Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - scsihisi_sas遍历 sas_dev.list 的成员时获取 sas_dev 锁定在函数 slot_complete_v3_hw() 中释放插槽时可能会在别处遍历 sas_dev.list并且可能触发空指针异常如下所示==>cq thread ==>scsi_eh_6 ==>scsi_error_handler() ==>sas_eh_handle_sas_errors() ==>sas_scsi_find_task() ==>lldd_abort_task() ==>slot_complete_v3_hw() ==>hisi_sas_abort_task() ==>hisi_sas_slot_task_free( ) ==>dereg_device_v3_hw() ==>list_del_init() ==>list_for_each_entry_safe() [ 7165.434918] sas输入 sas_scsi_recover_host busy: 32 failed: 32 [7165.434926] sas尝试查找任务 0x00000000769b5ba5 [ 7165.434927] sas sas_scsi_find_task: aborting task 0x00000000769b5ba5 [ 7165.434940] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000769b5ba5) aborted [ 7165.434964] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000c9f7aa07) ignored [7165.434965] hisi_sas_v3_hw 0000: b4:02.0slot complete忽略了 task(00000000e2a1cf01) [ 7165.434968] 无法处理内核空指针虚拟地址 0000000000000000 处的 r 取消引用 [ 7165.434972] Hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000022d52d93) 已忽略 [ 7165.434975] Hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000066a7516c) 已忽略 [ 7165.434976 ] info[ 7165.434982] ESR = 0x96000004 [ 7165.434991] 异常类 = DABT当前 EL，IL = 32 位 [ 7165.434992] SET = 0，FnV = 0 [ 7165.434993] EA = 0，S1PTW = 0 [ 7165.434994] Data 中止信息[ 7165.434994] ISV = 0, ISS = 0x00000004 [ 7165.434995] CM = 0, WnR = 0 [ 7165.434997] 用户 pgtable:4k 页面, 48 位 VAs, pgdp = 00000000f29543f2 [ 7165.434998] [0000000000000000] pgd=0000000000000000 [ 7165.435003] 内部错误
    Oops96000004 [#1] SMP [ 7165.439863] 进程 scsi_eh_6pid4109堆栈限制 = 0x00000000c43818d5[7165.468862] pstate00c00009 (nzcv daif +PAN +UAO) [ 7165.473637] pcdereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [ 7165.479443] lr dereg_device_v3_hw+0x2c/0xa8 [hisi_sas_v3_hw] [ 7165.485247] sp
    ffff00001d623bc0 [ 7165.488546] x29ffff00001d623bc0 x28ffffa027d03b9508 [ 7165.493835] x27
    ffff80278ed50af0 x26ffffa027dd31e0a8 [ 7165.499123] x25ffffa027d9b27f88 x24ffffa027d9b209f8 [7165.504411] x23ffffa027c45b0d60 x22ffff80278ec07c00 [ 7165.509700] x210000027f88x210000080008x21
    ffffa027d9b209f8 [ 7165.514988] x19ffffa027d9b27f88 x18ffffffffffffffff [ 7165.520276] x17
    0000000000000000 x16: 0000000000000000 [ 7165.525564] x15: ffff0000091d9708 x14: ffff0000093b7dc8 [7165.530852] x13: ffff0000093b7a23 x12: 6e7265746e692067 [ 7165.536140] x11: 0000000000000000 x10:
    0000000000000bb0 [ 7165.541429] x9 : ffff00001d6238f0 x8 : ffffa027d877af00 [ 7165.546718] x7 :
