Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - UMcpuinfo修正 CONFIG_CPUMASK_OFFSTACK 的警告。當選取 CONFIG_CPUMASK_OFFSTACK 和 CONFIG_DEBUG_PER_CPU_MAPS 時我們顯示 /proc/cpuinfo 時cpu_max_bits_warn() 會產生類似以下的運行時間警告。透過使用 nr_cpu_ids (運行時間限制) 而非 NR_CPUS 來重複 CPU 來修正此問題。 [ 3.052463] ------------[cut here ]------------ [ 3.059679] WARNING: CPU: 3 PID: 1 at include/linux/cpumask .h:108 show_cpuinfo+0x5e8/0x5f0 [ 3.070072] Modules linked in: efivarfs autofs4 [3.076257] CPU: 0 PID: 1 Comm: systemd Not tainted 5.19-rc5+ #1052 [ 3.099465] Stack : 9000000100157b08 9000000000f18530 9000000000cf846c 9000000100154000 [ 3.109127] 9000000100157a50 0000000000000000 9000000100157a58 9000000000ef7430 [ 3.118774] 90000001001578e8 0000000000000040 0000000000000020 ffffffffffffffff [ 3.128412] 0000000000aaaaaa 1ab25f00eec96a37 900000010021de80 900000000101c890 [3.138056] 0000000000000000 0000000000000000 0000000000000000 0000000000aaaaaa [ 3.147711] ffff8000339dc220 0000000000000001 0000000006ab4000 0000000000000000 [ 3.157364] 900000000101c998 0000000000000004 9000000000ef7430 0000000000000000 [ 3.167012] 0000000000000009 000000000000006c 0000000000000000 0000000000000000 [ 3.176641] 9000000000d3de08 9000000001639390 90000000002086d8 00007ffff0080286 [3.186260] 00000000000000b0 0000000000000004 0000000000000000 0000000000071c1c [ 3.195868] .. [ 3.199917] 呼叫追踪 [ 3.203941] [<90000000002086d8>] show_stack+0x38/0x14c [ 3.210666] [<9000000000cf846c>] dump_stack_lvl+0x60/0x88 [ 3.217625] [<900000000023d268>] __warn+0xd0/0x100 [ 3.223958] [<9000000000cf3c90>] warn_slowpath_fmt+0x7c/0xcc [ 3.231150] [<9000000000210220>] show_cpuinfo+0x5e8/0x5f0 [ 3.238080] [<90000000004f578c>] seq_read_iter+0x354/0x4b4 [ 3.245098] [<90000000004c2e90>] new_sync_read+0x17c/0x1c4 [ 3.252114] [<90000000004c5174>] vfs_read+0x138/0x1d0 [ 3.258694] [<90000000004c55f8>] ksys_read+0x70/0x100 [ 3.265265] [<9000000000cfde9c>] do_syscall+0x7c/0x94 [3.271820] [<9000000000202fe4>] handle_syscall+0xc4/ 0x160 [ 3.281824] ---[ end trace 8b484262b4b8c24c ]--- (CVE-2022-50296)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - UMcpuinfo修复 CONFIG_CPUMASK_OFFSTACK 的警告选择 CONFIG_CPUMASK_OFFSTACK 和 CONFIG_DEBUG_PER_CPU_MAPS 时cpu_max_bits_warn() 会在显示 /proc/cpuinfo 时生成类似如下的运行时警告。通过使用 nr_cpu_ids运行时限制而不是 NR_CPUS 来迭代 CPU可修复此问题。 [ 3.052463] ------------[ 在此处切换 ]------------ [ 3.059679] WARNINGCPU3PID1include/linux/cpumask .h:108 show_cpuinfo+0x5e8/0x5f0 [ 3.070072] Modules linked in: efivarfs autofs4 [3.076257] CPU: 0 PID: 1 Comm: systemd Not tainted 5.19-rc5+ #1052 [ 3.099465] Stack : 9000000100157b08 9000000000f18530 9000000000cf846c 9000000100154000 [ 3.109127] 9000000100157a50 0000000000000000 9000000100157a58 9000000000ef7430 [ 3.118774] 90000001001578e8 0000000000000040 0000000000000020 ffffffffffffffff [ 3.128412] 0000000000aaaaaa 1ab25f00eec96a37 900000010021de80 900000000101c890 [3.138056] 0000000000000000 0000000000000000 0000000000000000 0000000000aaaaaa [ 3.147711] ffff8000339dc220 0000000000000001 0000000006ab4000 0000000000000000 [ 3.157364] 900000000101c998 0000000000000004 9000000000ef7430 0000000000000000 [ 3.167012] 0000000000000009 000000000000006c 0000000000000000 0000000000000000 [ 3.176641] 9000000000d3de08 9000000001639390 90000000002086d8 00007ffff0080286 [3.186260] 00000000000000b0 0000000000000004 0000000000000000 0000000000071c1c [ 3.195868] .. 