Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - f2fsインライン inode のサニティーチェックを行うための修正。Yanming 氏は、Bugzilla カーネル [1] のカーネルバグを報告しました。これは、再現性があります。バグメッセージは以下のとおりです。カーネルメッセージは以下に表示されますfs/inode.c:611! でカーネルバグCall Trace: evict+0x282/0x4e0 __dentry_kill+0x2b2/0x4d0 dput+0x2dd/0x720 do_renameat2+0x596/0x970
    __x64_sys_rename+0x78/0x90 do_syscall_64+0x3b/0x90 [1] https://bugzilla.kernel.org/show_bug.cgi?id=215895The バグは、inline_data と暗号化されたフラグの両方があるファジングされた inode が原因です。f2fs_evict_inode() の際、inode が rename() によって削除されたため、コンフリクトフラグによりインラインデータ変換が発生します。ページキャッシュが汚染され、clear_inode() でパニックが発生します。sanity_check_inode() のインラインデータ inode に対してより多くのサニティチェックを行うことで、バグの修正を試みます。CVE-2022-49361

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - f2fs修正以針對內嵌 inode 執行功能健全檢查 Yanming 在 Bugzilla 核心 [1] 中報告一個可以重現的核心錯誤。錯誤訊息如下核心訊息如下所示fs/inode.c:611! 的核心錯誤呼叫追踪evict+0x282/0x4e0 __dentry_kill+0x2b2/0x4d0 dput+0x2dd/0x720 do_renameat2+0x596/0x970
    __x64_sys_rename+0x78/0x90 do_syscall_64+0x3b/0x90 [1] https://bugzilla.kernel.org/show_bug.cgi?id=215895The 錯誤是因為模糊 inode 同時具有 inline_data 和encrypted 旗標所導致。在 f2fs_evict_inode() 執行期間rename() 會刪除 inode因此會因旗標衝突而造成內嵌資料轉換。頁面快取將遭到污染且在 clear_inode() 中觸發不穩定。嘗試針對 sanity_check_inode() 中的內嵌資料 inode 執行更多功能健全檢查以修正錯誤。 (CVE-2022-49361)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - f2fs修复以对内联 inode 进行健全性检查Yanming 报告 Bugzilla 内核 [1] 中有一个可以重现的内核缺陷。缺陷消息为内核消息如下所示： kernel BUG at fs/inode.c:611! 调用跟踪evict+0x282/0x4e0 __dentry_kill+0x2b2/0x4d0 dput+0x2dd/0x720 do_renameat2+0x596/0x970
    __x64_sys_rename+0x78/0x90 do_syscall_64+0x3b/0x90 [1] https://bugzilla.kernel.org/show_bug.cgi?id=215895The 由于模糊的 inode 同时具有 inline_data 和encrypted 标记而产生缺陷。在 f2fs_evict_inode() 期间由于 inode 已被 rename() 删除所以它将因标记冲突而造成内联数据转换。页面缓存将被污染并将在 clear_inode() 中触发错误。尝试通过对 sanity_check_inode() 中的内联数据 inode 进行更多健全性检查来修复该缺陷。 (CVE-2022-49361)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel [1], which     can be reproduced. The bug message is: The kernel message is shown below: kernel BUG at fs/inode.c:611!     Call Trace: evict+0x282/0x4e0 __dentry_kill+0x2b2/0x4d0 dput+0x2dd/0x720 do_renameat2+0x596/0x970
    __x64_sys_rename+0x78/0x90 do_syscall_64+0x3b/0x90 [1] https://bugzilla.kernel.org/show_bug.cgi?id=215895     The bug is due to fuzzed inode has both inline_data and encrypted flags. During f2fs_evict_inode(), as the     inode was deleted by rename(), it will cause inline data conversion due to conflicting flags. The page     cache will be polluted and the panic will be triggered in clear_inode(). Try fixing the bug by doing more     sanity checks for inline data inode in sanity_check_inode(). (CVE-2022-49361)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988712 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    f2fs: fix to do sanity check for inline inode

    Yanming reported a kernel bug in Bugzilla kernel [1], which can be     reproduced. The bug message is:

    The kernel message is shown below:

    kernel BUG at fs/inode.c:611!     Call Trace:
     evict+0x282/0x4e0
     __dentry_kill+0x2b2/0x4d0      dput+0x2dd/0x720      do_renameat2+0x596/0x970
     __x64_sys_rename+0x78/0x90      do_syscall_64+0x3b/0x90

    [1] https://bugzilla.kernel.org/show_bug.cgi?id=215895

    The bug is due to fuzzed inode has both inline_data and encrypted flags.
    During f2fs_evict_inode(), as the inode was deleted by rename(), it     will cause inline data conversion due to conflicting flags. The page     cache will be polluted and the panic will be triggered in clear_inode().

    Try fixing the bug by doing more sanity checks for inline data inode in     sanity_check_inode().

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989799 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    f2fs: fix to do sanity check for inline inode

    Yanming reported a kernel bug in Bugzilla kernel [1], which can be     reproduced. The bug message is:

    The kernel message is shown below:

    kernel BUG at fs/inode.c:611!     Call Trace:
     evict+0x282/0x4e0
     __dentry_kill+0x2b2/0x4d0      dput+0x2dd/0x720      do_renameat2+0x596/0x970
     __x64_sys_rename+0x78/0x90      do_syscall_64+0x3b/0x90

    [1] https://bugzilla.kernel.org/show_bug.cgi?id=215895

    The bug is due to fuzzed inode has both inline_data and encrypted flags.
    During f2fs_evict_inode(), as the inode was deleted by rename(), it     will cause inline data conversion due to conflicting flags. The page     cache will be polluted and the panic will be triggered in clear_inode().

    Try fixing the bug by doing more sanity checks for inline data inode in     sanity_check_inode().

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
225795	Linux Distros のパッチ未適用の脆弱性: CVE-2022-49361	Nessus	Misc.	2025/3/5	2025/10/28	medium
225795	Linux Distros 未修補的弱點：CVE-2022-49361	Nessus	Misc.	2025/3/5	2025/10/28	medium
225795	Linux Distros 未修补的漏洞：CVE-2022-49361	Nessus	Misc.	2025/3/5	2025/10/28	medium
225795	Linux Distros Unpatched Vulnerability : CVE-2022-49361	Nessus	Misc.	2025/3/5	2025/10/28	medium
273186	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988712)	Nessus	Unity Linux Local Security Checks	2025/11/5	2025/11/5	medium
272876	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989799)	Nessus	Unity Linux Local Security Checks	2025/11/5	2025/11/5	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium