Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - md/raid0、raid10リクエストキューに対して破棄セクターを設定しません。スタックドライバーによって値を設定するのではなく、disk_stack_limits を使用して適切な max_discard_sectors を取得する必要があります。で、バグがあります。すべてのメンバーディスクがローテーションデバイスの場合、raid0/raid10 が max_discard_sectors を設定します。そのため、メンバーデバイスは ssd/nvme ではありませんが、raid0/raid10 は不適切な値をエクスポートします。関数の警告メッセージを報告します
    mkfs.xfs がこのような場合、__blkdev_issue_discard は [ 4616.022599] ------------[ ]ここで挿入されます-------------- [4616.027779] 警告CPU4 PID block/blk-lib.c:50 での 99634 __blkdev_issue_discard+0x16a/0x1a0 [4616.140663] RIP: 0010:__blkdev_issue_discard+0x16a/0x1a0 [ 4616.146601] コード: 24 4c 89 20 31 c0 e9 fe fe ff c1 e8 09 8d 48 ff 4c 89 f0 4c 09 e8 48 85 c1 0f 84 55 ff ff b8 ea ff ff ff e9 df fe ff ff <0f> 0b 48 8d 74 24 08 e8 ea d6 00 00 48 c7 c6 20 1e 89 ab 48 c7 c7 [ 4616.167567] RSP: 0018:ffffaab88cbffca8 EFLAGS: 00010246 [ 4616.173406] RAX: ffff9ba1f9e44678 RBX: 0000000000000000 RCX: ffff9ba1c9792080 [4616.181376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9ba1c9792080 [ 4616.189345] RBP:
     R080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 R09​ 4616.197317​ R10​ R11​
     R12000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 4616.205288​ R13​ R14​ R15​
    ffff9ba1c9792080 [ 4616.213259] FS: 00007f9a5534e980(0000) GS:ffff9ba1b7c80000(0000) knlGS:000000000000000 4616.222298CS: 0010 DS: 0000 ES: 0003 CR0 4616.228719: 00000000000000000000000000000000000000000000000000000
    000055a390a4c518 CR3: 0000000123e40006 CR4: 00000000001706e0 [ 4616.236689] Call Trace: [ 4616.239428] blkdev_issue_discard+0x52/0xb0 [ 4616.244108] blkdev_common_ioctl+0x43c/0xa00 [ 4616.248883] blkdev_ioctl+0x116/0x280 [ 4616.252977] __x64_sys_ioctl+0x8a/0xc0 [ 4616.257163] do_syscall_64+0x5c/0x90 [4616.261164] ? handle_mm_fault+0xc5/0x2a0 [ 4616.265652] ? do_user_addr_fault+0x1d8/0x690 [ 4616.270527] ? do_syscall_64+0x69/0x90 [ 4616.274717] ? exc_page_fault+0x62/0x150 [ 4616.279097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 4616.284748] RIP: 0033:0x7f9a55398c6bCVE-2022-50583

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - md/raid0, raid10: Don't set discard sectors for request queue It should use disk_stack_limits to get a     proper max_discard_sectors rather than setting a value by stack drivers. And there is a bug. If all member     disks are rotational devices, raid0/raid10 set max_discard_sectors. So the member devices are not     ssd/nvme, but raid0/raid10 export the wrong value. It reports warning messages in function
    __blkdev_issue_discard when mkfs.xfs like this: [ 4616.022599] ------------[ cut here ]------------ [     4616.027779] WARNING: CPU: 4 PID: 99634 at block/blk-lib.c:50 __blkdev_issue_discard+0x16a/0x1a0 [     4616.140663] RIP: 0010:__blkdev_issue_discard+0x16a/0x1a0 [ 4616.146601] Code: 24 4c 89 20 31 c0 e9 fe fe     ff ff c1 e8 09 8d 48 ff 4c 89 f0 4c 09 e8 48 85 c1 0f 84 55 ff ff ff b8 ea ff ff ff e9 df fe ff ff <0f> 0b     48 8d 74 24 08 e8 ea d6 00 00 48 c7 c6 20 1e 89 ab 48 c7 c7 [ 4616.167567] RSP: 0018:ffffaab88cbffca8     EFLAGS: 00010246 [ 4616.173406] RAX: ffff9ba1f9e44678 RBX: 0000000000000000 RCX: ffff9ba1c9792080 [     4616.181376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9ba1c9792080 [ 4616.189345] RBP:
    0000000000000cc0 R08: ffffaab88cbffd10 R09: 0000000000000000 [ 4616.197317] R10: 0000000000000012 R11:
    0000000000000000 R12: 0000000000000000 [ 4616.205288] R13: 0000000000400000 R14: 0000000000000cc0 R15:
    ffff9ba1c9792080 [ 4616.213259] FS: 00007f9a5534e980(0000) GS:ffff9ba1b7c80000(0000)     knlGS:0000000000000000 [ 4616.222298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 4616.228719] CR2:
    000055a390a4c518 CR3: 0000000123e40006 CR4: 00000000001706e0 [ 4616.236689] Call Trace: [ 4616.239428]     blkdev_issue_discard+0x52/0xb0 [ 4616.244108] blkdev_common_ioctl+0x43c/0xa00 [ 4616.248883]     blkdev_ioctl+0x116/0x280 [ 4616.252977] __x64_sys_ioctl+0x8a/0xc0 [ 4616.257163] do_syscall_64+0x5c/0x90 [     4616.261164] ? handle_mm_fault+0xc5/0x2a0 [ 4616.265652] ? do_user_addr_fault+0x1d8/0x690 [ 4616.270527] ?     do_syscall_64+0x69/0x90 [ 4616.274717] ? exc_page_fault+0x62/0x150 [ 4616.279097]     entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 4616.284748] RIP: 0033:0x7f9a55398c6b (CVE-2022-50583)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - md/raid0、raid10未設定要求佇列的捨棄磁區應使用 disk_stack_limits 來取得適當的 max_discard_sectors而非透過堆疊驅動程式設定值。還有一個錯誤。若所有成員磁碟都是旋轉裝置則 raid0/raid10 設定 max_discard_sectors。因此成員裝置不是 ssd/nvme而是 raid0/raid10 會匯出錯誤的值。它會報告函式中的警告訊息
    __blkdev_issue_discard when mkfs.xfs like this: [ 4616.022599] ------------[cut here ]------------ [4616.027779] WARNING: CPU: 4 PID block/blk-lib.c:50 __blkdev_issue_discard+0x16a/0x1a0 處的 99634 [4616.140663] RIP 0010:__blkdev_issue_discard+0x16a/0x1a0 [ 4616.146601] 程式碼24 4c 89 20 31 c0 e9 fe ff ff c1 e8 09 8d 48 ff 4c 89 f0 4c 09 e8 48 85 c1 0f 84 55 ff ff ff b8 ea ff ff ff e9 df fe ff ff <0f> 0b 48 8d 74 24 08 e8 ea d6 00 00 48 c7 c6 20 1e 89 ab 48 c7 c7 [ 4616.167567] RSP: 0018:ffffaab88cbffca8 EFLAGS: 00010246 [ 4616.173406] RAX: ffff9ba1f9e44678 RBX: 0000000000000000 RCX: ffff9ba1c9792080 [4616.181376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9ba1c9792080 [ 4616.189345] RBP:
    000000000000cc0 R08ffffaab88cbffd10 R090000000000000000 [ 4616.197317] R100000000000000012 R11
    0000000000000000 R120000000000000000 [ 4616.205288] R130000000000400000 R140000000000000cc0 R15
    ffff9ba1c9792080 [ 4616.213259] FS: 00007f9a5534e980(0000) GS:ffff9ba1b7c80000(0000) knlGS:0000000000000000 [ 4616.222298] CS: 0010 DS: 0000 ES: 0000 CR0: 0030]0 ] CR0: 0030]0 800520 4616.228719[0000 ]
    000055a390a4c518 CR3: 0000000123e40006 CR4: 00000000001706e0 [ 4616.236689] Call Trace: [ 4616.239428] blkdev_issue_discard+0x52/0xb0 [ 4616.244108] blkdev_common_ioctl+0x43c/0xa00 [ 4616.248883] blkdev_ioctl+0x116/0x280 [ 4616.252977] __x64_sys_ioctl+0x8a/0xc0 [ 4616.257163] do_syscall_64+0x5c/0x90 [4616.261164] ? handle_mm_fault+0xc5/0x2a0 [ 4616.265652] ? do_user_addr_fault+0x1d8/0x690 [ 4616.270527] ? do_syscall_64+0x69/0x90 [ 4616.274717] ? exc_page_fault+0x62/0x150 [ 4616.279097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 4616.284748] RIP 0033:0x7f9a55398c6b (CVE-2022-50583)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - md/raid0、raid10不设置请求队列的丢弃扇区 它应该使用 disk_stack_limits 获取正确的 max_discard_sectors 而不是通过堆栈驱动程序设置一个值。且存在一个缺陷。如果所有成员磁盘均为旋转设备raid0/raid10 设置 max_discard_sectors。因此成员设备不是 ssd/nvme但 raid0/raid10 会导出错误的值。它报告 函数中的警告消息
    mkfs.xfs 变成这样时的 __blkdev_issue_discard[ 4616.022599] ------------[ 在此处切换 ]------------ [4616.027779] 警告CPU4 PID 99634 at block/blk-lib.c:50 __blkdev_issue_discard+0x16a/0x1a0 [4616.140663] RIP: 0010:__blkdev_issue_discard+0x16a/0x1a0 [ 4616.146601] 代码24 4c 89 20 31 c0 e9 fe fe ff ff c1 e8 09 8d 48 ff 4c 89 f0 4c 09 e8 48 85 c1 0f 84 55 ff ff ff b8 ea ff ff ff e9 df fe ff ff <0f> 0b 48 8d 74 24 08 e8 ea d6 00 00 48 c7 c6 20 1e 89 ab 48 c7 c7 [ 4616.167567] RSP: 0018:ffffaab88cbffca8 EFLAGS: 00010246 [ 4616.173406] RAX: ffff9ba1f9e44678 RBX: 0000000000000000 RCX: ffff9ba1c9792080 [4616.181376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9ba1c9792080 [ 4616.189345] RBP:
    0000000000000cc0 R08ffffaab88cbffd10 R090000000000000000 [ 4616.197317] R100000000000000012 R11
    0000000000000000 R120000000000000000 [ 4616.205288] R130000000000400000 R140000000000000cc0 R15
    ffff9ba1c9792080 [ 4616.213259] FS: 00007f9a5534e980(0000) GS:ffff9ba1b7c80000(0000) knlGS:0000000000000000 [ 4616.222298] CS: 0010 DS: 0000 ES: 0000 CR0: 00000000 [ 4616.22871938:2] CR0
    000055a390a4c518 CR3: 0000000123e40006 CR4: 00000000001706e0 [ 4616.236689] Call Trace: [ 4616.239428] blkdev_issue_discard+0x52/0xb0 [ 4616.244108] blkdev_common_ioctl+0x43c/0xa00 [ 4616.248883] blkdev_ioctl+0x116/0x280 [ 4616.252977] __x64_sys_ioctl+0x8a/0xc0 [ 4616.257163] do_syscall_64+0x5c/0x90 [4616.261164] ? handle_mm_fault+0xc5/0x2a0 [ 4616.265652] ? do_user_addr_fault+0x1d8/0x690 [ 4616.270527] ? do_syscall_64+0x69/0x90 [ 4616.274717] ? exc_page_fault+0x62/0x150 [ 4616.279097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 4616.284748] RIP0033:0x7f9a55398c6b (CVE-2022-50583)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
277639	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50583	Nessus	Misc.	2025/12/8	2025/12/23	high
277639	Linux Distros Unpatched Vulnerability : CVE-2022-50583	Nessus	Misc.	2025/12/8	2025/12/23	high
277639	Linux Distros 未修補弱點：CVE-2022-50583	Nessus	Misc.	2025/12/8	2025/12/23	high
277639	Linux Distros 未修补的漏洞：CVE-2022-50583	Nessus	Misc.	2025/12/8	2025/12/23	high

检测

插件搜索

high

high

high

high