Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：tracing: Fix use-after-free in print_graph_function_flags during tracer switching Kairui reported a UAF issue in print_graph_function_flags() during ftrace stress testing [1]. This issue can be reproduced if puting a 'mdelay(10)' after 'mutex_unlock(&trace_types_lock)' in s_start(), and executing the following script: $ echo function_graph > current_tracer $ cat trace > /dev/null & $ sleep 5 # Ensure the 'cat' reaches the 'mdelay(10)' point $ echo timerlat > current_tracer The root cause lies in the two calls to print_graph_function_flags within print_trace_line during each s_show(): * One through 'iter->trace->print_line()'; * Another through 'event->funcs->trace()', which is hidden in print_trace_fmt() before print_trace_line returns. Tracer switching only updates the former, while the latter continues to use the print_line function of the old tracer, which in the script above is print_graph_function_flags. Moreover, when switching from the 'function_graph' tracer to the 'timerlat' tracer, s_start only calls graph_trace_close of the 'function_graph' tracer to free 'iter->private', but does not set it to NULL. This provides an opportunity for 'event->funcs->trace()' to use an invalid 'iter->private'. To fix this issue, set 'iter->private' to NULL immediately after freeing it in graph_trace_close(), ensuring that an invalid pointer is not passed to other tracers. Additionally, clean up the unnecessary 'iter->private = NULL' during each 'cat trace' when using wakeup and irqsoff tracers.
    [1] https://lore.kernel.org/all/20231112150030.84609-1-ryncsn@gmail.com/ (CVE-2025-22035)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-22035

high Nessus 插件 ID 246469

版本 1.12

版本 1.11

版本 1.10

版本 1.9

版本 1.8

版本 1.7

版本 1.6

版本 1.1

版本 1.12 Nov 26, 2025, 1:15 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511261315
版本 1.11 Nov 21, 2025, 2:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511211412
版本 1.10 Nov 13, 2025, 4:18 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511131618
版本 1.9 Nov 7, 2025, 11:55 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511072355
版本 1.8 Nov 3, 2025, 9:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511032125
版本 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
版本 1.6 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510281756
版本 1.1 Aug 9, 2025, 7:26 AM New Plugin Feed: 202508090726