Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：fs/dax: Fix don't skip locked entries when scanning entries Commit 6be3e21d25ca (fs/dax: don't skip locked entries when scanning entries) introduced a new function, wait_entry_unlocked_exclusive(), which waits for the current entry to become unlocked without advancing the XArray iterator state. Waiting for the entry to become unlocked requires dropping the XArray lock. This requires calling xas_pause() prior to dropping the lock which leaves the xas in a suitable state for the next iteration. However this has the side-effect of advancing the xas state to the next index. Normally this isn't an issue because xas_for_each() contains code to detect this state and thus avoid advancing the index a second time on the next loop iteration. However both callers of and wait_entry_unlocked_exclusive() itself subsequently use the xas state to reload the entry. As xas_pause() updated the state to the next index this will cause the current entry which is being waited on to be skipped. This caused the following warning to fire intermittently when running xftest generic/068 on an XFS filesystem with FS DAX enabled: [ 35.067397] ------------[ cut here ]------------ [ 35.068229] WARNING: CPU: 21 PID: 1640 at mm/truncate.c:89 truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.069717] Modules linked in: nd_pmem dax_pmem nd_btt nd_e820 libnvdimm [ 35.071006] CPU: 21 UID: 0 PID: 1640 Comm:
    fstest Not tainted 6.15.0-rc7+ #77 PREEMPT(voluntary) [ 35.072613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/204 [ 35.074845] RIP:
    0010:truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.075962] Code: a1 00 00 00 f6 47 0d 20 0f 84 97 00 00 00 4c 63 e8 41 39 c4 7f 0b eb 61 49 83 c5 01 45 39 ec 7e 58 42 f68 [ 35.079522] RSP:
    0018:ffffb04e426c7850 EFLAGS: 00010202 [ 35.080359] RAX: 0000000000000000 RBX: ffff9d21e3481908 RCX:
    ffffb04e426c77f4 [ 35.081477] RDX: ffffb04e426c79e8 RSI: ffffb04e426c79e0 RDI: ffff9d21e34816e8 [35.082590] RBP: ffffb04e426c79e0 R08: 0000000000000001 R09: 0000000000000003 [ 35.083733] R10:
    0000000000000000 R11: 822b53c0f7a49868 R12: 000000000000001f [ 35.084850] R13: 0000000000000000 R14:
    ffffb04e426c78e8 R15: fffffffffffffffe [ 35.085953] FS: 00007f9134c87740(0000) GS:ffff9d22abba0000(0000) knlGS:0000000000000000 [ 35.087346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.088244] CR2:
    00007f9134c86000 CR3: 000000040afff000 CR4: 00000000000006f0 [ 35.089354] Call Trace: [ 35.089749] <TASK> [ 35.090168] truncate_inode_pages_range+0xfc/0x4d0 [ 35.091078] truncate_pagecache+0x47/0x60 [ 35.091735] xfs_setattr_size+0xc7/0x3e0 [ 35.092648] xfs_vn_setattr+0x1ea/0x270 [ 35.093437] notify_change+0x1f4/0x510 [ 35.094219] ? do_truncate+0x97/0xe0 [ 35.094879] do_truncate+0x97/0xe0 [ 35.095640] path_openat+0xabd/0xca0 [ 35.096278] do_filp_open+0xd7/0x190 [ 35.096860] do_sys_openat2+0x8a/0xe0 [35.097459] __x64_sys_openat+0x6d/0xa0 [ 35.098076] do_syscall_64+0xbb/0x1d0 [ 35.098647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.099444] RIP: 0033:0x7f9134d81fc1 [ 35.100033] Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 2a 26 0e 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff5 [35.102993] RSP: 002b:00007ffcd41e0d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 35.104263] RAX:
    ffffffffffffffda RBX: 0000000000000242 RCX: 00007f9134d81fc1 [ 35.105452] RDX: 0000000000000242 RSI:
    00007ffcd41e1200 RDI: 00000000ffffff9c [ 35.106663] RBP: 00007ffcd41e1200 R08: 0000000000000000 R09:
    0000000000000064 [ 35.107923] R10: 00000000000001a4 R11: 0000000000000202 R12: 0000000000000066 [35.109112] R13: 0000000000100000 R14: 0000000000100000 R15: 0000000000000400 [ 35.110357] </TASK> [35.110769] irq event stamp: 8415587 [ 35.111486] hardirqs last enabled at (8415599): [<ffffffff8d74b562>]
    __up_console_se ---truncated--- (CVE-2025-38276)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 已解決 Linux 核心中的下列弱點：fs/dax: Fix don't skip locked entries when scanning entries Commit 6be3e21d25ca (fs/dax: don't skip locked entries when scanning entries) introduced a new function, wait_entry_unlocked_exclusive(), which waits for the current entry to become unlocked without advancing the XArray iterator state. Waiting for the entry to become unlocked requires dropping the XArray lock. This requires calling xas_pause() prior to dropping the lock which leaves the xas in a suitable state for the next iteration. However this has the side-effect of advancing the xas state to the next index. Normally this isn't an issue because xas_for_each() contains code to detect this state and thus avoid advancing the index a second time on the next loop iteration. However both callers of and wait_entry_unlocked_exclusive() itself subsequently use the xas state to reload the entry. As xas_pause() updated the state to the next index this will cause the current entry which is being waited on to be skipped. This caused the following warning to fire intermittently when running xftest generic/068 on an XFS filesystem with FS DAX enabled: [ 35.067397] ------------[ cut here ]------------ [ 35.068229] WARNING: CPU: 21 PID: 1640 at mm/truncate.c:89 truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.069717] Modules linked in: nd_pmem dax_pmem nd_btt nd_e820 libnvdimm [ 35.071006] CPU: 21 UID: 0 PID: 1640 Comm:
    fstest Not tainted 6.15.0-rc7+ #77 PREEMPT(voluntary) [ 35.072613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/204 [ 35.074845] RIP:
    0010:truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.075962] Code: a1 00 00 00 f6 47 0d 20 0f 84 97 00 00 00 4c 63 e8 41 39 c4 7f 0b eb 61 49 83 c5 01 45 39 ec 7e 58 42 f68 [ 35.079522] RSP:
    0018:ffffb04e426c7850 EFLAGS: 00010202 [ 35.080359] RAX: 0000000000000000 RBX: ffff9d21e3481908 RCX:
    ffffb04e426c77f4 [ 35.081477] RDX: ffffb04e426c79e8 RSI: ffffb04e426c79e0 RDI: ffff9d21e34816e8 [35.082590] RBP: ffffb04e426c79e0 R08: 0000000000000001 R09: 0000000000000003 [ 35.083733] R10:
    0000000000000000 R11: 822b53c0f7a49868 R12: 000000000000001f [ 35.084850] R13: 0000000000000000 R14:
    ffffb04e426c78e8 R15: fffffffffffffffe [ 35.085953] FS: 00007f9134c87740(0000) GS:ffff9d22abba0000(0000) knlGS:0000000000000000 [ 35.087346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.088244] CR2:
    00007f9134c86000 CR3: 000000040afff000 CR4: 00000000000006f0 [ 35.089354] Call Trace: [ 35.089749] <TASK> [ 35.090168] truncate_inode_pages_range+0xfc/0x4d0 [ 35.091078] truncate_pagecache+0x47/0x60 [ 35.091735] xfs_setattr_size+0xc7/0x3e0 [ 35.092648] xfs_vn_setattr+0x1ea/0x270 [ 35.093437] notify_change+0x1f4/0x510 [ 35.094219] ? do_truncate+0x97/0xe0 [ 35.094879] do_truncate+0x97/0xe0 [ 35.095640] path_openat+0xabd/0xca0 [ 35.096278] do_filp_open+0xd7/0x190 [ 35.096860] do_sys_openat2+0x8a/0xe0 [35.097459] __x64_sys_openat+0x6d/0xa0 [ 35.098076] do_syscall_64+0xbb/0x1d0 [ 35.098647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.099444] RIP: 0033:0x7f9134d81fc1 [ 35.100033] Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 2a 26 0e 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff5 [35.102993] RSP: 002b:00007ffcd41e0d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 35.104263] RAX:
    ffffffffffffffda RBX: 0000000000000242 RCX: 00007f9134d81fc1 [ 35.105452] RDX: 0000000000000242 RSI:
    00007ffcd41e1200 RDI: 00000000ffffff9c [ 35.106663] RBP: 00007ffcd41e1200 R08: 0000000000000000 R09:
    0000000000000064 [ 35.107923] R10: 00000000000001a4 R11: 0000000000000202 R12: 0000000000000066 [35.109112] R13: 0000000000100000 R14: 0000000000100000 R15: 0000000000000400 [ 35.110357] </TASK> [35.110769] irq event stamp: 8415587 [ 35.111486] hardirqs last enabled at (8415599): [<ffffffff8d74b562>]
    __up_console_se ---truncated--- (CVE-2025-38276)

