Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - pariscsba_unmap_sg のデータ TLB のミスを修正 Rolf Eike Beer は次のバグを報告しました [1274934.746891] 無効なアドレスnull ポインターデリファレンス?: addr 0000004140000018 での Code=15データ TLB のミス障害 [1274934.746891] CPU: 3 PID 5549 通信cmakeが汚染されません 5.15.4-gentoo-parisc64 #4 [1274934.746891] ハードウェア名
    9000/785/C8000 [1274934.746891] [1274934.746891] YZrvWESTTHRNXBCVMcbbbcbcbOGFRQPDI [1274934.746891] PSW
    00001000000001001111111000001110 Not tainted [1274934.746891] r00-03 000000ff0804fe0e 0000000040bc9bc0 00000000406760e4 0000004140000000 [1274934.746891] r04-07 0000000040b693c0 0000004140000000 000000004a2b08b0 0000000000000001 [1274934.746891] r08-11 0000000041f98810 0000000000000000 000000004a0a7000 0000000000000001 [1274934.746891] r12-15 0000000040bddbc0 0000000040c0cbc0 0000000040bddbc0 0000000040bddbc0 [1274934.746891] r16-19 0000000040bde3c0 0000000040bddbc0 0000000040bde3c0 0000000000000007 [1274934.746891] r20-23 0000000000000006 000000004a368950 0000000000000000 0000000000000001 [1274934.746891] r24-27 0000000000001fff 000000000800000e 000000004a1710f0 0000000040b693c0 [1274934.746891] r28-31 0000000000000001 0000000041f988b0 0000000041f98840 000000004a171118 [1274934.746891] sr00-03 00000000066e5800 0000000000000000 0000000000000000 00000000066e5800 [1274934.746891] sr04-07 0000000000000000 0000000000000000 0000000000000000 0000000000000000 [1274934.746891] [1274934.746891] IASQ: 0000000000000000 0000000000000000 IAOQ: 00000000406760e8 00000000406760ec [1274934.746891] IIR: 48780030 ISR:
    000000000000000 IOR: 0000004140000018 [1274934.746891CPU: 3 CR30: 00000040e3a9c000 CR31
    ffffffffffffffff [1274934.746891] ORIG_R28: 0000000040acdd58 [1274934.746891] IAOQ[0]
    sba_unmap_sg+0xb0/0x118 [1274934.746891] IAOQ[1]sba_unmap_sg+0xb4/0x1181274934.746891] RP(r2)
    sba_unmap_sg+0xac/0x118 [1274934.746891] Backtrace: [1274934.746891] [<00000000402740cc>] dma_unmap_sg_attrs+0x6c/0x70 [1274934.746891、[<000000004074d6bc>] scsi_dma_unmap+0x54/0x60 [1274934.746891、<00000000407a3488>] mptscsih_io_done+0x150/0xd70 [1274934.746891] [<0000000040798600>] mpt_interrupt+0x168/0xa68 [1274934.746891] [<0000000040255a48>] __handle_irq_event_percpu+0xc8/0x278 [1274934.746891、[<0000000040255c34>] handle_irq_event_percpu+0x3c/0xd8 [1274934.746891、<000000004025ecb4>] handle_percpu_irq+0xb4 /0xf0 [1274934.746891] [<00000000402548e0>] generic_handle_irq+0x50/0x70 [1274934.746891] [<000000004019a254>] call_on_stack+0x18/0x24 [1274934.746891] [1274934.746891] カーネルパニック - 非同期無効なアドレスnull ポインターデリファレンス?このバグは、sglist をオーバーランさせ、nents の前に sg_dma_len(sglist) を不適切にテストすることで発生します。通常これはクラッシュを引き起こしませんが、この場合 sglist がページ境界を超えました。これは次のコードで発生します。
    while sg_dma_len(sglist) && nents--{ 修正は、最初に nents をテストし、nent の減少分をループに移動するだけです。CVE-2022-48795

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - parisc: Fix data TLB miss in sba_unmap_sg Rolf Eike Beer reported the following bug: [1274934.746891] Bad     Address (null pointer deref?): Code=15 (Data TLB miss fault) at addr 0000004140000018 [1274934.746891]     CPU: 3 PID: 5549 Comm: cmake Not tainted 5.15.4-gentoo-parisc64 #4 [1274934.746891] Hardware name:
    9000/785/C8000 [1274934.746891] [1274934.746891] YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI [1274934.746891] PSW:
    00001000000001001111111000001110 Not tainted [1274934.746891] r00-03 000000ff0804fe0e 0000000040bc9bc0     00000000406760e4 0000004140000000 [1274934.746891] r04-07 0000000040b693c0 0000004140000000     000000004a2b08b0 0000000000000001 [1274934.746891] r08-11 0000000041f98810 0000000000000000     000000004a0a7000 0000000000000001 [1274934.746891] r12-15 0000000040bddbc0 0000000040c0cbc0     0000000040bddbc0 0000000040bddbc0 [1274934.746891] r16-19 0000000040bde3c0 0000000040bddbc0     0000000040bde3c0 0000000000000007 [1274934.746891] r20-23 0000000000000006 000000004a368950     0000000000000000 0000000000000001 [1274934.746891] r24-27 0000000000001fff 000000000800000e     000000004a1710f0 0000000040b693c0 [1274934.746891] r28-31 0000000000000001 0000000041f988b0     0000000041f98840 000000004a171118 [1274934.746891] sr00-03 00000000066e5800 0000000000000000     0000000000000000 00000000066e5800 [1274934.746891] sr04-07 0000000000000000 0000000000000000     0000000000000000 0000000000000000 [1274934.746891] [1274934.746891] IASQ: 0000000000000000     0000000000000000 IAOQ: 00000000406760e8 00000000406760ec [1274934.746891] IIR: 48780030 ISR:
    0000000000000000 IOR: 0000004140000018 [1274934.746891] CPU: 3 CR30: 00000040e3a9c000 CR31:
    ffffffffffffffff [1274934.746891] ORIG_R28: 0000000040acdd58 [1274934.746891] IAOQ[0]:
    sba_unmap_sg+0xb0/0x118 [1274934.746891] IAOQ[1]: sba_unmap_sg+0xb4/0x118 [1274934.746891] RP(r2):
    sba_unmap_sg+0xac/0x118 [1274934.746891] Backtrace: [1274934.746891] [<00000000402740cc>]     dma_unmap_sg_attrs+0x6c/0x70 [1274934.746891] [<000000004074d6bc>] scsi_dma_unmap+0x54/0x60     [1274934.746891] [<00000000407a3488>] mptscsih_io_done+0x150/0xd70 [1274934.746891] [<0000000040798600>]     mpt_interrupt+0x168/0xa68 [1274934.746891] [<0000000040255a48>] __handle_irq_event_percpu+0xc8/0x278     [1274934.746891] [<0000000040255c34>] handle_irq_event_percpu+0x3c/0xd8 [1274934.746891]     [<000000004025ecb4>] handle_percpu_irq+0xb4/0xf0 [1274934.746891] [<00000000402548e0>]     generic_handle_irq+0x50/0x70 [1274934.746891] [<000000004019a254>] call_on_stack+0x18/0x24     [1274934.746891] [1274934.746891] Kernel panic - not syncing: Bad Address (null pointer deref?) The bug is     caused by overrunning the sglist and incorrectly testing sg_dma_len(sglist) before nents. Normally this     doesn't cause a crash, but in this case sglist crossed a page boundary. This occurs in the following code:
    while (sg_dma_len(sglist) && nents--) { The fix is simply to test nents first and move the decrement of     nents into the loop. (CVE-2022-48795)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - parisc修复 sba_unmap_sg 中的数据 TLB 缺失 Rolf Eike Beer 报告了以下缺陷[1274934.746891] 错误地址空指针取消引用?地址 0000004140000018 的 Code=15数据 TLB 缺失错误 [1274934.746891] CPU: 3 PID 5549 Commcmake 未受感染 5.15.4-gentoo-parisc64 #4 [1274934.746891] 硬件名称
    9000/785/C8000 [1274934.746891] [1274934.746891] YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI [1274934.746891] PSW
    00001000000001001111111000001110 Not tainted [1274934.746891] r00-03 000000ff0804fe0e 0000000040bc9bc0 00000000406760e4 0000004140000000 [1274934.746891] r04-07 0000000040b693c0 0000004140000000 000000004a2b08b0 0000000000000001 [1274934.746891] r08-11 0000000041f98810 0000000000000000 000000004a0a7000 0000000000000001 [1274934.746891] r12-15 0000000040bddbc0 0000000040c0cbc0 0000000040bddbc0 0000000040bddbc0 [1274934.746891] r16-19 0000000040bde3c0 0000000040bddbc0 0000000040bde3c0 0000000000000007 [1274934.746891] r20-23 0000000000000006 000000004a368950 0000000000000000 0000000000000001 [1274934.746891] r24-27 0000000000001fff 000000000800000e 000000004a1710f0 0000000040b693c0 [1274934.746891] r28-31 0000000000000001 0000000041f988b0 0000000041f98840 000000004a171118 [1274934.746891] sr00-03 00000000066e5800 0000000000000000 0000000000000000 00000000066e5800 [1274934.746891] sr04-07 0000000000000000 0000000000000000 0000000000000000 0000000000000000 [1274934.746891] [1274934.746891] IASQ: 0000000000000000 0000000000000000 IAOQ: 00000000406760e8 00000000406760ec [1274934.746891] IIR: 48780030 ISR:
    0000000000000000 IOR0000004140000018 [1274934.746891] CPU3 CR3000000040e3a9c000 CR31
    ffffffffffffffff [1274934.746891] ORIG_R280000000040acdd58 [1274934.746891] IAOQ[0]
    sba_unmap_sg+0xb0/0x118 [1274934.746891] IAOQ[1]sba_unmap_sg+0xb4/0x118 [1274934.746891] RP(r2)
    sba_unmap_sg+0xac/0x118 [1274934.746891] 回溯[1274934.746891] [<00000000402740cc>] dma_unmap_sg_attrs+0x6c/0x70 [1274934.746891] [<000000004074d6bc>] scsi_dma_unmap+0x54/0x60 [1274934.746891] [<00000000407a3488>] mptscsih_io_done+0x150/0xd70 [1274934.746891] [<0000000040798600>] mpt_interrupt+0x168/0xa68 [1274934.746891] [<0000000040255a48>] __handle_irq_event_percpu+0xc8/0x278 [1274934.746891] [<0000000040255c34>] handle_irq_event_percpu+0x3c/0xd8 [1274934.746891] [<000000004025ecb4>] handle_percpu_irq+0xb4 /0xf0 [1274934.746891] [<00000000402548e0>] generic_handle_irq+0x50/0x70 [1274934.746891] [<000000004019a254>] call_on_stack+0x18/0x24 [1274934.746891] [1274934.746891] 内核错误 - 不同步错误地址空指针取消引用?该缺陷的原因是溢出 sglist 以及未正确在 nents 之前测试 sg_dma_len(sglist)。正常情况下这不会造成崩溃但在这种情况下sglist 越界了。以下代码中会发生这种情况：
    while (sg_dma_len(sglist) && nents--) { 此补丁只是为了首先测试 nents然后将 nents 的减量移至循环中。 (CVE-2022-48795)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - parisc修正 sba_unmap_sg 中的資料 TLB 遺漏 Rolf Eike Beer 報告下列錯誤[1274934.746891] 錯誤位址 (NULL 指標解除參照?)位址 0000004140000018 的 Code=15 (資料 TLB 遺漏錯誤) [1274934.746891] CPU3 PID 5549 Commcmake 未受污染的 5.15.4-gentoo-parisc64 #4 [1274934.746891] 硬體名稱