。[ 3.199917] 调用跟踪[ 3.203941] [<90000000002086d8>] show_stack+0x38/0x14c [ 3.210666] [<9000000000cf846c>] dump_stack_lvl+0x60/0x88 [ 3.217625] [<900000000023d268>] __warn+0xd0/0x100 [ 3.223958] [<9000000000cf3c90>] warn_slowpath_fmt+0x7c/0xcc [ 3.231150] [<9000000000210220>] show_cpuinfo+0x5e8/0x5f0 [ 3.238080] [<90000000004f578c>] seq_read_iter+0x354/0x4b4 [ 3.245098] [<90000000004c2e90>] new_sync_read+0x17c/0x1c4 [ 3.252114] [<90000000004c5174>] vfs_read+0x138/0x1d0 [ 3.258694] [<90000000004c55f8>] ksys_read+0x70/0x100 [ 3.265265] [<9000000000cfde9c>] do_syscall+0x7c/0x94 [3.271820] [<9000000000202fe4>] handle_syscall+0xc4/ 0x160 [ 3.281824] ---[ 结束跟踪 8b484262b4b8c24c ]--- (CVE-2022-50296)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - UMcpuinfoCONFIG_CPUMASK_OFFSTACK に対する警告を修正します CONFIG_CPUMASK_OFFSTACK および CONFIG_DEBUG_PER_CPU_MAPS が選択されると、cpu_max_bits_warn() は /proc/cpuinfo を示しながら、以下のようなランタイム警告を生成します。NR_CPUS の代わりに nr_cpu_idsランタイム制限を使用して CPU を反復することで、これを修正します。 [ 3.052463] ------------[ はここでここを編集します ]------------ [ 3.059679] 警告CPU3 PID1 at include/linux/cpumask 1 .h:108 show_cpuinfo+0x5e8/0x5f0 [ 3.070072] Modules linked in: efivarfs autofs4 [3.076257] CPU: 0 PID: 1 Comm: systemd Not tainted 5.19-rc5+ #1052 [ 3.099465] Stack : 9000000100157b08 9000000000f18530 9000000000cf846c 9000000100154000 [ 3.109127] 9000000100157a50 0000000000000000 9000000100157a58 9000000000ef7430 [ 3.118774] 90000001001578e8 0000000000000040 0000000000000020 ffffffffffffffff [ 3.128412] 0000000000aaaaaa 1ab25f00eec96a37 900000010021de80 900000000101c890 [3.138056] 0000000000000000 0000000000000000 0000000000000000 0000000000aaaaaa [ 3.147711] ffff8000339dc220 0000000000000001 0000000006ab4000 0000000000000000 [ 3.157364] 900000000101c998 0000000000000004 9000000000ef7430 0000000000000000 [ 3.167012] 0000000000000009 000000000000006c 0000000000000000 0000000000000000 [ 3.176641] 9000000000d3de08 9000000001639390 90000000002086d8 00007ffff0080286 [3.186260] 00000000000000b0 0000000000000004 0000000000000000 0000000000071c1c [ 3.195868] .. .[ 3.199917] Call Trace: [ 3.203941] [<90000000002086d8>] show_stack+0x38/0x14c [ 3.210666] [<9000000000cf846c>] dump_stack_lvl+0x60/0x88 [ 3.217625]、[<900000000023d268>] __warn+0xd0/0x100 [ 3.2239583.231150。<9000000000cf3c90><9000000000210220>​ 3.238080​<90000000004f578c>​ 3.245098​<90000000004c2e90>​ 3.252114]<90000000004c5174>] vfs_read+0x138/0x1d0 [ 3.258694] [<90000000004c55f8>] ksys_read+0x70/0x100 [ 3.265265、[<9000000000cfde9c>] do_syscall+0x7c/0x943.271820、<9000000000202fe4>handle_syscall+0xc4/ 0x160 [ 3.281824] ---[ 終了トレース 8b484262b4b8c24c ]---CVE-2022-50296]

