Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - dmaenginemmp_pdma修复 mmp_pdma_residue() 中的争用条件 在 mmp_pdma_residue() 中添加适当的锁定以防止访问描述符列表和描述符内容时发生释放后使用。当多个线程调用 tx_status()而另一个 CPU 上的 tasklet 释放已完成的描述符时会发生争用CPU 0 CPU 1 ----- ----- mmp_pdma_tx_status() mmp_pdma_residue() -> NO LOCK hold list_for_each_entry(sw, DMA 中断 dma_do_tasklet() -> spin_lock(&desc_lock) list_move(sw->node, ...) spin_unlock(&desc_lock) | dma_pool_free(sw) <- 已释放-> access sw->desc <- UAF! 当在相同通道上使用多个线程 (threads_per_chan > 1) 运行 dmatest 时此问题会重现。修复方法是使用 chan->desc_lock 自旋锁保护 chain_running 列表迭代和描述符访问。 (CVE-2025-71221)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-71221

high Nessus 插件 ID 299081

版本 1.12

版本 1.10

版本 1.9

版本 1.8

版本 1.7

版本 1.6

版本 1.5

版本 1.4

版本 1.3

版本 1.2

版本 1.1

版本 1.12 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
版本 1.10 May 20, 2026, 10:33 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605202233
版本 1.9 May 3, 2026, 4:59 AM CVSS metrics ("CVSSv2 score" set to 6.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605030459
版本 1.8 May 2, 2026, 11:12 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:P/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
版本 1.7 Mar 23, 2026, 11:56 AM CVSS metrics ("CVSSv2 score" set to 6.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C") Plugin Feed: 202603231156
版本 1.6 Mar 21, 2026, 9:15 AM CVSS metrics ("CVSSv3 score" set to 7.0) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin Feed: 202603210915
版本 1.5 Mar 10, 2026, 10:49 PM Detection (updated detection logic) New Plugin metadata Plugin Feed: 202603102249
版本 1.4 Feb 24, 2026, 6:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602240612
版本 1.3 Feb 23, 2026, 1:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602231338
版本 1.2 Feb 18, 2026, 9:24 AM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:P/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 6.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2025-71221, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202602180924
版本 1.1 Feb 15, 2026, 7:08 AM New Plugin Feed: 202602150708