Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - efivarfsfs_context エラーパスの efivarfs_fs_info のメモリリークを修正しますマウントオプションの処理時、efivarfs は fs_context 初期化の早期に efivarfs_fs_infosfiを割り当てます。ただし、sfi はスーパーブロックに関連付けられており、通常はスーパーブロックが破壊されると解放されます。エラーパスや再構成の際など、fill_super が呼び出される前に fs_context がリリースされると、所有権がスーパーブロックに転送されないため、sfi 構造が漏洩します。efivarfs_context_ops で .free コールバックを実装し、fill_super の前に fs_context がティアダウンした場合、割り当てられた sfi が適切に解放されるようにし、このメモリリークを防止します。CVE-2025-38549

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - efivarfs修复 fs_context 错误路径中 efivarfs_fs_info 的内存泄漏。处理挂载选项时efivarfs 会在 fs_context 初始化的早期分配 efivarfs_fs_info (sfi)。但是，sfi 与超级块相关联，通常会在超级块遭到破坏时将其释放。如果在调用 fill_super 之前释放 (最终放置) fs_context例如在错误路径上或在重新配置期间sfi 结构将泄漏因为所有权永远不会传输给超级块。在 efivarfs_context_ops 中实现 .free 回调以确保在 fill_super 之前 fs_context 清除时正确释放任何分配的 sfi从而防止此内存泄漏。 (CVE-2025-38549)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - efivarfs修正 fs_context 錯誤路徑中 efivarfs_fs_info 的記憶體洩漏問題處理掛載選項時efivarfs 會在 fs_context 初始化中提早配置 efivarfs_fs_info (sfi)。不過sfi 與超級區塊相關聯通常會在超級區塊遭到破壞時予以釋放。若在呼叫 fill_super 之前 (例如在錯誤路徑上或在重新組態期間釋放 fs_context)則會洩漏 sfi 結構因為擁有權永遠不會轉移給超級區塊。在 efivarfs_context_ops 中實作 .free 回呼以確保如果在 fill_super 之前卸除 fs_context 時任何已配置的 sfi 都能正確釋放進而防止此記憶體洩漏。 (CVE-2025-38549)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths When processing mount options,     efivarfs allocates efivarfs_fs_info (sfi) early in fs_context initialization. However, sfi is associated     with the superblock and typically freed when the superblock is destroyed. If the fs_context is released     (final put) before fill_super is calledsuch as on error paths or during reconfigurationthe sfi structure     would leak, as ownership never transfers to the superblock. Implement the .free callback in     efivarfs_context_ops to ensure any allocated sfi is properly freed if the fs_context is torn down before     fill_super, preventing this memory leak. (CVE-2025-38549)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20551 advisory.

    - scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (Karan Tilak Kumar) [Orabug:
    38175020,38226429] {CVE-2025-38238}
    - KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls (Manuel Andreas) [Orabug:
    38254220] {CVE-2025-38469}
    - btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Boris Burkov) [Orabug:
    37844509] {CVE-2025-22115}
    - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug:
    38310005] {CVE-2025-38499}
    - efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (Breno Leitao) [Orabug:
    38324320] {CVE-2025-38549}
    - rxrpc: Fix recv-recv race of completed call (David Howells) [Orabug: 38324205] {CVE-2025-38524}
    - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [Orabug: 38254212]     {CVE-2025-38468}
    - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Dong Chenchen) [Orabug:
    38254223] {CVE-2025-38470}
    - tls: always refresh the queue when reading sock (Jakub Kicinski) [Orabug: 38254232] {CVE-2025-38471}
    - virtio-net: fix recursived rtnl_lock() during probe() (Zigit Zo) [Orabug: 38324329] {CVE-2025-38551}
    - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [Orabug:
    38254235] {CVE-2025-38472}
    - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Yue Haibing) [Orabug: 38324325] {CVE-2025-38550}
    - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [Orabug: 38254239]     {CVE-2025-38473}
    - usb: net: sierra: check for no status endpoint (Oliver Neukum) [Orabug: 38254247] {CVE-2025-38474}
    - ice: add NULL check in eswitch lag check (Dave Ertman) [Orabug: 38324213] {CVE-2025-38526}
    - hwmon: (corsair-cpro) Validate the size of the received input buffer (Marius Zachmann) [Orabug:
    38324317] {CVE-2025-38548}
