Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - cryptohisilicon/sec - 处于 softirq 时不休眠。当 kunpeng920 加密驱动程序在 softirq 期间用于解密和解密数据包时不允许使用互斥体锁定。内核将报告以下错误BUG: Scheduling while atomic: swapper/57/0/0x00000300 调用跟踪
    dump_backtrace+0x0/0x1e4 show_stack+0x20/0x2c dump_stack+0xd8/0x140 __schedule_bug+0x68/0x80
    __schedule+0x728/0x840 schedule+0x50/0xe0 schedule_preempt_disabled+0x18/0x24
    __mutex_lock.constprop.0+0x594/0x5dc __mutex_lock_slowpath+0x1c/0x30 mutex_lock+0x50/0x60 sec_request_init+0x8c/0x1a0 [hisi_sec2] sec_process+0x28/0x1ac [hisi_sec2] sec_skcipher_crypto+0xf4/0x1d4 [hisi_sec2] sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2 ] crypto_skcipher_encrypt+0x2c/0x40 crypto_authenc_encrypt+0xc8/0xfc [authenc] crypto_aead_encrypt+0x2c/0x40 echainiv_encrypt+0x144/0x1a0 [echainiv] crypto_aead_encrypt+0x2c/0x40 esp_output_tail+0x348/0x5c0 [esp4] esp_output+0x120/0x19c [esp4] xfrm_output_one+ 0x25c/0x4d4 xfrm_output_resume+0x6c/0x1fc xfrm_output+0xac/0x3c0 xfrm4_output+0x64/0x130 ip_build_and_send_pkt+0x158/0x20c tcp_v4_send_synack+0xdc/0x1f0 tcp_conn_request+0x7d0/0x994 tcp_v4_conn_request+0x58/0x6c tcp_v6_conn_request+0xf0/0x100 tcp_rcv_state_process+0x1cc/0xd60 tcp_v4_do_rcv+ 0x10c/0x250 tcp_v4_rcv+0xfc4/0x10a4 ip_protocol_deliver_rcu+0xf4/0x200 ip_local_deliver_finish+0x58/0x70 ip_local_deliver+0x68/0x120 ip_sublist_rcv_finish+0x70/0x94 ip_list_rcv_finish.0x17.cons c/0x1d0 ip_sublist_rcv+0x40/0xb0 ip_list_rcv+0x140/0x1dc
    __netif_receive_skb_list_core+0x154/0x28c __netif_receive_skb_list+0x120/0x1a0 netif_receive_skb_list_internal+0xe4/0x1f0 napi_complete_done+0x70/0x1f0 gro_cell_poll+0x9c/0xb0 napi_poll+0xcc/0x264 net_rx_action+0xd4/0x21c __do_softirq+0x130/0x358 irq_exit+0x11c/0x13c
    __handle_domain_irq+0x88/0xf0 gic_handle_irq+0x78/0x2c0 el1_irq+0xb8/0x140 arch_cpu_idle+0x18/0x40 default_idle_call+0x5c/0x1c0 cpuidle_idle_call+0x174/0x1b0 do_idle+0xc8/0x160 cpu_startup_entry+0x30/0x11c secondary_start_kernel+0x158/0x1e4 softirq: huh, entered preempt_count 00000100 的 softirq 3 NET_RX 0000000093774ee4退出时包含 fffffe00? (CVE-2022-50171)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - cryptohisilicon/sec - 處於 softirq 中時不進入睡眠。在 softirq 期間使用 kunpeng920 加密驅動程式來解除加密和解密封包時不允許使用 mutex 鎖定。核心會報告下列錯誤錯誤排程而 atomic swapper/57/0/0x00000300 呼叫追踪
    dump_backtrace+0x0/0x1e4 show_stack+0x20/0x2c dump_stack+0xd8/0x140 __schedule_bug+0x68/0x80
    __schedule+0x728/0x840 schedule+0x50/0xe0 schedule_preempt_disabled+0x18/0x24
    __mutex_lock.constprop.0+0x594/0x5dc __mutex_lock_slowpath+0x1c/0x30 mutex_lock+0x50/0x60 sec_request_init+0x8c/0x1a0 [hisi_sec2] sec_process+0x28/0x1ac [hisi_sec2] sec_skcipher_crypto+0xf4/0x1d4 [hisi_sec2] sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2 ] crypto_skcipher_encrypt+0x2c/0x40 crypto_authenc_encrypt+0xc8/0xfc [authenc] crypto_aead_encrypt+0x2c/0x40 echainiv_encrypt+0x144/0x1a0 [echainiv] crypto_aead_encrypt+0x2c/0x40 esp_output_tail+0x348/0x5c0 [esp4] esp_output+0x120/0x19c [esp4] xfrm_output_one+ 0x25c/0x4d4 xfrm_output_resume+0x6c/0x1fc xfrm_output+0xac/0x3c0 xfrm4_output+0x64/0x130 ip_build_and_send_pkt+0x158/0x20c tcp_v4_send_synack+0xdc/0x1f0 tcp_conn_request+0x7d0/0x994 tcp_v4_conn_request+0x58/0x6c tcp_v6_conn_request+0xf0/0x100 tcp_rcv_state_process+0x1cc/0xd60 tcp_v4_do_rcv+ 0x10c/0x250 tcp_v4_rcv+0xfc4/0x10a4 ip_protocol_deliver_rcu+0xf4/0x200 ip_local_deliver_finish+0x58/0x70 ip_local_deliver+0x68/0x120 ip_sublist_rcv_finish+0x70/0x94 ip0_list_rcv_finish.constprop.x c/0x1d0 ip_sublist_rcv+0x40/0xb0 ip_list_rcv+0x140/0x1dc
    __netif_receive_skb_list_core+0x154/0x28c __netif_receive_skb_list+0x120/0x1a0 netif_receive_skb_list_internal+0xe4/0x1f0 napi_complete_done+0x70/0x1f0 gro_cell_poll+0x9c/0xb0 napi_poll+0xcc/0x264 net_rx_action+0xd4/0x21c __do_softirq+0x130/0x358 irq_exit+0x11c/0x13c
    __handle_domain_irq+0x88/0xf0 gic_handle_irq+0x78/0x2c0 el1_irq+0xb8/0x140 arch_cpu_idle+0x18/0x40 default_idle_call+0x5c/0x1c0 cpuidle_idle_call+0x174/0x1b0 do_idle+0xc8/0x160 cpu_startup_entry+0x30/0x11c secondary_start_kernel+0x158/0x1e4 softirq: huh, entered softirq 3 NET_RX 0000000093774ee4 with preempt_count 00000100以 fffffe00 結束嗎(CVE-2022-50171)

