 nfs_fs_proc_net_init() 的错误。 [0]
    FAULT_INJECTION强制失败。名称 faillab，间隔 1，概率 0，空间 0，时间 0 CPU：1 UID：
    0 PID6120 Commsyz.2.27 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) 硬件名称Google Google Compute Engine/Google Compute EngineBIOS Google 05/07/2025 调用跟踪 <TASK> dump_stack_lvl (lib/dump_stack.c:123) should_fail_ex (lib/fault-inject.c:73 lib/fault-inject.c:174) should_failslab (mm/failslab.c:46) kmem_cache_alloc_noprof (mm/slub.c) :4178 mm/slub.c:4204) __proc_create (fs/proc/generic.c:427) proc_create_reg (fs/proc/generic.c:554) proc_create_net_data (fs/proc/proc_net.c:120) nfs_fs_proc_net_init (fs/ nfs/client.c:1409) nfs_net_init (fs/nfs/inode.c:2600) ops_init (net/core/net_namespace.c:138) setup_net (net/core/net_namespace.c:443) copy_net_ns (net/core/ net_namespace.c:576) create_new_namespaces (kernel/nsproxy.c:110) unshare_nsproxy_namespaces (kernel/nsproxy.c:218标识符 4)ksys_unshare (kernel/fork.c:3123) __x64_sys_unshare (kernel/fork.c:3190) do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64 _after_hwframe (arch/x86/entry/entry_64.S:130) </TASK> [1]remove_proc_entry删除非空目录 'net/rpc'至少泄漏 'nfs' WARNINGCPU: 1 PID: 6120 at fs/ proc/generic.c:727 remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727 中链接的模块CPU: 1 UID: 0 PID: 6120 Comm
    syz.2.27 未受感染 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) 硬件名称Google Google 计算引擎/Google 计算引擎BIOS Google 2025 年 5 月 7 日 RIP
    0010:remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727 代码 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 40 ba a2 8b 48 c7 c7 60 b9 a2 8b e8 33 81 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 04 69 5e ff 90 48 b8 00 00 00 00 00 RSP0018:ffffc90003637b08 EFLAGS: 00010282 RAX
    0000000000000000 RBX: ffff88805f534140 RCX: ffffffff817a92c8 RDX: ffff88807da99e00 RSI: ffffffff817a92d5 RDI: 0000000000000001 RBP: ffff888033431ac0 R08: 0000000000000001 R09: 0000000000000000 R10:
     R110000000000000001  : 0000000000000001 R12: ffff888033431a00 R13: ffff888033431ae4 R14: ffff888033184724 R15: dffffc0000000000 FS: 0000555580328500(0000) GS:ffff888124a62000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f71733743e0 CR3: 000000007f618000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3:000000000000 DR3:00000000000000000000000
    00000000fffe0ff0 DR7: 0000000000000400 调用跟踪 <TASK> sunrpc_exit_net+0x46/0x90 net/sunrpc/sunrpc_syms.c:76 ops_exit_list net/core/net_namespace.c:200 [inline] ops_undo_list+0x2eb/0xab0 net/core/net_namespace.c setup_net+0x2e1/0x510 net/core/net_namespace.c:457 copy_net_ns+0x2a6/0x5f0 net/core/net_namespace.c:574 create_new_namespaces+0x3ea/0xa90 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c 218 ksys_unshare+0x45b/0xa40 kernel/fork.c:3121
    __do_sys_unshare kernel/fork.c:3192 [内联] __se_sys_unshare kernel/fork.c:3190 [内联]
    __x64_sys_unshare+0x31/0x40 kernel/fork.c:3190 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [内联] do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP
    0033:0x7fa1a6b8e929 代码ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 04c <48> [2f d0 4c ] 01 f0 ff ff 73 01 c ---truncated--- (CVE-2025-38400)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - nfsnfs_fs_proc_net_init() 失敗時清理 /proc/net/rpc/nfs。 syzbot 報告在 nfs_fs_proc_net_init() 中發生錯誤插入後出現一個低於 [1] 的警告。 [0] 當 nfs_fs_proc_net_init() 失敗時不會移除 /proc/net/rpc/nfs。稍後rpc_proc_exit() 會嘗試移除 /proc/net/rpc並在目錄非空白時記錄警告。讓我們正確處理 nfs_fs_proc_net_init() 的錯誤。 [0]
    FAULT_INJECTION強制執行失敗。名稱 faillab、間隔 1、概率 0、空格 0、乘以 0 CPU1 UID