    - net: phy: Don't register LEDs for genphy (Sean Anderson) [Orabug: 38324260] {CVE-2025-38537}
    - smc: Fix various oops due to inet_sock type confusion. (Kuniyuki Iwashima) [Orabug: 38254256]     {CVE-2025-38475}
    - smb: client: fix use-after-free in cifs_oplock_break (Wang Zhaolong) [Orabug: 38324216] {CVE-2025-38527}
    - rpl: Fix use-after-free in rpl_do_srh_inline(). (Kuniyuki Iwashima) [Orabug: 38254259] {CVE-2025-38476}
    - net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [Orabug: 38254264] {CVE-2025-38477}
    - bpf: Reject %p% format string in bprintf-like helpers (Paul Chaignon) [Orabug: 38324225]     {CVE-2025-38528}
    - comedi: Fix initialization of data for instructions that write to subdevice (Ian Abbott) [Orabug:
    38254270] {CVE-2025-38478}
    - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() (Ian Abbott) [Orabug: 38254276]     {CVE-2025-38480}
    - comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large (Ian Abbott) [Orabug: 38254283]     {CVE-2025-38481}
    - comedi: das6402: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38254291] {CVE-2025-38482}
    - comedi: das16m1: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38254299] {CVE-2025-38483}
    - comedi: aio_iiro_16: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38324229] {CVE-2025-38529}
    - comedi: pcl812: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38324236] {CVE-2025-38530}
    - iio: common: st_sensors: Fix use of uninitialize device structs (Maud Spierings) [Orabug: 38324242]     {CVE-2025-38531}
    - iio: backend: fix out-of-bound write (Markus Burri) [Orabug: 38254383] {CVE-2025-38484}
    - iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps (Chen-Yu Tsai) [Orabug: 38324314]     {CVE-2025-38547}
    - iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush (Sean Nyekjaer) [Orabug: 38254306]     {CVE-2025-38485}
    - smb: client: fix use-after-free in crypt_message when using async crypto (Wang Zhaolong) [Orabug:
    38254322] {CVE-2025-38488}
    - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again (Ilya Leoshkevich) [Orabug: 38254325]     {CVE-2025-38489}
    - net: libwx: properly reset Rx ring descriptor (Jiawen Wu) [Orabug: 38324251] {CVE-2025-38532}
    - net: libwx: fix the using of Rx buffer DMA (Jiawen Wu) [Orabug: 38324253] {CVE-2025-38533}
    - net: libwx: remove duplicate page_pool_put_full_page() (Jiawen Wu) [Orabug: 38254327] {CVE-2025-38490}
    - dmaengine: nbpfaxi: Fix memory corruption in probe() (Dan Carpenter) [Orabug: 38324262] {CVE-2025-38538}
    - mptcp: plug races between subflow fail and subflow creation (Paolo Abeni) [Orabug: 38324332]     {CVE-2025-38552}
    - mptcp: make fallback action and fallback decision atomic (Paolo Abeni) [Orabug: 38254329]     {CVE-2025-38491}
    - tracing/osnoise: Fix crash in timerlat_dump_stack() (Tomas Glozar) [Orabug: 38254335] {CVE-2025-38493}
    - tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [Orabug: 38324268]     {CVE-2025-38539}
    - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38254338] {CVE-2025-38494}
    - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires)     [Orabug: 38254346] {CVE-2025-38495}
    - dm-bufio: fix sched in atomic context (Sheng Yong) [Orabug: 38254353] {CVE-2025-38496}
    - usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [Orabug: 38254356]     {CVE-2025-38497}
    - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Wayne Chang) [Orabug: 38324256]     {CVE-2025-38535}
    - rseq: Fix segfault on registration when rseq_cs is non-zero (Michael Jeanson) [Orabug: 38095070]     {CVE-2025-38067}
    - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (Lukas Wunner) [Orabug: 37977089]     {CVE-2025-37984}
    - ksmbd: fix potential use-after-free in oplock/lease break ack (Namjae Jeon) [Orabug: 38254080]     {CVE-2025-38437}
