Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means no SPI assigned, but since commit 94f39804d891 (xfrm: Duplicate SPI Handling), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list. (CVE-2025-39965)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-39965

medium Nessus 插件 ID 270221

版本 1.17