    ffffa027d6329600 x6 : ffff7e809f58ca00 [ 7165.552006] x5 : 0000000000001f8a x4 : 000000000000088e [7165.557295] x3 : ffffa027d9b27fa8 x2 : 0000000000000000 [ 7165.562583] x1 : 0000000000000000 x0 :
    000000003000188e [ 7165.567872] Call trace: [ 7165.570309] dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [7165.575775] hisi_sas_abort_task+0x248/0x358 [hisi_sas_main] [ 7165.581415] sas_eh_handle_sas_errors+0x258/0x8e0 [libsas] [ 7165.586876] sas_scsi_recover_host+ 0x134/0x458 [libsas] [7165.592082] scsi_error_handler+0xb4/0x488 [ 7165.596163] kthread+0x134/0x138 [ 7165.599380] ret_from_fork+0x10/0x18 [ 7165.602940] 代码d5033e9f b9000040 aa0103e2 eb03003f (f) [0021940] [0021940 7165.609004CPU 75 上启动内核错误 (0x1) 通知 [ 7165.700728] ---[ 结束跟踪 fc042cbbea224efc ]--- [7165.705326] 内核错误 - 不同步致命异常若要修复此问题请在遍历 的成员时获取 sas_dev 锁定sas_dev.list in dereg_device_v3_hw() 和 Hisi_sas_release_tasks() 以避免并发添加和删除成员。当 ---truncated--- (CVE-2023-53627)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - scsihisi_sas遊走 sas_dev.list 的成員時抓取 sas_dev 鎖定。釋放函式 slot_complete_v3_hw() 中的插槽時可能會在其他地方遊走 sas_dev.list而且它可能會觸發 NULL 指標例外狀況如下所示==>cq thread ==>scsi_eh_6 ==>scsi_error_handler() ==>sas_eh_handle_sas_errors() ==>sas_scsi_find_task() ==>lldd_abort_task() ==>slot_complete_v3_hw() ==>hisi_sas_abort_task() ==>hisi_sas_slot_task_free( ) ==>dereg_device_v3_hw() ==>list_del_init() ==>list_for_each_entry_safe() [ 7165.434918] sas輸入 sas_scsi_recover_host busy32 失敗32 [7165.434926] sas嘗試尋找工作 0x00000000769b5ba5 [ 7165.434927] sas sas_scsi_find_task: aborting task 0x00000000769b5ba5 [ 7165.434940] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000769b5ba5) aborted [ 7165.434964] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000c9f7aa07) ignored [7165.434965] hisi_sas_v3_hw 0000: b4:02.0插槽完成已忽略 task(00000000e2a1cf01) [ 7165.434968] 無法處理核心 NULL 指標r 在虛擬位址 0000000000000000 處解除參照 [ 7165.434972] Hisi_sas_v3_hw 0000:b4:02.0插槽完成已忽略 task(0000000022d52d93) 7165.434975] Hisi_sas_v3_hw 0000:b4:02.0插槽完成 task(0000000066 Mea7516c) 7165.434976已忽略info[ 7165.434982] ESR = 0x96000004 [ 7165.434991] 例外狀況類別 = DABT (目前 EL)、IL = 32 位元 [ 7165.434992] SET = 0、FnV = 0 [ 7165.434993] EA = 0、S1PTW = 0 [ 7165.434994] 資料中止資訊[ 7165.434994] ISV = 0, ISS = 0x00000004 [ 7165.434995] CM = 0, WnR = 0 [ 7165.434997] 使用者 pgtable4k 頁面, 48 位元 VA, pgdp = 00000000f29543f2 [ 7165.434998] [0000000000000000] pgd=0000000000000000 [ 7165.435003] 內部錯誤
    Oops96000004 [#1] SMP [ 7165.439863] 處理程序 scsi_eh_6 (pid4109、堆疊限制 = 0x00000000c43818d5) [7165.468862] pstate00c00009 (nzcv daif +PAN +UAO) [ 7165.473637] pc dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [ 7165.479443] lrdereg_device_v3_hw+0x2c/0xa8 [hisi_sas_v3_hw] [ 7165.485247] sp