    - kasan: remove kasan_find_vm_area() to prevent possible deadlock (Levi Yun) [Orabug: 38324146]     {CVE-2025-38510}
    - HID: nintendo: avoid bluetooth suspend/resume stalls (Daniel J. Ogorchock) [Orabug: 38324137]     {CVE-2025-38507}
    - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao) [Orabug: 38324277]     {CVE-2025-38540}
    - btrfs: fix assertion when building free space tree (Filipe Manana) [Orabug: 38324119] {CVE-2025-38503}
    - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Tamura Dai) [Orabug: 38254084]     {CVE-2025-38438}
    - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Somnath Kotur) [Orabug: 38254088]     {CVE-2025-38439}
    - net/mlx5e: Fix race between DIM disable and net_dim() (Carolina Jubran) [Orabug: 38254092]     {CVE-2025-38440}
    - net: appletalk: Fix device refcount leak in atrtr_create() (Kito Xu) [Orabug: 38324288] {CVE-2025-38542}
    - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (Eric Dumazet) [Orabug:
    38254094] {CVE-2025-38441}
    - drm/xe/pf: Clear all LMTT pages on alloc (Michal Wajdeczko) [Orabug: 38324148] {CVE-2025-38511}
    - nbd: fix uaf in nbd_genl_connect() error path (Zheng Qixing) [Orabug: 38254100] {CVE-2025-38443}
    - wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() (Henry Martin) [Orabug: 38324286]     {CVE-2025-38541}
    - raid10: cleanup memleak at raid10_make_request (Nigel Croxon) [Orabug: 38254103] {CVE-2025-38444}
    - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [Orabug: 38254107]     {CVE-2025-38445}
    - drm/tegra: nvdec: Fix dma_alloc_coherent error check (Mikko Perttunen) [Orabug: 38324294]     {CVE-2025-38543}
    - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [Orabug:
    38324159] {CVE-2025-38513}
    - clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data (Xiaolei Wang) [Orabug: 38254112]     {CVE-2025-38446}
    - lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users() (Harry Yoo) [Orabug: 38324192]     {CVE-2025-38517}
    - usb: gadget: u_serial: Fix race condition in TTY wakeup (Kuen-Han Tsai) [Orabug: 38254116]     {CVE-2025-38448}
    - drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [Orabug: 38324178]     {CVE-2025-38515}
    - drm/gem: Acquire references on GEM handles for framebuffers (Thomas Zimmermann) [Orabug: 38254122]     {CVE-2025-38449}
    - drm/amdkfd: Don't call mmput from MMU notifier callback (Philip Yang) [Orabug: 38324196]     {CVE-2025-38520}
    - drm/imagination: Fix kernel crash when hard resetting the GPU (Alessio Belle) [Orabug: 38324199]     {CVE-2025-38521}
    - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload() (Deren Wu)     [Orabug: 38254130] {CVE-2025-38450}
    - wifi: mwifiex: discard erroneous disassoc frames on STA interface (Vitor Soares) [Orabug: 38324132]     {CVE-2025-38505}
    - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [Orabug: 38324151] {CVE-2025-38512}
    - pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Bartosz Golaszewski) [Orabug: 38324184]     {CVE-2025-38516}
    - net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe() (Haoxiang Li) [Orabug: 38254133]     {CVE-2025-38452}
    - ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Thorsten Blum) [Orabug:
    38254137] {CVE-2025-38454}
    - KVM: Allow CPU to reschedule while setting per-page memory attributes (Liam Merwick) [Orabug: 38324134]     {CVE-2025-38506}
    - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (Sean Christopherson)     [Orabug: 38254139] {CVE-2025-38455}
    - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Dan Carpenter) [Orabug:
    38254142] {CVE-2025-38456}
    - rxrpc: Fix oops due to non-existence of prealloc backlog struct (David Howells) [Orabug: 38324168]     {CVE-2025-38514}
