Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - cryptoccp - 修复为 ccp.ko 重新绑定 ccp 设备时发生的崩溃启用 CONFIG_CRYPTO_DEV_CCP_DEBUGFS 时重新绑定 ccp 设备会导致以下崩溃$ echo '0000:0a:00.2' > /sys/bus/pci/drivers/ccp/ unbind $ echo '0000:0a:00.2' > /sys/bus/pci/drivers/ccp/bind [ 204.976930] 缺陷
    内核空指针取消引用地址0000000000000098 [ 204.978026] #PF内核模式下的主管写入访问 [ 204.979126] #PFerror_code(0x0002) - 不存在页面 [ 204.980226] PGD 0 P4D 0 [204.981317] Oops Oops: 0002 [#1] SMP NOPTI ... [ 204.997852] 调用跟踪[ 204.999074] <TASK> [205.000297] start_creating+0x9f/0x1c0 [ 205.001533] debugfs_create_dir+0x1f/0x170 [ 205.002769] ? srso_return_thunk+0x5/0x5f [ 205.004000] ccp5_debugfs_setup+0x87/0x170 [ccp] [ 205.005241] ccp5_init+0x8b2/0x960 [ccp] [ 205.006469] ccp_dev_init+0xd4/0x150 [ccp] [ 205.007709] sp_init+0x5f/0x80 [ccp] [ 205.008942] sp_pci_probe+0x283/0x2e0 [ccp] [ 205.010165] ? srso_return_thunk+0x5/0x5f [205.011376] local_pci_probe+0x4f/0xb0 [ 205.012584] pci_device_probe+0xdb/0x230 [ 205.013810] real_probe+0xed/0x380 [ 205.015024] __driver_probe_device+0x7e/0x160 [ 205.016240] device_driver_attach+0x2f/0x60 [ 205.017457] bind_store+0x7c/0xb0 [ 205.018663] drv_attr_store+0x28/0x40 [205.019868] sysfs_kf_write+0x5f/0x70 [ 205.021065] kernfs_fop_write_iter+0x145/0x1d0 [ 205.022267] vfs_write+0x308/0x440 [ 205.023453] ksys_write +0x6d/0xe0 [ 205.024616] __x64_sys_write+0x1e/0x30 [205.025778] x64_sys_call+0x16ba/0x2150 [ 205.026942] do_syscall_64+0x56/0x1e0 [ 205.028108] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 205.029276] RIP: 0033:fbc164 205.030420] Code89 02 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8d 05 e1 08 2e 00 8b 00 85 c0 75 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 f3 c3 66 90 41 54 55 49 89 d4 53 48 89 f5 此修补程序在 ccp5_debugfs_destroy 中破坏 ccp_debugfs_dir 之后将其设置为空从而允许在重新绑定 ccp 设备时重新创建目录 dentry。已在 AMD Ryzen 7 1700X 上测试。 (CVE-2025-38581)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-38581

critical Nessus 插件 ID 260093

版本 1.1