    ffff00001d623bc0 [ 7165.488546] x29 ffff00001d623bc0 x28ffffa027d03b9508 [ 7165.493835] x27
    ffff80278ed50af0 x26ffffa027dd31e0a8 [ 7165.499123] x25ffffa027d9b27f88 x24ffffa027d9b209f8 [7165.504411] x23ffffa027c45b0d60 x22ffff80278ec07c00 [ 7165.509700] x2100020000000000000000000
    ffffa027d9b209f8 [ 7165.514988] x19ffffa027d9b27f88 x18ffffffffffffffff [ 7165.520276] x17
    0000000000000000 x16: 0000000000000000 [ 7165.525564] x15: ffff0000091d9708 x14: ffff0000093b7dc8 [7165.530852] x13: ffff0000093b7a23 x12: 6e7265746e692067 [ 7165.536140] x11: 0000000000000000 x10:
    0000000000000bb0 [ 7165.541429] x9 ffff00001d6238f0 x8 ffffa027d877af00 [ 7165.546718] x7
    ffffa027d6329600 x6 : ffff7e809f58ca00 [ 7165.552006] x5 : 0000000000001f8a x4 : 000000000000088e [7165.557295] x3 : ffffa027d9b27fa8 x2 : 0000000000000000 [ 7165.562583] x1 : 0000000000000000 x0 :
    000000003000188e [ 7165.567872] Call trace: [ 7165.570309] dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [7165.575775] hisi_sas_abort_task+0x248/0x358 [hisi_sas_main] [ 7165.581415] sas_eh_handle_sas_errors+0x258/0x8e0 [libsas] [ 7165.586876] sas_scsi_recover_host+ 0x134/0x458 [libsas] [7165.592082] scsi_error_handler+0xb4/0x488 [ 7165.596163] kthread+0x134/0x138 [ 7165.599380] ret_from_fork+0x10/0x18 [ 7165.602940] 代碼d5033e9f b9000040 aa0103e2 eb03003f (f9400]0) 7165.609004]從 CPU 75 開始的核心錯誤 (0x1) 通知 [ 7165.700728] ---[ end trace fc042cbbea224efc ]--- [7165.705326] 核心錯誤 - 未同步嚴重例外狀況 若要修正此問題請在遊走 的成員時抓取 sas_dev 鎖定dereg_device_v3_hw() 和 Hisi_sas_release_tasks() 中的 sas_dev.list 以避免在新增和刪除成員的同時進行。時間 ---truncated--- (CVE-2023-53627)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - scshisi_sassas_dev.list のメンバーをトラバースする際に sas_dev ロックを使用します。slot_complete_v3_hw() 関数でスロットを解放するとき、sas_dev.list が他の場所でトラバースされ、以下のような NULL ポインター例外をトリガーする可能性があります。 ==>cq thread ==>scsi_eh_6 ==>scsi_error_handler() ==>sas_eh_handle_sas_errors() ==>sas_scsi_find_task() ==>lld_abort_task() ==>slot_complete_v3_hw() ==>hisi_sas_abort_task() ==>hisi_sas_slot_task() ==>dereg_device_v3_hw() ==>list_del_init() ==>list_for_each_entry_safe() [ 7165.434918] sas入力 sas_scsi_recover_host busy: 32 failed: 32 [7165.434926] sasタスク 0x00000000769b5ba5 を見つけようとしています [ 7165.434927] sas sas_scsi_find_task: aborting task 0x00000000769b5ba5 [ 7165.434940] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000769b5ba5) aborted [ 7165.434964] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000c9f7aa07) ignored [7165.434965] hisi_sas_v3_hw 0000: b4:02.0スロット完了task(00000000e2a1cf01) が無視されました [ 7165.434968] カーネルの NULL ポインターを処理できません仮想アドレスでの r 逆参照 000000000000000 7165.434972hisi_sas_v3_hw 0000:b4:02.0スロット完了task 7165.434976( 0000000022d52d93) が無視されました 7165.434975hisi_sas_v3_hw 0000:b4:02.0スロット完了task(0000000066a66a66a)情報[ 7165.434982] ESR = 0x96000004 [ 7165.434991] 例外クラス = DABT現在の EL、IL = 32 ビット[ 7165.434992] SET = 0、FnV = 0 [ 7165.434993] EA = 0、S1PTW = 0 [ 7165.434994]データ中止情報[ 7165.434994] ISV = 0、ISS = 0x00000004 [ 7165.434995] CM = 0、WnR = 0 [ 7165.434997] user pgtable4k ページ、48 ビット VA、pgdp = 00000000f29543f2 [ 7165.434998] [0000000000000000] pgd=00000000000000007165.435003] 内部エラー
    Oops96000004 [#1] SMP [ 7165.439863] プロセス scsi_eh_6pid4109、スタック制限 = 0x00000000c43818d57165.468862[ ] pstate00c00009nzcv daif +PAN +UAO[ 7165.473637] pc : dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [ 7165.479443] lrdereg_device_v3_hw+0x2c/0xa8 [hisi_sas_v3_hw] [ 7165.485247] sp
    ffff00001d623bc0 [ 7165.488546x29: ffff00001d623bc0 x28: ffffa027d03b9508 [ 7165.493835] x27:
    ffff80278ed50af0 x26: ffffa027dd31e0a8 [ 7165.499123] x25: ffffa027d9b27f88 x24: ffffa027d9b209f8 [7165.504411] x23: ffffa027c45b0d60 x22: ffff80278ec07c00 7165.509700] x21: 0000000000000000000000000000000
    fffa027d9b209f8 [ 7165.514988 ] x19: ffffa027d9b27f88 x18: ffffffffffffff [ 7165.520276] x17:
    0000000000000000 x16: 0000000000000000 [ 7165.525564] x15: ffff0000091d9708 x14: ffff0000093b7dc8 [7165.530852] x13: ffff0000093b7a23 x12: 6e7265746e692067 [ 7165.536140] x11: 0000000000000000 x10:
    000000000000bb0 [ 7165.541429x9 : ffff00001d6238f0 x8 : ffffa027d877af00 [ 7165.546718] x7 []
    ffffa027d6329600 x6 : ffff7e809f58ca00 [ 7165.552006] x5 : 0000000000001f8a x4 : 000000000000088e [7165.557295] x3 : ffffa027d9b27fa8 x2 : 0000000000000000 [ 7165.562583] x1 : 0000000000000000 x0 :
    000000003000188e [ 7165.567872] Call trace: [ 7165.570309] dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [7165.575775] hisi_sas_abort_task+0x248/0x358 [hisi_sas_main] [ 7165.581415] sas_eh_handle_sas_errors+0x258/0x8e0 [libsas] [ 7165.586876] sas_scsi_recover_host+ 0x134/0x458 [libsas] [7165.592082] scsi_error_handler+0xb4/0x488 [ 7165.596163] kthread+0x134/0x138 [ 7165.599380] ret_from_fork+0x10/0x18 [ 7165.602940] コードd5033e9f b9000040 aa0103e2 eb03003f9000203f9 [000203f 7165.609004CPU 75 で開始するカーネル障害0x1通知 [ 7165.700728] ---[ end trace fc042cbea224efc ]--- [7165.705326] カーネルパニック - 同期しない致命的な例外 の問題を修正するには、次のメンバーをトラバースする際に sas_dev ロックを使用しますdereg_device_v3_hw() と hisi_sas_release_tasks() の sas_dev.list でメンバーの追加と削除の同時性を回避します。いつ ---truncated---CVE-2023-53627]