    - rxrpc: Fix bug due to prealloc collision (David Howells) [Orabug: 38324296] {CVE-2025-38544}
    - net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [Orabug: 38254145]     {CVE-2025-38457}
    - net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info (Chintan Vankar)     [Orabug: 38324304] {CVE-2025-38545}
    - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [Orabug: 38254151]     {CVE-2025-38458}
    - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [Orabug: 38254159]     {CVE-2025-38459}
    - atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [Orabug: 38324307] {CVE-2025-38546}
    - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [Orabug: 38254165]     {CVE-2025-38460}
    - vsock: Fix transport_* TOCTOU (Michal Luczaj) [Orabug: 38254171] {CVE-2025-38461}
    - vsock: Fix transport_{g2h,h2g} TOCTOU (Michal Luczaj) [Orabug: 38254174] {CVE-2025-38462}
    - tcp: Correct signedness in skb remaining space calculation (Jiayuan Chen) [Orabug: 38254177]     {CVE-2025-38463}
    - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [Orabug: 38254179] {CVE-2025-38464}
    - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima) [Orabug: 38254186] {CVE-2025-38465}
    - perf: Revert to requiring CAP_SYS_ADMIN for uprobes (Peter Zijlstra) [Orabug: 38254195] {CVE-2025-38466}
    - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV     (Srinivasan Shanmugam) [Orabug: 37855415] {CVE-2025-38104}
    - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling (Kaustabh Chakraborty) [Orabug:
    38254201] {CVE-2025-38467}
    - eventpoll: don't decrement ep refcount while still holding the ep mutex (Linus Torvalds) [Orabug:
    38209551] {CVE-2025-38349}
    - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov) [Orabug: 38023239,38129827]     {CVE-2024-36350,CVE-2024-36357}
    - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov) [Orabug: 38023239,38129827]     {CVE-2024-36350,CVE-2024-36357}
    - mm: userfaultfd: fix race of userfaultfd_move and swap cache (Kairui Song) [Orabug: 38175034]     {CVE-2025-38242}
    - mm/vmalloc: fix data race in show_numa_info() (Jeongjun Park) [Orabug: 38253860] {CVE-2025-38383}
    - usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38254393] {CVE-2025-38404}
    - riscv: cpu_ops_sbi: Use static array for boot_data (Vivian Wang) [Orabug: 38253953] {CVE-2025-38407}
    - optee: ffa: fix sleep in atomic context (Jens Wiklander) [Orabug: 38253830] {CVE-2025-38374}
    - i2c/designware: Fix an initialization issue (Michael J. Ruhl) [Orabug: 38253849] {CVE-2025-38380}
    - usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume (Xu Yang) [Orabug: 38253838]     {CVE-2025-38376}
    - IB/mlx5: Fix potential deadlock in MR deregistration (Or Har-Toov) [Orabug: 38253826] {CVE-2025-38373}
    - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Shivank Garg) [Orabug: 38253909]     {CVE-2025-38396}
    - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [Orabug: 38253862]     {CVE-2025-38384}
    - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253873]     {CVE-2025-38386}
    - wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253944] {CVE-2025-38406}
    - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (Maurizio Lombardi)     [Orabug: 38253913] {CVE-2025-38399}
    - genirq/irq_sim: Initialize work context pointers properly (Gyeyoung Baek) [Orabug: 38253955]     {CVE-2025-38408}
    - drm/msm: Fix another leak in the submit error path (Rob Clark) [Orabug: 38253959] {CVE-2025-38409}
    - drm/msm: Fix a fence leak in submit error path (Rob Clark) [Orabug: 38253966] {CVE-2025-38410}
    - drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (Nicholas Kazlauskas) [Orabug: 38253787]     {CVE-2025-38360}
