Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - scsimpt3sas修复使用 ioc_info() 删除传输端口时的崩溃 在 mpt3sas_transport_port_remove() 期间会针对 &mpt3sas_port->port->dev 使用 dev_printk() 记录消息。
    此时SAS 传输设备可能已部分取消注册或释放从而导致访问其结构设备时发生崩溃。使用通过 PCI 设备 (ioc->pdev->dev) 进行记录的 ioc_info()保证在删除驱动程序之前保持有效。 [83428.295776] Oops一般保护错误可能是非规范地址 0x6f702f323a33312d: 0000 [#1] SMP NOPTI [83428.295785] CPU145 UID: 0 PID
    113296 Comm: rmmod Kdump已加载受感染的 G OE 6.16.0-rc1+ #1 PREEMPT(随意) [83428.295792] 受感染
    [O]=OOT_MODULE, [E]=UNSIGNED_MODULE [83428.295795] 硬件名称Dell Inc. Precision 7875 Tower/, BIOS 89.1.67 02/23/2024 [83428.295799] RIP: 0010:__dev_printk+0x1f/0x70 [83428.295805] 代码90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 49 89 d1 48 85 f6 74 52 4c 8b 46 50 4d 85 c0 74 1f 48 8b 46 68 48 85 c0 74 0f 20 <48> 8b 20] b6 7f 01 48 c7 c2 db e8 42 ad 83 ef 30 e9 7b f8 ff ff [83428.295813] RSP
    0018:ff85aeafc3137bb0 EFLAGS00010206 [83428.295817] RAX6f702f323a33312d RBXff4290ee81292860 RCX
    5000cca25103be32 [83428.295820] RDX: ff85aeafc3137bb8 RSI: ff4290eeb1966c00 RDI: ffffffffc1560845 [83428.295823] RBP: ff85aeafc3137c18 R0874726f702f303a33 R09ff85aeafbbc883428.295826R10: ff85aeafc3137c18
    ff85aeafc3137b18 R11ff4290f5bd60fe68 R12ff4290ee81290000 [83428.295830] R13ff4290ee6e345de0 R14
     R15ff4290ee81290000  : ff4290ee6e345e30 [83428.295833] FS: 00007fd9472a6740(0000) GS:ff4290f5ce96b000(0000) knlGS:0000000000000000 [83428.295837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [83428.295840] CR2:
    00007f242b4db238 CR3: 00000002372b8006 CR4: 0000000000771ef0 [83428.295844] PKRU: 55555554 [83428.295846] 调用跟踪[83428.295848] <TASK> [83428.295850] _dev_printk+0x5c/0x80 [83428.295857] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.295863] mpt3sas_transport_port_remove+0x1c7/0x420 [mpt3sas] [83428.295882] _scsih_remove_device+0x21b/0x280 [mpt3sas] [83428.295894] ?
    _scsih_expander_node_remove+0x108/0x140 [mpt3sas] [83428.295906] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.295910] mpt3sas_device_remove_by_sas_address.part.0+0x8f/0x110 [mpt3sas] [83428.295921]
    _scsih_expander_node_remove+0x129/0x140 [mpt3sas] [83428.295933] _scsih_expander_node_remove+0x6a/0x140 [mpt3sas] [83428.295944] scsih_remove+0x3f0/0x4a0 [mpt3sas] [83428.29596283428.295957pci_device_remove+0x3b/0x_driver_driver_driver_release+release [83428.295968] driver_detach+0x44/0x90 [83428.295971] bus_remove_driver+0x69/0xf0 [83428.295975] pci_unregister_driver+0x2a/0xb0 [83428.295979]
    _mpt3sas_exit+0x1f/0x300 [mpt3sas] [83428.295991] __do_sys_delete_module.constprop.0+0x174/0x310 [83428.295997] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296000] ? __x64_sys_getdents64+0x9a/0x110 [83428.296005] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296009] ? syscall_trace_enter+0xf6/0x1b0 [83428.296014] do_syscall_64+0x7b/0x2c0 [83428.296019] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296023] entry_SYSCALL_64_after_hwframe+0x76/0x7e (CVE-2025-40115)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-40115

medium Nessus 插件 ID 275208

版本 1.14