Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - mediavidtv修复 vidtv_bridge_dvb_init() 中的释放后使用 KASAN 报告释放后使用BUGKASAN
    dvb_dmxdev_release+0x4d5/0x5d0 中的释放后使用 [dvb_core] 调用跟踪... dvb_dmxdev_release+0x4d5/0x5d0 [dvb_core] vidtv_bridge_probe+0x7bf/0xa40 [dvb_vidtv_bridge] platform_probe+0xb6/0x170 ... 按任务 1238 分配... dvb_register_device+0x1a7/0xa70 [dvb_core] dvb_dmxdev_init+0x2af/0x4a0 [dvb_core] vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge] ... 由任务 1238释放dvb_register_device+0x6d2/0xa70 [dvb_core] dvb_dmxdev_init+0x2af/0x4a0 [dvb_core] vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge] ... 这是因为 vidtv_bridge_dvb_init() 中的错误处理不正确。首先vidtv_bridge_dmx(dev)_init() 将在失败时清除自身但前往 fail_dmx(_dev): 再次调用释放函数这会造成释放后使用。此外在 fail_fe、fail_tuner_probe 和 fail_demod_probe 中当 i 完成其循环时 (i == NUM_FE)j = i 将造成越界。尽管 NUM_FE 现在为 1循环释放是错误的因此不会造成问题。通过正确释放所有内容修复此问题。 (CVE-2022-50725)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - mediavidtv修正 vidtv_bridge_dvb_init() 中的釋放後使用 KASAN 報告釋放後使用錯誤 KASAN
    dvb_dmxdev_release+0x4d5/0x5d0 中的釋放後使用 [dvb_core] 呼叫追踪... dvb_dmxdev_release+0x4d5/0x5d0 [dvb_core] vidtv_bridge_probe+0x7bf/0xa40 [dvb_vidtv_bridge] platform_probe+0xb6/0x170 ... 由工作 1238 分配... dvb_register_device+0x1a7/0xa70 [dvb_core] dvb_dmxdev_init+0x2af/0x4a0 [dvb_core] vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge] ... 已由工作 1238 釋放dvb_register_device+0x6d2/0xa70 [dvb_core] dvb_dmxdev_init+0x2af/0x4a0 [dvb_core] vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge] ... 這是因為 vidtv_bridge_dvb_init() 中的錯誤處理有誤。首先vidtv_bridge_dmx(dev)_init() 會在失敗時自行清理但 goto fail_dmx(_dev): 會再次呼叫釋放函式造成釋放後使用。此外在 fail_fe、fail_tuner_probe 和 fail_demod_probe 中j = i 會在 i 完成其迴圈時造成超出邊界 (i == NUM_FE)。且迴圈釋放發生錯誤不過現在 NUM_FE 為 1因此不會造成問題。透過正確釋放所有項目來修正此問題。 (CVE-2022-50725)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - mediavidtvvidtv_bridge_dvb_init() の use-after-free を修正します KASAN が use-after-free を報告しますバグ KASAN
    dvb_dmxdev_release+0x4d5/0x5d0 の use-after-free [dvb_core] Call Trace... dvb_dmxdev_release+0x4d5/0x5d0 [dvb_core] vidtv_bridge_probe+0x7bf/0xa40 [dvb_vidtv_bridge] platform_probe+0xb6/0x170 ... タスク 1238 により割り当てられています... dvb_register_device+0x1a7/0xa70 [dvb_core] dvb_dmxdev_init+0x2af/0x4a0 [dvb_core] vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge] ... タスク 1238 により解放されました dvb_register_device+0x6d2/0xa70 [dvb_core] dvb_dmxdev_init+0x2af/0x4a0 [dvb_core] vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge] ... これは、vidtv_bridge_dvb_init() のエラー処理が間違っているためです。まず、vidtv_bridge_dmx(dev)_init() は、失敗時に自身をクリーンアップしますが、goto fail_dmx(_dev) は再度リリース関数を呼び出し、use-after-free を引き起こします。また、fail_fe、fail_tuner_probe、fail_demod_probe では、j = i は、i がそのループを終了する際に領域外を引き起こしますi == NUM_FE。また、ループリリースは間違っていますが、現時点では NUM_FE は 1 であるため、問題は発生しません。すべてを適切にリリースすることで、これを修正します。CVE-2022-50725

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011309 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()

    KASAN reports a use-after-free:
    BUG: KASAN: use-after-free in dvb_dmxdev_release+0x4d5/0x5d0 [dvb_core]     Call Trace:
     ...
     dvb_dmxdev_release+0x4d5/0x5d0 [dvb_core]      vidtv_bridge_probe+0x7bf/0xa40 [dvb_vidtv_bridge]      platform_probe+0xb6/0x170      ...
    Allocated by task 1238:
     ...
     dvb_register_device+0x1a7/0xa70 [dvb_core]      dvb_dmxdev_init+0x2af/0x4a0 [dvb_core]      vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge]      ...
    Freed by task 1238:
     dvb_register_device+0x6d2/0xa70 [dvb_core]      dvb_dmxdev_init+0x2af/0x4a0 [dvb_core]      vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge]      ...