請注意，Nessus 依賴供應商報告的套件存在。

遠端 Oracle Linux 10 / 9 主機已安裝受到多個弱點影響的套件如 ELSA-2026-50112 公告中所提及。

    - tls在 get_netdev_for_sock() 中使用 __sk_dst_get() 和 dst_dev_rcu()。(Kuniyuki Iwashima) [Orabug
    38649136] {CVE-2025-40149}
    - fuse修正 truncate_folio_batch_exceptionals() 的運行時間警告 (Haiyue Wang) [Orabug: 38516705] {CVE-2025-38357}
    - PCI/AER避免 aer_ratelimit() 中發生 NULL 指標解除參照 (Breno Leitao) [Orabug: 38597009] {CVE-2025-40034}
    - bnxt_en關閉 bnxt_shutdown() 中的 FW DMA (Michael Chan) [Orabug: 38747442] {CVE-2025-40330}
    - mlx5修正建立 CQ 時的預設值 (Akiva Goldberger) [Orabug: 38750222、38773368] {CVE-2025-68209}
    - bnxt_en修正 bnxt_bs_trace_check_wrap() 中的 null 指標解除參照 (Gautam RA) [Orabug: 38773315] {CVE-2025-68197}
    - iomap也為非同步讀取配置 s_dio_done_wq (Christoph Hellwig) [Orabug: 38798795] {CVE-2025-68357}
    - usbnet修正搶占式程式碼警告中使用 smp_processor_id() 的問題 (Zqiang) [Orabug: 38649205] {CVE-2025-40164}
    - net在 sk_setup_caps() 中使用 dst_dev_rcu() (Eric Dumazet) [Orabug: 38649240] {CVE-2025-40170}
    - md/raid10使用 REQ_NOWAIT 傳回捨棄要求前等待障礙 (Xiao Ni) [Orabug: 37855392] {CVE-2025-40325}
    - netfilter: nft_ct為 natted 連線新增 seqadj 延伸 (Andrii Melnychenko) [Orabug: 38773355] {CVE-2025-68206}
    - svcrdma邊界檢查內嵌路徑中的 rq_pages 索引 (Joshua Rogers) [Orabug: 38847975] {CVE-2025-71068}
    - drm/i915/gem對 i915_gem_do_execbuffer 中的 eb.vma 陣列進行零初始化 (Niemiec、Krzysztof) [Orabug:
    38852366] {CVE-2025-71130}
    - drm/msm/dpu為 pingpong 介面新增遺漏的 NULL 指標檢查 (Nikolay Kuratov) [Orabug: 38852395] {CVE-2025-71138}
    - drm/ttm避免被收回的 BO 發生 NULL 指標解除參照 (Simon Richter) [Orabug: 38848051] {CVE-2025-71083}
    - e1000修正 e1000_tbi_should_accept() 中的 OOB (Guangshuo Li) [Orabug: 38848098] {CVE-2025-71093}
    - RDMA/cm修正洩漏多點傳送 GID 表格參照的問題 (Jason Gunthorpe) [Orabug: 38848057] {CVE-2025-71084}
    - RDMA/core正確檢查 LS_NLA_TYPE_DGID 是否存在 (Jason Gunthorpe) [Orabug: 38848116] {CVE-2025-71096}
    - clk: samsungexynos-clkout在存取 .hws 前指派 .num (Nathan Chancellor) [Orabug: 38852404] {CVE-2025-71143}
    - iommu設定 CONFIG_X86 時停用 SVA (Lu Baolu) [Orabug: 38848082] {CVE-2025-71089}
    - md/raid5修正 raid5_store_group_thread_cnt() 中可能的 null 指標解除參照 (Tuo Li) [Orabug:
    38852384] {CVE-2025-71135}
    - RDMA/irdma避免 irdma_net_event 中的無效讀取 (Michal Schmidt) [Orabug: 38852378] {CVE-2025-71133}
    - ipv6修正 PREEMPT_RT 下 rt6_get_pcpu_route() 中的一個錯誤 (Jiayuan Chen) [Orabug: 38848033] {CVE-2025-71080}
    - ipv4修正使用具有 nexthop 物件的錯誤路由時發生的參照計數洩漏 (Ido Schimmel) [Orabug:
    38848124] {CVE-2025-71097}
    - ipv6作為 calipso_skbuff_setattr() 一部分的 pskb_expand_head() 中的 BUG() (Will Rosenberg) [Orabug:
    38848060] {CVE-2025-71085}
    - netstmmac修正零複製 XDP_TX 動作的損毀問題 (Wei Fang) [Orabug: 38848110] {CVE-2025-71095}
    - platform/x86hp-bioscfg修正 ACPI 套件剖析中的超出邊界陣列存取 (Junrui Luo) [Orabug:
    38848146] {CVE-2025-71101}
    - netusbasix使用前驗證 PHY 位址 (Deepanshu Kartikey) [Orabug: 38848106] {CVE-2025-71094}
    - smc91x修正 PREEMPT_RT 中損毀的 irq-context (Levi Yun) [Orabug: 38852375] {CVE-2025-71132}
    - 團隊修正在 team_queue_override_port_prio_changed() 中啟用的連接埠檢查 (Jiri Pirko) [Orabug:
    38848087] {CVE-2025-71091}
    - ip6_gre使 ip6gre_header() 健全 (Eric Dumazet) [Orabug: 38848130] {CVE-2025-71098}
    - 藍牙btusb還原 btusb 中 devm_kzalloc 的使用 (Raphael Pinsonneault-Thibeault) [Orabug:
    38848042] {CVE-2025-71082}
    - crypto: seqiv - 請勿在 crypto_aead_encrypt 之後使用 req->iv (Herbert Xu) [Orabug: 38852369] {CVE-2025-71131}
    - iavf修正 iavf_config_rss_reg() 中的差一問題 (Kohei Enju) [Orabug: 38848072] {CVE-2025-71087}
    - wifirtlwifi8192cu修正 rtl92cu_tx_fill_desc() 中超出範圍的 tid (Morning Star) [Orabug: 38848143] {CVE-2025-71100}
    - fuse修正 readahead 回收鎖死 (Joanne Koong) [Orabug: 38847945] {CVE-2025-68821}
    - hwmon(w83791d) 將巨集轉換為函式以避免 TOCTOU (Gui-Dong Han) [Orabug38852299] {CVE-2025-71111}
    - cryptoaf_alg - 透過 sock_kmalloc 配置的零初始化記憶體 (Shivani Agarwal) [Orabug: 38852311] {CVE-2025-71113}
    - sched/rt修正 push_rt_task 中的爭用 (Harshit Agarwal) [Orabug: 38158721] {CVE-2025-38234}
    - btrfs如果是在目前交易中移動的 inode 衝突則不記錄 (Filipe Manana) [Orabug 38847745] {CVE-2025-68778}
    - SUNRPCsvcauth_gss避免 gss_read_proxy_verf 中零長度 gss_token 的 NULL 解除參照 (Joshua Rogers) [Orabug: 38852340] {CVE-2025-71120}
    - svcrdma將 rc_pageoff 用於 memcpy 位元組位移 (Joshua Rogers) [Orabug: 38847896] {CVE-2025-68811}
    - NFSDNFSv4 檔案建立忽略設定 ACL (Chuck Lever) [Orabug: 38847871] {CVE-2025-68803}
    - fsnotify不要在特殊檔案的子項目上產生 ACCESS/MODIFY 事件 (Amir Goldstein) [Orabug
    38847799] {CVE-2025-68788}
    - tracing不要註冊不受支援的 perf 事件 (Steven Rostedt) [Orabug: 38852354] {CVE-2025-71125}
    - xfs修正 xattr 修復中的 UAF 問題 (Darrick J. Wong) [Orabug: 38847781] {CVE-2025-68784}
    - KVMx86使用定期 HV 計時器修正長時間不活動後的 VM 硬鎖定 (Fuqiang Wang) [Orabug
    38852272] {CVE-2025-71104}
    - libceph使 decode_pool() 對損毀的 osdmap 更有彈性 (Ilya Dryomov) [Orabug: 38852324] {CVE-2025-71116}
    - ocfs2修正 ocfs2_find_victim_chain 中的核心錯誤 (Prithvi Tambewagh) [Orabug: 38847687] {CVE-2025-68771}
    - KVM不允許在現有 memslot 上切換 KVM_MEM_GUEST_MEMFD (Sean Christopherson) [Orabug:
    38847894] {CVE-2025-68810}
    - scsi目標在錯誤情況下重設 t_task_cdb 指標 (Andrey Vatoropin) [Orabug: 38847769] {CVE-2025-68782}
    - scsiaic94xx修正裝置移除路徑中的釋放後使用 (Junrui Luo) [Orabug: 38848008] {CVE-2025-71075}
    - scsi還原「scsiqla2xxx在中止路徑中執行無鎖定命令完成」(Tony Battersby) [Orabug: 38847928] {CVE-2025-68818}
    - mediadvb-usbdtv5100修正 dtv5100_i2c_msg() 中的超出邊界 (Jeongjun Park) [Orabug: 38847936] {CVE-2025-68819}