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006567 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list

    When freeing slots in function slot_complete_v3_hw(), it is possible that     sas_dev.list is being traversed elsewhere, and it may trigger a NULL     pointer exception, such as follows:

    ==>cq thread                    ==>scsi_eh_6

                                    ==>scsi_error_handler()                                       ==>sas_eh_handle_sas_errors()                                         ==>sas_scsi_find_task()                                           ==>lldd_abort_task()     ==>slot_complete_v3_hw()              ==>hisi_sas_abort_task()       ==>hisi_sas_slot_task_free()          ==>dereg_device_v3_hw()         ==>list_del_init()                    ==>list_for_each_entry_safe()

    [ 7165.434918] sas: Enter sas_scsi_recover_host busy: 32 failed: 32     [ 7165.434926] sas: trying to find task 0x00000000769b5ba5     [ 7165.434927] sas: sas_scsi_find_task: aborting task 0x00000000769b5ba5     [ 7165.434940] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000769b5ba5) aborted     [ 7165.434964] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000c9f7aa07) ignored     [ 7165.434965] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000e2a1cf01) ignored     [ 7165.434968] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000     [ 7165.434972] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000022d52d93) ignored     [ 7165.434975] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000066a7516c) ignored     [ 7165.434976] Mem abort info:
    [ 7165.434982]   ESR = 0x96000004     [ 7165.434991]   Exception class = DABT (current EL), IL = 32 bits     [ 7165.434992]   SET = 0, FnV = 0     [ 7165.434993]   EA = 0, S1PTW = 0     [ 7165.434994] Data abort info:
    [ 7165.434994]   ISV = 0, ISS = 0x00000004     [ 7165.434995]   CM = 0, WnR = 0     [ 7165.434997] user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000f29543f2     [ 7165.434998] [0000000000000000] pgd=0000000000000000     [ 7165.435003] Internal error: Oops: 96000004 [#1] SMP     [ 7165.439863] Process scsi_eh_6 (pid: 4109, stack limit = 0x00000000c43818d5)     [ 7165.468862] pstate: 00c00009 (nzcv daif +PAN +UAO)     [ 7165.473637] pc : dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw]     [ 7165.479443] lr : dereg_device_v3_hw+0x2c/0xa8 [hisi_sas_v3_hw]     [ 7165.485247] sp : ffff00001d623bc0     [ 7165.488546] x29: ffff00001d623bc0 x28: ffffa027d03b9508     [ 7165.493835] x27: ffff80278ed50af0 x26: ffffa027dd31e0a8     [ 7165.499123] x25: ffffa027d9b27f88 x24: ffffa027d9b209f8     [ 7165.504411] x23: ffffa027c45b0d60 x22: ffff80278ec07c00     [ 7165.509700] x21: 0000000000000008 x20: ffffa027d9b209f8     [ 7165.514988] x19: ffffa027d9b27f88 x18: ffffffffffffffff     [ 7165.520276] x17: 0000000000000000 x16: 0000000000000000     [ 7165.525564] x15: ffff0000091d9708 x14: ffff0000093b7dc8     [ 7165.530852] x13: ffff0000093b7a23 x12: 6e7265746e692067     [ 7165.536140] x11: 0000000000000000 x10: 0000000000000bb0     [ 7165.541429] x9 : ffff00001d6238f0 x8 : ffffa027d877af00     [ 7165.546718] x7 : ffffa027d6329600 x6 : ffff7e809f58ca00     [ 7165.552006] x5 : 0000000000001f8a x4 : 000000000000088e     [ 7165.557295] x3 : ffffa027d9b27fa8 x2 : 0000000000000000     [ 7165.562583] x1 : 0000000000000000 x0 : 000000003000188e     [ 7165.567872] Call trace:
    [ 7165.570309]  dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw]     [ 7165.575775]  hisi_sas_abort_task+0x248/0x358 [hisi_sas_main]     [ 7165.581415]  sas_eh_handle_sas_errors+0x258/0x8e0 [libsas]     [ 7165.586876]  sas_scsi_recover_host+0x134/0x458 [libsas]     [ 7165.592082]  scsi_error_handler+0xb4/0x488     [ 7165.596163]  kthread+0x134/0x138     [ 7165.599380]  ret_from_fork+0x10/0x18     [ 7165.602940] Code: d5033e9f b9000040 aa0103e2 eb03003f (f9400021)     [ 7165.609004] kernel fault(0x1) notification starting on CPU 75     [ 7165.700728] ---[ end trace fc042cbbea224efc ]---     [ 7165.705326] Kernel panic - not syncing: Fatal exception

    To fix the issue, grab sas_dev lock when traversing the members of     sas_dev.list in dereg_device_v3_hw() and hisi_sas_release_tasks() to avoid     concurrency of adding and deleting member. When
    ---truncated---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list When freeing slots in     function slot_complete_v3_hw(), it is possible that sas_dev.list is being traversed elsewhere, and it may     trigger a NULL pointer exception, such as follows: ==>cq thread ==>scsi_eh_6 ==>scsi_error_handler()     ==>sas_eh_handle_sas_errors() ==>sas_scsi_find_task() ==>lldd_abort_task() ==>slot_complete_v3_hw()     ==>hisi_sas_abort_task() ==>hisi_sas_slot_task_free() ==>dereg_device_v3_hw() ==>list_del_init()     ==>list_for_each_entry_safe() [ 7165.434918] sas: Enter sas_scsi_recover_host busy: 32 failed: 32 [     7165.434926] sas: trying to find task 0x00000000769b5ba5 [ 7165.434927] sas: sas_scsi_find_task: aborting     task 0x00000000769b5ba5 [ 7165.434940] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000769b5ba5)     aborted [ 7165.434964] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000c9f7aa07) ignored [     7165.434965] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000e2a1cf01) ignored [ 7165.434968]     Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 7165.434972]     hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000022d52d93) ignored [ 7165.434975] hisi_sas_v3_hw     0000:b4:02.0: slot complete: task(0000000066a7516c) ignored [ 7165.434976] Mem abort info: [ 7165.434982]     ESR = 0x96000004 [ 7165.434991] Exception class = DABT (current EL), IL = 32 bits [ 7165.434992] SET = 0,     FnV = 0 [ 7165.434993] EA = 0, S1PTW = 0 [ 7165.434994] Data abort info: [ 7165.434994] ISV = 0, ISS =     0x00000004 [ 7165.434995] CM = 0, WnR = 0 [ 7165.434997] user pgtable: 4k pages, 48-bit VAs, pgdp =     00000000f29543f2 [ 7165.434998] [0000000000000000] pgd=0000000000000000 [ 7165.435003] Internal error:
    Oops: 96000004 [#1] SMP [ 7165.439863] Process scsi_eh_6 (pid: 4109, stack limit = 0x00000000c43818d5) [     7165.468862] pstate: 00c00009 (nzcv daif +PAN +UAO) [ 7165.473637] pc : dereg_device_v3_hw+0x68/0xa8     [hisi_sas_v3_hw] [ 7165.479443] lr : dereg_device_v3_hw+0x2c/0xa8 [hisi_sas_v3_hw] [ 7165.485247] sp :
    ffff00001d623bc0 [ 7165.488546] x29: ffff00001d623bc0 x28: ffffa027d03b9508 [ 7165.493835] x27:
    ffff80278ed50af0 x26: ffffa027dd31e0a8 [ 7165.499123] x25: ffffa027d9b27f88 x24: ffffa027d9b209f8 [     7165.504411] x23: ffffa027c45b0d60 x22: ffff80278ec07c00 [ 7165.509700] x21: 0000000000000008 x20:
    ffffa027d9b209f8 [ 7165.514988] x19: ffffa027d9b27f88 x18: ffffffffffffffff [ 7165.520276] x17:
    0000000000000000 x16: 0000000000000000 [ 7165.525564] x15: ffff0000091d9708 x14: ffff0000093b7dc8 [     7165.530852] x13: ffff0000093b7a23 x12: 6e7265746e692067 [ 7165.536140] x11: 0000000000000000 x10:
    0000000000000bb0 [ 7165.541429] x9 : ffff00001d6238f0 x8 : ffffa027d877af00 [ 7165.546718] x7 :
    ffffa027d6329600 x6 : ffff7e809f58ca00 [ 7165.552006] x5 : 0000000000001f8a x4 : 000000000000088e [     7165.557295] x3 : ffffa027d9b27fa8 x2 : 0000000000000000 [ 7165.562583] x1 : 0000000000000000 x0 :
    000000003000188e [ 7165.567872] Call trace: [ 7165.570309] dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [     7165.575775] hisi_sas_abort_task+0x248/0x358 [hisi_sas_main] [ 7165.581415]     sas_eh_handle_sas_errors+0x258/0x8e0 [libsas] [ 7165.586876] sas_scsi_recover_host+0x134/0x458 [libsas] [     7165.592082] scsi_error_handler+0xb4/0x488 [ 7165.596163] kthread+0x134/0x138 [ 7165.599380]     ret_from_fork+0x10/0x18 [ 7165.602940] Code: d5033e9f b9000040 aa0103e2 eb03003f (f9400021) [ 7165.609004]     kernel fault(0x1) notification starting on CPU 75 [ 7165.700728] ---[ end trace fc042cbbea224efc ]--- [     7165.705326] Kernel panic - not syncing: Fatal exception To fix the issue, grab sas_dev lock when     traversing the members of sas_dev.list in dereg_device_v3_hw() and hisi_sas_release_tasks() to avoid     concurrency of adding and deleting member. When ---truncated--- (CVE-2023-53627)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010910 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list