    It is because the error handling in vidtv_bridge_dvb_init() is wrong.

    First, vidtv_bridge_dmx(dev)_init() will clean themselves when fail, but     goto fail_dmx(_dev): calls release functions again, which causes     use-after-free.

    Also, in fail_fe, fail_tuner_probe and fail_demod_probe, j = i will cause     out-of-bound when i finished its loop (i == NUM_FE). And the loop     releasing is wrong, although now NUM_FE is 1 so it won't cause problem.

    Fix this by correctly releasing everything.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() KASAN reports a use-after-free: BUG: KASAN:
    use-after-free in dvb_dmxdev_release+0x4d5/0x5d0 [dvb_core] Call Trace: ... dvb_dmxdev_release+0x4d5/0x5d0     [dvb_core] vidtv_bridge_probe+0x7bf/0xa40 [dvb_vidtv_bridge] platform_probe+0xb6/0x170 ... Allocated by     task 1238: ... dvb_register_device+0x1a7/0xa70 [dvb_core] dvb_dmxdev_init+0x2af/0x4a0 [dvb_core]     vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge] ... Freed by task 1238: dvb_register_device+0x6d2/0xa70     [dvb_core] dvb_dmxdev_init+0x2af/0x4a0 [dvb_core] vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge] ... It     is because the error handling in vidtv_bridge_dvb_init() is wrong. First, vidtv_bridge_dmx(dev)_init()     will clean themselves when fail, but goto fail_dmx(_dev): calls release functions again, which causes use-     after-free. Also, in fail_fe, fail_tuner_probe and fail_demod_probe, j = i will cause out-of-bound when i     finished its loop (i == NUM_FE). And the loop releasing is wrong, although now NUM_FE is 1 so it won't     cause problem. Fix this by correctly releasing everything. (CVE-2022-50725)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013588 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()

    KASAN reports a use-after-free:
    BUG: KASAN: use-after-free in dvb_dmxdev_release+0x4d5/0x5d0 [dvb_core]     Call Trace:
     ...
     dvb_dmxdev_release+0x4d5/0x5d0 [dvb_core]      vidtv_bridge_probe+0x7bf/0xa40 [dvb_vidtv_bridge]      platform_probe+0xb6/0x170      ...
    Allocated by task 1238:
     ...
     dvb_register_device+0x1a7/0xa70 [dvb_core]      dvb_dmxdev_init+0x2af/0x4a0 [dvb_core]      vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge]      ...
    Freed by task 1238:
     dvb_register_device+0x6d2/0xa70 [dvb_core]      dvb_dmxdev_init+0x2af/0x4a0 [dvb_core]      vidtv_bridge_probe+0x766/0xa40 [dvb_vidtv_bridge]      ...

    It is because the error handling in vidtv_bridge_dvb_init() is wrong.

    First, vidtv_bridge_dmx(dev)_init() will clean themselves when fail, but     goto fail_dmx(_dev): calls release functions again, which causes     use-after-free.

    Also, in fail_fe, fail_tuner_probe and fail_demod_probe, j = i will cause     out-of-bound when i finished its loop (i == NUM_FE). And the loop     releasing is wrong, although now NUM_FE is 1 so it won't cause problem.

    Fix this by correctly releasing everything.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
280016	Linux Distros 未修补的漏洞：CVE-2022-50725	Nessus	Misc.	2025/12/26	2026/9/30	high
280016	Linux Distros 未修補的弱點：CVE-2022-50725	Nessus	Misc.	2025/12/26	2026/9/30	high
280016	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50725	Nessus	Misc.	2025/12/26	2026/9/30	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/11/2	high
308826	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011309)	Nessus	Unity Linux Local Security Checks	2026/4/21	2026/4/21	critical
280016	Linux Distros Unpatched Vulnerability : CVE-2022-50725	Nessus	Misc.	2025/12/26	2026/9/30	high
309426	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013588)	Nessus	Unity Linux Local Security Checks	2026/4/22	2026/4/26	critical

偵測

搜尋 Plugin

high

high

high

high

critical

high

critical