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007358 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

    When CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS is selected,     cpu_max_bits_warn() generates a runtime warning similar as below while     we show /proc/cpuinfo. Fix this by using nr_cpu_ids (the runtime limit)     instead of NR_CPUS to iterate CPUs.

    [    3.052463] ------------[ cut here ]------------     [    3.059679] WARNING: CPU: 3 PID: 1 at include/linux/cpumask.h:108 show_cpuinfo+0x5e8/0x5f0     [    3.070072] Modules linked in: efivarfs autofs4     [    3.076257] CPU: 0 PID: 1 Comm: systemd Not tainted 5.19-rc5+ #1052     [    3.099465] Stack : 9000000100157b08 9000000000f18530 9000000000cf846c 9000000100154000     [    3.109127]         9000000100157a50 0000000000000000 9000000100157a58 9000000000ef7430     [    3.118774]         90000001001578e8 0000000000000040 0000000000000020 ffffffffffffffff     [    3.128412]         0000000000aaaaaa 1ab25f00eec96a37 900000010021de80 900000000101c890     [    3.138056]         0000000000000000 0000000000000000 0000000000000000 0000000000aaaaaa     [    3.147711]         ffff8000339dc220 0000000000000001 0000000006ab4000 0000000000000000     [    3.157364]         900000000101c998 0000000000000004 9000000000ef7430 0000000000000000     [    3.167012]         0000000000000009 000000000000006c 0000000000000000 0000000000000000     [    3.176641]         9000000000d3de08 9000000001639390 90000000002086d8 00007ffff0080286     [    3.186260]         00000000000000b0 0000000000000004 0000000000000000 0000000000071c1c     [    3.195868]         ...
    [    3.199917] Call Trace:
    [    3.203941] [<90000000002086d8>] show_stack+0x38/0x14c     [    3.210666] [<9000000000cf846c>] dump_stack_lvl+0x60/0x88     [    3.217625] [<900000000023d268>] __warn+0xd0/0x100     [    3.223958] [<9000000000cf3c90>] warn_slowpath_fmt+0x7c/0xcc     [    3.231150] [<9000000000210220>] show_cpuinfo+0x5e8/0x5f0     [    3.238080] [<90000000004f578c>] seq_read_iter+0x354/0x4b4     [    3.245098] [<90000000004c2e90>] new_sync_read+0x17c/0x1c4     [    3.252114] [<90000000004c5174>] vfs_read+0x138/0x1d0     [    3.258694] [<90000000004c55f8>] ksys_read+0x70/0x100     [    3.265265] [<9000000000cfde9c>] do_syscall+0x7c/0x94     [    3.271820] [<9000000000202fe4>] handle_syscall+0xc4/0x160     [    3.281824] ---[ end trace 8b484262b4b8c24c ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992269 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

    When CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS is selected,     cpu_max_bits_warn() generates a runtime warning similar as below while     we show /proc/cpuinfo. Fix this by using nr_cpu_ids (the runtime limit)     instead of NR_CPUS to iterate CPUs.