    - mptcp避免重新插入時遞補鎖死 (Paolo Abeni) [Orabug: 38852415] {CVE-2025-71126}
    - ext4xattr修正 ext4_raw_inode() 中的 null 指標解除參照 (Karina Yankevich) [Orabug: 38848274] {CVE-2025-68820}
    - ext4修正 parse_apply_sb_mount_options() 中的字串複製 (Fedor Pchelkin) [Orabug: 38852413] {CVE-2025-71123}
    - tpm設定 PCR 庫數量上限 (Jarkko Sakkinen) [Orabug: 38848016] {CVE-2025-71077}
    - io_uring修正 __io_openat_prep() 中的檔案名稱洩漏問題 (Prithvi Tambewagh) [Orabug: 38847904] {CVE-2025-68814}
    - usbtypec: ucsi處理錯誤的 num_connectors 功能 (Mark Pearson) [Orabug: 38852284] {CVE-2025-71108}
    - via_wdt修正因未命名的資源配置而導致的重大開機懸置 (Li Qiang) [Orabug: 38852317] {CVE-2025-71114}
    - ALSA: usb-mixer: us16x08驗證計量表封包索引 (Shipei Qu) [Orabug: 38847774] {CVE-2025-68783}
    - net/hsr修正 prp_get_untagged_frame() 中的 NULL 指標解除參照 (Shaurya Rane) [Orabug: 38847723] {CVE-2025-68776}
    - Inputalps - 修正 dev3_register_work 造成的釋放後使用錯誤 (Duoming Zhou) [Orabug: 38847948] {CVE-2025-68822}
    - hwmon(ibmpex) 修正高/低儲存中的釋放後使用 (Junrui Luo) [Orabug: 38847806] {CVE-2025-68789}
    - net/handshake重複的交握取消洩漏通訊端 (Scott Mayhew) [Orabug: 38847719] {CVE-2025-68775}
    - net/mlx5fw_tracer驗證格式字串參數 (Shay Drory) [Orabug: 38847913] {CVE-2025-68816}
    - ethtool避免統計資料查詢時發生使用者空間緩衝區溢位 (Gal Pressman) [Orabug: 38847825] {CVE-2025-68795}
    - net/sched: ets如果 drr 類別變更為嚴格則從使用中清單移除 (Victor Nogueira) [Orabug:
    38847909] {CVE-2025-68815}
    - ipvs修正路由錯誤路徑中的 ipv4 null-ptr-deref (Slavin Liu) [Orabug: 38847899] {CVE-2025-68813}
    - net: openvswitch修正 push_nsh() 動作中的中間屬性驗證 (Ilya Maximets) [Orabug:
    38847783] {CVE-2025-68785}
    - bnxt_en修正 XDP_TX 路徑 (Michael Chan) [Orabug: 38847683] {CVE-2025-68770}
    - net/schedets在 ets_qdisc_change 中刪除之前一律從使用中清單移除類別 (Jamal Hadi Salim) [Orabug: 38847964] {CVE-2025-71066}
    - ACPICA如果 start_node 為 NULL 則避免執行命名空間 (Cryolitia Pukngae) [Orabug: 38852332] {CVE-2025-71118}
    - sched/deadline只針對線上 runqueues 設定 free_cpus (Doug Berger) [Orabug: 38847752] {CVE-2025-68780}
    - perf/x86/amd啟用前檢查事件以避免 GPF (George Kennedy) [Orabug: 38847848] {CVE-2025-68798}
    - iomap針對非區塊對齊位置正確調整讀取範圍 (Joanne Koong) [Orabug: 38847819] {CVE-2025-68794}
    - shmem修正重新命名失敗時的複原 (Al Viro) [Orabug: 38847988] {CVE-2025-71072}
    - tcp_metrics使用 dst_dev_net_rcu() (Eric Dumazet) [Orabug: 38592188] {CVE-2025-40075}
    - scsiimm修正由未完成延遲工作造成的釋放後使用錯誤 (Duoming Zhou) [Orabug: 38783113] {CVE-2025-68324}
    - block在 blk_mq_[un]quiesce_tagset() 中使用 RCU而不是 set->tag_list_lock (Mohamed Khalfella) [Orabug:
    38818209] {CVE-2025-68756}
    - block修正 __blkdev_issue_zero_pages 中的記憶體洩漏 (Shaurya Rane) [Orabug: 38798772] {CVE-2025-68348}
    - NFS自動掛載的檔案系統應繼承 ro、noexec、nodev、sync 旗標 (Trond Myklebust) [Orabug
    38818236] {CVE-2025-68764}
    - NFSv4/pNFS清除 pnfs_mark_layout_stateid_invalid 中的 NFS_INO_LAYOUTCOMMIT (Jonathan Curley) [Orabug:
    38798774] {CVE-2025-68349}
    - net/schedsch_cake修正 cake_drop 中不正確的 qlen 縮減 (Xiang Mei) [Orabug: 38783136] {CVE-2025-68325}
    - Regulator: core: 使用 Regulator_list_mutex 保護 Regulator_supply_alias_list (Sparkhuang) [Orabug:
    38798786] {CVE-2025-68354}
    - gfs2防止遞回記憶體回收 (Andreas Gruenbacher) [Orabug: 38798793] {CVE-2025-68356}
    - ima處理 ima_filter_rule_match() 傳回的錯誤程式碼 (Zhao Yipeng) [Orabug: 38798921] {CVE-2025-68740}
    - wifirtl818x: rtl8187修正 rtl8187_rx_cb() 中潛在的緩衝區反向溢位 (Seungjin Bae) [Orabug:
    38798814] {CVE-2025-68362}
    - scsiqla2xxx修正 purex 項目的不當釋放 (Zilin Guan) [Orabug: 38798928] {CVE-2025-68741}
    - bpf當 update_effect_progs 失敗時修正無效的 prog->stats 存取 (Pu Lehui) [Orabug: 38798931] {CVE-2025-68742}
    - wifi: rtl818x修正 rtl8180_init_rx_ring() 中的潛在記憶體洩漏 (Abdun Nihaal) [Orabug: 38818221] {CVE-2025-68759}
    - bpf檢查 skb->transport_header 是否已在 bpf_skb_check_mtu 中設定 (Martin Kafai Lau) [Orabug: 38798820] {CVE-2025-68363}
    - bpf更新 [lru_,]percpu_hash 對應時釋放特殊欄位 (Leon Hwang) [Orabug: 38798936] {CVE-2025-68744}
    - ocfs2將 __ocfs2_move_extent() 中的 BUG() 放鬆至 ocfs2_error() (Dmitry Antipov) [Orabug: 38798823] {CVE-2025-68364}
    - nbd延遲 nbd_genl_connect 中的組態解鎖 (Zheng Qixing) [Orabug: 38798832] {CVE-2025-68366}
    - macintosh/mac_hid修正 mac_hid_toggle_emumouse 中的爭用情形 (Long Li) [Orabug: 38798837] {CVE-2025-68367}
    - scsismartpqi修正裝置資源移除後存取的裝置資源 (Mike Mcgowen) [Orabug: 38798847] {CVE-2025-68371}
    - nbd延遲放入 recv_work 中的組態 (Zheng Qixing) [Orabug: 38798850] {CVE-2025-68372}
    - md修正 md_wakeup_thread 中的 rcu 保護 (Yun Zhou) [Orabug: 38798857] {CVE-2025-68374}
    - spitegra210-quad修正逾時處理 (Vishwaroop A) [Orabug: 38798943] {CVE-2025-68746}
    - bpf修正 __bpf_get_stackid() 中的堆疊圖溢位檢查 (Arnaud Lecomte) [Orabug: 38798864] {CVE-2025-68378}
    - RDMA/rxe修正調整大小失敗後 srq->rq.queue 上的 null 解除參照 (Zhu Yanjun) [Orabug38798867] {CVE-2025-68379}
    - wifiath11k修正對等端 HE MCS 指派 (Baochen Qiang) [Orabug: 38798872] {CVE-2025-68380}
    - cryptoasymmetric_keys - 防止 asymmetric_key_generate_id 中發生溢位 (Thorsten Blum) [Orabug:
    38798874] {CVE-2025-68724}
    - drm/vgem-fence修正版本時可能發生的鎖死問題 (Janusz Krzysztofik) [Orabug: 38818211] {CVE-2025-68757}
    - gpuhost1x修正 syncpt alloc/free 中的爭用 (Mainak Sen) [Orabug: 38798898] {CVE-2025-68732}
    - nvme修正管理員 request_queue 存留期 (Keith Busch) [Orabug: 38773611] {CVE-2025-68265}
    - KVMSVM如果取代了 INT3/INTO則不要跳過不相關的指令 (Omar Sandoval) [Orabug: 38773578] {CVE-2025-68259}
    - ext4在 ext4_destroy_inline_data_nolock() 中新增 i_data_sem 保護 (Alexey Nepomnyashih) [Orabug:
    38773586] {CVE-2025-68261}
    - ext4寫入作業前重新整理內嵌資料大小 (Deepanshu Kartikey) [Orabug: 38773602] {CVE-2025-68264}
    - jbd2當檔案系統損毀時避免 jbd2_journal_get_create_access() 中的 bug_on (Ye Bin) [Orabug:
    38792632] {CVE-2025-68337}
    - xfrm在我們刪除 x 時刪除 x->tunnel (Sabrina Dubroca) [Orabug: 38730491,38854317] {CVE-2025-40215}
    - drm、fbcon、vga_switcheroo避免 fbcon 設定中的爭用情形 (Thomas Zimmermann) [Orabug: 38773709] {CVE-2025-68296}
    - mm/huge_memory分割作品集時修正 NULL 指標解除參照 (Wei Yang) [Orabug: 38773700] {CVE-2025-68293}
    - usbgadgetudc修正 usb_gadget_state_work 中的釋放後使用 (Jimmy Hu) [Orabug38773635] {CVE-2025-68282}
    - libceph用 map->max_osd 的邊界檢查取代 BUG_ON (Ziming Zhang) [Orabug: 38773641] {CVE-2025-68283}
    - libceph防止 handle_auth_session_key() 中的潛在超出邊界寫入 (Ziming Zhang) [Orabug
    38773648] {CVE-2025-68284}
    - libceph修正 have_mon_and_osd_map() 中的潛在釋放後使用 (Ilya Dryomov) [Orabug38773654] {CVE-2025-68285}
    - drm/amd/display存取前檢查 NULL (Alex Hung) [Orabug: 38773661] {CVE-2025-68286}
    - usbuas修正在進行資料傳輸期間移除 uas 裝置時的 urb 取消對應問題 (Owen Gu) [Orabug: 38792592] {CVE-2025-68331}
    - usbstorage: sddr55拒絕超出邊界 new_pba (Tianchu Chen) [Orabug: 38762728] {CVE-2025-40345}
    - usbstorage修正 USB 大量傳輸中的記憶體洩漏 (Desnes Nunes) [Orabug: 38773676] {CVE-2018-1000204,CVE-2025-68288}
    - mm/memfd修正 hugetlb 作品集中的資訊洩漏 (Deepanshu Kartikey) [Orabug: 38773697] {CVE-2025-68292}
    - smb用戶端修正 cifs_construct_tcon() 中的記憶體洩漏 (Paulo Alcantara) [Orabug: 38773703] {CVE-2025-68295}
    - ceph修正加密目錄的 process_v2_sparse_read() 中的損毀 (Viacheslav Dubeyko) [Orabug:
    38773716] {CVE-2025-68297}
    - Bluetooth: btusbmediatek避免 btusb_mtk_claim_iso_intf() NULL 解除參照 (Douglas Anderson) [Orabug:
    38773723] {CVE-2025-68298}
    - tracing針對分割的 VMA修正 tracing_buffers_mmap_close 中的 WARN_ON (Deepanshu Kartikey) [Orabug
    38792583] {CVE-2025-68329}
    - iioaccelbmc150修正 irq 假設回歸 (Linus Walleij) [Orabug: 38792585] {CVE-2025-68330}
    - fs/命名空間修正 grab_requested_mnt_ns 中的參照洩漏 (Andrei Vagin) [Orabug: 38773950] {CVE-2025-68300}
    - net: atlantic修正 RX 路徑中的片段溢位處理 (Jiefeng Zhang) [Orabug: 38773728] {CVE-2025-68301}
    - team在 team_port_add 結尾移動團隊裝置類型變更 (Nikola Z. Ivanov) [Orabug: 38796270] {CVE-2025-68340}
    - veth減少 XDP no_direct 傳回區段以修正爭用 (Jesper Dangaard Brouer) [Orabug: 38796276] {CVE-2025-68341}
    - Bluetoothhci_sock防止通訊端寫入 iter 和通訊端系結中的爭用 (Edward Adam Davis) [Orabug:
    38773949] {CVE-2025-68305}
    - 藍牙btusbmediatek釋放 mtk iso 介面時修正核心損毀 (Chris Lu) [Orabug:
    38773748] {CVE-2025-68306}
    - cangs_usb: gs_usb_receive_bulk_callback()存取資料前檢查actual_length (Marc Kleine-Budde) [Orabug: 38796278] {CVE-2025-68342}
    - cangs_usbgs_usb_receive_bulk_callback()在存取標頭之前檢查actual_length (Marc Kleine-Budde) [Orabug: 38796285] {CVE-2025-68343}
    - cangs_usbgs_usb_xmit_callback()修正失敗的傳輸 URB 處理 (Marc Kleine-Budde) [Orabug: 38773751] {CVE-2025-68307}
    - cankvaser_usb: leaf修正命令剖析器中潛在的無限迴圈 (Seungjin Bae) [Orabug: 38773759] {CVE-2025-68308}
    - xfs修正符號連結修復中的越界記憶體讀取錯誤 (Darrick J. Wong) [Orabug: 38730602] {CVE-2025-40246}
    - mptcp修正 mptcp_pm_del_add_timer() 中的爭用 (Eric Dumazet) [Orabug: 38730655] {CVE-2025-40257}
    - drm/amdgpu修正 PF 通道上休眠後的 gpu 頁面錯誤 (Samuel Zhang) [Orabug: 38773445] {CVE-2025-68230}
    - scsi核心修正 scsi_host_busy() 觸發的回歸 (Bart Van Assche) [Orabug: 38773425] {CVE-2025-68224}
    - vsock如果已建立 connect()則忽略其上的訊號/逾時 (Michal Luczaj) [Orabug: 38730610] {CVE-2025-40248}
    - cifs修正 smb3_fs_context_parse_param 錯誤路徑中的記憶體洩漏 (Shaurya Rane) [Orabug38773403] {CVE-2025-68219}
    - devlinkratedevl_rate_nodes_destroy 中未設定父項指標 (Shay Drory) [Orabug: 38730623] {CVE-2025-40251}
    - ice在錯誤路徑中修正驅動程式移除時的 PTP 清理 (Grzegorz Nitka) [Orabug: 38773389] {CVE-2025-68215}
    - idpf修正移除時可能發生的 vport_config NULL 指標解除參照 (Emil Tantilov) [Orabug: 38773956] {CVE-2025-68213}
    - netqlogic/qede修正 qede_tpa_cont() 和 qede_tpa_end() 中潛在的超出邊界讀取 (Pavel Zhigulin) [Orabug: 38730628] {CVE-2025-40252}
    - nvme-multipath修正因磁碟分割掃描工作造成的 lockdep 警告 (Shin'Ichiro Kawasaki) [Orabug: 38773400] {CVE-2025-68218}
    - net: openvswitch移除對設定 nsh 欄位從未運作的支援 (Ilya Maximets) [Orabug: 38730647] {CVE-2025-40254}
    - drm/tegra新增呼叫至 put_pid() (Prateek Agarwal) [Orabug: 38773463] {CVE-2025-68233}
    - drm/radeon刪除 is_signaled 中的 radeon_fence_process不再發生鎖死 (Robert Mccclinton) [Orabug:
    38773418] {CVE-2025-68223}
    - mptcp修正 mptcp_schedule_work() 中的爭用情形 (Eric Dumazet) [Orabug: 38730658] {CVE-2025-40258}
    - scsi目標tcm_loop修正 tcm_loop_tpg_address_show() 中的 segfault (Hamza Mahfooz) [Orabug: 38773439] {CVE-2025-68229}
    - scsisg不要在 atomic 內容中休眠 (Bart Van Assche) [Orabug: 38730661] {CVE-2025-40259}
    - nvme: nvme-fc確保在 nvme_fc_delete_ctrl() 中取消 ->ioerr_work (Ewan D. Milne) [Orabug:
    38730672] {CVE-2025-40261}
    - nouveau/firmware新增 nvkm_falcon_fw::boot 遺漏的 kfree() (Nam Cao) [Orabug: 38773467] {CVE-2025-68235}
    - mm/mempool使用 HIGHMEM 修正 order>0 頁面的毒害 (Vlastimil Babka) [Orabug: 38773453] {CVE-2025-68231}
    - Input: cros_ec_keyb - 修正無效的記憶體存取 (Tzung-Bi Shih) [Orabug: 38730679] {CVE-2025-40263}
    - be2net若是 OS2BMC則傳送 wrb_params (Andrey Vatoropin) [Orabug: 38730688] {CVE-2025-40264}
    - mptcp使用 BPF 修正 proto 遞補偵測 (Jiayuan Chen) [Orabug: 38773434] {CVE-2025-68227}
    - mtdchar修正讀取/寫入 ioctls 中的整數溢位 (Dan Carpenter) [Orabug: 38773476] {CVE-2025-68237}
    - timers修正 timer_shutdown_sync() 中的 NULL 函式指標爭用 (Yipeng Zou) [Orabug: 38773387] {CVE-2025-68214}

