Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - netarcnetcom20020修正 com20020pci_probe() 中的 null-ptr-deref。驅動程式初始化期間需要卡片資訊的指標即變數 'ci'。不過「com20020pci_id_table」的定義顯示此欄位對於某些裝置而言是空白的進而在初始化這些裝置時造成 null 指標解除參照。下列記錄會顯示此問題[ 3.973806] KASANnull-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 3.973819] RIP 0010:com20020pci_probe+0x18d/0x13e0 [com20020_pci] [ 3.975181] 呼叫追踪 [ 3.976208] local_pci_probe+0x13f/0x210 [ 3.977248] pci_device_probe+0x34c/0x6d0 [ 3.977255] ? pci_uevent+0x470/0x470 [ 3.978265] real_probe+0x24c/0x8d0 [3.978273] __driver_probe_device+0x1b3/0x280 [ 3.979288] driver_probe_device+0x50/0x370 先檢查「ci」是否為 null 指標以修正此問題。 (CVE-2022-48908)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - netarcnetcom20020修复 com20020pci_probe() 中的 null-ptr-deref 在驱动程序初始化期间需要卡信息的指针即变量“ci”。但是从“com20020pci_id_table”的定义中发现此字段对于某些设备为空从而在初始化这些设备时造成空指针取消引用。以下日志会揭示此问题[ 3.973806] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 3.973819] RIP: 0010:com20020pci_probe+0x18d/0x13e0 [com20020_pci] [ 3.975181] 调用跟踪 [ 3.976208] local_pci_probe+0x13f/0x210 [ 3.977248] pci_device_probe+0x34c/0x6d0 [ 3.977255] ? pci_uevent+0x470/0x470 [ 3.978265] real_probe+0x24c/0x8d0 [3.978273] __driver_probe_device+0x1b3/0x280 [ 3.979288] driver_probe_device+0x50/0x370通过首先检查“ci”是否为空指针来修复此问题。 (CVE-2022-48908)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - netarcnetcom20020com20020pci_probe() の null-ptr-deref を修正します。ドライバーの初期化中に、カード情報のポインターつまり変数「ci」が必要です。ただし、「com20020pci_id_table」の定義は、一部のデバイスでこのフィールドが空であることを開示しているため、これらのデバイスを初期化する際に、null ポインターデリファレンスが発生します。次のログがそれを明らかにします。[ 3.973806] KASAN: null-ptr-deref in range [0x000000000000028-0x00000000000002f] [ 3.973819 ] RIP:0010:com20020pci_probe+0x18d/0x13e0 [com20020_pci] 3.975181] Call Trace: [] Call Trace: [ 3.976208] local_pci_probe+0x13f/0x210 [ 3.977248] pci_device_probe+0x34c/0x6d0 [ 3.977255] ? pci_uevent+0x470/0x470 [ 3.978265] true_probe+0x24c/0x8d0 [3.978273] __driver_probe_device+0x1b3/0x280 [ 3.979288] driver_probe_device+0x50/0x370 最初に「ci」が null ポインターであるかどうかをチェックすることで、これを修正します。CVE-2022-48908

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989252 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

    During driver initialization, the pointer of card info, i.e. the     variable 'ci' is required. However, the definition of     'com20020pci_id_table' reveals that this field is empty for some     devices, which will cause null pointer dereference when initializing     these devices.

    The following log reveals it:

    [    3.973806] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]     [    3.973819] RIP: 0010:com20020pci_probe+0x18d/0x13e0 [com20020_pci]     [    3.975181] Call Trace:
    [    3.976208]  local_pci_probe+0x13f/0x210     [    3.977248]  pci_device_probe+0x34c/0x6d0     [    3.977255]  ? pci_uevent+0x470/0x470     [    3.978265]  really_probe+0x24c/0x8d0     [    3.978273]  __driver_probe_device+0x1b3/0x280     [    3.979288]  driver_probe_device+0x50/0x370

    Fix this by checking whether the 'ci' is a null pointer first.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986726 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

    During driver initialization, the pointer of card info, i.e. the     variable 'ci' is required. However, the definition of     'com20020pci_id_table' reveals that this field is empty for some     devices, which will cause null pointer dereference when initializing     these devices.

    The following log reveals it:

    [    3.973806] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]     [    3.973819] RIP: 0010:com20020pci_probe+0x18d/0x13e0 [com20020_pci]     [    3.975181] Call Trace:
    [    3.976208]  local_pci_probe+0x13f/0x210     [    3.977248]  pci_device_probe+0x34c/0x6d0     [    3.977255]  ? pci_uevent+0x470/0x470     [    3.978265]  really_probe+0x24c/0x8d0     [    3.978273]  __driver_probe_device+0x1b3/0x280     [    3.979288]  driver_probe_device+0x50/0x370

    Fix this by checking whether the 'ci' is a null pointer first.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() During driver initialization, the pointer     of card info, i.e. the variable 'ci' is required. However, the definition of 'com20020pci_id_table'     reveals that this field is empty for some devices, which will cause null pointer dereference when     initializing these devices. The following log reveals it: [ 3.973806] KASAN: null-ptr-deref in range     [0x0000000000000028-0x000000000000002f] [ 3.973819] RIP: 0010:com20020pci_probe+0x18d/0x13e0     [com20020_pci] [ 3.975181] Call Trace: [ 3.976208] local_pci_probe+0x13f/0x210 [ 3.977248]     pci_device_probe+0x34c/0x6d0 [ 3.977255] ? pci_uevent+0x470/0x470 [ 3.978265] really_probe+0x24c/0x8d0 [     3.978273] __driver_probe_device+0x1b3/0x280 [ 3.979288] driver_probe_device+0x50/0x370 Fix this by     checking whether the 'ci' is a null pointer first. (CVE-2022-48908)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
248770	Linux Distros 未修補的弱點：CVE-2022-48908	Nessus	Misc.	2025/8/12	2026/1/14	medium
248770	Linux Distros 未修补的漏洞：CVE-2022-48908	Nessus	Misc.	2025/8/12	2026/1/14	medium
248770	Linux Distros のパッチ未適用の脆弱性: CVE-2022-48908	Nessus	Misc.	2025/8/12	2026/1/14	medium
273570	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989252)	Nessus	Unity Linux Local Security Checks	2025/11/5	2025/11/5	medium
269153	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986726)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/15	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	2021/7/22	2026/3/23	high
248770	Linux Distros Unpatched Vulnerability : CVE-2022-48908	Nessus	Misc.	2025/8/12	2026/1/14	medium

检测

插件搜索

medium

medium

medium

medium

medium

high

medium