Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ipv6修复 fib6_info_uses_dev() 中可能的无限循环 fib6_info_uses_dev() 似乎依赖于不受显式保护的 RCU。与之前在 rt6_nlmsg_size() 中的补丁一样需要确保 fib6_del_route() 或 fib6_add_rt2node() 尚未从列表中删除定位标记否则存在无限循环的风险。
    (CVE-2025-38587)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1169 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Avoid race in open_cached_dir with lease breaks (CVE-2025-37954)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (CVE-2025-38162)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix double free in delayed_free (CVE-2025-38206)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Restrict conditions for adding duplicating netems to qdisc tree (CVE-2025-38553)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: reject malicious packets in ipv6_gso_segment() (CVE-2025-38572)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fix possible infinite loop in fib6_info_uses_dev() (CVE-2025-38587)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: prevent infinite loop in rt6_nlmsg_size() (CVE-2025-38588)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - ipv6fib6_info_uses_dev() の潜在的な無限ループを修正します。fib6_info_uses_dev() は明確な保護なしで RCU に依存しているようです。rt6_nlmsg_size() の以前の修正と同様に、fib6_del_route() または fib6_add_rt2node() がリストからアンカーを削除していないことを確認する必要があります。そうしないと、無限ループに陥る可能性があります。
    (CVE-2025-38587)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - ipv6修正 fib6_info_uses_dev() 中可能發生的無限迴圈。fib6_info_uses_dev() 似乎要仰賴沒有明確保護的 RCU。如同 rt6_nlmsg_size() 中先前的修正我們必須確認 fib6_del_route() 或 fib6_add_rt2node() 尚未從清單中移除錨點否則我們將面臨進入無限迴圈的風險。
    (CVE-2025-38587)

請注意，Nessus 依賴供應商報告的套件存在。

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv6: fix possible infinite loop in fib6_info_uses_dev() fib6_info_uses_dev() seems to rely on RCU without     an explicit protection. Like the prior fix in rt6_nlmsg_size(), we need to make sure fib6_del_route() or     fib6_add_rt2node() have not removed the anchor from the list, or we risk an infinite loop.
    (CVE-2025-38587)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
260083	Linux Distros 未修补的漏洞：CVE-2025-38587	Nessus	Misc.	2025/8/31	2025/9/7	medium
261737	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1169)	Nessus	Amazon Linux Local Security Checks	2025/9/8	2025/9/8	high
260083	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38587	Nessus	Misc.	2025/8/31	2025/9/7	medium
260083	Linux Distros 未修補的弱點：CVE-2025-38587	Nessus	Misc.	2025/8/31	2025/9/7	medium
261144	Photon OS 5.0: Linux PHSA-2025-5.0-0610	Nessus	PhotonOS Local Security Checks	2025/9/3	2025/9/3	high
260083	Linux Distros Unpatched Vulnerability : CVE-2025-38587	Nessus	Misc.	2025/8/31	2025/9/7	medium

偵測

搜尋 Plugin

medium

high

medium

medium

high

medium