Tenable 已直接從 Oracle Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Oracle Linux 10 / 9 主机上存在安装的程序包该程序包受到 ELSA-2026-50112 公告中提及的多个漏洞的影响。

    - tls在 get_netdev_for_sock() 中使用 __sk_dst_get() 和 dst_dev_rcu()。(Kuniyuki Iwashima) [Orabug
    38649136] {CVE-2025-40149}
    - fuse修复 truncate_folio_batch_exceptions() 上的运行时警告 (Haiyue Wang) [Orabug: 38516705] {CVE-2025-38357}
    - PCI/AER避免 aer_ratelimit() 中发生空指针取消引用 (Breno Leitao) [Orabug: 38597009] {CVE-2025-40034}
    - bnxt_enbnxt_shutdown() 中的关闭 FW DMA (Michael Chan) [Orabug: 38747442] {CVE-2025-40330}
    - mlx5修复创建 CQ 中的默认值 (Akiva Goldberger) [Orabug38750222,38773368] {CVE-2025-68209}
    - bnxt_en修复 bnxt_bs_trace_check_wrap() 中的空指针取消引用 (Gautam RA) [Orabug: 38773315] {CVE-2025-68197}
    - iomap也为异步读取分配 s_dio_done_wq (Christoph Hellwig) [Orabug: 38798795] {CVE-2025-68357}
    - usbnet修复可抢占代码警告中的 smp_processor_id() 使用 (Zqiang) [Orabug: 38649205] {CVE-2025-40164}
    - net使用 sk_setup_caps() 中的 dst_dev_rcu() (Eric Dumazet) [Orabug: 38649240] {CVE-2025-40170}
    - md/raid10等待屏障然后返回含有 REQ_NOWAIT 的丢弃请求 (Xiao Ni) [Orabug: 37855392] {CVE-2025-40325}
    - netfilter: nft_ct添加用于 natt 连接的 seqadj 扩展 (Andrii Melnychenko) [Orabug: 38773355] {CVE-2025-68206}
    - svcrdma内联路径中的边界检查 rq_pages 索引 (Joshua Rogers) [Orabug: 38847975] {CVE-2025-71068}
    - drm/i915/gem对 i915_gem_do_execbuffer 中的 eb.vma 数组进行零初始化 (Niemiec、Krzysztof) [Orabug
    38852366] {CVE-2025-71130}
    - drm/msm/dpu为 pingpong 接口添加缺失的空指针检查 (Nikolay Kuratov) [Orabug: 38852395] {CVE-2025-71138}
    - drm/ttm避免逐出的 BO 的空指针取消引用 (Simon Richter) [Orabug: 38848051] {CVE-2025-71083}
    - e1000修复 e1000_tbi_should_accept() 中的 OOB (Guangshuo Li) [Orabug: 38848098] {CVE-2025-71093}
    - RDMA/cm修复多播 GID 表引用泄漏 (Jason Gunthorpe) [Orabug: 38848057] {CVE-2025-71084}
    - RDMA/core正确检查是否存在 LS_NLA_TYPE_DGID (Jason Gunthorpe) [Orabug: 38848116] {CVE-2025-71096}
    - clk: samsungexynos-clkout访问 .hws 前分配 .num (Nathan Chancellor) [Orabug: 38852404] {CVE-2025-71143}
    - iommu设置 CONFIG_X86 时禁用 SVA (Lu Baolu) [Orabug: 38848082] {CVE-2025-71089}
    - md/raid5修复 raid5_store_group_thread_cnt() 中可能的空指针取消引用 (Tuo Li) [Orabug
    38852384] {CVE-2025-71135}
    - RDMA/irdma避免 irdma_net_event 中的无效读取 (Michal Schmidt) [Orabug38852378] {CVE-2025-71133}
    - ipv6修复 PREEMPT_RT 下 rt6_get_pcpu_route() 中的一个缺陷 (Jiayuan Chen) [Orabug: 38848033] {CVE-2025-71080}
    - ipv4修复使用带有 nexthop 对象的错误路由时引用计数泄漏 (Ido Schimmel) [Orabug:
    38848124] {CVE-2025-71097}
    - ipv6作为 calipso_skbuff_setattr() 一部分的 pskb_expand_head() 中的 BUG() (Will Rosenberg) [Orabug:
    38848060] {CVE-2025-71085}
    - netstmmac修复零复制 XDP_TX 操作的崩溃问题 (Wei Fang) [Orabug38848110] {CVE-2025-71095}
    - platform/x86hp-bioscfg修复 ACPI 程序包解析中的越界数组访问 (Junrui Luo) [Orabug:
    38848146] {CVE-2025-71101}
    - net: usb: asix使用前验证 PHY 地址 (Deepanshu Kartikey) [Orabug: 38848106] {CVE-2025-71094}
    - smc91x修复 PREEMPT_RT 中损坏的 irq-context (Levi Yun) [Orabug: 38852375] {CVE-2025-71132}
    - team修复 team_queue_override_port_prio_changed() 中启用的端口检查 (Jiri Pirko) [Orabug
    38848087] {CVE-2025-71091}
    - ip6_gre使 ip6gre_header() 健全 (Eric Dumazet) [Orabug: 38848130] {CVE-2025-71098}
    - 蓝牙btusb恢复 btusb 中使用 devm_kzalloc (Raphael Pinsonneault-Thibeault) [Orabug:
    38848042] {CVE-2025-71082}
    - cryptoseqiv - 在 crypto_aead_encrypt 后不要使用 req->iv (Herbert Xu) [Orabug: 38852369] {CVE-2025-71131}
    - iavf修复 iavf_config_rss_reg() 中的差一问题 (Kohei Enju) [Orabug: 38848072] {CVE-2025-71087}
    - wifirtlwifi8192cu修复 rtl92cu_tx_fill_desc() 中的 tid 超出范围 (Morning Star) [Orabug: 38848143] {CVE-2025-71100}
    - fuse修复预读回收死锁 (Joanne Koong) [Orabug38847945] {CVE-2025-68821}
    - hwmon(w83791d) 将宏转换为函数以避免 TOCTOU (Gui-Dong Han) [Orabug: 38852299] {CVE-2025-71111}
    - crypto: af_alg - 对通过 sock_kmalloc 分配的内存进行零初始化 (Shivani Agarwal) [Orabug: 38852311] {CVE-2025-71113}
    - sched/rt修复 push_rt_task 中的争用 (Harshit Agarwal) [Orabug: 38158721] {CVE-2025-38234}
    - btrfs如果是在当前事务中移动的目录则不记录冲突的 inode (Filipe Manana) [Orabug: 38847745] {CVE-2025-68778}
    - SUNRPCsvcauth_gss避免 gss_read_proxy_verf 中零长度 gss_token 的空取消引用 (Joshua Rogers) [Orabug: 38852340] {CVE-2025-71120}
    - svcrdma针对 memcpy 字节偏移使用 rc_pageoff (Joshua Rogers) [Orabug: 38847896] {CVE-2025-68811}
    - NFSDNFSv4 文件创建忽略设置 ACL (Chuck Lever) [Orabug38847871] {CVE-2025-68803}
    - fsnotify不要在特殊文件的子进程上生成 ACCESS/MODIFY 事件 (Amir Goldstein) [Orabug
    38847799] {CVE-2025-68788}
    - tracing请勿注册不受支持的 perf 事件 (Steven Rostedt) [Orabug: 38852354] {CVE-2025-71125}
    - xfs修复 xattr 修复中的 UAF 问题 (Darrick J. Wong) [Orabug: 38847781] {CVE-2025-68784}
    - KVMx86修复使用定期 HV 定时器长时间不活动后的 VM 硬锁定 (Fuqiang Wang) [Orabug
    38852272] {CVE-2025-71104}
    - libceph使 decode_pool() 更能抵御损坏的 osdmap (Ilya Dryomov) [Orabug: 38852324] {CVE-2025-71116}
    - ocfs2修复 ocfs2_find_victim_chain 中的内核缺陷 (Prithvitambewagh) [Orabug: 38847687] {CVE-2025-68771}
    - KVM不允许在现有 memslot 上切换 KVM_MEM_GUEST_MEMFD (Sean Christopherson) [Orabug
    38847894] {CVE-2025-68810}
    - scsitarget错误情况下的重置 t_task_cdb 指针 (Andrey Vatoropin) [Orabug: 38847769] {CVE-2025-68782}
    - scsiaic94xx修复设备删除路径中的释放后使用 (Junrui Luo) [Orabug38848008] {CVE-2025-71075}
    - scsi恢复“scsiqla2xxx在中止路径中执行无锁命令完成” (Tony Battersby) [Orabug: 38847928] {CVE-2025-68818}
    - mediadvb-usbdtv5100修复 dtv5100_i2c_msg() 中的越界 (Jeongjun Park) [Orabug: 38847936] {CVE-2025-68819}