    0 PID6120 通訊syz.2.27 未受污染 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(完整) 硬體名稱Google Google Compute Engine/Google Compute Engine、BIOS Google 2025 年 5 月 7 日呼叫追踪 <TASK> dump_stack_lvl (lib/dump_stack.c:123) should_fail_ex (lib/fault-inject.c:73 lib/fault-inject.c:174) should_failslab (mm/failslab.c:46) kmem_cache_alloc_noprof (mm/slub.c :4178 mm/slub.c:4204) __proc_create (fs/proc/generic.c:427) proc_create_reg (fs/proc/generic.c:554) proc_create_net_data (fs/proc/proc_net.c:120) nfs_fs_proc_net_init (fs/ nfs/client.c:1409) nfs_net_init (fs/nfs/inode.c:2600) ops_init (net/core/net_namespace.c:138) setup_net (net/core/net_namespace.c:443) copy_net_ns (net/core/ net_namespace.c:576) create_new_namespaces (kernel/nsproxy.c:110) unshare_nsproxy_namespaces (kernel/nsproxy.c:218 (辨別器 4)) ksys_unshare (kernel/fork.c:3123) __x64_sys_unshare (kernel/fork.c:3190) do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64 _after_hwframe (arch/x86/entry/entry_64.S:130) </TASK> [1]remove_proc_entry移除非空白目錄 'net/rpc'至少洩漏 'nfs' 警告 CPU1 PIDfs/ 的 6120 proc/generic.c:727 remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727 連結於的模組CPU1 UID0 PID6120 Comm
    syz.2.27 未受污染的 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(完整) 硬體名稱Google Google Compute Engine/Google Compute Engine、BIOS Google 2025 年 5 月 7 日 RIP
    0010:remove_proc_entry+0x45e/0x530 fs/proc/generic.c:727 代碼3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 40 ba a2 8b 48 c77 c 60 b9 a2 8b e8 33 81 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 04 69 5e ff 90 48 b8 00 00 00 00 00 RSP0018:ffffc90003637b08 EFLAGS00010282 RAX
    0000000000000000 RBX: ffff88805f534140 RCX: ffffffff817a92c8 RDX: ffff88807da99e00 RSI: ffffffff817a92d5 RDI: 0000000000000001 RBP: ffff888033431ac0 R08: 0000000000000001 R09: 0000000000000000 R10:
     R110000000000000001  : 0000000000000001 R12: ffff888033431a00 R13: ffff888033431ae4 R14: ffff888033184724 R15: dffffc0000000000 FS: 0000555580328500(0000) GS:ffff888124a62000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f71733743e0 CR3: 000000007f618000 CR4: 00000000003526f0 DR0: 0000000000000000000000000 DR2: 0000000000000000600003:
    00000000fffe0ff0 DR70000000000000400 呼叫追踪 <TASK> sunrpc_exit_net+0x46/0x90 net/sunrpc/sunrpc_syms.c:76 ops_exit_list net/core/net_namespace.c:200 [內嵌] ops_undo_list+0x2eb/0xab0 net/core/net_namespace。 setup_net+0x2e1/0x510 net/core/net_namespace.c:457 copy_net_ns+0x2a6/0x5f0 net/core/net_namespace.c:574 create_new_namespaces+0x3ea/0xa90 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c :218 ksys_unshare+0x45b/0xa40 kernel/fork.c:3121
    __do_sys_unshare kernel/fork.c:3192 [內嵌] __se_sys_unshare kernel/fork.c:3190 [內嵌]
    __x64_sys_unshare+0x31/0x40 kernel/fork.c:3190 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [內嵌] do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP
    [0033:0x7fa1a6b8e929 程式碼ff ff c3 66 2e 0f 1f 84 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 0f 45c <48> 2 4 30 4c 8b 055 01 f0 ff ff 73 01 c ---truncated--- (CVE-2025-38400)

請注意，Nessus 依賴供應商報告的套件存在。

ID	名稱	產品	系列	已發布	已更新	嚴重性
245031	Linux Distros Unpatched Vulnerability : CVE-2025-38400	Nessus	Misc.	2025/8/7	2025/8/7	high
245031	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38400	Nessus	Misc.	2025/8/7	2025/8/7	high
245031	Linux Distros 未修补的漏洞：CVE-2025-38400	Nessus	Misc.	2025/8/7	2025/8/7	high
245031	Linux Distros 未修補的弱點：CVE-2025-38400	Nessus	Misc.	2025/8/7	2025/8/7	high

偵測

搜尋 Plugin

high

high

high

high