    [    3.052463] ------------[ cut here ]------------     [    3.059679] WARNING: CPU: 3 PID: 1 at include/linux/cpumask.h:108 show_cpuinfo+0x5e8/0x5f0     [    3.070072] Modules linked in: efivarfs autofs4     [    3.076257] CPU: 0 PID: 1 Comm: systemd Not tainted 5.19-rc5+ #1052     [    3.099465] Stack : 9000000100157b08 9000000000f18530 9000000000cf846c 9000000100154000     [    3.109127]         9000000100157a50 0000000000000000 9000000100157a58 9000000000ef7430     [    3.118774]         90000001001578e8 0000000000000040 0000000000000020 ffffffffffffffff     [    3.128412]         0000000000aaaaaa 1ab25f00eec96a37 900000010021de80 900000000101c890     [    3.138056]         0000000000000000 0000000000000000 0000000000000000 0000000000aaaaaa     [    3.147711]         ffff8000339dc220 0000000000000001 0000000006ab4000 0000000000000000     [    3.157364]         900000000101c998 0000000000000004 9000000000ef7430 0000000000000000     [    3.167012]         0000000000000009 000000000000006c 0000000000000000 0000000000000000     [    3.176641]         9000000000d3de08 9000000001639390 90000000002086d8 00007ffff0080286     [    3.186260]         00000000000000b0 0000000000000004 0000000000000000 0000000000071c1c     [    3.195868]         ...
    [    3.199917] Call Trace:
    [    3.203941] [<90000000002086d8>] show_stack+0x38/0x14c     [    3.210666] [<9000000000cf846c>] dump_stack_lvl+0x60/0x88     [    3.217625] [<900000000023d268>] __warn+0xd0/0x100     [    3.223958] [<9000000000cf3c90>] warn_slowpath_fmt+0x7c/0xcc     [    3.231150] [<9000000000210220>] show_cpuinfo+0x5e8/0x5f0     [    3.238080] [<90000000004f578c>] seq_read_iter+0x354/0x4b4     [    3.245098] [<90000000004c2e90>] new_sync_read+0x17c/0x1c4     [    3.252114] [<90000000004c5174>] vfs_read+0x138/0x1d0     [    3.258694] [<90000000004c55f8>] ksys_read+0x70/0x100     [    3.265265] [<9000000000cfde9c>] do_syscall+0x7c/0x94     [    3.271820] [<9000000000202fe4>] handle_syscall+0xc4/0x160     [    3.281824] ---[ end trace 8b484262b4b8c24c ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK When CONFIG_CPUMASK_OFFSTACK and     CONFIG_DEBUG_PER_CPU_MAPS is selected, cpu_max_bits_warn() generates a runtime warning similar as below     while we show /proc/cpuinfo. Fix this by using nr_cpu_ids (the runtime limit) instead of NR_CPUS to     iterate CPUs. [ 3.052463] ------------[ cut here ]------------ [ 3.059679] WARNING: CPU: 3 PID: 1 at     include/linux/cpumask.h:108 show_cpuinfo+0x5e8/0x5f0 [ 3.070072] Modules linked in: efivarfs autofs4 [     3.076257] CPU: 0 PID: 1 Comm: systemd Not tainted 5.19-rc5+ #1052 [ 3.099465] Stack : 9000000100157b08     9000000000f18530 9000000000cf846c 9000000100154000 [ 3.109127] 9000000100157a50 0000000000000000     9000000100157a58 9000000000ef7430 [ 3.118774] 90000001001578e8 0000000000000040 0000000000000020     ffffffffffffffff [ 3.128412] 0000000000aaaaaa 1ab25f00eec96a37 900000010021de80 900000000101c890 [     3.138056] 0000000000000000 0000000000000000 0000000000000000 0000000000aaaaaa [ 3.147711] ffff8000339dc220     0000000000000001 0000000006ab4000 0000000000000000 [ 3.157364] 900000000101c998 0000000000000004     9000000000ef7430 0000000000000000 [ 3.167012] 0000000000000009 000000000000006c 0000000000000000     0000000000000000 [ 3.176641] 9000000000d3de08 9000000001639390 90000000002086d8 00007ffff0080286 [     3.186260] 00000000000000b0 0000000000000004 0000000000000000 0000000000071c1c [ 3.195868] ... [ 3.199917]     Call Trace: [ 3.203941] [<90000000002086d8>] show_stack+0x38/0x14c [ 3.210666] [<9000000000cf846c>]     dump_stack_lvl+0x60/0x88 [ 3.217625] [<900000000023d268>] __warn+0xd0/0x100 [ 3.223958]     [<9000000000cf3c90>] warn_slowpath_fmt+0x7c/0xcc [ 3.231150] [<9000000000210220>] show_cpuinfo+0x5e8/0x5f0     [ 3.238080] [<90000000004f578c>] seq_read_iter+0x354/0x4b4 [ 3.245098] [<90000000004c2e90>]     new_sync_read+0x17c/0x1c4 [ 3.252114] [<90000000004c5174>] vfs_read+0x138/0x1d0 [ 3.258694]     [<90000000004c55f8>] ksys_read+0x70/0x100 [ 3.265265] [<9000000000cfde9c>] do_syscall+0x7c/0x94 [     3.271820] [<9000000000202fe4>] handle_syscall+0xc4/0x160 [ 3.281824] ---[ end trace 8b484262b4b8c24c ]---     (CVE-2022-50296)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993129 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