    - mptcp避免重新注入时回退时发生死锁 (Paolo Abeni) [Orabug: 38852415] {CVE-2025-71126}
    - ext4: xattr修复 ext4_raw_inode() 中的空指针取消引用 (Karina Yankevich) [Orabug: 38848274] {CVE-2025-68820}
    - ext4修复 parse_apply_sb_mount_options() 中的字符串复制 (Fedor Pchelkin) [Orabug: 38852413] {CVE-2025-71123}
    - tpm限制 PCR bank 的数量 (Jarkko Sakkinen) [Orabug: 38848016] {CVE-2025-71077}
    - io_uring修复 __io_openat_prep() 中的文件名泄漏 (Prithvitambewagh) [Orabug: 38847904] {CVE-2025-68814}
    - usbtypecucsi处理不正确的 num_connectors 功能 (Mark Pearson) [Orabug38852284] {CVE-2025-71108}
    - via_wdt修复了因未命名资源分配导致的严重启动挂起 (Li Qiang) [Orabug38852317] {CVE-2025-71114}
    - ALSAusb-mixerus16x08验证仪表数据包索引 (Sipei Qu) [Orabug: 38847774] {CVE-2025-68783}
    - net/hsr修复 prp_get_untaged_frame() 中的空指针取消引用 (Shaurya Rane) [Orabug: 38847723] {CVE-2025-68776}
    - Input: alps - 修复 dev3_register_work 造成的释放后使用缺陷 (Duoming Zhou) [Orabug: 38847948] {CVE-2025-68822}
    - hwmon(ibmpex) 修复高危/低危存储中的释放后使用 (Junrui Luo) [Orabug: 38847806] {CVE-2025-68789}
    - net/handshake重复的握手取消泄漏套接字 (Scott Mayhew) [Orabug: 38847719] {CVE-2025-68775}
    - net/mlx5fw_tracer验证格式字符串参数 (Shay Drory) [Orabug: 38847913] {CVE-2025-68816}
    - ethtool避免统计数据查询时溢出用户空间缓冲区 (Gal Pressman) [Orabug: 38847825] {CVE-2025-68795}
    - net/schedets如果 drr 类更改为 strict则将其从活动列表中删除 (Victor Nogueira) [Orabug:
    38847909] {CVE-2025-68815}
    - ipvs修复路由错误路径中的 ipv4 null-ptr-deref (Slavin Liu) [Orabug38847899] {CVE-2025-68813}
    - netopenvswitch修复 push_nsh() 操作中的中间属性验证 (Ilya Maximets) [Orabug
    38847783] {CVE-2025-68785}
    - bnxt_en修复 XDP_TX 路径 (Michael Chan) [Orabug38847683] {CVE-2025-68770}
    - net/schedets在 ets_qdisc_change 中删除之前始终从活动列表删除类 (Jamal Hadi Salim) [Orabug: 38847964] {CVE-2025-71066}
    - ACPICA如果 start_node 为空则避免遍历命名空间 (Cryolitia Pukngae) [Orabug38852332] {CVE-2025-71118}
    - sched/deadline仅设置在线 runqueues 的 free_cpus (Doug Berger) [Orabug: 38847752] {CVE-2025-68780}
    - perf/x86/amd启用前检查事件以避免 GPF (George Kennedy) [Orabug: 38847848] {CVE-2025-68798}
    - iomap正确调整非块对齐位置的读取范围 (Joanne Koong) [Orabug: 38847819] {CVE-2025-68794}
    - shmem修复重命名失败时的恢复 (Al Viro) [Orabug38847988] {CVE-2025-71072}
    - tcp_metrics使用 dst_dev_net_rcu() (Eric Dumazet) [Orabug: 38592188] {CVE-2025-40075}
    - scsiimm修复未完成的延迟工作所造成的释放后使用缺陷 (Duoming Zhou) [Orabug38783113] {CVE-2025-68324}
    - block在 blk_mq_[un]quiesce_tagset() 中使用 RCU 而不是 set->tag_list_lock (Mohamed Khalfella) [Orabug
    38818209] {CVE-2025-68756}
    - block修复 __blkdev_issue_zero_pages 中的内存泄漏 (Shaurya Rane) [Orabug38798772] {CVE-2025-68348}
    - NFS自动挂载的文件系统应继承 ro,noexec,nodev,sync 标记 (Trond Myklebust) [Orabug:
    38818236] {CVE-2025-68764}
    - NFSv4/pNFS清除 pnfs_mark_layout_stateid_invalid 中的 NFS_INO_LAYOUTCOMMIT (Jonathan Curley) [Orabug
    38798774] {CVE-2025-68349}
    - net/schedsch_cookie修复 candle_drop 中不正确的 qlen 简缩 (Xiang Mei) [Orabug: 38783136] {CVE-2025-68325}
    - regulator: core使用调节器_list_mutex 保护调节器_supply_alias_list (Sarkhuang) [Orabug:
    38798786] {CVE-2025-68354}
    - gfs2防止递归内存回收 (Andreas Gruenbacher) [Orabug: 38798793] {CVE-2025-68356}
    - ima处理 ima_filter_rule_match() 返回的错误代码 (Zhao Yipeng) [Orabug: 38798921] {CVE-2025-68740}
    - wifirtl818xrtl8187修复 rtl8187_rx_cb() 中的潜在缓冲区下溢 (Seungjin Bae) [Orabug
    38798814] {CVE-2025-68362}
    - scsiqla2xxx修复不当释放 purex 项目 (Zilin Guan) [Orabug38798928] {CVE-2025-68741}
    - bpf修复 update_effect_progs 失败时无效的 prog->stats 访问 (Pu Lehui) [Orabug: 38798931] {CVE-2025-68742}
    - wifirtl818x修复 rtl8180_init_rx_ring() 中的潜在内存泄漏 (Abdun Nihaal) [Orabug: 38818221] {CVE-2025-68759}
    - bpf检查 bpf_skb_check_mtu 中是否设置了 skb->transport_header (Martin Kafai Lau) [Orabug: 38798820] {CVE-2025-68363}
    - bpf更新 [lru_,]percpu_hash 映射时释放特殊字段 (Leon Hwang) [Orabug: 38798936] {CVE-2025-68744}
    - ocfs2将 BUG() 放宽至 __ocfs2_move_extent() 中的 ocfs2_error() (Dmitry Antipov) [Orabug: 38798823] {CVE-2025-68364}
    - nbdnbd_genl_connect 中的延迟配置解锁 (Zheng Qixing) [Orabug: 38798832] {CVE-2025-68366}
    - macintosh/mac_hid修复 mac_hid_toggle_emumouse 中的争用条件 (Long Li) [Orabug: 38798837] {CVE-2025-68367}
    - scsismartpqi修复删除设备后访问的设备资源 (Mike Mcgowen) [Orabug: 38798847] {CVE-2025-68371}
    - nbd延迟 config 放入 recv_work (Zheng Qixing) [Orabug: 38798850] {CVE-2025-68372}
    - md修复 md_wakeup_thread 中的 rcu 保护 (Yun Zhou) [Orabug: 38798857] {CVE-2025-68374}
    - spitegra210-quad修复超时处理 (Vishwaroop A) [Orabug38798943] {CVE-2025-68746}
    - bpf修复 __bpf_get_stackid() 中的堆栈映射溢出检查 (Arnaud Lecomte) [Orabug: 38798864] {CVE-2025-68378}
    - RDMA/rxe调整大小失败后修复 srq->rq.queue 上的空指针取消引用 (Zhu Yanjun) [Orabug: 38798867] {CVE-2025-68379}
    - wifiath11k修复对等机 HE MCS 分配 (Baochen Qiang) [Orabug38798872] {CVE-2025-68380}
    - cryptoasymmetric_keys - 防止 asymmetric_key_generate_id 中的溢出 (Thorsten Blum) [Orabug:
    38798874] {CVE-2025-68724}
    - drm/vgem-fence修复版本上的潜在死锁 (Janusz Krzysztofik) [Orabug: 38818211] {CVE-2025-68757}
    - gpuhost1x修复 syncpt alloc/free 中的争用 (Mainak Sen) [Orabug: 38798898] {CVE-2025-68732}
    - nvme修复管理员 request_queue 生命周期 (Keith Busch) [Orabug38773611] {CVE-2025-68265}
    - KVMSVM如果替换 INT3/INTO不要跳过不相关的指令 (Omar Sandoval) [Orabug: 38773578] {CVE-2025-68259}
    - ext4在 ext4_destroy_inline_data_nolock() 中添加 i_data_sem 保护 (Alexey Nepomnyashih) [Orabug