    - drm/xe/guc: Explicitly exit CT safe mode on unwind (Michal Wajdeczko) [Orabug: 38253775]     {CVE-2025-38356}
    - netfs: Fix oops in write-retry from mis-resetting the subreq iterator (David Howells) [Orabug: 38153033]     {CVE-2025-38139}
    - bpf: Do not include stack ptr register in precision backtracking bookkeeping (Yonghong Song) [Orabug:
    38180467] {CVE-2025-38279}
    - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Justin Tee) [Orabug: 38180503]     {CVE-2025-38289}
    - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [Orabug: 38217337]     {CVE-2025-38350}
    - rose: fix dangling neighbour pointers in rose_rt_device_down() (Kohei Enju) [Orabug: 38253840]     {CVE-2025-38377}
    - idpf: convert control queue mutex to a spinlock (Ahmed Zaki) [Orabug: 38253897] {CVE-2025-38392}
    - idpf: return 0 size for RSS key if not supported (Michal Swiatkowski) [Orabug: 38253932]     {CVE-2025-38402}
    - drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253885]     {CVE-2025-38389}
    - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect (Oleksij Rempel) [Orabug: 38253870]     {CVE-2025-38385}
    - smb: client: fix warning when reconnecting channel (Paulo Alcantara) [Orabug: 38254386] {CVE-2025-38379}
    - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (Kurt Borja) [Orabug:
    38253975] {CVE-2025-38412}
    - nvmet: fix memory leak of bio integrity (Dmitry Bogdanov) [Orabug: 38253942] {CVE-2025-38405}
    - btrfs: fix invalid inode pointer dereferences during log replay (Filipe Manana) [Orabug: 38288149]     {CVE-2025-38243}
    - btrfs: fix iteration of extrefs during log replay (Filipe Manana) [Orabug: 38253858] {CVE-2025-38382}
    - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [Orabug: 38253899]     {CVE-2025-38393}
    - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug:
    38253921] {CVE-2025-38400}
    - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253879]     {CVE-2025-38387}
    - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Or Har-Toov) [Orabug: 38253824]     {CVE-2025-38372}
    - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context (Sudeep Holla) [Orabug:
    38253883] {CVE-2025-38388}
    - firmware: arm_ffa: Fix memory leak by freeing notifier callback node (Sudeep Holla) [Orabug: 38253890]     {CVE-2025-38390}
    - drm/v3d: Disable interrupts before resetting the GPU (Maira Canal) [Orabug: 38253819] {CVE-2025-38371}
    - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu) [Orabug: 38253926]     {CVE-2025-38401}
    - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253892]     {CVE-2025-38391}
    - Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() (Yunshui) [Orabug:
    38253852] {CVE-2025-38381}
    - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug:
    38253905] {CVE-2025-38395}
    - vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug:
    38253935] {CVE-2025-38403}
    - virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [Orabug:
    38253832] {CVE-2025-38375}
    - virtio-net: xsk: rx: fix the frame's length check (Bui Quang Minh) [Orabug: 38253978] {CVE-2025-38413}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
259975	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38549	Nessus	Misc.	2025/8/31	2025/9/3	medium
259975	Linux Distros 未修补的漏洞：CVE-2025-38549	Nessus	Misc.	2025/8/31	2025/9/3	medium
259975	Linux Distros 未修補的弱點：CVE-2025-38549	Nessus	Misc.	2025/8/31	2025/9/3	medium
259975	Linux Distros Unpatched Vulnerability : CVE-2025-38549	Nessus	Misc.	2025/8/31	2025/9/3	medium
261833	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20551)	Nessus	Oracle Linux Local Security Checks	2025/9/9	2025/9/10	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium