Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - nvmenvme-fc确保 ->ioerr_work 已在 nvme_fc_delete_ctrl() 中取消 nvme_fc_delete_assocation() 会等待待定 I/O 完成然后返回且错误可造成 ->ioerr_work 在调用 cancel_work_sync() 之后排队。将对 cancel_work_sync() 的调用移至 nvme_fc_delete_association() 之后以确保释放 nvme_fc_ctrl 对象时不会运行 ->ioerr_work。
    否则可能发生以下情况[ 1135.911754] list_del 损坏ff2d24c8093f31f8->next 为空 [1135.917705] ------------[ 在此处切换 ]----------- - [ 1135.922336] 内核缺陷位于 lib/list_debug.c:52 [1135.926784] Oops无效的 opcode0000 [#1] SMP NOPTI [ 1135.931851] CPU48 UID0 PID726 Comm
    kworker/u449:23 Kdump已加载未受感染 6.12.0 #1 PREEMPT(随意) [ 1135.943490] Hardware name: Dell Inc. PowerEdge R660/0HGTK9, BIOS 2.5.4 01/16/2025 [ 1135.950969] Workqueue0x0 (nvme- wq) [ 1135.954673] RIP: 0010:__list_del_entry_valid_or_report.cold+0xf/0x6f [ 1135.961041] 代码c7 c7 98 68 72 94 e8 26 45 fe ff 0f 0f 0b 48 c7 c7 70 68 72 94 e8 18 45 fe ff 0f 0b 48 89 fe 48 c7 c7 80 69 72 94 e8 07 45 fe ff <0f> 0b 48 89 d1 48 c7 c7 a0 6a 72 94 48 89 c2 e8 f3 44 fe ff 0f 0b [ 1135.979788] RSP: 0018:ff579b19482d3e50 EFLAGS: 4060 [ 1135.985015] RAX: 0000000000000033 RBX: ff2d24c8093f31f0 RCX: 0000000000000000 [1135.992148] RDX: 0000000000000000 RSI: ff2d24d6bfa1d0c0 RDI: ff2d24d6bfa1d0c0 1135.999278BP] d0c0
    ff2d24c8093f31f8 R080000000000000000 R09ffffffff951e2b08 [ 1136.006413] R10ffffffff95122ac8 R11
    0000000000000003 R12ff2d24c78697c100 [ 1136.013546] R13ffffffffffffff8 R140000000000000000 R15
    ff2d24c78697c0c0 [ 1136.020677] FS: 0000000000000000(0000) GS:ff2d24d6bfa00000(0000) knlGS:0000000000000000 [ 1136.028765] CS: 0010 DS: 0000 ES: 0000 CR0: 0303 CR02: 1136.0345100 [
    00007fd207f90b80 CR3: 000000163ea22003 CR4: 0000000000f73ef0 [ 1136.041641] DR0: 0000000000000000 DR1:
    0000000000000000 DR20000000000000000 [ 1136.048776] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7:
    0000000000000400 [ 1136.055910] PKRU: 55555554 [ 1136.058623] 调用跟踪 [ 1136.061074] <TASK> [1136.063179] ? show_trace_log_lvl+0x1b0/0x2f0 [ 1136.067540] ? show_trace_log_lvl+0x1b0/0x2f0 [1136.071898] ? move_linked_works+0x4a/0xa0 [ 1136.075998] ? __list_del_entry_valid_or_report.cold+0xf/0x6f [ 1136.081744]? __die_body.cold+0x8/0x12 [ 1136.085584] die+0x2e/0x50 [ 1136.088469] do_trap+0xca/0x110 [ 1136.091789] ? do_error_trap+0x65/0x80 [ 1136.095543] ?
    __list_del_entry_valid_or_report.cold+0xf/0x6f [ 1136.101289]? exc_invalid_op+0x50/0x70 [ 1136.105127] ?
    __list_del_entry_valid_or_report.cold+0xf/0x6f [ 1136.110874]? asm_exc_invalid_op+0x1a/0x20 [1136.115059] ? __list_del_entry_valid_or_report.cold+0xf/0x6f [ 1136.120806] move_linked_works+0x4a/0xa0 [1136.124733] worker_thread+0x216/0x3a0 [ 1136.128485] ? __pfx_worker_thread+0x10/0x10 [ 1136.132758] kthread+0xfa/0x240 [ 1136.135904] ? __pfx_kthread+0x10/0x10 [ 1136.139657] ret_from_fork+0x31/0x50 [1136.143236] ? __pfx_kthread+0x10/0x10 [ 1136.146988] ret_from_fork_asm+0x1a/0x30 [ 1136.150915] </TASK> (CVE-2025-40261)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-40261

critical Nessus 插件 ID 277521

版本 1.38