Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - ocfs2：在 inode 讀取期間驗證 DIO 孤立插槽 [錯誤] 損毀的 append-dio dinode （位移處的高位元組0xa1從 0 損毀到 1） 可能會攜帶掛載的檔案系統插槽範圍之外的 i_dio_orphaned_slot，並觸發釋放後使用錯誤： 錯誤： KASAN：ocfs2_get_system_file_inode+0x780/0x820 中的 slab-use-after-free fs/ocfs2/sysfile.c：102 在 addr ffff88800b767c00 處，由任務 kworker/u8：3/85 讀取大小 8 呼叫追蹤： ...
    ocfs2_get_system_file_inode+0x780/0x820 fs/ocfs2/sysfile.c：102 ocfs2_wipe_inode+0x292/0xf70 fs/ocfs2/inode.c：840 ocfs2_delete_inode fs/ocfs2/inode.c：1155 [內嵌] ocfs2_evict_inode+0x6c9/0x1170 fs/ocfs2/inode.c：1295 evict+0x38e/0x8f0 fs/inode.c：810 iput_final fs/inode.c：1914 [內嵌] iput fs/inode.c：1966 [內嵌] iput+0x55b/0x8b0 fs/inode.c：1926 ocfs2_recover_orphans+0x610/0xe40 fs/ocfs2/journal.c：2374 ocfs2_complete_recovery+0x5af/0xd00 fs/ocfs2/journal.c：1373 ... [原因] ocfs2_del_inode_from_orphan（） 使用 i_dio_orphaned_slot 來索引插槽本機系統 inode 快取。dinode 驗證器不會檢查此作用中插槽，因此超出範圍的值會產生無效的快取登錄指標，該指標會解除參照為 inode 指標。[修復]在 dinode 驗證期間拒絕插槽範圍之外的作用中i_dio_orphaned_slot，然後 DIO 孤立回復才能耗用它。（CVE-2026-90204）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ocfs2：在 inode 读取期间验证 DIO 孤立槽 [缺陷] 损坏的 append-DIO dinode（偏移处的高字节0xa1从 0 损坏到 1）可携带超出挂载文件系统插槽范围的i_dio_orphaned_slot，并触发释放后使用错误： 缺陷： KASAN：任务 kworker/u8：3/85 在地址 ffff88800b767c00 处的 ocfs2_get_system_file_inode+0x780/0x820 中的 slab-use-after-free 调用跟踪： ...
    ocfs2_get_system_file_inode+0x780/0x820 fs/ocfs2/sysfile.+/ c：102 ocfs2_wipe_inode+0x292/0xf70 fs/ocfs2/inode.c：840 ocfs2_delete_inode fs/ocfs2/inode.c：1155 [内联] ocfs2_evict_inode+0x6c9/0x1170 fs/ocfs2/inode.c：1295 evict+0x38e/0x8f0 fs/inode.c：810 iput_final fs/inode.c：1914 [内联] iput fs/inode.c：1966 [内联] iput+0x55b/0x8b0 fs/inode.c：1926 ocfs2_recover_orphans+0x610/0xe40 fs/ocfs2/journal.c：2374 ocfs2_complete_recovery+0x5af/0xd00 fs/ocfs2/journal.c：1373 ... [原因] ocfs2_del_inode_from_orphan（） 使用 i_dio_orphaned_slot 为插槽本地系统 inode 缓存编制索引。dinode 验证器未检查此活动插槽，因此超出范围的值会产生取消引用为 inode 指针的无效缓存条目指针。[修复]在 dinode 验证期间，在 DIO 孤立恢复可消耗活动i_dio_orphaned_slot之前，拒绝插槽范围之外的活动。（CVE-2026-90204）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - ocfs2:inode の読み取り中に DIO オーファンスロットを検証します [バグ] 破損した append-DIO dinode(オフセットの上位バイト0xa1 0 から 1 への破損)が、マウントされたファイルシステムのスロット範囲外にi_dio_orphaned_slotを伝送し、use-after-free エラーを発生させる可能性があります: バグ: KASAN:ocfs2_get_system_file_inode+0x780/0x820 の slab-use-after-free fs/ocfs2/sysfile.c:102 タスク kworker/u8:3/85 による addr ffff88800b767c00 におけるサイズ 8 の読み取り コールトレース: ...
    ocfs2_get_system_file_inode+0x780/0x820 fs/ocfs2/sysfile.c:102 ocfs2_wipe_inode+0x292/0xf70 fs/ocfs2/inode.c:840 ocfs2_delete_inode fs/ocfs2/inode.c:1155 [インライン] ocfs2_evict_inode+0x6c9/0x1170 fs/ocfs2/inode.c:1295 evict+0x38e/0x8f0 fs/inode.c:810 iput_final fs/inode.c:1914 [インライン] iput+0x55b/0x8b0 fs/inode.c:1926 ocfs2_recover_orphans+0x610/0xe40 fs/ocfs2/journal.c:2374 ocfs2_complete_recovery+0x5af/0xd00 fs/ocfs2/journal.c:1373 ... [原因] ocfs2_del_inode_from_orphan() は i_dio_orphaned_slot を使用してスロットローカルシステムの inode キャッシュにインデックスを付けます。dinode バリデーターはこのアクティブなスロットをチェックしないため、範囲外の値があると無効なキャッシュエントリポインターが生成され、inode ポインターとして逆参照されます。[修正]DIO オーファンリカバリが消費できるようになる前に、dinode の検証中にスロット範囲外のアクティブi_dio_orphaned_slotを拒否します。(CVE-2026-90204)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151103 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    ocfs2: validate DIO orphan slot during inode read