    38773586] {CVE-2025-68261}
    - ext4写入操作前刷新内联数据大小 (Deepanshu Kartikey) [Orabug: 38773602] {CVE-2025-68264}
    - jbd2文件系统损坏时避免 jbd2_journal_get_create_access() 中的 bug_on (Ye Bin) [Orabug:
    38792632] {CVE-2025-68337}
    - xfrm在删除 x 时删除 x->tunnel (Sabrina Dubroca) [Orabug: 38730491,38854317] {CVE-2025-40215}
    - drm、fbcon、vga_switcheroo避免 fbcon 设置中的争用条件 (Thomas Zimmermann) [Orabug: 38773709] {CVE-2025-68296}
    - mm/huge_memory修复拆分 folio 时的空指针取消引用 (Wei Yang) [Orabug38773700] {CVE-2025-68293}
    - usbgadgetudc修复 usb_gadget_state_work 中的释放后使用 (Jimmy Hu) [Orabug: 38773635] {CVE-2025-68282}
    - libceph使用 map->max_osd 的边界检查替换 BUG_ON (Ziming Zhang) [Orabug: 38773641] {CVE-2025-68283}
    - libceph防止 handle_auth_session_key() 中潜在的越界写入 (Ziming Zhang) [Orabug
    38773648] {CVE-2025-68284}
    - libceph修复have_mon_and_osd_map() 中可能的释放后使用 (Ilya Dryomov) [Orabug: 38773654] {CVE-2025-68285}
    - drm/amd/display访问前检查空值 (Alex Hung) [Orabug: 38773661] {CVE-2025-68286}
    - usbuas修复在正在进行的数据传输期间删除 uas 设备时的 urb 取消映射问题 (Owen Gu) [Orabug: 38792592] {CVE-2025-68331}
    - usbstorage: sddr55拒绝越界 new_pba (Tian Chu Chen) [Orabug: 38762728] {CVE-2025-40345}
    - usbstorage修复 USB 批量传输中的内存泄漏 (Desnes Nunes) [Orabug: 38773676] {CVE-2018-1000204、CVE-2025-68288}
    - mm/memfd修复 hugetlb folios 中的信息泄漏 (Deepanshu Kartikey) [Orabug: 38773697] {CVE-2025-68292}
    - smbclient修复 cifs_construct_tcon() 中的内存泄漏 (Paulo Alcantara) [Orabug: 38773703] {CVE-2025-68295}
    - ceph修复加密目录的 process_v2_sparse_read() 中的崩溃 (Viacheslav Dubeyko) [Orabug
    38773716] {CVE-2025-68297}
    - Bluetoothbtusbmediatek避免 btusb_mtk_claim_iso_intf() 空取消引用 (Douglas Anderson) [Orabug
    38773723] {CVE-2025-68298}
    - tracing修复 tracing_buffers_mmap_close 中的 WARN_ON 以进行拆分 VMA (Deepanshu Kartikey) [Orabug:
    38792583] {CVE-2025-68329}
    - iioaccelbmc150修复 irq 假设回归 (Linus Walleij) [Orabug38792585] {CVE-2025-68330}
    - fs/namespace修复 grab_requested_mnt_ns 中的引用泄漏 (Andrei Vagin) [Orabug: 38773950] {CVE-2025-68300}
    - netatlantic修复 RX 路径中的碎片溢出处理 (Jiefeng Zhang) [Orabug: 38773728] {CVE-2025-68301}
    - team移动 team_port_add 结束时的团队设备类型变更 (Nikola Z. Ivanov) [Orabug: 38796270] {CVE-2025-68340}
    - veth减少 XDP no_direct 返回部分以修复争用 (Jesper Dangaard Brouer) [Orabug: 38796276] {CVE-2025-68341}
    - 蓝牙hci_sock防止套接字写入迭代器和 sock bind 中的争用 (Edward Adam Davis) [Orabug
    38773949] {CVE-2025-68305}
    - Bluetoothbtusbmediatek修复释放 mtk iso 接口时的内核崩溃 (Chris Lu) [Orabug
    38773748] {CVE-2025-68306}
    - cangs_usbgs_usb_receive_bulk_callback()访问数据前检查actual_length (Marc Kleine-Budde) [Orabug: 38796278] {CVE-2025-68342}
    - cangs_usbgs_usb_receive_bulk_callback()访问标头之前检查actual_length (Marc Kleine-Budde) [Orabug: 38796285] {CVE-2025-68343}
    - cangs_usbgs_usb_xmit_callback()修复对 URB 传输失败的处理 (Marc Kleine-Budde) [Orabug: 38773751] {CVE-2025-68307}
    - cankvaser_usbleaf修复命令解析器中的潜在无限循环 (Seungjin Bae) [Orabug: 38773759] {CVE-2025-68308}
    - xfs修复符号链接修复中的越界内存读取错误 (Darrick J. Wong) [Orabug: 38730602] {CVE-2025-40246}
    - mptcp修复 mptcp_pm_del_add_timer() 中的争用 (Eric Dumazet) [Orabug: 38730655] {CVE-2025-40257}
    - drm/amdgpu修复 PF 传递休眠后的 gpu 页面错误 (Samuel Zhang) [Orabug: 38773445] {CVE-2025-68230}
    - scsicore修复由 scsi_host_busy() 触发的回归 (Bart Van Assche) [Orabug: 38773425] {CVE-2025-68224}
    - vsock如果已建立则忽略 connect() 上的信号/超时 (Michal Luczaj) [Orabug: 38730610] {CVE-2025-40248}
    - cifs修复 smb3_fs_context_parse_param 错误路径中的内存泄漏 (Shaurya Rane) [Orabug: 38773403] {CVE-2025-68219}
    - devlinkrate在 devl_rate_nodes_destroy 中取消设置父指针 (Shay Drory) [Orabug: 38730623] {CVE-2025-40251}
    - ice修复错误路径中的驱动程序删除时的 PTP 清理 (Grzegorz Nitka) [Orabug: 38773389] {CVE-2025-68215}
    - idpf修复删除中可能的 vport_config 空指针取消引用 (Emil Tantilov) [Orabug: 38773956] {CVE-2025-68213}
    - netqlogic/qede修复 qede_tpa_cont() 和 qede_tpa_end() 中潜在的越界读取 (Pavel Zhigulin) [Orabug: 38730628] {CVE-2025-40252}
    - nvme-multipath修复因分区扫描作业而导致的 lockdep WARN (Shin'Ichiro Kawasaki) [Orabug: 38773400] {CVE-2025-68218}
    - netopenvswitch删除从不工作的支持 (Ilya Maximets) [Orabug: 38730647] {CVE-2025-40254}
    - drm/tegra添加对 put_pid() 的调用 (Prateek Agarwal) [Orabug38773463] {CVE-2025-68233}
    - drm/radeon删除 is_signaled 中的 radeon_fence_process无死锁 (Robert Mclinton) [Orabug
    38773418] {CVE-2025-68223}
    - mptcp修复 mptcp_schedule_work() 中的争用条件 (Eric Dumazet) [Orabug: 38730658] {CVE-2025-40258}
    - scsitargettcm_loop修复 tcm_loop_tpg_address_show() 中的段错误 (Hamza Mahfooz) [Orabug: 38773439] {CVE-2025-68229}
    - scsisg不要在原子性上下文中休眠 (Bart Van Assche) [Orabug: 38730661] {CVE-2025-40259}
    - nvmenvme-fc确保在 nvme_fc_delete_ctrl() 中取消 ->ioerr_work (Ewan D. Milne) [Orabug:
    38730672] {CVE-2025-40261}
    - nouveau/firmware添加 nvkm_falcon_fw::boot 缺少的 kfree() (Nam Cao) [Orabug: 38773467] {CVE-2025-68235}
    - mm/mempool修复 HIGMEM 中毒 order>0 页面 (Vlastimil Babka) [Orabug38773453] {CVE-2025-68231}
    - Input: cros_ec_keyb - 修复无效的内存访问 (Tzung-Bi Shih) [Orabug: 38730679] {CVE-2025-40263}
    - be2net使用 OS2BMC 时传递 wrb_params (Andrey Vatoropin) [Orabug: 38730688] {CVE-2025-40264}
    - mptcp修复 BPF 的原型回退检测 (Jiayuan Chen) [Orabug: 38773434] {CVE-2025-68227}
    - mtdchar修复读取/写入 ioctls 中的整数溢出 (Dan Carpenter) [Orabug: 38773476] {CVE-2025-68237}
    - timers修复 timer_shutdown_sync() 中的空函数指针争用 (Yipeng Zou) [Orabug: 38773387] {CVE-2025-68214}

