Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - f2fs修正以避免在 f2fs_new_node_page() 中使用 f2fs_bug_on()。如 Dipanjan Das <mail.dipanjan.das@gmail.com> 報告syzkaller 發現一個 f2fs 錯誤如下RIP: 0010:f2fs_new_node_page+0x19ac/0x1fc0 fs/f2fs/node.c:1295 呼叫追踪write_all_xattrs fs/f2fs/xattr.c:487 [內嵌] __f2fs_setxattr+0xe76/0x2e10 fs/f2fs/xattr.c:743 f2fs_setxattr+0x233/0xab0 fs/f2fs/xattr.c:790 f2fs_xattr_generic_set+0x12fs3/0xfs/ xattr.c:86 __vfs_setxattr+0x115/0x180 fs/xattr.c:182 __vfs_setxattr_noperm+0x125/0x5f0 fs/xattr.c:216 __vfs_setxattr_locked+0x1cf/0x260 fs/xattr.c:277 vfs_setxattr+/x13f/01cf/0xattr.c:277 vfs_setxattr+/x3f.x3 c:303 setxattr+0x146/0x160 fs/xattr.c:611 path_setxattr+0x1a7/0x1d0 fs/xattr.c:630 __do_sys_lsetxattr fs/xattr.c:653 [內嵌] __se_sys_lsetxattr fs/xattr.c:649 [內嵌] __x64_syslset攻擊者+0xbd/0x150 fs/xattr.c:649 do_syscall_x64 arch/x86/entry/common.c:50 [內嵌] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 NAT 項目 和nat 點陣圖可能不一致例如n 中有一個可用的 nid在點陣圖上且其 NAT 項目中的 blkaddr 不是 NULL_ADDR可能會觸發 f2fs_new_node_page() 中的 BUG_ON()將其修正。 (CVE-2022-50013)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - f2fs修复以避免在 f2fs_new_node_page() 中使用 f2fs_bug_on() 据 Dipanjan Das <mail.dipanjan.das@gmail.com> 报告syzkaller 发现一个 f2fs 缺陷如下RIP: 0010:f2fs_new_node_page+0x19ac/0x1fc0 fs/f2fs/node.c:1295 调用跟踪write_all_xattrs fs/f2fs/xattr.c:487 [内联] __f2fs_setxattr+0xe76/0x2e10 fs/f2fs/xattr.c:743 f2fs_setxattr+0x233/0xab0 fs/f2fs/xattr.c:790 f2fs_xattr_generic_set+0x12fs// xattr.c:86 __vfs_setxattr+0x115/0x180 fs/xattr.c:182 __vfs_setxattr_noperm+0x125/0x5f0 fs/xattr.c:216 __vfs_setxattr_locked+0x1cf/0x260 fs/xattr.c:277 vfs_setxattr/0x130 fs/xattr.x33 c:303 setxattr+0x146/0x160 fs/xattr.c:611 path_setxattr+0x1a7/0x1d0 fs/xattr.c:630 __do_sys_lsetxattr fs/xattr.c:653 [内联] __se_sys_lsetxattr fs/xattr.c:649 [内联] __x64_sys_lsetxattr +0xbd/0x150 fs/xattr.c:649 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 NAT 条目 和nat 位图可能不一致例如 n 中有一个 nid 空闲位于 bitmap 中并且其 NAT 条目中的 blkaddr 不是 NULL_ADDR则可能触发 f2fs_new_node_page() 中的 BUG_ON()请修复它。 (CVE-2022-50013)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - f2fsf2fs_new_node_page() での f2fs_bug_on() の使用を回避するための修正。 Dipanjan Das 氏 <mail.dipanjan.das@gmail.com> が報告したように、syzkaller は以下のように f2fs バグを見つけました RIP0010:f2fs_new_node_page+0x19ac/0x1fc0 fs/f2fs/node.c:1295 Call Trace write_all_xattrs fs/f2fs/xattr.c:487 [inline] __f2fs_setxattr+0xe76/0x2e10 fs/f2fs/xattr.c:743 f2fs_setxattr+0x233/0xab0 fs/f2fs/fxattr.c:790 f2fs_xattrx_generic_set+0x1306/0x1301 xattr.c:86 __vfs_setxattr+0x115/0x180 fs/xattr.c:182 __vfs_setxattr_noperm+0x125/0x5f0 fs/xattr.c:216 __vfs_setxattr_locked+0x1cf/0x260 fs/xattr.c:277 vfs_setxattr_noperm+0x125/0x5f0 fs/xattr.c:277 vfs_setxattr_noperm+0x3attr.c:182 c:303 setxattr+0x146/0x160 fs/xattr.c:611 path_setxattr+0x1a7/0x1d0 fs/xattr.c:630 __do_sys_lsetxattr fs/xattr.c:653 [インライン] __se_sys_lsetxattr fs/xattr.c:649 [インライン] __xl64xattr.c:649 [インライン] __xl64xattr_set +0xbd/0x150 fs/xattr.c:649 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 NAT エントリおよびnat ビットマップは一貫性のない可能性があります。たとえば、1 つの nid が n 個で解放されていますビットマップでの 、および NAT エントリの blkaddr は NULL_ADDR ではありません、f2fs_new_node_page() の BUG_ON() を発生させる可能性があります、これを修正します。CVE-2022-50013

