Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - netethernetti修正 netcp_ndo_start_xmit() 的傳回類型 透過 clang 的核心控制流程完整性 (kCFI、CONFIG_CFI_CLANG)可針對預期的函式指標原型驗證間接呼叫目標以確保呼叫目標有效有助於減輕 ROP 攻擊。如果不同則執行時會發生失敗其表現形式為核心錯誤或執行緒遭到終止。clang 中的一個建議警告旨在於編譯時擷取這些警告其顯示：
    drivers/net/ethernet/ti/netcp_core.c:1944:21錯誤初始化「netdev_tx_t (*)(struct sk_buff *, struct net_device *)」(即「enum netdev_tx (*)(struct sk_buff *)) 的不相容函式指標類型struct net_device *)') 具有 'int (struct sk_buff *, struct net_device *)' 類型的運算式 [-Werror,-Wincompatible-function-pointer-types-strict] .ndo_start_xmit = netcp_ndo_start_xmit^~~~~ ~~~~ ~ ~ ~ ~ 產生 1 個錯誤。 ->struct net_device_ops 中的 ndo_start_xmit() 預期傳回類型為「netdev_tx_t」而非「int」。調整 netcp_ndo_start_xmit() 的傳回類型以符合原型的 以解決警告和 CFI 失敗。 (CVE-2022-50486)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - netethernetti修复 netcp_ndo_start_xmit() 的返回类型 通过 clang 的内核控制流完整性kCFI、CONFIG_CFI_CLANG会对照预期函数指针原型验证间接调用目标以确保调用目标有效从而帮助缓解 ROP 攻击。如果它们不同，则运行时会出错，表现为内核错误或线程被终止。clang 中提议的警告旨在在编译时捕获这些警告该警告揭示了
    drivers/net/ethernet/ti/netcp_core.c:1944:21错误不兼容的函数指针类型初始化“netdev_tx_t (*)(struct sk_buff *, struct net_device *)”又称为“enum netdev_tx (*)(struct sk_buff * , struct net_device *)') 类型的表达式“int (struct sk_buff *, struct net_device *)”[-Werror,-Wincompatible-function-pointer-types-strict] .ndo_start_xmit = netcp_ndo_start_xmit^ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ 已生成 1 个错误。 “struct net_device_ops”中的 ->ndo_start_xmit() 预期返回类型为“netdev_tx_t”而非“int”。调整 netcp_ndo_start_xmit() 的返回类型以匹配原型从而解决警告和 CFI 失败。 (CVE-2022-50486)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - netethernettinetcp_ndo_start_xmit() の戻り値の型を修正 clang のカーネルコントロールフロー整合性kCFI、CONFIG_CFI_CLANGで、間接呼び出しターゲットが期待される関数ポインタープロトタイプに対して検証され、呼び出しターゲットが有効であることを確認し、ROP 攻撃を緩和します。同一でない場合は、実行時にエラーが発生し、カーネルパニックまたはスレッドの強制終了として現れます。clang で提案された警告は、コンパイル時にこれらをキャッチすることを目的としています。これにより、以下が明らかになります。
    drivers/net/ethernet/ti/netcp_core.c:1944:21エラー「netdev_tx_t*」struct sk_buff *, struct net_device *を初期化する互換性のない関数ポインタータイプ別名「enum netdev_tx*」struct sk_buff * 、型「int (struct sk_buff *, struct net_device *)」の式付きの struct net_device *)」を行います。[-Werror,-Wincompatible-function-pointer-types-strict] .ndo_start_xmit = netcp_ndo_start_xmit,^~~~~ ~~~~~~~~~~~ 1 エラーが生成されました。 ->「struct net_device_ops」の ndo_start_xmit() は、「int」ではなく「netdev_tx_t」の戻り値タイプを予期します。netcp_ndo_start_xmit() の戻り値型を調整し、プロトタイプのものと一致させて、警告と CFI エラーを解決します。CVE-2022-50486

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006948 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()