請注意，Nessus 依賴供應商報告的套件存在。

リモートの SUSE Linux SLES15 / SLES_SAP15 ホストには、SUSE-SU-2025:02537-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    SUSE Linux Enterprise 15 SP4 カーネルが更新され、さまざまなセキュリティバグ修正が行われています。


    次のセキュリティバグを修正しました。

    - CVE-2021-47557: net/sched: sch_ets:「nbands」を超えるクラスをピークしません (bsc#1207361 bsc#1225468)。
    - CVE-2021-47595:net/sched: sch_ets: アイドルクラスをラウンドロビンリストから削除しません (bsc#1207361 bsc#1226552)。
    - CVE-2023-52924: netfilter: nf_tables: ウォーク中に期限切れの要素をスキップしない (bsc#1236821)。
    - CVE-2023-52925: netfilter: nf_tables: 重複の期限が切れた場合、挿入が失敗しません (bsc#1236822)。
    - CVE-2024-26808: netfilter: nft_chain_filter: inet/ingress basechain の NETDEV_UNREGISTER を処理します (bsc#1222634)。
    - CVE-2024-26924: scsi: lpfc: lpfc_worker_wake_up() を呼び出す前に hbalock をリリースします (bsc#1225820)。
    - CVE-2024-27397: kabi: ホールに設定された nftables に必要な tstamp を配置します (bsc#1224095)。
    - CVE-2024-36978: net: sched: sch_multiq: multiq_tune() で発生する可能性のある OOB 書き込みを修正 (bsc#1226514)。
    - CVE-2024-46800: sch/netem: netem_dequeue のメモリ解放後使用 (Use After Free) を修正 (bsc#1230827)。
    - CVE-2024-53057: net/sched: TC_H_ROOT の qdisc_tree_reduce_backlog を停止します (bsc#1233551)。
    - CVE-2024-53125: bpf: sync_linked_regs() は subreg_def を保存する必要がある (bsc#1234156)。
    - CVE-2024-53141: netfilter: ipset: bitmap_ip_uadt で欠落している範囲チェックを追加 (bsc#1234381)。
    - CVE-2024-56770: sch/netem: netem_dequeue のメモリ解放後使用 (Use After Free) を修正 (bsc#1235637)。
    - CVE-2024-57947: netfilter: nf_set_pipapo: 初期マップの塗りつぶしを修正 (bsc#1236333)。
    - CVE-2025-21700: net: sched: ある親から別の親への子 qdisc の置換を許可しません (bsc#1237159)。
    - CVE-2025-21702: pfifo_tail_enqueue: sch->limit == 0 の場合、新しいパケットをドロップします (bsc#1237312)。
    - CVE-2025-21703: netem: qdisc_tree_reduce_backlog() の前に sch->q.qlen を更新 (bsc#1237313)。
    - CVE-2025-21756: vsock: トランスポートリリース後にソケットを孤立させます (bsc#1238876)。
    - CVE-2025-23141: KVM: x86: KVM_GET_MP_STATE の SRCU を取得し、ゲストメモリアクセスを保護します (bsc#1242782)。
    - CVE-2025-37752: net_sched: sch_sfq: 制限検証を移動します (bsc#1242504)。
    - CVE-2025-37797: net_sched: hfsc: クラス処理での UAF 脆弱性を修正します (bsc#1242417)。
    - CVE-2025-37823: net_sched: hfsc: hfsc_dequeue() にある潜在的な UAF も修正します (bsc#1242924)。
    - CVE-2025-37890: net_sched: hfsc: netem を子 qdisc として持つクラスの UAF 脆弱性を修正 (bsc#1243330)。
    - CVE-2025-37997: netfilter: ipset: ハッシュ型のリージョンロックを修正 (bsc#1243832)。
    - CVE-2025-38000: sch_hfsc: hfsc_enqueue() のピークを使用する際の qlen アカウンティングのバグを修正 (bsc#1244277)。
