Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - jffs2修正 jffs2_scan_medium 中的記憶體洩漏。如果在 jffs2_scan_eraseblock() 中傳回錯誤且部分記憶體已新增至 jffs2_summary *s我們會觀察到下列 kmemleak 報告
    -------------------------------------------------------- 未參照的物件 0xffff88812b889c40 (大小 64 )comm mount、pid 692、jiffies 4294838325 (34.288s) 十六進位轉儲存 (前 32 個位元組)40 48 b5 14 81 88 ff ff 01 e0 31 00 00 00 50 00 @H........1 ...P。 00 00 01 00 00 00 01 00 00 00 02 00 00 00 09 08 ....
    backtrace [<ffffffffae93a3a3>] __kmalloc+0x613/0x910 [<ffffffffaf423b9c>] jffs2_sum_add_dirent_mem+0x5c/0xa0 [<ffffffffb0f3afa8>] jffs2_scan_medium.cold+0x36e5/0x4794 [<ffffffffb0f3dbe1>] jffs2_do_mount_fs.cold+0xa7/0x2267 [<ffffffffaf40acf3>] jffs2/dofill_super+0+0 0xc30 [<ffffffffaf40c00a>] jffs2_fill_super+0x2ea/0x4c0 [<ffffffffb0315d64>] mtd_get_sb+0x254/0x400 [<ffffffffb0315f5f>] mtd_get_sb_by_nr+0x4f/0xd0<ffffffffb0316478>[  ] get_tree_mtd+0x498/0x840 [<ffffffffaf40bd15>] jffs2_get_tree+0x25/x0<ffffffffae9f358d>] vfs_get_tree+0x8d/0x2e0 [<ffffffffaea7a98f>] path_mount+0x50f/0x1e50 [<ffffffffaea7c3d7>] do_mount+0x107/0x130 [<ffffffffaea7c5c5>] __se_sys_mount+0x1c5/0x2f0 [<ffffffffaea7c917>]
    __x64_sys_mount+0xc7/0x160 [<ffffffffb10142f5>] do_syscall_64+0x45/0x70 未參照物件 0xffff888114b54840 (大小 32)comm mount, pid 692, jiffies 4294838325 (age 34.288s) hex dump (前 32 個位元組)c0 7ff5 b5 14 8188 ff 02 e0 02 00 00 00 02 00 .u........ 00 00 84 00 00 00 44 00 00 00 6b 6b 6b 6b 6b a5 ..D.. .kkkkk。 backtrace[<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423b04>] jffs2_sum_add_inode_mem+0x54/0x90 [<ffffffffb0f3bd44>] jffs2_scan_medium.cold+0x4481/0x4794 [...] 未參照的物件 0xffff888114b57280 (大小 32)comm 掛載pid jiffies 4294838393 (34.357s) 十六進位轉儲存 (前 32 個位元組)10 d5 6c 11 81 88 ff ff 08 e0 05 00 00 00 01 00 ..l........ 00 00 38 02 00 00 28 00 00 00 6b 6b 6b 6b 6b a5 ..8...(...kkkkk. backtrace:
    [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423c34>] jffs2_sum_add_xattr_mem+0x54/0x90 [<ffffffffb0f3a24f>] jffs2_scan_medium.cold+0x298c/0x4794 [...] 未參照的物件 0xffff8881116cd510 (大小 16)95 通訊掛載23 jiffies429pid836 (34.355s) 十六進位轉儲存 (前 16 個位元組)00 00 00 00 00 00 00 00 09 e0 60 02 00 00 6b a5 .... backtrace
    [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423cc4>] jffs2_sum_add_xref_mem+0x54/0x90 [<ffffffffb0f3b2e3>] jffs2_scan_medium.cold+0x3a20/0x4794 [...]
    -------------------------------------------------------- 因此我們應呼叫 jffs2_sum_reset_collected (s) 結束時釋出在 s 中新增的記憶體。此外也新增了一個 out_buf 標籤以防止 s 為 NULL 而造成的 NULL 指標參照。 (感謝 Zhang Yi 的分析) (CVE-2022-49276)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - jffs2修复 jffs2_scan_medium 中的内存泄漏如果在 jffs2_scan_eraseblock() 中返回错误并且一些内存已添加到 jffs2_summary *s我们可以观察到以下 kmemleak 报告