    9000/785/C8000 [1274934.746891] [1274934.746891] YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI [1274934.746891] PSW
    00001000000001001111111000001110 Not tainted [1274934.746891] r00-03 000000ff0804fe0e 0000000040bc9bc0 00000000406760e4 0000004140000000 [1274934.746891] r04-07 0000000040b693c0 0000004140000000 000000004a2b08b0 0000000000000001 [1274934.746891] r08-11 0000000041f98810 0000000000000000 000000004a0a7000 0000000000000001 [1274934.746891] r12-15 0000000040bddbc0 0000000040c0cbc0 0000000040bddbc0 0000000040bddbc0 [1274934.746891] r16-19 0000000040bde3c0 0000000040bddbc0 0000000040bde3c0 0000000000000007 [1274934.746891] r20-23 0000000000000006 000000004a368950 0000000000000000 0000000000000001 [1274934.746891] r24-27 0000000000001fff 000000000800000e 000000004a1710f0 0000000040b693c0 [1274934.746891] r28-31 0000000000000001 0000000041f988b0 0000000041f98840 000000004a171118 [1274934.746891] sr00-03 00000000066e5800 0000000000000000 0000000000000000 00000000066e5800 [1274934.746891] sr04-07 0000000000000000 0000000000000000 0000000000000000 0000000000000000 [1274934.746891] [1274934.746891] IASQ: 0000000000000000 0000000000000000 IAOQ: 00000000406760e8 00000000406760ec [1274934.746891] IIR: 48780030 ISR:
    0000000000000000 IOR0000004140000018 [1274934.746891] CPU3 CR3000000040e3a9c000 CR31
    ffffffffffffffff [1274934.746891] ORIG_R28: 0000000040acdd58 [1274934.746891] IAOQ[0]
    sba_unmap_sg+0xb0/0x118 [1274934.746891] IAOQ[1]sba_unmap_sg+0xb4/0x118 [1274934.746891] RP(r2)
    sba_unmap_sg+0xac/0x118 [1274934.746891] 反向追踪 [1274934.746891] [<00000000402740cc>] dma_unmap_sg_attrs+0x6c/0x70 [1274934.746891] [<000000004074d6bc>] scsi_dma_unmap+0x54/0x60 [1274934.746891] [<00000000407a3488>] mptscsih_io_done+0x150/0xd70 [1274934.746891] [<0000000040798600>] mpt_interrupt+0x168/0xa68 [1274934.746891] [<0000000040255a48>] __handle_irq_event_percpu+0xc8/0x278 [1274934.746891] [<0000000040255c34>] handle_irq_event_percpu+0x3c/0xd8 [1274934.746891] [<000000004025ecb4>] handle_percpu_irq+0xb4 /0xf0 [1274934.746891] [<00000000402548e0>] generic_handle_irq+0x50/0x70 [1274934.746891] [<000000004019a254>] call_on_stack+0x18/0x24 [1274934.746891] [1274934.746891] 核心錯誤 - 未同步錯誤位址 (null 指標解除參照?)此錯誤是因為在 sglist 滿溢及未正確測試 sglist 之前的 sg_dma_len(sglist) 所致。一般而言這不會造成當機但在此情況下sglist 會跨越頁面邊界。下列程式碼中會發生此情況
    while (sg_dma_len(sglist) && nents--) { 修正方法為先測試 nents再將 nents 的遞減移入迴圈。 (CVE-2022-48795)

請注意，Nessus 依賴供應商報告的套件存在。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
249461	Linux Distros のパッチ未適用の脆弱性: CVE-2022-48795	Nessus	Misc.	2025/8/15	2025/9/4	medium
249461	Linux Distros Unpatched Vulnerability : CVE-2022-48795	Nessus	Misc.	2025/8/15	2025/9/4	medium
249461	Linux Distros 未修补的漏洞：CVE-2022-48795	Nessus	Misc.	2025/8/15	2025/9/4	medium
249461	Linux Distros 未修補的弱點：CVE-2022-48795	Nessus	Misc.	2025/8/15	2025/9/4	medium

检测

插件搜索

medium

medium

medium

medium