    - CVE-2025-38001: net_sched: hfsc: eltree にクラスを 2 回追加する再入可能エンキューに対処 (bsc#1244234)。
    - CVE-2025-38014: dmaengine: idxd: idxd_cleanup() ヘルパーで削除の呼び出しをリファクタリングします (bsc#1244732)。
    - CVE-2025-38083: net_sched: prio: prio_tune() 内の競合を修正します (bsc#1245183)。


Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - cryptohisilicon/sec - softirq の時はスリープしない。softirq の際にパケットの暗号化を解除および復号化するために kunpeng920 暗号化ドライバーが使用される時、mutex ロックの使用は許可されません。カーネルは次のエラーを報告します。BUG: scheduling while atomic: swapper/57/0/0x00000300 Call trace:
    dump_backtrace+0x0/0x1e4 show_stack+0x20/0x2c dump_stack+0xd8/0x140 __schedule_bug+0x68/0x80
    __schedule+0x728/0x840 schedule+0x50/0xe0 schedule_preempt_disabled+0x18/0x24
    __mutex_lock.constprop.0+0x594/0x5dc __mutex_lock_slowpath+0x1c/0x30 mutex_lock+0x50/0x60 sec_request_init+0x8c/0x1a0 [hisi_sec2] sec_process+0x28/0x1ac [hisi_sec2] sec_skcipher_crypto+0xf4/0x1d4 [hisi_sec2] sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2 ] crypto_skcipher_encrypt+0x2c/0x40 crypto_authenc_encrypt+0xc8/0xfc [authenc] crypto_aead_encrypt+0x2c/0x40 echainiv_encrypt+0x144/0x1a0 [echainiv] crypto_aead_encrypt+0x2c/0x40 esp_output_tail+0x348/0x5c0 [esp4] esp_output+0x120/0x19c [esp4] xfrm_output_one+ 0x25c/0x4d4 xfrm_output_resume+0x6c/0x1fc xfrm_output+0xac/0x3c0 xfrm4_output+0x64/0x130 ip_build_and_send_pkt+0x158/0x20c tcp_v4_send_synack+0xdc/0x1f0 tcp_conn_request+0x7d0/0x994 tcp_v4_conn_request+0x58/0x6c tcp_v6_conn_request+0xf0/0x100 tcp_rcv_state_process+0x1cc/0xd60 tcp_v4_do_rcv+ 0x10c/0x250 tcp_v4_rcv+0xfc4/0x10a4 ip_protocol_deliver_rcu+0xf4/0x200 ip_local_deliver_finish+0x58/0x70 ip_local_deliver+0x68/0x120 ip_sublist_rcv_finish+0x70/0x94 ip_list_rcv_finish+0x10000000000000000000000 c/0x1d0 ip_sublist_rcv+0x40/0xb0 ip_list_rcv+0x140/0x1dc
    __netif_receive_skb_list_core+0x154/0x28c __netif_receive_skb_list+0x120/0x1a0 netif_receive_skb_list_internal+0xe4/0x1f0 napi_complete_done+0x70/0x1f0 gro_cell_poll+0x9c/0xb0 napi_poll+0xcc/0x264 net_rx_action+0xd4/0x21c __do_softirq+0x130/0x358 irq_exit+0x11c/0x13c
    __handle_domain_irq+0x88/0xf0 gic_handle_irq+0x78/0x2c0 el1_irq+0xb8/0x140 arch_cpu_idle+0x18/0x40 default_idle_call+0x5c/0x1c0 cpuidle_idle_call+0x174/0x1b0 do_idle+0xc8/0x160 cpu_startup_entry+0x30/0x11c secondary_start_kernel+0x158/0x1e4 softirq: huh, entered softirq 3 NET_RX 0000000093774ee4 preempt_count 00000100 で、fffffe00 で終了しましたか?CVE-2022-50171