    [BUG]     A corrupted append-DIO dinode (high byte at offset 0xa1     corrupted from 0 to 1) can carry an i_dio_orphaned_slot     outside the mounted filesystem slot range and trigger a     use-after-free error:

    BUG: KASAN: slab-use-after-free in ocfs2_get_system_file_inode+0x780/0x820 fs/ocfs2/sysfile.c:102     Read of size 8 at addr ffff88800b767c00 by task kworker/u8:3/85     Call Trace:
     ...
     ocfs2_get_system_file_inode+0x780/0x820 fs/ocfs2/sysfile.c:102      ocfs2_wipe_inode+0x292/0xf70 fs/ocfs2/inode.c:840      ocfs2_delete_inode fs/ocfs2/inode.c:1155 [inline]      ocfs2_evict_inode+0x6c9/0x1170 fs/ocfs2/inode.c:1295      evict+0x38e/0x8f0 fs/inode.c:810      iput_final fs/inode.c:1914 [inline]      iput fs/inode.c:1966 [inline]      iput+0x55b/0x8b0 fs/inode.c:1926      ocfs2_recover_orphans+0x610/0xe40 fs/ocfs2/journal.c:2374      ocfs2_complete_recovery+0x5af/0xd00 fs/ocfs2/journal.c:1373      ...

    [CAUSE]     ocfs2_del_inode_from_orphan() uses i_dio_orphaned_slot to index the     slot-local system inode cache. The dinode validator does not check     this active slot, so an out-of-range value produces an invalid cache     entry pointer that is dereferenced as an inode pointer.

    [FIX]     Reject an active i_dio_orphaned_slot outside the slot range during     dinode validation, before DIO orphan recovery can consume it.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146675 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    ocfs2: validate DIO orphan slot during inode read

    [BUG]     A corrupted append-DIO dinode (high byte at offset 0xa1     corrupted from 0 to 1) can carry an i_dio_orphaned_slot     outside the mounted filesystem slot range and trigger a     use-after-free error:

    BUG: KASAN: slab-use-after-free in ocfs2_get_system_file_inode+0x780/0x820 fs/ocfs2/sysfile.c:102     Read of size 8 at addr ffff88800b767c00 by task kworker/u8:3/85     Call Trace:
     ...
     ocfs2_get_system_file_inode+0x780/0x820 fs/ocfs2/sysfile.c:102      ocfs2_wipe_inode+0x292/0xf70 fs/ocfs2/inode.c:840      ocfs2_delete_inode fs/ocfs2/inode.c:1155 [inline]      ocfs2_evict_inode+0x6c9/0x1170 fs/ocfs2/inode.c:1295      evict+0x38e/0x8f0 fs/inode.c:810      iput_final fs/inode.c:1914 [inline]      iput fs/inode.c:1966 [inline]      iput+0x55b/0x8b0 fs/inode.c:1926      ocfs2_recover_orphans+0x610/0xe40 fs/ocfs2/journal.c:2374      ocfs2_complete_recovery+0x5af/0xd00 fs/ocfs2/journal.c:1373      ...

    [CAUSE]     ocfs2_del_inode_from_orphan() uses i_dio_orphaned_slot to index the     slot-local system inode cache. The dinode validator does not check     this active slot, so an out-of-range value produces an invalid cache     entry pointer that is dereferenced as an inode pointer.

    [FIX]     Reject an active i_dio_orphaned_slot outside the slot range during     dinode validation, before DIO orphan recovery can consume it.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ocfs2: validate DIO orphan slot during inode read [BUG] A corrupted append-DIO dinode (high byte at offset     0xa1 corrupted from 0 to 1) can carry an i_dio_orphaned_slot outside the mounted filesystem slot range and     trigger a use-after-free error: BUG: KASAN: slab-use-after-free in ocfs2_get_system_file_inode+0x780/0x820     fs/ocfs2/sysfile.c:102 Read of size 8 at addr ffff88800b767c00 by task kworker/u8:3/85 Call Trace: ...
    ocfs2_get_system_file_inode+0x780/0x820 fs/ocfs2/sysfile.c:102 ocfs2_wipe_inode+0x292/0xf70     fs/ocfs2/inode.c:840 ocfs2_delete_inode fs/ocfs2/inode.c:1155 [inline] ocfs2_evict_inode+0x6c9/0x1170     fs/ocfs2/inode.c:1295 evict+0x38e/0x8f0 fs/inode.c:810 iput_final fs/inode.c:1914 [inline] iput     fs/inode.c:1966 [inline] iput+0x55b/0x8b0 fs/inode.c:1926 ocfs2_recover_orphans+0x610/0xe40     fs/ocfs2/journal.c:2374 ocfs2_complete_recovery+0x5af/0xd00 fs/ocfs2/journal.c:1373 ... [CAUSE]     ocfs2_del_inode_from_orphan() uses i_dio_orphaned_slot to index the slot-local system inode cache. The     dinode validator does not check this active slot, so an out-of-range value produces an invalid cache entry     pointer that is dereferenced as an inode pointer. [FIX] Reject an active i_dio_orphaned_slot outside the     slot range during dinode validation, before DIO orphan recovery can consume it. (CVE-2026-90204)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
347400	Linux Distros 未修補弱點：CVE-2026-90204	Nessus	Misc.	2026/9/18	2026/11/4	high
347400	Linux Distros 未修补的漏洞：CVE-2026-90204	Nessus	Misc.	2026/9/18	2026/11/4	high
347400	Linux Distros のパッチ未適用の脆弱性: CVE-2026-90204	Nessus	Misc.	2026/9/18	2026/11/4	high
378308	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151103)	Nessus	Unity Linux Local Security Checks	2026/11/10	2026/11/10	high
376443	Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)	Nessus	Ubuntu Local Security Checks	2026/11/5	2026/11/5	high
373213	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146675)	Nessus	Unity Linux Local Security Checks	2026/10/28	2026/10/28	high
347400	Linux Distros Unpatched Vulnerability : CVE-2026-90204	Nessus	Misc.	2026/9/18	2026/11/4	high

检测

插件搜索

high

high

high

high

high

high

high