Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - scsiqla2xxx释放错误路径中的 sp以修复系统崩溃在循环中的加载/卸载测试期间发现系统崩溃[61110.449331] qla2xxx [0000:27:00.0]-0042:0禁用了 MSI-X。 [61110.467494] ============================================== =============================== [61110.467498] 缺陷 qla2xxx_srbs受感染G OE -------- --- )对象保留在 __kmem_cache_shutdown() 上的 qla2xxx_srbs 中 [61110.467501] --------------------------------- ------------------------------------------------------ [61110.467502] Slab 0x000000000ffc8162 objects=51 used=1 fp=0x00000000e25d3d85 flags=0x57ffffc0010200(slab|head|node=1|zone=2|lastcpupid=0x1fffff) [61110.467509] CPU: 53 PID: 455206 Comm: rmmod Kdump已加载 TaintedG OE ------ -- --- 5.14.0-284.11.1.el9_2.x86_64 #1 [61110.467513] 硬件名称HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2、BIOS A42 2023 年 8 月 17 日 [61110.467515] 调用跟踪[61110.467516] <TASK> [61110.467519] dump_stack_lvl+0x34/0x48 [61110.467526] slab_err.cold+0x53/0x67 [61110.467534] __kmem_cache_shutdown+0x16e/0x320 [61110.467540] kmem_cache_destroy+0x51/0x160 [61110.467544] qla2x00_module_exit+0x93/0x99 [qla2xxx] [61110.467607] ?
    __do_sys_delete_module.constprop.0+0x178/0x280 [61110.467613]? syscall_trace_enter.constprop.0+0x145/0x1d0 [61110.467616] ? do_syscall_64+0x5c/0x90 [61110.467619] ? exc_page_fault+0x62/0x150 [61110.467622] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [61110.467626] </TASK> [61110.467627] 由于内核感染而禁用锁定调试 [61110.467635] 对象 0x0000000026f7e6e6 @offset=16000 [61110.467639] ------------[ 在此处剪切]------------ [61110.467639] kmem_cache_destroy qla2xxx_srbs从 qla2x00_module_exit+0x93/0x99 调用时Slab 缓存仍然包含对象 [qla2xxx] [61110.467659] 警告CPU: 53 PID: 455206 at mm /slab_common.c:520 kmem_cache_destroy+0x14d/0x160 [61110.467718] CPU: 53 PID: 455206 Comm: rmmod Kdump: loaded Tainted: GB OE -------- --- 5.14.0-284.11.1. el9_2.x86_64 #1 [61110.467720] 硬件名称HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2, BIOS A42 08/17/2023 [61110.467721] RIP: 0010:kmem_cache_destroy+0x14d/0x160 [61110.467724] Code99 7d 07 00 48 89 ef e8 e1 6a 07 00 eb b3 48 8b 55 60 48 8b 4c 24 20 48 c7 c6 70 fc 66 90 48 c7 c7 f8 ef a1 90 e8 e1 ed 7c 00 <0f> 0b eb 93 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 [61110.467725] RSP: 0018:ffffa304e489fe80 EFLAGS: 00010282 [61110.467727] RAX: 0000000000000000 RBX:
    ffffffffc0d9a860 RCX0000000000000027 [61110.467729] RDX: ffff8fd5ff9598a8 RSI: 0000000000000001 RDI
    ffff8fd5ff9598a0 [61110.467730] RBP: ffff8fb6aaf78700 R080000000000000000 R090000000100d863b7 [61110.467731] R10ffffa304e489fd20 R12R11ffffffff913bef48 [] 0000]2061110.467731[000 R1320
     R140000000000000000  : 0000000000000000 R15: 0000000000000000 [61110.467733] FS: 00007f64c89fb740(0000) GS:ffff8fd5ff940000(0000) knlGS:0000000000000000 [61110.467734] CS: 0010 DS: 0000 ES: 0000 CR0:
    0000000080050033 [61110.467735] CR2: 00007f0f02bfe000 CR3: 00000020ad6dc005 CR4: 0000000000770ee0 [61110.467736] PKRU: 55555554 [61110.467737] 调用跟踪[[61110.467738] [] <TASK> [ [xxx] [61110.467739xxx ] [xxx] [xxx] [xxx] [xxx] [61110.467755xxx ] ? __do_sys_delete_module.constprop.0+0x178/0x280 释放错误路径中的 sp 以修复崩溃。 (CVE-2025-71232)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-71232

medium Nessus 插件 ID 299462

版本 1.10