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

リモートの SUSE Linux SLES15 / SLES_SAP15 ホストには、SUSE-SU-2025:02264-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    SUSE Linux Enterprise 15 SP5 カーネルが更新され、さまざまなセキュリティバグ修正が行われています。


    次のセキュリティバグを修正しました。

    - CVE-2021-47557: net/sched: sch_ets:「nbands」を超えるクラスをピークしません (bsc#1207361 bsc#1225468)。
    - CVE-2021-47595:net/sched: sch_ets: アイドルクラスをラウンドロビンリストから削除しません (bsc#1207361 bsc#1226552)。
    - CVE-2023-52924: netfilter: nf_tables: ウォーク中に期限切れの要素をスキップしない (bsc#1236821)。
    - CVE-2023-52925: netfilter: nf_tables: 重複の期限が切れた場合、挿入が失敗しません (bsc#1236822)。
    - CVE-2024-26808: netfilter: nft_chain_filter: inet/ingress basechain の NETDEV_UNREGISTER を処理します (bsc#1222634)。
    - CVE-2024-26924: scsi: lpfc: lpfc_worker_wake_up() を呼び出す前に hbalock をリリースします (bsc#1225820)。
    - CVE-2024-27397: kabi: ホールに設定された nftables に必要な tstamp を配置します (bsc#1224095)。
    - CVE-2024-36978: net: sched: sch_multiq: multiq_tune() で発生する可能性のある OOB 書き込みを修正 (bsc#1226514)。
    - CVE-2024-46800: sch/netem: netem_dequeue のメモリ解放後使用 (Use After Free) を修正 (bsc#1230827)。
    - CVE-2024-53125: bpf: sync_linked_regs() は subreg_def を保存する必要がある (bsc#1234156)。
    - CVE-2024-53141: netfilter: ipset: bitmap_ip_uadt で欠落している範囲チェックを追加 (bsc#1234381)。
    - CVE-2024-53197: ALSA: usb-audio: Extigy および Mbox デバイスの潜在的な領域外アクセスを修正 (bsc#1235464)。
    - CVE-2024-56770: sch/netem: netem_dequeue のメモリ解放後使用 (Use After Free) を修正 (bsc#1235637)。
    - CVE-2025-21700: net: sched: ある親から別の親への子 qdisc の置換を許可しません (bsc#1237159)。
    - CVE-2025-21702: pfifo_tail_enqueue: sch->limit == 0 の場合、新しいパケットをドロップします (bsc#1237312)。
    - CVE-2025-21703: netem: qdisc_tree_reduce_backlog() の前に sch->q.qlen を更新 (bsc#1237313)。
    - CVE-2025-21756: vsock: トランスポートリリース後にソケットを孤立させます (bsc#1238876)。
    - CVE-2025-23141: KVM: x86: KVM_GET_MP_STATE の SRCU を取得し、ゲストメモリアクセスを保護します (bsc#1242782)。
    - CVE-2025-37752: net_sched: sch_sfq: 制限検証を移動します (bsc#1242504)。
    - CVE-2025-37823: net_sched: hfsc: hfsc_dequeue() にある潜在的な UAF も修正します (bsc#1242924)。
    - CVE-2025-37890: net_sched: hfsc: netem を子 qdisc として持つクラスの UAF 脆弱性を修正 (bsc#1243330)。
    - CVE-2025-37997: netfilter: ipset: ハッシュ型のリージョンロックを修正 (bsc#1243832)。
    - CVE-2025-38000: sch_hfsc: hfsc_enqueue() のピークを使用する際の qlen アカウンティングのバグを修正 (bsc#1244277)。
    - CVE-2025-38001: net_sched: hfsc: eltree にクラスを 2 回追加する再入可能エンキューに対処 (bsc#1244234)。
    - CVE-2025-38014: dmaengine: idxd: idxd_cleanup() ヘルパーで削除の呼び出しをリファクタリングします (bsc#1244732)。
    - CVE-2025-38060: bpf: env->cur_state->loop_entry != NULL の場合、検証を中止します (bsc#1245155)。
    - CVE-2025-38083: net_sched: prio: prio_tune() 内の競合を修正します (bsc#1245183)。


Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - crypto: hisilicon/sec - don't sleep when in softirq When kunpeng920 encryption driver is used to deencrypt     and decrypt packets during the softirq, it is not allowed to use mutex lock. The kernel will report the     following error: BUG: scheduling while atomic: swapper/57/0/0x00000300 Call trace:
    dump_backtrace+0x0/0x1e4 show_stack+0x20/0x2c dump_stack+0xd8/0x140 __schedule_bug+0x68/0x80
    __schedule+0x728/0x840 schedule+0x50/0xe0 schedule_preempt_disabled+0x18/0x24
    __mutex_lock.constprop.0+0x594/0x5dc __mutex_lock_slowpath+0x1c/0x30 mutex_lock+0x50/0x60     sec_request_init+0x8c/0x1a0 [hisi_sec2] sec_process+0x28/0x1ac [hisi_sec2] sec_skcipher_crypto+0xf4/0x1d4     [hisi_sec2] sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2] crypto_skcipher_encrypt+0x2c/0x40     crypto_authenc_encrypt+0xc8/0xfc [authenc] crypto_aead_encrypt+0x2c/0x40 echainiv_encrypt+0x144/0x1a0     [echainiv] crypto_aead_encrypt+0x2c/0x40 esp_output_tail+0x348/0x5c0 [esp4] esp_output+0x120/0x19c [esp4]     xfrm_output_one+0x25c/0x4d4 xfrm_output_resume+0x6c/0x1fc xfrm_output+0xac/0x3c0 xfrm4_output+0x64/0x130     ip_build_and_send_pkt+0x158/0x20c tcp_v4_send_synack+0xdc/0x1f0 tcp_conn_request+0x7d0/0x994     tcp_v4_conn_request+0x58/0x6c tcp_v6_conn_request+0xf0/0x100 tcp_rcv_state_process+0x1cc/0xd60     tcp_v4_do_rcv+0x10c/0x250 tcp_v4_rcv+0xfc4/0x10a4 ip_protocol_deliver_rcu+0xf4/0x200     ip_local_deliver_finish+0x58/0x70 ip_local_deliver+0x68/0x120 ip_sublist_rcv_finish+0x70/0x94     ip_list_rcv_finish.constprop.0+0x17c/0x1d0 ip_sublist_rcv+0x40/0xb0 ip_list_rcv+0x140/0x1dc
    __netif_receive_skb_list_core+0x154/0x28c __netif_receive_skb_list+0x120/0x1a0     netif_receive_skb_list_internal+0xe4/0x1f0 napi_complete_done+0x70/0x1f0 gro_cell_poll+0x9c/0xb0     napi_poll+0xcc/0x264 net_rx_action+0xd4/0x21c __do_softirq+0x130/0x358 irq_exit+0x11c/0x13c
    __handle_domain_irq+0x88/0xf0 gic_handle_irq+0x78/0x2c0 el1_irq+0xb8/0x140 arch_cpu_idle+0x18/0x40     default_idle_call+0x5c/0x1c0 cpuidle_idle_call+0x174/0x1b0 do_idle+0xc8/0x160 cpu_startup_entry+0x30/0x11c     secondary_start_kernel+0x158/0x1e4 softirq: huh, entered softirq 3 NET_RX 0000000093774ee4 with     preempt_count 00000100, exited with fffffe00? (CVE-2022-50171)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992549 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: hisilicon/sec - don't sleep when in softirq

