The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NFS/localio: Fix a race in nfs_local_open_fh() Once the clp->cl_uuid.lock has been dropped, another CPU     could come in and free the struct nfsd_file that was just added. To prevent that from happening, take the     RCU read lock before dropping the spin lock. (CVE-2025-38028)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - NFS/localionfs_local_open_fh() での競合を修正します。clp->cl_uuid.lock がドロップされると、他の CPU が侵入し、追加されたばかりの nfsd_file 構造体を解放する可能性があります。それを防ぐには、スピンロックをドロップする前に RCU 読み取りロックを最適化します。CVE-2025-38028

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote Ubuntu 24.04 LTS / 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7699-1 advisory.

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to     compromise the system. This update corrects flaws in the following subsystems:

    - ARM64 architecture;

    - RISC-V architecture;

    - x86 architecture;

    - Buffer Sharing and Synchronization framework;

    - DMA engine subsystem;

    - GPU drivers;

    - HID subsystem;

    - IIO ADC drivers;

    - IIO subsystem;

    - InfiniBand drivers;

    - Input Device core drivers;

    - Network drivers;

    - Mellanox network drivers;

    - PHY drivers;

    - Voltage and Current Regulator drivers;

    - VideoCore services drivers;

    - USB Type-C Connector System Software Interface driver;

    - Xen hypervisor drivers;

    - EROFS file system;

    - Network file system (NFS) client;

    - File systems infrastructure;

    - SMB network file system;

    - Network traffic control;

    - io_uring subsystem;

    - Kernel command line parsing driver;

    - Scheduler infrastructure;

    - Memory management;

    - Networking core;

    - MAC80211 subsystem;

    - Management Component Transport Protocol (MCTP);

    - Netfilter;

    - Open vSwitch;

    - TLS protocol;

    - Wireless networking;

    - SOF drivers; (CVE-2025-38011, CVE-2025-38095, CVE-2025-37967, CVE-2025-38012, CVE-2025-38019,     CVE-2025-37960, CVE-2025-37973, CVE-2025-37958, CVE-2025-38094, CVE-2025-37963, CVE-2025-37955,     CVE-2025-38014, CVE-2025-38025, CVE-2025-37970, CVE-2025-37947, CVE-2025-37966, CVE-2025-37948,     CVE-2025-38013, CVE-2025-37957, CVE-2025-38028, CVE-2025-37962, CVE-2025-38002, CVE-2025-37996,     CVE-2025-37992, CVE-2025-37969, CVE-2025-38009, CVE-2025-38027, CVE-2025-38020, CVE-2025-38023,     CVE-2025-38008, CVE-2025-38015, CVE-2025-37954, CVE-2025-38007, CVE-2025-38005, CVE-2025-37956,     CVE-2025-37965, CVE-2025-37972, CVE-2025-38006, CVE-2025-37971, CVE-2025-38056, CVE-2025-37968,     CVE-2025-38024, CVE-2025-37951, CVE-2025-38016, CVE-2025-38022, CVE-2025-37964, CVE-2025-37994,     CVE-2025-37952, CVE-2025-37998, CVE-2025-37993, CVE-2025-38018, CVE-2025-38010, CVE-2025-37995,     CVE-2025-38021, CVE-2025-37999, CVE-2025-37961, CVE-2025-37959, CVE-2025-37950, CVE-2025-37949)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - NFS/localio修正 nfs_local_open_fh() 中的爭用情形。卸除 clp->cl_uuid.lock 後其他 CPU 便可加入並釋放剛剛新增的結構 nfsd_file。為避免這種情況發生請先鎖定 RCU 再放置微調鎖定。 (CVE-2025-38028)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - NFS/localio修复 nfs_local_open_fh() 中的争用终止 clp->cl_uuid.lock另一个 CPU 可能会进入并释放刚添加的 struct nfsd_file。为防止这种情况发生,请在解除旋转锁定之前获取 RCU 读取锁定。 (CVE-2025-38028)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
248971	Linux Distros Unpatched Vulnerability : CVE-2025-38028	Nessus	Misc.	2025/8/12	2025/8/12	medium
248971	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38028	Nessus	Misc.	2025/8/12	2025/8/12	medium
252277	Ubuntu 24.04 LTS / 25.04 : Linux kernel vulnerabilities (USN-7699-1)	Nessus	Ubuntu Local Security Checks	2025/8/19	2025/8/19	medium
248971	Linux Distros 未修補的弱點：CVE-2025-38028	Nessus	Misc.	2025/8/12	2025/8/12	medium
248971	Linux Distros 未修补的漏洞：CVE-2025-38028	Nessus	Misc.	2025/8/12	2025/8/12	medium

检测

插件搜索

medium

medium

medium

medium

medium