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992417 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()

    As Dipanjan Das <mail.dipanjan.das@gmail.com> reported, syzkaller     found a f2fs bug as below:

    RIP: 0010:f2fs_new_node_page+0x19ac/0x1fc0 fs/f2fs/node.c:1295     Call Trace:
     write_all_xattrs fs/f2fs/xattr.c:487 [inline]
     __f2fs_setxattr+0xe76/0x2e10 fs/f2fs/xattr.c:743      f2fs_setxattr+0x233/0xab0 fs/f2fs/xattr.c:790      f2fs_xattr_generic_set+0x133/0x170 fs/f2fs/xattr.c:86
     __vfs_setxattr+0x115/0x180 fs/xattr.c:182
     __vfs_setxattr_noperm+0x125/0x5f0 fs/xattr.c:216
     __vfs_setxattr_locked+0x1cf/0x260 fs/xattr.c:277      vfs_setxattr+0x13f/0x330 fs/xattr.c:303      setxattr+0x146/0x160 fs/xattr.c:611      path_setxattr+0x1a7/0x1d0 fs/xattr.c:630
     __do_sys_lsetxattr fs/xattr.c:653 [inline]
     __se_sys_lsetxattr fs/xattr.c:649 [inline]
     __x64_sys_lsetxattr+0xbd/0x150 fs/xattr.c:649      do_syscall_x64 arch/x86/entry/common.c:50 [inline]      do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80      entry_SYSCALL_64_after_hwframe+0x46/0xb0

    NAT entry and nat bitmap can be inconsistent, e.g. one nid is free     in nat bitmap, and blkaddr in its NAT entry is not NULL_ADDR, it     may trigger BUG_ON() in f2fs_new_node_page(), fix it.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992900 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()

    As Dipanjan Das <mail.dipanjan.das@gmail.com> reported, syzkaller     found a f2fs bug as below:

    RIP: 0010:f2fs_new_node_page+0x19ac/0x1fc0 fs/f2fs/node.c:1295     Call Trace:
     write_all_xattrs fs/f2fs/xattr.c:487 [inline]
     __f2fs_setxattr+0xe76/0x2e10 fs/f2fs/xattr.c:743      f2fs_setxattr+0x233/0xab0 fs/f2fs/xattr.c:790      f2fs_xattr_generic_set+0x133/0x170 fs/f2fs/xattr.c:86
     __vfs_setxattr+0x115/0x180 fs/xattr.c:182
     __vfs_setxattr_noperm+0x125/0x5f0 fs/xattr.c:216
     __vfs_setxattr_locked+0x1cf/0x260 fs/xattr.c:277      vfs_setxattr+0x13f/0x330 fs/xattr.c:303      setxattr+0x146/0x160 fs/xattr.c:611      path_setxattr+0x1a7/0x1d0 fs/xattr.c:630
     __do_sys_lsetxattr fs/xattr.c:653 [inline]
     __se_sys_lsetxattr fs/xattr.c:649 [inline]
     __x64_sys_lsetxattr+0xbd/0x150 fs/xattr.c:649      do_syscall_x64 arch/x86/entry/common.c:50 [inline]      do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80      entry_SYSCALL_64_after_hwframe+0x46/0xb0