    ------------------------------------------------------ 未引用的对象 0xffff88812b889c40大小 64 )comm mount, pid 692, jiffies 4294838325 (age 34.288s) 十六进制转储前 32 字节40 48 b5 14 81 88 ff ff 01 e0 31 00 00 00 50 00 @H......1 ...P. 00 00 01 00 00 00 01 00 00 00 02 00 00 00 09 08 ..
    backtrace[<ffffffffae93a3a3>] __kmalloc+0x613/0x910 [<ffffffffaf423b9c>] jffs2_sum_add_dirent_mem+0x5c/0xa0 [<ffffffffb0f3afa8>] jffs2_scan_medium.cold+0x36e5/0x4794 [<ffffffffb0f3dbe1>] jffs2_do_mount_fs.filld+0xa7/0x2267 [<ffffffffaf40acf3>] jffs2_scan_medium.cold+0x36e5/0x4794 0xc30 [<ffffffffaf40c00a>] jffs2_fill_super+0x2ea/0x4c0 [<ffffffffb0315d64>] mtd_get_sb+0x254/0x400 [<ffffffffb0315f5f>] mtd_get_sb_by_nr+0x4f/0xd0 [<ffffffffb0316478>] get_tree_mtd+0x498/0x840 [<ffffffffaf40bd15>] jffs2_get_tree+0x25/0x30 [<ffffffffae9f358d>[]  ] vfs_get_tree+0x8d/0x2e0 [<ffffffffaea7a98f>] path_mount+0x50f/0x1e50 [<ffffffffaea7c3d7>] do_mount+0x107/0x130 [<ffffffffaea7c5c5>] __se_sys_mount+0x1c5/0x2f0 [<ffffffffaea7c917>]
    __x64_sys_mount+0xc7/0x160 [<ffffffffb10142f5>] do_syscall_64+0x45/0x70 未引用对象 0xffff888114b54840 (大小 32)comm mount, pid 692, jiffies 4294838325(age 34.288s) hex 转储前 32 字节c0 75 b815 815 8 ff ff 02 e0 02 00 00 00 02 00 .u............00 00 84 00 00 00 44 00 00 00 6b 6b 6b 6b 6b a5 ......D.. .kkkkk。 backtrace[<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423b04>] jffs2_sum_add_inode_mem+0x54/0x90 [<ffffffffb0f3bd44>] jffs2_scan_medium.cold+0x4481/0x4794 [...] 未引用的对象 0xffff888114b57280(大小 32)comm 挂载、pid jiffies 4294838393 (age 34.357s) 十六进制转储前 32 字节10 d5 6c 11 81 88 ff ff 08 e0 05 00 00 00 01 00 ..l........ 00 00 38 02 00 00 28 00 00 00 6b 6b 6b 6b 6b a5 ..8...(...kkkkk。回溯
    [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423c34>] jffs2_sum_add_xattr_mem+0x54/0x90 [<ffffffffb0f3a24f>] jffs2_scan_medium.cold+0x298c/0x4794 [...] 未引用的对象 0xffff8881116cd510 (size 16)comm 挂载、jiff 4982ies8982ies8982ies8982 (age 34.355s) 十六进制转储前 16 个字节00 00 00 00 00 00 00 00 09 e0 60 02 00 00 6b a5 ........`...k。 backtrace
    [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423cc4>] jffs2_sum_add_xref_mem+0x54/0x90 [<ffffffffb0f3b2e3>] jffs2_scan_medium.cold+0x3a20/0x4794 [...]
    ------------------------------------------------------ 因此我们应该调用 jffs2_sum_reset_collected (s) 在退出时释放在 s 中添加的内存。此外还添加了新标签 out_buf以防止因 s 为空而导致的空指针引用。感谢 Zhang Yi 提供此分析 (CVE-2022-49276)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