    When freeing slots in function slot_complete_v3_hw(), it is possible that     sas_dev.list is being traversed elsewhere, and it may trigger a NULL     pointer exception, such as follows:

    ==>cq thread                    ==>scsi_eh_6

                                    ==>scsi_error_handler()                                       ==>sas_eh_handle_sas_errors()                                         ==>sas_scsi_find_task()                                           ==>lldd_abort_task()     ==>slot_complete_v3_hw()              ==>hisi_sas_abort_task()       ==>hisi_sas_slot_task_free()          ==>dereg_device_v3_hw()         ==>list_del_init()                    ==>list_for_each_entry_safe()

    [ 7165.434918] sas: Enter sas_scsi_recover_host busy: 32 failed: 32     [ 7165.434926] sas: trying to find task 0x00000000769b5ba5     [ 7165.434927] sas: sas_scsi_find_task: aborting task 0x00000000769b5ba5     [ 7165.434940] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000769b5ba5) aborted     [ 7165.434964] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000c9f7aa07) ignored     [ 7165.434965] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000e2a1cf01) ignored     [ 7165.434968] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000     [ 7165.434972] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000022d52d93) ignored     [ 7165.434975] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000066a7516c) ignored     [ 7165.434976] Mem abort info:
    [ 7165.434982]   ESR = 0x96000004     [ 7165.434991]   Exception class = DABT (current EL), IL = 32 bits     [ 7165.434992]   SET = 0, FnV = 0     [ 7165.434993]   EA = 0, S1PTW = 0     [ 7165.434994] Data abort info:
    [ 7165.434994]   ISV = 0, ISS = 0x00000004     [ 7165.434995]   CM = 0, WnR = 0     [ 7165.434997] user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000f29543f2     [ 7165.434998] [0000000000000000] pgd=0000000000000000     [ 7165.435003] Internal error: Oops: 96000004 [#1] SMP     [ 7165.439863] Process scsi_eh_6 (pid: 4109, stack limit = 0x00000000c43818d5)     [ 7165.468862] pstate: 00c00009 (nzcv daif +PAN +UAO)     [ 7165.473637] pc : dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw]     [ 7165.479443] lr : dereg_device_v3_hw+0x2c/0xa8 [hisi_sas_v3_hw]     [ 7165.485247] sp : ffff00001d623bc0     [ 7165.488546] x29: ffff00001d623bc0 x28: ffffa027d03b9508     [ 7165.493835] x27: ffff80278ed50af0 x26: ffffa027dd31e0a8     [ 7165.499123] x25: ffffa027d9b27f88 x24: ffffa027d9b209f8     [ 7165.504411] x23: ffffa027c45b0d60 x22: ffff80278ec07c00     [ 7165.509700] x21: 0000000000000008 x20: ffffa027d9b209f8     [ 7165.514988] x19: ffffa027d9b27f88 x18: ffffffffffffffff     [ 7165.520276] x17: 0000000000000000 x16: 0000000000000000     [ 7165.525564] x15: ffff0000091d9708 x14: ffff0000093b7dc8     [ 7165.530852] x13: ffff0000093b7a23 x12: 6e7265746e692067     [ 7165.536140] x11: 0000000000000000 x10: 0000000000000bb0     [ 7165.541429] x9 : ffff00001d6238f0 x8 : ffffa027d877af00     [ 7165.546718] x7 : ffffa027d6329600 x6 : ffff7e809f58ca00     [ 7165.552006] x5 : 0000000000001f8a x4 : 000000000000088e     [ 7165.557295] x3 : ffffa027d9b27fa8 x2 : 0000000000000000     [ 7165.562583] x1 : 0000000000000000 x0 : 000000003000188e     [ 7165.567872] Call trace:
    [ 7165.570309]  dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw]     [ 7165.575775]  hisi_sas_abort_task+0x248/0x358 [hisi_sas_main]     [ 7165.581415]  sas_eh_handle_sas_errors+0x258/0x8e0 [libsas]     [ 7165.586876]  sas_scsi_recover_host+0x134/0x458 [libsas]     [ 7165.592082]  scsi_error_handler+0xb4/0x488     [ 7165.596163]  kthread+0x134/0x138     [ 7165.599380]  ret_from_fork+0x10/0x18     [ 7165.602940] Code: d5033e9f b9000040 aa0103e2 eb03003f (f9400021)     [ 7165.609004] kernel fault(0x1) notification starting on CPU 75     [ 7165.700728] ---[ end trace fc042cbbea224efc ]---     [ 7165.705326] Kernel panic - not syncing: Fatal exception

    To fix the issue, grab sas_dev lock when traversing the members of     sas_dev.list in dereg_device_v3_hw() and hisi_sas_release_tasks() to avoid     concurrency of adding and deleting member. When
    ---truncated---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013762 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list

    When freeing slots in function slot_complete_v3_hw(), it is possible that     sas_dev.list is being traversed elsewhere, and it may trigger a NULL     pointer exception, such as follows:

    ==>cq thread                    ==>scsi_eh_6

                                    ==>scsi_error_handler()                                       ==>sas_eh_handle_sas_errors()                                         ==>sas_scsi_find_task()                                           ==>lldd_abort_task()     ==>slot_complete_v3_hw()              ==>hisi_sas_abort_task()       ==>hisi_sas_slot_task_free()          ==>dereg_device_v3_hw()         ==>list_del_init()                    ==>list_for_each_entry_safe()

