Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - mm/kmemleak避免扫描潜在的巨大漏洞当使用 devm_request_free_mem_region() 和 devm_memremap_pages() 添加 ZONE_DEVICE 内存时如果请求的释放内存区域的 end pfn 很大例如 0x400000000node_end_pfn() 也将是巨大请参阅 move_pfn_range_to_zone ())。因此它在 node_start_pfn() 和 node_end_pfn() 之间造成了一个巨大的漏洞。我们在某些 AMD APU 上发现amdkfd 请求释放此类内存区域并造成巨大漏洞。在这种情况下下面的代码片段只是在大漏洞上执行 busy test_bit() 循环。 for (pfn = start_pfn; pfn < end_pfn; pfn++) { struct page *page = pfn_to_online_page(pfn); } if (!page) continue; ... } 因此我们遇到了 soft lockup: watchdog: BUG: soft lockup - CPU#6 卡住达 26s! [bash:1221] CPU6 PID1221 Commbash未受感染 5.15.0-custom #1 RIP
    0010:pfn_to_online_page+0x5/0xd0 调用跟踪kmemleak_scan+0x16a/0x440 kmemleak_write+0x306/0x3a0 common_file_perm+0x72/0x170 full_proxy_write+0x5c/0x90 vfs_write+0xb9/0x260 ksys_write+0x67/0xe0
    __x64_sys_write+0x1a/0x20 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae 我对该修补程序进行了一些测试。 (1) 修补程序之前卸载的 amdgpu 模块real 0m0.976s user 0m0.000s sys 0m0.968s修补程序之后real 0m0.981s user 0m0.000s sys 0m0.973s (2) 修补程序之前加载的 amdgpu 模块real 0m35修补程序之后的 .365s user 0m0.000s sys 0m35.354sreal 0m1.049s user 0m0.000s sys 0m1.042s (CVE-2022-48731)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - mm/kmemleak避免掃描潛在的巨大漏洞。使用 devm_request_free_mem_region() 和 devm_memremap_pages() 新增 ZONE_DEVICE 記憶體時如果要求的可用記憶體區域的結尾 pfn 很大 (例如 0x400000000)node_end_pfn() 也會很大 (請參閱 move_pfn_range_to_zone ())。因此它會在 node_start_pfn() 和 node_end_pfn() 之間建立一個巨大漏洞。我們在某些 AMD APU 上發現amdkfd 要求了此類可用的記憶體區域並建立了一個巨大漏洞。在這種情況下下列程式碼片段只是在巨大漏洞上執行忙碌的 test_bit() 迴圈。 for (pfn = start_pfn; pfn < end_pfn; pfn++) { struct page *page = pfn_to_online_page(pfn); if (!page) 繼續... } 因此我們得到了軟鎖定 watchdogBUG軟鎖定 - CPU#6 停滯了 26 秒[bash:1221] CPU: 6 PID: 1221 Comm: bash 未受污染的 5.15.0-custom #1 RIP
    0010pfn_to_online_page+0x5/0xd0 呼叫追踪kmemleak_scan+0x16a/0x440 kmemleak_write+0x306/0x3a0 common_file_perm+0x72/0x170 full_proxy_write+0x5c/0x90 vfs_write+0xb9/0x260 ksys_write+0x67/0xe0
    __x64_sys_write+0x1a/0x20 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae 我用 修補程式進行了一些測試。 (1) 在修補程式之前卸載 amdgpu 模組real 0m0.976s 使用者 0m0.000s sys 0m0.968s 修補程式之後real 0m0.981s 使用者 0m0.000s sys 0m0.973s (2) 在修補程式之前載入的 amdgpu 模組real 0m35修補程式之後的 .365s 使用者 0m0.000s sys 0m35.354sreal 0m1.049s 使用者 0m0.000s sys 0m1.042s (CVE-2022-48731)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - ** 。このため、node_start_pfn() と node_end_pfn() の間に巨大なホールが生じます。一部の AMD APU で、amdkfd がこうした解放された mem 領域をリクエストし、巨大なホールを作成していたことが判明しました。このような場合、次のコードスニペットは巨大なホールでビジーな test_bit() ループを行っていました。 pfn = start_pfn; pfn < end_pfn; pfn++{ struct page *page = pfn_to_online_page(pfn); if !pageが続行される場合... } したがって、ソフトロックアップを取得できますwatchdog バグソフトロックアップ - CPU#6 26s のためのスタック[bash:1221] CPU: 6 PID: 1221 Comm: bash 汚染されていない 5.15.0-custom #1 RIP:
    0010:pfn_to_online_page+0x5/0xd0 Call Trace: ? kmemleak_scan+0x16a/0x440 kmemleak_write+0x306/0x3a0 ? common_file_perm+0x72/0x170 full_proxy_write+0x5c/0x90 vfs_write+0xb9/0x260 ksys_write+0x67/0xe0
    __x64_sys_write+0x1a/0x20 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae パッチでいくつかのテストを行いました。 (1) パッチ前にアンロードされた amdgpu モジュール実際の 0m0.976s ユーザー 0m0.000s sys パッチ後 0m0.968s実際の 0m0.981s ユーザー 0m0.000s sys 0m0.973s (2) パッチ前にロードされた amdgpu モジュール実際の 0m35 .365s user 0m0.000s sys 0m35.354s パッチ後での真の 0m1.049s ユーザー 0m0.000s sys 0m1.042sCVE-2022-48731

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989157 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    mm/kmemleak: avoid scanning potential huge holes

    When using devm_request_free_mem_region() and devm_memremap_pages() to     add ZONE_DEVICE memory, if requested free mem region's end pfn were     huge(e.g., 0x400000000), the node_end_pfn() will be also huge (see     move_pfn_range_to_zone()).  Thus it creates a huge hole between     node_start_pfn() and node_end_pfn().

    We found on some AMD APUs, amdkfd requested such a free mem region and     created a huge hole.  In such a case, following code snippet was just     doing busy test_bit() looping on the huge hole.

      for (pfn = start_pfn; pfn < end_pfn; pfn++) {             struct page *page = pfn_to_online_page(pfn);
                    if (!page)                             continue;
            ...
      }

    So we got a soft lockup:

      watchdog: BUG: soft lockup - CPU#6 stuck for 26s! [bash:1221]       CPU: 6 PID: 1221 Comm: bash Not tainted 5.15.0-custom #1       RIP: 0010:pfn_to_online_page+0x5/0xd0       Call Trace:
        ? kmemleak_scan+0x16a/0x440         kmemleak_write+0x306/0x3a0         ? common_file_perm+0x72/0x170         full_proxy_write+0x5c/0x90         vfs_write+0xb9/0x260         ksys_write+0x67/0xe0
        __x64_sys_write+0x1a/0x20         do_syscall_64+0x3b/0xc0         entry_SYSCALL_64_after_hwframe+0x44/0xae

    I did some tests with the patch.

    (1) amdgpu module unloaded

    before the patch:

      real    0m0.976s       user    0m0.000s       sys     0m0.968s

    after the patch:

      real    0m0.981s       user    0m0.000s       sys     0m0.973s

    (2) amdgpu module loaded

    before the patch:

      real    0m35.365s       user    0m0.000s       sys     0m35.354s

    after the patch:

      real    0m1.049s       user    0m0.000s       sys     0m1.042s

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mm/kmemleak: avoid scanning potential huge holes When using devm_request_free_mem_region() and     devm_memremap_pages() to add ZONE_DEVICE memory, if requested free mem region's end pfn were huge(e.g.,     0x400000000), the node_end_pfn() will be also huge (see move_pfn_range_to_zone()). Thus it creates a huge     hole between node_start_pfn() and node_end_pfn(). We found on some AMD APUs, amdkfd requested such a free     mem region and created a huge hole. In such a case, following code snippet was just doing busy test_bit()     looping on the huge hole. for (pfn = start_pfn; pfn < end_pfn; pfn++) { struct page *page =     pfn_to_online_page(pfn); if (!page) continue; ... } So we got a soft lockup: watchdog: BUG: soft lockup -     CPU#6 stuck for 26s! [bash:1221] CPU: 6 PID: 1221 Comm: bash Not tainted 5.15.0-custom #1 RIP:
    0010:pfn_to_online_page+0x5/0xd0 Call Trace: ? kmemleak_scan+0x16a/0x440 kmemleak_write+0x306/0x3a0 ?     common_file_perm+0x72/0x170 full_proxy_write+0x5c/0x90 vfs_write+0xb9/0x260 ksys_write+0x67/0xe0
    __x64_sys_write+0x1a/0x20 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae I did some     tests with the patch. (1) amdgpu module unloaded before the patch: real 0m0.976s user 0m0.000s sys     0m0.968s after the patch: real 0m0.981s user 0m0.000s sys 0m0.973s (2) amdgpu module loaded before the     patch: real 0m35.365s user 0m0.000s sys 0m35.354s after the patch: real 0m1.049s user 0m0.000s sys     0m1.042s (CVE-2022-48731)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986739 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    mm/kmemleak: avoid scanning potential huge holes

    When using devm_request_free_mem_region() and devm_memremap_pages() to     add ZONE_DEVICE memory, if requested free mem region's end pfn were     huge(e.g., 0x400000000), the node_end_pfn() will be also huge (see     move_pfn_range_to_zone()).  Thus it creates a huge hole between     node_start_pfn() and node_end_pfn().

    We found on some AMD APUs, amdkfd requested such a free mem region and     created a huge hole.  In such a case, following code snippet was just     doing busy test_bit() looping on the huge hole.

      for (pfn = start_pfn; pfn < end_pfn; pfn++) {             struct page *page = pfn_to_online_page(pfn);
                    if (!page)                             continue;
            ...
      }

    So we got a soft lockup:

      watchdog: BUG: soft lockup - CPU#6 stuck for 26s! [bash:1221]       CPU: 6 PID: 1221 Comm: bash Not tainted 5.15.0-custom #1       RIP: 0010:pfn_to_online_page+0x5/0xd0       Call Trace:
        ? kmemleak_scan+0x16a/0x440         kmemleak_write+0x306/0x3a0         ? common_file_perm+0x72/0x170         full_proxy_write+0x5c/0x90         vfs_write+0xb9/0x260         ksys_write+0x67/0xe0
        __x64_sys_write+0x1a/0x20         do_syscall_64+0x3b/0xc0         entry_SYSCALL_64_after_hwframe+0x44/0xae

    I did some tests with the patch.

    (1) amdgpu module unloaded

    before the patch:

      real    0m0.976s       user    0m0.000s       sys     0m0.968s

    after the patch:

      real    0m0.981s       user    0m0.000s       sys     0m0.973s

    (2) amdgpu module loaded

    before the patch:

      real    0m35.365s       user    0m0.000s       sys     0m35.354s

    after the patch:

      real    0m1.049s       user    0m0.000s       sys     0m1.042s

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
225552	Linux Distros 未修补的漏洞：CVE-2022-48731	Nessus	Misc.	2025/3/5	2026/1/14	medium
225552	Linux Distros 未修補的弱點：CVE-2022-48731	Nessus	Misc.	2025/3/5	2026/1/14	medium
225552	Linux Distros のパッチ未適用の脆弱性: CVE-2022-48731	Nessus	Misc.	2025/3/5	2026/1/14	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/3/23	high
274004	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989157)	Nessus	Unity Linux Local Security Checks	2025/11/5	2025/11/5	medium
225552	Linux Distros Unpatched Vulnerability : CVE-2022-48731	Nessus	Misc.	2025/3/5	2026/1/14	medium
268839	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986739)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/15	medium
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	high

检测

插件搜索

medium

medium

medium

high

medium

medium

medium

high