リモートの SUSE Linux SLES15 / SLES_SAP15 ホストには、SUSE-SU-2025:1027-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    SUSE Linux Enterprise 15 SP4 カーネルが更新され、さまざまなセキュリティバグ修正が行われています。


    次のセキュリティバグを修正しました。

    - CVE-2024-2201: x86/BHI での情報漏洩を修正しました (bsc#1217339)。
    - CVE-2024-41092: drm/i915/gt: フェンスレジスタの取り消しによる潜在的なメモリ解放後使用 (Use After Free) を修正しました (bsc#1228483)。
    - CVE-2024-42098: crypto: ecdh - private_key を明示的にゼロ化します (bsc#1228779)。
    - CVE-2024-42229: crypto: aead,cipher - 使用後にキーバッファをゼロ化します (bsc#1228708)。
    - CVE-2024-57996: net_sched: sch_sfq: 1 パケット制限を許可しません (bsc#1239076)。
    - CVE-2024-58014: wifi: brcmsmac: wlc_phy_iqcal_gainparams_nphy() にゲイン範囲チェックを追加しました (bsc#1239109)。
    - CVE-2025-21718: net: rose: ユーザースレッドに対するタイマーの競合状態を修正しました (bsc#1239073)。
    - CVE-2025-21780: drm/amdgpu: smu_sys_set_pp_table() のバッファオーバーフローのアタッチを回避します (bsc#1239115)。


Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - jffs2jffs2_scan_medium でのメモリ漏洩を修正します jffs2_scan_eraseblock() でエラーが返され、一部のメモリが jffs2_summary *s に追加された場合、以下の kmemleak レポートを確認できます
    --------------------------- 参照されていないオブジェクト 0xffff88812b889c40サイズ 64通信マウント、pid 692、jiffies 4294838325age 34.288shex dump最初の 32 バイト40 48 b5 14 81 88 ff ff 01 e0 31 00 00 00 50 00 @H..1 ...P. 00 00 01 00 00 01 00 00 00 02 00 00 00 09 08 -----
    backtrace<ffffffffae93a3a3>__kmalloc+0x613/0x910 [<ffffffffaf423b9c>] jffs2_sum_add_dirent_mem+0x5c/0xa0<ffffffffb0f3afa8>jffs2_scan_medium.cold+0x36e5/0x4794 [[] jffs2_do_mount_fs.cold+0xa7/0x2267 [<ffffffffb0f3dbe1>super ] jffs2_do_mount_fs.cold+0xa7/0x2267 [<ffffffffaf40acf3>super] jffs2_do_mount_fs.cold+0xa7/0x2267 [super] jffs201509 0xc30<ffffffffaf40c00a>jffs2_fill_super+0x2ea/0x4c0 [<ffffffffb0315d64>] mtd_get_sb+0x254/0x400 [<ffffffffb0315f5f>] mtd_get_sb_by_nr+0x4f/0xd0 [<ffffffffb0316478>] get_tree_mtd+0x498/0x840 [<ffffffffaf40bd15>] jffs2_get_tree+0x [2015 年 10 月 29 日] [5/0608<ffffffffae9f358d> ] vfs_get_tree+0x8d/0x2e0 [<ffffffffaea7a98f>] path_mount+0x50f/0x1e50 [<ffffffffaea7c3d7>] do_mount+0x107/0x130 [<ffffffffaea7c5c5>] __se_sys_mount+0x1c5/0x2f0 [<ffffffffaea7c917>]
    __x64_sys_mount+0xc7/0x160 [<ffffffffb10142f5>] do_syscall_64+0x45/0x70 参照されていないオブジェクト 0xffff888114b54840サイズ 32comm mount、pid 692、jiffies 4294838325age 34.288shex ダンプ最初の 312 バイトc0 48 7585673 ff 02 e0 02 00 00 00 02 00 .u..... 00 00 84 00 00 00 44 00 00 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b .ksckk。 backtrace[<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423b04>] jffs2_sum_add_inode_mem+0x54/0x90 [<ffffffffb0f3bd44>] jffs2_scan_medium.cold+0x4481/0x4794 [...] unreferenced オブジェクト 0xffff888114b57280 (size 9,2) pid6 : [comm mount280] (size 32) jiffies 429483839338.357shex dump 02 00 00 28 00 00 00 6b 6b 6b 6b 6b a5 ..8...(...)
    [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423c34>] jffs2_sum_add_xattr_mem+0x54/0x90<ffffffffb0f3a24f>jffs2_scan_medium.cold+0x298c/0x4794 [...] 参照されていないオブジェクト 0xffff8881116cd510 (size 16): comm mount, pid8 69,9364 pid8686 (age 34.355s) hex dump (最初の 16 バイト): 00 00 00 00 00 00 00 09 e0 60 02 00 00 6b a5 ....`...k. backtrace
    [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423cc4>] jffs2_sum_add_xref_mem+0x54/0x90 [<ffffffffb0f3b2e3> ] jffs2_scan_medium.cold+0x3a20/0x4794 [...]
    ------------------------------------------------- したがって、jffs2_sum_reset_collected を呼び出す必要があります。 (s) 終了時に s に追加されたメモリを解放します。さらに、s が NULL であることによって引き起こされる NULL ポインターリファレンスを防ぐために、新しいタグ out_buf が追加されます。この分析を行った Zhang Yi 氏に感謝しますCVE-2022-49276