    [ 7165.434918] sas: Enter sas_scsi_recover_host busy: 32 failed: 32     [ 7165.434926] sas: trying to find task 0x00000000769b5ba5     [ 7165.434927] sas: sas_scsi_find_task: aborting task 0x00000000769b5ba5     [ 7165.434940] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000769b5ba5) aborted     [ 7165.434964] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000c9f7aa07) ignored     [ 7165.434965] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000e2a1cf01) ignored     [ 7165.434968] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000     [ 7165.434972] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000022d52d93) ignored     [ 7165.434975] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(0000000066a7516c) ignored     [ 7165.434976] Mem abort info:
    [ 7165.434982]   ESR = 0x96000004     [ 7165.434991]   Exception class = DABT (current EL), IL = 32 bits     [ 7165.434992]   SET = 0, FnV = 0     [ 7165.434993]   EA = 0, S1PTW = 0     [ 7165.434994] Data abort info:
    [ 7165.434994]   ISV = 0, ISS = 0x00000004     [ 7165.434995]   CM = 0, WnR = 0     [ 7165.434997] user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000f29543f2     [ 7165.434998] [0000000000000000] pgd=0000000000000000     [ 7165.435003] Internal error: Oops: 96000004 [#1] SMP     [ 7165.439863] Process scsi_eh_6 (pid: 4109, stack limit = 0x00000000c43818d5)     [ 7165.468862] pstate: 00c00009 (nzcv daif +PAN +UAO)     [ 7165.473637] pc : dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw]     [ 7165.479443] lr : dereg_device_v3_hw+0x2c/0xa8 [hisi_sas_v3_hw]     [ 7165.485247] sp : ffff00001d623bc0     [ 7165.488546] x29: ffff00001d623bc0 x28: ffffa027d03b9508     [ 7165.493835] x27: ffff80278ed50af0 x26: ffffa027dd31e0a8     [ 7165.499123] x25: ffffa027d9b27f88 x24: ffffa027d9b209f8     [ 7165.504411] x23: ffffa027c45b0d60 x22: ffff80278ec07c00     [ 7165.509700] x21: 0000000000000008 x20: ffffa027d9b209f8     [ 7165.514988] x19: ffffa027d9b27f88 x18: ffffffffffffffff     [ 7165.520276] x17: 0000000000000000 x16: 0000000000000000     [ 7165.525564] x15: ffff0000091d9708 x14: ffff0000093b7dc8     [ 7165.530852] x13: ffff0000093b7a23 x12: 6e7265746e692067     [ 7165.536140] x11: 0000000000000000 x10: 0000000000000bb0     [ 7165.541429] x9 : ffff00001d6238f0 x8 : ffffa027d877af00     [ 7165.546718] x7 : ffffa027d6329600 x6 : ffff7e809f58ca00     [ 7165.552006] x5 : 0000000000001f8a x4 : 000000000000088e     [ 7165.557295] x3 : ffffa027d9b27fa8 x2 : 0000000000000000     [ 7165.562583] x1 : 0000000000000000 x0 : 000000003000188e     [ 7165.567872] Call trace:
    [ 7165.570309]  dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw]     [ 7165.575775]  hisi_sas_abort_task+0x248/0x358 [hisi_sas_main]     [ 7165.581415]  sas_eh_handle_sas_errors+0x258/0x8e0 [libsas]     [ 7165.586876]  sas_scsi_recover_host+0x134/0x458 [libsas]     [ 7165.592082]  scsi_error_handler+0xb4/0x488     [ 7165.596163]  kthread+0x134/0x138     [ 7165.599380]  ret_from_fork+0x10/0x18     [ 7165.602940] Code: d5033e9f b9000040 aa0103e2 eb03003f (f9400021)     [ 7165.609004] kernel fault(0x1) notification starting on CPU 75     [ 7165.700728] ---[ end trace fc042cbbea224efc ]---     [ 7165.705326] Kernel panic - not syncing: Fatal exception

    To fix the issue, grab sas_dev lock when traversing the members of     sas_dev.list in dereg_device_v3_hw() and hisi_sas_release_tasks() to avoid     concurrency of adding and deleting member. When
    ---truncated---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
270199	Linux Distros 未修补的漏洞：CVE-2023-53627	Nessus	Misc.	2025/10/13	2026/2/6	medium
270199	Linux Distros 未修補的弱點：CVE-2023-53627	Nessus	Misc.	2025/10/13	2026/2/6	medium
270199	Linux Distros のパッチ未適用の脆弱性: CVE-2023-53627	Nessus	Misc.	2025/10/13	2026/2/6	medium
297592	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1224)	Nessus	Huawei Local Security Checks	2026/2/2	2026/2/4	high
302971	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-1629)	Nessus	Huawei Local Security Checks	2026/3/18	2026/3/18	high
305163	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-006567)	Nessus	Unity Linux Local Security Checks	2026/4/7	2026/4/8	medium
270199	Linux Distros Unpatched Vulnerability : CVE-2023-53627	Nessus	Misc.	2025/10/13	2026/2/6	medium
308422	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-010910)	Nessus	Unity Linux Local Security Checks	2026/4/21	2026/4/21	medium
302981	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-1637)	Nessus	Huawei Local Security Checks	2026/3/18	2026/3/18	high
309553	Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013762)	Nessus	Unity Linux Local Security Checks	2026/4/22	2026/4/22	medium
297598	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1212)	Nessus	Huawei Local Security Checks	2026/2/2	2026/2/4	high

检测

插件搜索

medium

medium

medium

high

high

medium

medium

medium

high

medium

high