    With clang's kernel control flow integrity (kCFI, CONFIG_CFI_CLANG),     indirect call targets are validated against the expected function     pointer prototype to make sure the call target is valid to help mitigate     ROP attacks. If they are not identical, there is a failure at run time,     which manifests as either a kernel panic or thread getting killed. A     proposed warning in clang aims to catch these at compile time, which     reveals:

      drivers/net/ethernet/ti/netcp_core.c:1944:21: error: incompatible function pointer types initializing     'netdev_tx_t (*)(struct sk_buff *, struct net_device *)' (aka 'enum netdev_tx (*)(struct sk_buff *, struct     net_device *)') with an expression of type 'int (struct sk_buff *, struct net_device *)'     [-Werror,-Wincompatible-function-pointer-types-strict]               .ndo_start_xmit         = netcp_ndo_start_xmit,                                         ^~~~~~~~~~~~~~~~~~~~       1 error generated.

    ->ndo_start_xmit() in 'struct net_device_ops' expects a return type of     'netdev_tx_t', not 'int'. Adjust the return type of     netcp_ndo_start_xmit() to match the prototype's to resolve the warning     and CFI failure.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() With clang's kernel control flow integrity     (kCFI, CONFIG_CFI_CLANG), indirect call targets are validated against the expected function pointer     prototype to make sure the call target is valid to help mitigate ROP attacks. If they are not identical,     there is a failure at run time, which manifests as either a kernel panic or thread getting killed. A     proposed warning in clang aims to catch these at compile time, which reveals:
    drivers/net/ethernet/ti/netcp_core.c:1944:21: error: incompatible function pointer types initializing     'netdev_tx_t (*)(struct sk_buff *, struct net_device *)' (aka 'enum netdev_tx (*)(struct sk_buff *, struct     net_device *)') with an expression of type 'int (struct sk_buff *, struct net_device *)'     [-Werror,-Wincompatible-function-pointer-types-strict] .ndo_start_xmit = netcp_ndo_start_xmit,     ^~~~~~~~~~~~~~~~~~~~ 1 error generated. ->ndo_start_xmit() in 'struct net_device_ops' expects a return     type of 'netdev_tx_t', not 'int'. Adjust the return type of netcp_ndo_start_xmit() to match the     prototype's to resolve the warning and CFI failure. (CVE-2022-50486)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011136 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()

    With clang's kernel control flow integrity (kCFI, CONFIG_CFI_CLANG),     indirect call targets are validated against the expected function     pointer prototype to make sure the call target is valid to help mitigate     ROP attacks. If they are not identical, there is a failure at run time,     which manifests as either a kernel panic or thread getting killed. A     proposed warning in clang aims to catch these at compile time, which     reveals:

      drivers/net/ethernet/ti/netcp_core.c:1944:21: error: incompatible function pointer types initializing     'netdev_tx_t (*)(struct sk_buff *, struct net_device *)' (aka 'enum netdev_tx (*)(struct sk_buff *, struct     net_device *)') with an expression of type 'int (struct sk_buff *, struct net_device *)'     [-Werror,-Wincompatible-function-pointer-types-strict]               .ndo_start_xmit         = netcp_ndo_start_xmit,                                         ^~~~~~~~~~~~~~~~~~~~       1 error generated.

    ->ndo_start_xmit() in 'struct net_device_ops' expects a return type of     'netdev_tx_t', not 'int'. Adjust the return type of     netcp_ndo_start_xmit() to match the prototype's to resolve the warning     and CFI failure.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
269382	Linux Distros 未修補的弱點：CVE-2022-50486	Nessus	Misc.	2025/10/8	2026/1/14	high
269382	Linux Distros 未修补的漏洞：CVE-2022-50486	Nessus	Misc.	2025/10/8	2026/1/14	high
269382	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50486	Nessus	Misc.	2025/10/8	2026/1/14	high
308287	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006948)	Nessus	Unity Linux Local Security Checks	2026/4/21	2026/4/21	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/3/23	high
269382	Linux Distros Unpatched Vulnerability : CVE-2022-50486	Nessus	Misc.	2025/10/8	2026/1/14	high
308573	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011136)	Nessus	Unity Linux Local Security Checks	2026/4/21	2026/4/21	medium

检测

插件搜索

high

high

high

medium

high

high

medium