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

リモートの SUSE Linux SLES15 / SLES_SAP15 ホストには、SUSE-SU-2025:1241-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    SUSE Linux Enterprise 15 SP5 カーネルが更新され、さまざまなセキュリティバグ修正が行われています。

    次のセキュリティバグを修正しました。

    - CVE-2022-49053：scsi：target：tcmu：潜在的なページ UAF を修正します（bsc#1237918）。
    - CVE-2022-49465：blk-throttle：bio が調整されているときに BIO_THROTTLED を設定します（bsc#1238919）。
    - CVE-2022-49739：gfs2：インライン inode の inode サイズを常にチェックします（bsc#1240207）。
    - CVE-2023-52935：mm/khugepaged：->anon_vma の競合を修正します（bsc#1240276）。
    - CVE-2024-53124：net：sk->sk_forward_alloc 周辺のデータ競合を修正します（bsc#1234074）。
    - CVE-2024-53176: smb: アンマウント中に、キャッシュされたすべての dir インスタンスが dentry を確実にドロップするようにします (bsc#1234894)。
    - CVE-2024-53178: smb: 再接続が open_cached_dir と競合する際に cfid を漏洩しません (bsc#1234895)。
    - CVE-2024-56651：can: hi311x：hi3110_can_ist()：潜在的な use-after-free を修正します（bsc#1235528）。
    - CVE-2024-57996: net_sched: sch_sfq: 1 パケット制限を許可しません (bsc#1239076)。
    - CVE-2024-58013：Bluetooth： MGMT：mgmt_remove_adv_monitor_sync の slab-use-after-free 読み取りを修正（bsc#1239095）。
    - CVE-2024-58014: wifi: brcmsmac: wlc_phy_iqcal_gainparams_nphy() にゲイン範囲チェックを追加しました (bsc#1239109)。
    - CVE-2025-21693：mm：zswap：CPU ホットアンプラグ中に適切に同期してリソースを解放します（bsc#1237029）。
    - CVE-2025-21718: net: rose: ユーザースレッドに対するタイマーの競合状態を修正しました (bsc#1239073)。
    - CVE-2025-21772：パーティション：mac：偽造パーティションテーブルの処理を修正します（bsc#1238911）。
    - CVE-2025-21780: drm/amdgpu: smu_sys_set_pp_table() のバッファオーバーフローのアタッチを回避します (bsc#1239115)。


Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990527 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    jffs2: fix memory leak in jffs2_scan_medium

    If an error is returned in jffs2_scan_eraseblock() and some memory     has been added to the jffs2_summary *s, we can observe the following     kmemleak report:

    --------------------------------------------     unreferenced object 0xffff88812b889c40 (size 64):
      comm mount, pid 692, jiffies 4294838325 (age 34.288s)       hex dump (first 32 bytes):
        40 48 b5 14 81 88 ff ff 01 e0 31 00 00 00 50 00  @H........1...P.
        00 00 01 00 00 00 01 00 00 00 02 00 00 00 09 08  ................
      backtrace:
        [<ffffffffae93a3a3>] __kmalloc+0x613/0x910         [<ffffffffaf423b9c>] jffs2_sum_add_dirent_mem+0x5c/0xa0         [<ffffffffb0f3afa8>] jffs2_scan_medium.cold+0x36e5/0x4794         [<ffffffffb0f3dbe1>] jffs2_do_mount_fs.cold+0xa7/0x2267         [<ffffffffaf40acf3>] jffs2_do_fill_super+0x383/0xc30         [<ffffffffaf40c00a>] jffs2_fill_super+0x2ea/0x4c0         [<ffffffffb0315d64>] mtd_get_sb+0x254/0x400         [<ffffffffb0315f5f>] mtd_get_sb_by_nr+0x4f/0xd0         [<ffffffffb0316478>] get_tree_mtd+0x498/0x840         [<ffffffffaf40bd15>] jffs2_get_tree+0x25/0x30         [<ffffffffae9f358d>] vfs_get_tree+0x8d/0x2e0         [<ffffffffaea7a98f>] path_mount+0x50f/0x1e50         [<ffffffffaea7c3d7>] do_mount+0x107/0x130         [<ffffffffaea7c5c5>] __se_sys_mount+0x1c5/0x2f0         [<ffffffffaea7c917>] __x64_sys_mount+0xc7/0x160         [<ffffffffb10142f5>] do_syscall_64+0x45/0x70     unreferenced object 0xffff888114b54840 (size 32):
      comm mount, pid 692, jiffies 4294838325 (age 34.288s)       hex dump (first 32 bytes):
        c0 75 b5 14 81 88 ff ff 02 e0 02 00 00 00 02 00  .u..............
        00 00 84 00 00 00 44 00 00 00 6b 6b 6b 6b 6b a5  ......D...kkkkk.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423b04>] jffs2_sum_add_inode_mem+0x54/0x90         [<ffffffffb0f3bd44>] jffs2_scan_medium.cold+0x4481/0x4794         [...]     unreferenced object 0xffff888114b57280 (size 32):
      comm mount, pid 692, jiffies 4294838393 (age 34.357s)       hex dump (first 32 bytes):
        10 d5 6c 11 81 88 ff ff 08 e0 05 00 00 00 01 00  ..l.............
        00 00 38 02 00 00 28 00 00 00 6b 6b 6b 6b 6b a5  ..8...(...kkkkk.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423c34>] jffs2_sum_add_xattr_mem+0x54/0x90         [<ffffffffb0f3a24f>] jffs2_scan_medium.cold+0x298c/0x4794         [...]     unreferenced object 0xffff8881116cd510 (size 16):
      comm mount, pid 692, jiffies 4294838395 (age 34.355s)       hex dump (first 16 bytes):
        00 00 00 00 00 00 00 00 09 e0 60 02 00 00 6b a5  ..........`...k.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423cc4>] jffs2_sum_add_xref_mem+0x54/0x90         [<ffffffffb0f3b2e3>] jffs2_scan_medium.cold+0x3a20/0x4794         [...]
    --------------------------------------------

    Therefore, we should call jffs2_sum_reset_collected(s) on exit to     release the memory added in s. In addition, a new tag out_buf is     added to prevent the NULL pointer reference caused by s being NULL.
    (thanks to Zhang Yi for this analysis)

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1027-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
    - CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (bsc#1228483).
    - CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
    - CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
    - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
    - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989233 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    jffs2: fix memory leak in jffs2_scan_medium

    If an error is returned in jffs2_scan_eraseblock() and some memory     has been added to the jffs2_summary *s, we can observe the following     kmemleak report:

    --------------------------------------------     unreferenced object 0xffff88812b889c40 (size 64):
      comm mount, pid 692, jiffies 4294838325 (age 34.288s)       hex dump (first 32 bytes):
        40 48 b5 14 81 88 ff ff 01 e0 31 00 00 00 50 00  @H........1...P.
        00 00 01 00 00 00 01 00 00 00 02 00 00 00 09 08  ................
      backtrace:
        [<ffffffffae93a3a3>] __kmalloc+0x613/0x910         [<ffffffffaf423b9c>] jffs2_sum_add_dirent_mem+0x5c/0xa0         [<ffffffffb0f3afa8>] jffs2_scan_medium.cold+0x36e5/0x4794         [<ffffffffb0f3dbe1>] jffs2_do_mount_fs.cold+0xa7/0x2267         [<ffffffffaf40acf3>] jffs2_do_fill_super+0x383/0xc30         [<ffffffffaf40c00a>] jffs2_fill_super+0x2ea/0x4c0         [<ffffffffb0315d64>] mtd_get_sb+0x254/0x400         [<ffffffffb0315f5f>] mtd_get_sb_by_nr+0x4f/0xd0         [<ffffffffb0316478>] get_tree_mtd+0x498/0x840         [<ffffffffaf40bd15>] jffs2_get_tree+0x25/0x30         [<ffffffffae9f358d>] vfs_get_tree+0x8d/0x2e0         [<ffffffffaea7a98f>] path_mount+0x50f/0x1e50         [<ffffffffaea7c3d7>] do_mount+0x107/0x130         [<ffffffffaea7c5c5>] __se_sys_mount+0x1c5/0x2f0         [<ffffffffaea7c917>] __x64_sys_mount+0xc7/0x160         [<ffffffffb10142f5>] do_syscall_64+0x45/0x70     unreferenced object 0xffff888114b54840 (size 32):
      comm mount, pid 692, jiffies 4294838325 (age 34.288s)       hex dump (first 32 bytes):
        c0 75 b5 14 81 88 ff ff 02 e0 02 00 00 00 02 00  .u..............
        00 00 84 00 00 00 44 00 00 00 6b 6b 6b 6b 6b a5  ......D...kkkkk.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423b04>] jffs2_sum_add_inode_mem+0x54/0x90         [<ffffffffb0f3bd44>] jffs2_scan_medium.cold+0x4481/0x4794         [...]     unreferenced object 0xffff888114b57280 (size 32):
      comm mount, pid 692, jiffies 4294838393 (age 34.357s)       hex dump (first 32 bytes):
        10 d5 6c 11 81 88 ff ff 08 e0 05 00 00 00 01 00  ..l.............
        00 00 38 02 00 00 28 00 00 00 6b 6b 6b 6b 6b a5  ..8...(...kkkkk.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423c34>] jffs2_sum_add_xattr_mem+0x54/0x90         [<ffffffffb0f3a24f>] jffs2_scan_medium.cold+0x298c/0x4794         [...]     unreferenced object 0xffff8881116cd510 (size 16):
      comm mount, pid 692, jiffies 4294838395 (age 34.355s)       hex dump (first 16 bytes):
        00 00 00 00 00 00 00 00 09 e0 60 02 00 00 6b a5  ..........`...k.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423cc4>] jffs2_sum_add_xref_mem+0x54/0x90         [<ffffffffb0f3b2e3>] jffs2_scan_medium.cold+0x3a20/0x4794         [...]
    --------------------------------------------

    Therefore, we should call jffs2_sum_reset_collected(s) on exit to     release the memory added in s. In addition, a new tag out_buf is     added to prevent the NULL pointer reference caused by s being NULL.
    (thanks to Zhang Yi for this analysis)