Tenable 已直接从 Oracle Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Linux カーネルでは、以下の脆弱性が解決されています: fs/dax: Fix don't skip locked entries when scanning entries Commit 6be3e21d25ca (fs/dax: don't skip locked entries when scanning entries) introduced a new function, wait_entry_unlocked_exclusive(), which waits for the current entry to become unlocked without advancing the XArray iterator state. Waiting for the entry to become unlocked requires dropping the XArray lock. This requires calling xas_pause() prior to dropping the lock which leaves the xas in a suitable state for the next iteration. However this has the side-effect of advancing the xas state to the next index. Normally this isn't an issue because xas_for_each() contains code to detect this state and thus avoid advancing the index a second time on the next loop iteration. However both callers of and wait_entry_unlocked_exclusive() itself subsequently use the xas state to reload the entry. As xas_pause() updated the state to the next index this will cause the current entry which is being waited on to be skipped. This caused the following warning to fire intermittently when running xftest generic/068 on an XFS filesystem with FS DAX enabled: [ 35.067397] ------------[ cut here ]------------ [ 35.068229] WARNING: CPU: 21 PID: 1640 at mm/truncate.c:89 truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.069717] Modules linked in: nd_pmem dax_pmem nd_btt nd_e820 libnvdimm [ 35.071006] CPU: 21 UID: 0 PID: 1640 Comm:
    fstest Not tainted 6.15.0-rc7+ #77 PREEMPT(voluntary) [ 35.072613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/204 [ 35.074845] RIP:
    0010:truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.075962] Code: a1 00 00 00 f6 47 0d 20 0f 84 97 00 00 00 4c 63 e8 41 39 c4 7f 0b eb 61 49 83 c5 01 45 39 ec 7e 58 42 f68 [ 35.079522] RSP:
    0018:ffffb04e426c7850 EFLAGS: 00010202 [ 35.080359] RAX: 0000000000000000 RBX: ffff9d21e3481908 RCX:
    ffffb04e426c77f4 [ 35.081477] RDX: ffffb04e426c79e8 RSI: ffffb04e426c79e0 RDI: ffff9d21e34816e8 [35.082590] RBP: ffffb04e426c79e0 R08: 0000000000000001 R09: 0000000000000003 [ 35.083733] R10:
    0000000000000000 R11: 822b53c0f7a49868 R12: 000000000000001f [ 35.084850] R13: 0000000000000000 R14:
    ffffb04e426c78e8 R15: fffffffffffffffe [ 35.085953] FS: 00007f9134c87740(0000) GS:ffff9d22abba0000(0000) knlGS:0000000000000000 [ 35.087346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.088244] CR2:
    00007f9134c86000 CR3: 000000040afff000 CR4: 00000000000006f0 [ 35.089354] Call Trace: [ 35.089749] <TASK> [ 35.090168] truncate_inode_pages_range+0xfc/0x4d0 [ 35.091078] truncate_pagecache+0x47/0x60 [ 35.091735] xfs_setattr_size+0xc7/0x3e0 [ 35.092648] xfs_vn_setattr+0x1ea/0x270 [ 35.093437] notify_change+0x1f4/0x510 [ 35.094219] ? do_truncate+0x97/0xe0 [ 35.094879] do_truncate+0x97/0xe0 [ 35.095640] path_openat+0xabd/0xca0 [ 35.096278] do_filp_open+0xd7/0x190 [ 35.096860] do_sys_openat2+0x8a/0xe0 [35.097459] __x64_sys_openat+0x6d/0xa0 [ 35.098076] do_syscall_64+0xbb/0x1d0 [ 35.098647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.099444] RIP: 0033:0x7f9134d81fc1 [ 35.100033] Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 2a 26 0e 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff5 [35.102993] RSP: 002b:00007ffcd41e0d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 35.104263] RAX:
    ffffffffffffffda RBX: 0000000000000242 RCX: 00007f9134d81fc1 [ 35.105452] RDX: 0000000000000242 RSI:
    00007ffcd41e1200 RDI: 00000000ffffff9c [ 35.106663] RBP: 00007ffcd41e1200 R08: 0000000000000000 R09:
    0000000000000064 [ 35.107923] R10: 00000000000001a4 R11: 0000000000000202 R12: 0000000000000066 [35.109112] R13: 0000000000100000 R14: 0000000000100000 R15: 0000000000000400 [ 35.110357] </TASK> [35.110769] irq event stamp: 8415587 [ 35.111486] hardirqs last enabled at (8415599): [<ffffffff8d74b562>]
    __up_console_se ---truncated--- (CVE-2025-38276)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix don't skip locked entries     when scanning entries Commit 6be3e21d25ca (fs/dax: don't skip locked entries when scanning entries)     introduced a new function, wait_entry_unlocked_exclusive(), which waits for the current entry to become     unlocked without advancing the XArray iterator state. Waiting for the entry to become unlocked requires     dropping the XArray lock. This requires calling xas_pause() prior to dropping the lock which leaves the     xas in a suitable state for the next iteration. However this has the side-effect of advancing the xas     state to the next index. Normally this isn't an issue because xas_for_each() contains code to detect this     state and thus avoid advancing the index a second time on the next loop iteration. However both callers of     and wait_entry_unlocked_exclusive() itself subsequently use the xas state to reload the entry. As     xas_pause() updated the state to the next index this will cause the current entry which is being waited on     to be skipped. This caused the following warning to fire intermittently when running xftest generic/068 on     an XFS filesystem with FS DAX enabled: [ 35.067397] ------------[ cut here ]------------ [ 35.068229]     WARNING: CPU: 21 PID: 1640 at mm/truncate.c:89 truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.069717]     Modules linked in: nd_pmem dax_pmem nd_btt nd_e820 libnvdimm [ 35.071006] CPU: 21 UID: 0 PID: 1640 Comm:
    fstest Not tainted 6.15.0-rc7+ #77 PREEMPT(voluntary) [ 35.072613] Hardware name: QEMU Standard PC (Q35 +     ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/204 [ 35.074845] RIP:
    0010:truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.075962] Code: a1 00 00 00 f6 47 0d 20 0f 84 97 00     00 00 4c 63 e8 41 39 c4 7f 0b eb 61 49 83 c5 01 45 39 ec 7e 58 42 f68 [ 35.079522] RSP:
    0018:ffffb04e426c7850 EFLAGS: 00010202 [ 35.080359] RAX: 0000000000000000 RBX: ffff9d21e3481908 RCX:
    ffffb04e426c77f4 [ 35.081477] RDX: ffffb04e426c79e8 RSI: ffffb04e426c79e0 RDI: ffff9d21e34816e8 [     35.082590] RBP: ffffb04e426c79e0 R08: 0000000000000001 R09: 0000000000000003 [ 35.083733] R10:
    0000000000000000 R11: 822b53c0f7a49868 R12: 000000000000001f [ 35.084850] R13: 0000000000000000 R14:
    ffffb04e426c78e8 R15: fffffffffffffffe [ 35.085953] FS: 00007f9134c87740(0000) GS:ffff9d22abba0000(0000)     knlGS:0000000000000000 [ 35.087346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.088244] CR2:
    00007f9134c86000 CR3: 000000040afff000 CR4: 00000000000006f0 [ 35.089354] Call Trace: [ 35.089749] <TASK>     [ 35.090168] truncate_inode_pages_range+0xfc/0x4d0 [ 35.091078] truncate_pagecache+0x47/0x60 [ 35.091735]     xfs_setattr_size+0xc7/0x3e0 [ 35.092648] xfs_vn_setattr+0x1ea/0x270 [ 35.093437] notify_change+0x1f4/0x510     [ 35.094219] ? do_truncate+0x97/0xe0 [ 35.094879] do_truncate+0x97/0xe0 [ 35.095640]     path_openat+0xabd/0xca0 [ 35.096278] do_filp_open+0xd7/0x190 [ 35.096860] do_sys_openat2+0x8a/0xe0 [     35.097459] __x64_sys_openat+0x6d/0xa0 [ 35.098076] do_syscall_64+0xbb/0x1d0 [ 35.098647]     entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.099444] RIP: 0033:0x7f9134d81fc1 [ 35.100033] Code: 75 57 89     f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 2a 26 0e 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff5 [     35.102993] RSP: 002b:00007ffcd41e0d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 35.104263] RAX:
    ffffffffffffffda RBX: 0000000000000242 RCX: 00007f9134d81fc1 [ 35.105452] RDX: 0000000000000242 RSI:
    00007ffcd41e1200 RDI: 00000000ffffff9c [ 35.106663] RBP: 00007ffcd41e1200 R08: 0000000000000000 R09:
    0000000000000064 [ 35.107923] R10: 00000000000001a4 R11: 0000000000000202 R12: 0000000000000066 [     35.109112] R13: 0000000000100000 R14: 0000000000100000 R15: 0000000000000400 [ 35.110357] </TASK> [     35.110769] irq event stamp: 8415587 [ 35.111486] hardirqs last enabled at (8415599): [<ffffffff8d74b562>]
    __up_console_se ---truncated--- (CVE-2025-38276)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
244556	Linux Distros 未修补的漏洞：CVE-2025-38276	Nessus	Misc.	2025/8/7	2025/9/30	medium
244556	Linux Distros 未修補的弱點：CVE-2025-38276	Nessus	Misc.	2025/8/7	2025/9/30	medium
299777	Oracle Linux 10 / 9Unbreakable Enterprise 核心 (ELSA-2026-50112)	Nessus	Oracle Linux Local Security Checks	2026/2/23	2026/3/4	high
299777	Oracle Linux 10 / 9Unbreakable Enterprise 内核 (ELSA-2026-50112)	Nessus	Oracle Linux Local Security Checks	2026/2/23	2026/3/4	high
244556	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38276	Nessus	Misc.	2025/8/7	2025/9/30	medium
299777	Oracle Linux 10/9Unbreakable Enterprise kernelELSA-2026-50112	Nessus	Oracle Linux Local Security Checks	2026/2/23	2026/3/4	high
299777	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50112)	Nessus	Oracle Linux Local Security Checks	2026/2/23	2026/3/4	high
244556	Linux Distros Unpatched Vulnerability : CVE-2025-38276	Nessus	Misc.	2025/8/7	2025/9/30	medium

检测

插件搜索

medium

medium

high

high

medium

high

high

medium