Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - hwrnggeode - 修复由 pci_get_device() 实现的 for_each_pci_dev() 的 PCI 设备引用计数泄漏。pci_get_device() 的注释称其将会增加返回的 pci_dev 的引用计数同时会减少输入 pci_dev @from 的引用计数如果其不为 NULL。如果中断 pdev 不为 NULL 的 for_each_pci_dev() 循环则需要调用 pci_dev_put() 以减少引用计数。
    我们添加了一个新的 struct“amd_geode_priv”以记录 pci_dev 和 membase 的指针然后为正常和错误路径添加缺少的 pci_dev_put()。 (CVE-2022-50659)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - hwrnggeode - 修正由 pci_get_device() 實作的 PCI 裝置 refcount 洩漏 (for_each_pci_dev())。pci_get_device() 的註解指出其會增加已傳回之 pci_dev 的參照計數同時也會減少輸入 pci_dev @from (若不是 NULL) 的參照計數。如果我們在 pdev 不是 NULL 的情況下中斷 for_each_pci_dev() 迴圈則需要呼叫 pci_dev_put() 以減少參照計數。
    我們新增結構「amd_geode_priv」以記錄 pci_dev 和 membase 的指標然後針對正常和錯誤路徑新增缺少的 pci_dev_put()。 (CVE-2022-50659)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - hwrnggeode - PCI デバイス refcount の漏洩を修正します for_each_pci_dev() は、pci_get_device() により実装されます。pci_get_device() のコメントは、返される pci_dev の参照カウントを増加させ、また NULL でない場合、入力 pci_dev @from の参照カウントを減少させることを報告しています。NULL ではない pdev で for_each_pci_dev() ループを中断する場合、pci_dev_put() を呼び出して参照カウントを減らす必要があります。
    新しい構造体「amd_geode_priv」を pci_dev および membase のレコードポインターに追加し、通常およびエラーパスに対して欠落している pci_dev_put() を追加します。CVE-2022-50659

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - hwrng: geode - Fix PCI device refcount leak for_each_pci_dev() is implemented by pci_get_device(). The     comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and     also decrease the reference count for the input pci_dev @from if it is not NULL. If we break     for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count.
    We add a new struct 'amd_geode_priv' to record pointer of the pci_dev and membase, and then add missing     pci_dev_put() for the normal and error path. (CVE-2022-50659)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010805 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: geode - Fix PCI device refcount leak

    for_each_pci_dev() is implemented by pci_get_device(). The comment of     pci_get_device() says that it will increase the reference count for the     returned pci_dev and also decrease the reference count for the input     pci_dev @from if it is not NULL.

    If we break for_each_pci_dev() loop with pdev not NULL, we need to call     pci_dev_put() to decrease the reference count. We add a new struct     'amd_geode_priv' to record pointer of the pci_dev and membase, and then     add missing pci_dev_put() for the normal and error path.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013795 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: geode - Fix PCI device refcount leak

    for_each_pci_dev() is implemented by pci_get_device(). The comment of     pci_get_device() says that it will increase the reference count for the     returned pci_dev and also decrease the reference count for the input     pci_dev @from if it is not NULL.

    If we break for_each_pci_dev() loop with pdev not NULL, we need to call     pci_dev_put() to decrease the reference count. We add a new struct     'amd_geode_priv' to record pointer of the pci_dev and membase, and then     add missing pci_dev_put() for the normal and error path.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
278317	Linux Distros 未修补的漏洞：CVE-2022-50659	Nessus	Misc.	2025/12/11	2026/2/4	medium
278317	Linux Distros 未修補的弱點：CVE-2022-50659	Nessus	Misc.	2025/12/11	2026/2/4	medium
278317	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50659	Nessus	Misc.	2025/12/11	2026/2/4	medium
278317	Linux Distros Unpatched Vulnerability : CVE-2022-50659	Nessus	Misc.	2025/12/11	2026/2/4	medium
309025	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010805)	Nessus	Unity Linux Local Security Checks	2026/4/21	2026/4/21	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/3/23	high
309469	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013795)	Nessus	Unity Linux Local Security Checks	2026/4/22	2026/4/26	medium

检测

插件搜索

medium

medium

medium

medium

medium

high

medium