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1241-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
    - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
    - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
    - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
    - CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
    - CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
    - CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
    - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
    - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
    - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync     (bsc#1239095).
    - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
    - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
    - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
    - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
    - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - jffs2: fix memory leak in jffs2_scan_medium If an error is returned in jffs2_scan_eraseblock() and some     memory has been added to the jffs2_summary *s, we can observe the following kmemleak report:
    -------------------------------------------- unreferenced object 0xffff88812b889c40 (size 64): comm     mount, pid 692, jiffies 4294838325 (age 34.288s) hex dump (first 32 bytes): 40 48 b5 14 81 88 ff ff 01     e0 31 00 00 00 50 00 @H........1...P. 00 00 01 00 00 00 01 00 00 00 02 00 00 00 09 08 ................
    backtrace: [<ffffffffae93a3a3>] __kmalloc+0x613/0x910 [<ffffffffaf423b9c>]     jffs2_sum_add_dirent_mem+0x5c/0xa0 [<ffffffffb0f3afa8>] jffs2_scan_medium.cold+0x36e5/0x4794     [<ffffffffb0f3dbe1>] jffs2_do_mount_fs.cold+0xa7/0x2267 [<ffffffffaf40acf3>]     jffs2_do_fill_super+0x383/0xc30 [<ffffffffaf40c00a>] jffs2_fill_super+0x2ea/0x4c0 [<ffffffffb0315d64>]     mtd_get_sb+0x254/0x400 [<ffffffffb0315f5f>] mtd_get_sb_by_nr+0x4f/0xd0 [<ffffffffb0316478>]     get_tree_mtd+0x498/0x840 [<ffffffffaf40bd15>] jffs2_get_tree+0x25/0x30 [<ffffffffae9f358d>]     vfs_get_tree+0x8d/0x2e0 [<ffffffffaea7a98f>] path_mount+0x50f/0x1e50 [<ffffffffaea7c3d7>]     do_mount+0x107/0x130 [<ffffffffaea7c5c5>] __se_sys_mount+0x1c5/0x2f0 [<ffffffffaea7c917>]
    __x64_sys_mount+0xc7/0x160 [<ffffffffb10142f5>] do_syscall_64+0x45/0x70 unreferenced object     0xffff888114b54840 (size 32): comm mount, pid 692, jiffies 4294838325 (age 34.288s) hex dump (first 32     bytes): c0 75 b5 14 81 88 ff ff 02 e0 02 00 00 00 02 00 .u.............. 00 00 84 00 00 00 44 00 00 00 6b     6b 6b 6b 6b a5 ......D...kkkkk. backtrace: [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880     [<ffffffffaf423b04>] jffs2_sum_add_inode_mem+0x54/0x90 [<ffffffffb0f3bd44>]     jffs2_scan_medium.cold+0x4481/0x4794 [...] unreferenced object 0xffff888114b57280 (size 32): comm mount,     pid 692, jiffies 4294838393 (age 34.357s) hex dump (first 32 bytes): 10 d5 6c 11 81 88 ff ff 08 e0 05 00     00 00 01 00 ..l............. 00 00 38 02 00 00 28 00 00 00 6b 6b 6b 6b 6b a5 ..8...(...kkkkk. backtrace:
    [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423c34>]     jffs2_sum_add_xattr_mem+0x54/0x90 [<ffffffffb0f3a24f>] jffs2_scan_medium.cold+0x298c/0x4794 [...]     unreferenced object 0xffff8881116cd510 (size 16): comm mount, pid 692, jiffies 4294838395 (age 34.355s)     hex dump (first 16 bytes): 00 00 00 00 00 00 00 00 09 e0 60 02 00 00 6b a5 ..........`...k. backtrace:
    [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880 [<ffffffffaf423cc4>]     jffs2_sum_add_xref_mem+0x54/0x90 [<ffffffffb0f3b2e3>] jffs2_scan_medium.cold+0x3a20/0x4794 [...]
    -------------------------------------------- Therefore, we should call jffs2_sum_reset_collected(s) on     exit to release the memory added in s. In addition, a new tag out_buf is added to prevent the NULL     pointer reference caused by s being NULL. (thanks to Zhang Yi for this analysis) (CVE-2022-49276)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987523 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    jffs2: fix memory leak in jffs2_scan_medium

    If an error is returned in jffs2_scan_eraseblock() and some memory     has been added to the jffs2_summary *s, we can observe the following     kmemleak report:

    --------------------------------------------     unreferenced object 0xffff88812b889c40 (size 64):
      comm mount, pid 692, jiffies 4294838325 (age 34.288s)       hex dump (first 32 bytes):
        40 48 b5 14 81 88 ff ff 01 e0 31 00 00 00 50 00  @H........1...P.
        00 00 01 00 00 00 01 00 00 00 02 00 00 00 09 08  ................
      backtrace:
        [<ffffffffae93a3a3>] __kmalloc+0x613/0x910         [<ffffffffaf423b9c>] jffs2_sum_add_dirent_mem+0x5c/0xa0         [<ffffffffb0f3afa8>] jffs2_scan_medium.cold+0x36e5/0x4794         [<ffffffffb0f3dbe1>] jffs2_do_mount_fs.cold+0xa7/0x2267         [<ffffffffaf40acf3>] jffs2_do_fill_super+0x383/0xc30         [<ffffffffaf40c00a>] jffs2_fill_super+0x2ea/0x4c0         [<ffffffffb0315d64>] mtd_get_sb+0x254/0x400         [<ffffffffb0315f5f>] mtd_get_sb_by_nr+0x4f/0xd0         [<ffffffffb0316478>] get_tree_mtd+0x498/0x840         [<ffffffffaf40bd15>] jffs2_get_tree+0x25/0x30         [<ffffffffae9f358d>] vfs_get_tree+0x8d/0x2e0         [<ffffffffaea7a98f>] path_mount+0x50f/0x1e50         [<ffffffffaea7c3d7>] do_mount+0x107/0x130         [<ffffffffaea7c5c5>] __se_sys_mount+0x1c5/0x2f0         [<ffffffffaea7c917>] __x64_sys_mount+0xc7/0x160         [<ffffffffb10142f5>] do_syscall_64+0x45/0x70     unreferenced object 0xffff888114b54840 (size 32):
      comm mount, pid 692, jiffies 4294838325 (age 34.288s)       hex dump (first 32 bytes):
        c0 75 b5 14 81 88 ff ff 02 e0 02 00 00 00 02 00  .u..............
        00 00 84 00 00 00 44 00 00 00 6b 6b 6b 6b 6b a5  ......D...kkkkk.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423b04>] jffs2_sum_add_inode_mem+0x54/0x90         [<ffffffffb0f3bd44>] jffs2_scan_medium.cold+0x4481/0x4794         [...]     unreferenced object 0xffff888114b57280 (size 32):
      comm mount, pid 692, jiffies 4294838393 (age 34.357s)       hex dump (first 32 bytes):
        10 d5 6c 11 81 88 ff ff 08 e0 05 00 00 00 01 00  ..l.............
        00 00 38 02 00 00 28 00 00 00 6b 6b 6b 6b 6b a5  ..8...(...kkkkk.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423c34>] jffs2_sum_add_xattr_mem+0x54/0x90         [<ffffffffb0f3a24f>] jffs2_scan_medium.cold+0x298c/0x4794         [...]     unreferenced object 0xffff8881116cd510 (size 16):
      comm mount, pid 692, jiffies 4294838395 (age 34.355s)       hex dump (first 16 bytes):
        00 00 00 00 00 00 00 00 09 e0 60 02 00 00 6b a5  ..........`...k.
      backtrace:
        [<ffffffffae93be24>] kmem_cache_alloc_trace+0x584/0x880         [<ffffffffaf423cc4>] jffs2_sum_add_xref_mem+0x54/0x90         [<ffffffffb0f3b2e3>] jffs2_scan_medium.cold+0x3a20/0x4794         [...]
    --------------------------------------------

    Therefore, we should call jffs2_sum_reset_collected(s) on exit to     release the memory added in s. In addition, a new tag out_buf is     added to prevent the NULL pointer reference caused by s being NULL.
    (thanks to Zhang Yi for this analysis)

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
225333	Linux Distros 未修補的弱點：CVE-2022-49276	Nessus	Misc.	2025/3/5	2026/1/15	medium
225333	Linux Distros 未修补的漏洞：CVE-2022-49276	Nessus	Misc.	2025/3/5	2026/1/15	medium
233410	SUSE SLES15 セキュリティ更新 : kernel (SUSE-SU-2025:1027-1)	Nessus	SuSE Local Security Checks	2025/3/27	2025/12/30	high
225333	Linux Distros のパッチ未適用の脆弱性: CVE-2022-49276	Nessus	Misc.	2025/3/5	2026/1/15	medium
234407	SUSE SLES15 セキュリティ更新 : kernel (SUSE-SU-2025:1241-1)	Nessus	SuSE Local Security Checks	2025/4/15	2025/12/30	high
274301	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990527)	Nessus	Unity Linux Local Security Checks	2025/11/6	2025/11/6	medium
233410	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:1027-1)	Nessus	SuSE Local Security Checks	2025/3/27	2025/12/30	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/3/23	high
274046	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989233)	Nessus	Unity Linux Local Security Checks	2025/11/5	2025/11/5	medium
234407	SUSE SLES15 Security Update : kernel (SUSE-SU-2025:1241-1)	Nessus	SuSE Local Security Checks	2025/4/15	2025/12/30	high
225333	Linux Distros Unpatched Vulnerability : CVE-2022-49276	Nessus	Misc.	2025/3/5	2026/1/15	medium
270899	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987523)	Nessus	Unity Linux Local Security Checks	2025/10/21	2025/10/21	medium

检测

插件搜索

medium

medium

high

medium

high

medium

high

high

medium

high

medium

medium