    When CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS is selected,     cpu_max_bits_warn() generates a runtime warning similar as below while     we show /proc/cpuinfo. Fix this by using nr_cpu_ids (the runtime limit)     instead of NR_CPUS to iterate CPUs.

    [    3.052463] ------------[ cut here ]------------     [    3.059679] WARNING: CPU: 3 PID: 1 at include/linux/cpumask.h:108 show_cpuinfo+0x5e8/0x5f0     [    3.070072] Modules linked in: efivarfs autofs4     [    3.076257] CPU: 0 PID: 1 Comm: systemd Not tainted 5.19-rc5+ #1052     [    3.099465] Stack : 9000000100157b08 9000000000f18530 9000000000cf846c 9000000100154000     [    3.109127]         9000000100157a50 0000000000000000 9000000100157a58 9000000000ef7430     [    3.118774]         90000001001578e8 0000000000000040 0000000000000020 ffffffffffffffff     [    3.128412]         0000000000aaaaaa 1ab25f00eec96a37 900000010021de80 900000000101c890     [    3.138056]         0000000000000000 0000000000000000 0000000000000000 0000000000aaaaaa     [    3.147711]         ffff8000339dc220 0000000000000001 0000000006ab4000 0000000000000000     [    3.157364]         900000000101c998 0000000000000004 9000000000ef7430 0000000000000000     [    3.167012]         0000000000000009 000000000000006c 0000000000000000 0000000000000000     [    3.176641]         9000000000d3de08 9000000001639390 90000000002086d8 00007ffff0080286     [    3.186260]         00000000000000b0 0000000000000004 0000000000000000 0000000000071c1c     [    3.195868]         ...
    [    3.199917] Call Trace:
    [    3.203941] [<90000000002086d8>] show_stack+0x38/0x14c     [    3.210666] [<9000000000cf846c>] dump_stack_lvl+0x60/0x88     [    3.217625] [<900000000023d268>] __warn+0xd0/0x100     [    3.223958] [<9000000000cf3c90>] warn_slowpath_fmt+0x7c/0xcc     [    3.231150] [<9000000000210220>] show_cpuinfo+0x5e8/0x5f0     [    3.238080] [<90000000004f578c>] seq_read_iter+0x354/0x4b4     [    3.245098] [<90000000004c2e90>] new_sync_read+0x17c/0x1c4     [    3.252114] [<90000000004c5174>] vfs_read+0x138/0x1d0     [    3.258694] [<90000000004c55f8>] ksys_read+0x70/0x100     [    3.265265] [<9000000000cfde9c>] do_syscall+0x7c/0x94     [    3.271820] [<9000000000202fe4>] handle_syscall+0xc4/0x160     [    3.281824] ---[ end trace 8b484262b4b8c24c ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
265243	Linux Distros 未修補的弱點：CVE-2022-50296	Nessus	Misc.	2025/9/17	2026/7/17	medium
265243	Linux Distros 未修补的漏洞：CVE-2022-50296	Nessus	Misc.	2025/9/17	2026/7/17	medium
265243	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50296	Nessus	Misc.	2025/9/17	2026/7/17	medium
307318	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007358)	Nessus	Unity Linux Local Security Checks	2026/4/17	2026/4/21	medium
280458	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992269)	Nessus	Unity Linux Local Security Checks	2025/12/30	2025/12/30	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/3/23	high
265243	Linux Distros Unpatched Vulnerability : CVE-2022-50296	Nessus	Misc.	2025/9/17	2026/7/17	medium
281182	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993129)	Nessus	Unity Linux Local Security Checks	2025/12/31	2025/12/31	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

high

medium

medium