    NAT entry and nat bitmap can be inconsistent, e.g. one nid is free     in nat bitmap, and blkaddr in its NAT entry is not NULL_ADDR, it     may trigger BUG_ON() in f2fs_new_node_page(), fix it.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992447 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()

    As Dipanjan Das <mail.dipanjan.das@gmail.com> reported, syzkaller     found a f2fs bug as below:

    RIP: 0010:f2fs_new_node_page+0x19ac/0x1fc0 fs/f2fs/node.c:1295     Call Trace:
     write_all_xattrs fs/f2fs/xattr.c:487 [inline]
     __f2fs_setxattr+0xe76/0x2e10 fs/f2fs/xattr.c:743      f2fs_setxattr+0x233/0xab0 fs/f2fs/xattr.c:790      f2fs_xattr_generic_set+0x133/0x170 fs/f2fs/xattr.c:86
     __vfs_setxattr+0x115/0x180 fs/xattr.c:182
     __vfs_setxattr_noperm+0x125/0x5f0 fs/xattr.c:216
     __vfs_setxattr_locked+0x1cf/0x260 fs/xattr.c:277      vfs_setxattr+0x13f/0x330 fs/xattr.c:303      setxattr+0x146/0x160 fs/xattr.c:611      path_setxattr+0x1a7/0x1d0 fs/xattr.c:630
     __do_sys_lsetxattr fs/xattr.c:653 [inline]
     __se_sys_lsetxattr fs/xattr.c:649 [inline]
     __x64_sys_lsetxattr+0xbd/0x150 fs/xattr.c:649      do_syscall_x64 arch/x86/entry/common.c:50 [inline]      do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80      entry_SYSCALL_64_after_hwframe+0x46/0xb0

    NAT entry and nat bitmap can be inconsistent, e.g. one nid is free     in nat bitmap, and blkaddr in its NAT entry is not NULL_ADDR, it     may trigger BUG_ON() in f2fs_new_node_page(), fix it.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() As Dipanjan Das <mail.dipanjan.das@gmail.com>     reported, syzkaller found a f2fs bug as below: RIP: 0010:f2fs_new_node_page+0x19ac/0x1fc0     fs/f2fs/node.c:1295 Call Trace: write_all_xattrs fs/f2fs/xattr.c:487 [inline] __f2fs_setxattr+0xe76/0x2e10     fs/f2fs/xattr.c:743 f2fs_setxattr+0x233/0xab0 fs/f2fs/xattr.c:790 f2fs_xattr_generic_set+0x133/0x170     fs/f2fs/xattr.c:86 __vfs_setxattr+0x115/0x180 fs/xattr.c:182 __vfs_setxattr_noperm+0x125/0x5f0     fs/xattr.c:216 __vfs_setxattr_locked+0x1cf/0x260 fs/xattr.c:277 vfs_setxattr+0x13f/0x330 fs/xattr.c:303     setxattr+0x146/0x160 fs/xattr.c:611 path_setxattr+0x1a7/0x1d0 fs/xattr.c:630 __do_sys_lsetxattr     fs/xattr.c:653 [inline] __se_sys_lsetxattr fs/xattr.c:649 [inline] __x64_sys_lsetxattr+0xbd/0x150     fs/xattr.c:649 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0     arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 NAT entry and nat bitmap can be     inconsistent, e.g. one nid is free in nat bitmap, and blkaddr in its NAT entry is not NULL_ADDR, it may     trigger BUG_ON() in f2fs_new_node_page(), fix it. (CVE-2022-50013)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
246726	Linux Distros 未修補的弱點：CVE-2022-50013	Nessus	Misc.	2025/8/9	2026/11/3	medium
246726	Linux Distros 未修补的漏洞：CVE-2022-50013	Nessus	Misc.	2025/8/9	2026/11/3	medium
246726	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50013	Nessus	Misc.	2025/8/9	2026/11/3	medium
280651	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992417)	Nessus	Unity Linux Local Security Checks	2025/12/30	2025/12/30	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/11/2	high
281099	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992900)	Nessus	Unity Linux Local Security Checks	2025/12/31	2025/12/31	medium
280166	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992447)	Nessus	Unity Linux Local Security Checks	2025/12/30	2025/12/30	medium
246726	Linux Distros Unpatched Vulnerability : CVE-2022-50013	Nessus	Misc.	2025/8/9	2026/11/3	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

high

medium

medium

medium