    When kunpeng920 encryption driver is used to deencrypt and decrypt     packets during the softirq, it is not allowed to use mutex lock. The     kernel will report the following error:

    BUG: scheduling while atomic: swapper/57/0/0x00000300     Call trace:
    dump_backtrace+0x0/0x1e4     show_stack+0x20/0x2c     dump_stack+0xd8/0x140
    __schedule_bug+0x68/0x80
    __schedule+0x728/0x840     schedule+0x50/0xe0     schedule_preempt_disabled+0x18/0x24
    __mutex_lock.constprop.0+0x594/0x5dc
    __mutex_lock_slowpath+0x1c/0x30     mutex_lock+0x50/0x60     sec_request_init+0x8c/0x1a0 [hisi_sec2]     sec_process+0x28/0x1ac [hisi_sec2]     sec_skcipher_crypto+0xf4/0x1d4 [hisi_sec2]     sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2]     crypto_skcipher_encrypt+0x2c/0x40     crypto_authenc_encrypt+0xc8/0xfc [authenc]     crypto_aead_encrypt+0x2c/0x40     echainiv_encrypt+0x144/0x1a0 [echainiv]     crypto_aead_encrypt+0x2c/0x40     esp_output_tail+0x348/0x5c0 [esp4]     esp_output+0x120/0x19c [esp4]     xfrm_output_one+0x25c/0x4d4     xfrm_output_resume+0x6c/0x1fc     xfrm_output+0xac/0x3c0     xfrm4_output+0x64/0x130     ip_build_and_send_pkt+0x158/0x20c     tcp_v4_send_synack+0xdc/0x1f0     tcp_conn_request+0x7d0/0x994     tcp_v4_conn_request+0x58/0x6c     tcp_v6_conn_request+0xf0/0x100     tcp_rcv_state_process+0x1cc/0xd60     tcp_v4_do_rcv+0x10c/0x250     tcp_v4_rcv+0xfc4/0x10a4     ip_protocol_deliver_rcu+0xf4/0x200     ip_local_deliver_finish+0x58/0x70     ip_local_deliver+0x68/0x120     ip_sublist_rcv_finish+0x70/0x94     ip_list_rcv_finish.constprop.0+0x17c/0x1d0     ip_sublist_rcv+0x40/0xb0     ip_list_rcv+0x140/0x1dc
    __netif_receive_skb_list_core+0x154/0x28c
    __netif_receive_skb_list+0x120/0x1a0     netif_receive_skb_list_internal+0xe4/0x1f0     napi_complete_done+0x70/0x1f0     gro_cell_poll+0x9c/0xb0     napi_poll+0xcc/0x264     net_rx_action+0xd4/0x21c
    __do_softirq+0x130/0x358     irq_exit+0x11c/0x13c
    __handle_domain_irq+0x88/0xf0     gic_handle_irq+0x78/0x2c0     el1_irq+0xb8/0x140     arch_cpu_idle+0x18/0x40     default_idle_call+0x5c/0x1c0     cpuidle_idle_call+0x174/0x1b0     do_idle+0xc8/0x160     cpu_startup_entry+0x30/0x11c     secondary_start_kernel+0x158/0x1e4     softirq: huh, entered softirq 3 NET_RX 0000000093774ee4 with     preempt_count 00000100, exited with fffffe00?

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02264-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
    - CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361     bsc#1226552).
    - CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
    - CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
    - CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain     (bsc#1222634).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
    - CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
    - CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices     (bsc#1235464).
    - CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
    - CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
    - CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses     (bsc#1242782).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1243330).
    - CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
    - CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
    - CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
    - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007475 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: hisilicon/sec - don't sleep when in softirq

    When kunpeng920 encryption driver is used to deencrypt and decrypt     packets during the softirq, it is not allowed to use mutex lock. The     kernel will report the following error:

    BUG: scheduling while atomic: swapper/57/0/0x00000300     Call trace:
    dump_backtrace+0x0/0x1e4     show_stack+0x20/0x2c     dump_stack+0xd8/0x140
    __schedule_bug+0x68/0x80
    __schedule+0x728/0x840     schedule+0x50/0xe0     schedule_preempt_disabled+0x18/0x24
    __mutex_lock.constprop.0+0x594/0x5dc
    __mutex_lock_slowpath+0x1c/0x30     mutex_lock+0x50/0x60     sec_request_init+0x8c/0x1a0 [hisi_sec2]     sec_process+0x28/0x1ac [hisi_sec2]     sec_skcipher_crypto+0xf4/0x1d4 [hisi_sec2]     sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2]     crypto_skcipher_encrypt+0x2c/0x40     crypto_authenc_encrypt+0xc8/0xfc [authenc]     crypto_aead_encrypt+0x2c/0x40     echainiv_encrypt+0x144/0x1a0 [echainiv]     crypto_aead_encrypt+0x2c/0x40     esp_output_tail+0x348/0x5c0 [esp4]     esp_output+0x120/0x19c [esp4]     xfrm_output_one+0x25c/0x4d4     xfrm_output_resume+0x6c/0x1fc     xfrm_output+0xac/0x3c0     xfrm4_output+0x64/0x130     ip_build_and_send_pkt+0x158/0x20c     tcp_v4_send_synack+0xdc/0x1f0     tcp_conn_request+0x7d0/0x994     tcp_v4_conn_request+0x58/0x6c     tcp_v6_conn_request+0xf0/0x100     tcp_rcv_state_process+0x1cc/0xd60     tcp_v4_do_rcv+0x10c/0x250     tcp_v4_rcv+0xfc4/0x10a4     ip_protocol_deliver_rcu+0xf4/0x200     ip_local_deliver_finish+0x58/0x70     ip_local_deliver+0x68/0x120     ip_sublist_rcv_finish+0x70/0x94     ip_list_rcv_finish.constprop.0+0x17c/0x1d0     ip_sublist_rcv+0x40/0xb0     ip_list_rcv+0x140/0x1dc
    __netif_receive_skb_list_core+0x154/0x28c
    __netif_receive_skb_list+0x120/0x1a0     netif_receive_skb_list_internal+0xe4/0x1f0     napi_complete_done+0x70/0x1f0     gro_cell_poll+0x9c/0xb0     napi_poll+0xcc/0x264     net_rx_action+0xd4/0x21c
    __do_softirq+0x130/0x358     irq_exit+0x11c/0x13c
    __handle_domain_irq+0x88/0xf0     gic_handle_irq+0x78/0x2c0     el1_irq+0xb8/0x140     arch_cpu_idle+0x18/0x40     default_idle_call+0x5c/0x1c0     cpuidle_idle_call+0x174/0x1b0     do_idle+0xc8/0x160     cpu_startup_entry+0x30/0x11c     secondary_start_kernel+0x158/0x1e4     softirq: huh, entered softirq 3 NET_RX 0000000093774ee4 with     preempt_count 00000100, exited with fffffe00?

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992739 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: hisilicon/sec - don't sleep when in softirq

    When kunpeng920 encryption driver is used to deencrypt and decrypt     packets during the softirq, it is not allowed to use mutex lock. The     kernel will report the following error:

    BUG: scheduling while atomic: swapper/57/0/0x00000300     Call trace:
    dump_backtrace+0x0/0x1e4     show_stack+0x20/0x2c     dump_stack+0xd8/0x140
    __schedule_bug+0x68/0x80
    __schedule+0x728/0x840     schedule+0x50/0xe0     schedule_preempt_disabled+0x18/0x24
    __mutex_lock.constprop.0+0x594/0x5dc
    __mutex_lock_slowpath+0x1c/0x30     mutex_lock+0x50/0x60     sec_request_init+0x8c/0x1a0 [hisi_sec2]     sec_process+0x28/0x1ac [hisi_sec2]     sec_skcipher_crypto+0xf4/0x1d4 [hisi_sec2]     sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2]     crypto_skcipher_encrypt+0x2c/0x40     crypto_authenc_encrypt+0xc8/0xfc [authenc]     crypto_aead_encrypt+0x2c/0x40     echainiv_encrypt+0x144/0x1a0 [echainiv]     crypto_aead_encrypt+0x2c/0x40     esp_output_tail+0x348/0x5c0 [esp4]     esp_output+0x120/0x19c [esp4]     xfrm_output_one+0x25c/0x4d4     xfrm_output_resume+0x6c/0x1fc     xfrm_output+0xac/0x3c0     xfrm4_output+0x64/0x130     ip_build_and_send_pkt+0x158/0x20c     tcp_v4_send_synack+0xdc/0x1f0     tcp_conn_request+0x7d0/0x994     tcp_v4_conn_request+0x58/0x6c     tcp_v6_conn_request+0xf0/0x100     tcp_rcv_state_process+0x1cc/0xd60     tcp_v4_do_rcv+0x10c/0x250     tcp_v4_rcv+0xfc4/0x10a4     ip_protocol_deliver_rcu+0xf4/0x200     ip_local_deliver_finish+0x58/0x70     ip_local_deliver+0x68/0x120     ip_sublist_rcv_finish+0x70/0x94     ip_list_rcv_finish.constprop.0+0x17c/0x1d0     ip_sublist_rcv+0x40/0xb0     ip_list_rcv+0x140/0x1dc
    __netif_receive_skb_list_core+0x154/0x28c
    __netif_receive_skb_list+0x120/0x1a0     netif_receive_skb_list_internal+0xe4/0x1f0     napi_complete_done+0x70/0x1f0     gro_cell_poll+0x9c/0xb0     napi_poll+0xcc/0x264     net_rx_action+0xd4/0x21c
    __do_softirq+0x130/0x358     irq_exit+0x11c/0x13c
    __handle_domain_irq+0x88/0xf0     gic_handle_irq+0x78/0x2c0     el1_irq+0xb8/0x140     arch_cpu_idle+0x18/0x40     default_idle_call+0x5c/0x1c0     cpuidle_idle_call+0x174/0x1b0     do_idle+0xc8/0x160     cpu_startup_entry+0x30/0x11c     secondary_start_kernel+0x158/0x1e4     softirq: huh, entered softirq 3 NET_RX 0000000093774ee4 with     preempt_count 00000100, exited with fffffe00?

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02537-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
    - CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361     bsc#1226552).
    - CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
    - CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
    - CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain     (bsc#1222634).
    - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
    - CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
    - CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
    - CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
    - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
    - CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
    - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
    - CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
    - CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
    - CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
    - CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
    - CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
    - CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
    - CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses     (bsc#1242782).
    - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
    - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
    - CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
    - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc     (bsc#1243330).
    - CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
    - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
    - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
    - CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
    - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
243993	Linux Distros 未修补的漏洞：CVE-2022-50171	Nessus	Misc.	2025/8/6	2026/7/17	medium
243993	Linux Distros 未修補的弱點：CVE-2022-50171	Nessus	Misc.	2025/8/6	2026/7/17	medium
242951	SUSE SLES15 セキュリティ更新 : kernel (SUSE-SU-2025:02537-1)	Nessus	SuSE Local Security Checks	2025/7/29	2026/6/25	high
243993	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50171	Nessus	Misc.	2025/8/6	2026/7/17	medium
241963	SUSE SLES15 セキュリティ更新 : kernel (SUSE-SU-2025:02264-1)	Nessus	SuSE Local Security Checks	2025/7/11	2026/6/25	high
297598	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1212)	Nessus	Huawei Local Security Checks	2026/2/2	2026/2/4	high
243993	Linux Distros Unpatched Vulnerability : CVE-2022-50171	Nessus	Misc.	2025/8/6	2026/7/17	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/3/23	high
280217	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992549)	Nessus	Unity Linux Local Security Checks	2025/12/30	2025/12/30	medium
241963	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:02264-1)	Nessus	SuSE Local Security Checks	2025/7/11	2026/6/25	high
302981	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-1637)	Nessus	Huawei Local Security Checks	2026/3/18	2026/3/18	high
307162	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007475)	Nessus	Unity Linux Local Security Checks	2026/4/17	2026/4/21	medium
281381	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992739)	Nessus	Unity Linux Local Security Checks	2025/12/31	2025/12/31	medium
242951	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:02537-1)	Nessus	SuSE Local Security Checks	2025/7/29	2026/6/25	high
297592	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1224)	Nessus	Huawei Local Security Checks	2026/2/2	2026/2/4	high
302971	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-1629)	Nessus	Huawei Local Security Checks	2026/3/18	2026/3/18	high

检测

插件搜索

medium

medium

high

medium

high

high

medium

high

medium

high

high

medium

medium

high

high

high