The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4404 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4404-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     December 12, 2025                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.247-1     CVE ID         : CVE-2023-53498 CVE-2024-47666 CVE-2024-50143 CVE-2024-57947                      CVE-2025-21861 CVE-2025-21887 CVE-2025-22058 CVE-2025-23143                      CVE-2025-38678 CVE-2025-39866 CVE-2025-39869 CVE-2025-39876                      CVE-2025-39883 CVE-2025-39885 CVE-2025-39907 CVE-2025-39911                      CVE-2025-39913 CVE-2025-39923 CVE-2025-39937 CVE-2025-39945                      CVE-2025-39949 CVE-2025-39951 CVE-2025-39953 CVE-2025-39955                      CVE-2025-39964 CVE-2025-39967 CVE-2025-39968 CVE-2025-39969                      CVE-2025-39970 CVE-2025-39971 CVE-2025-39972 CVE-2025-39973                      CVE-2025-39980 CVE-2025-39985 CVE-2025-39986 CVE-2025-39987                      CVE-2025-39993 CVE-2025-39994 CVE-2025-39995 CVE-2025-39996                      CVE-2025-39998 CVE-2025-40001 CVE-2025-40006 CVE-2025-40011                      CVE-2025-40018 CVE-2025-40019 CVE-2025-40020 CVE-2025-40021                      CVE-2025-40022 CVE-2025-40026 CVE-2025-40027 CVE-2025-40029                      CVE-2025-40030 CVE-2025-40035 CVE-2025-40042 CVE-2025-40044                      CVE-2025-40048 CVE-2025-40049 CVE-2025-40053 CVE-2025-40055                      CVE-2025-40070 CVE-2025-40078 CVE-2025-40081 CVE-2025-40083                      CVE-2025-40087 CVE-2025-40088 CVE-2025-40105 CVE-2025-40106                      CVE-2025-40109 CVE-2025-40111 CVE-2025-40115 CVE-2025-40116                      CVE-2025-40118 CVE-2025-40121 CVE-2025-40125 CVE-2025-40127                      CVE-2025-40134 CVE-2025-40140 CVE-2025-40153 CVE-2025-40154                      CVE-2025-40167 CVE-2025-40173 CVE-2025-40178 CVE-2025-40183                      CVE-2025-40186 CVE-2025-40187 CVE-2025-40188 CVE-2025-40190                      CVE-2025-40194 CVE-2025-40197 CVE-2025-40198 CVE-2025-40200                      CVE-2025-40204 CVE-2025-40205 CVE-2025-40211 CVE-2025-40219                      CVE-2025-40220 CVE-2025-40223 CVE-2025-40231 CVE-2025-40233                      CVE-2025-40240 CVE-2025-40243 CVE-2025-40244 CVE-2025-40248                      CVE-2025-40254 CVE-2025-40257 CVE-2025-40258 CVE-2025-40259                      CVE-2025-40261 CVE-2025-40262 CVE-2025-40263 CVE-2025-40264                      CVE-2025-40269 CVE-2025-40271 CVE-2025-40273 CVE-2025-40275                      CVE-2025-40277 CVE-2025-40278 CVE-2025-40280 CVE-2025-40281                      CVE-2025-40282 CVE-2025-40283 CVE-2025-40304 CVE-2025-40306                      CVE-2025-40308 CVE-2025-40309 CVE-2025-40312 CVE-2025-40315                      CVE-2025-40317 CVE-2025-40319 CVE-2025-40321 CVE-2025-40322                      CVE-2025-40324 CVE-2025-40331 CVE-2025-40342     Debian Bug     : 1107479 1114557

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.247-1.  This version additionally includes many more bug fixes     from stable updates 5.10.245-5.10.247.  The broken pktcdvd driver has     also been disabled.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mptcp: fix race condition in mptcp_schedule_work() syzbot reported use-after-free in mptcp_schedule_work()     [1] Issue here is that mptcp_schedule_work() schedules a work, then gets a refcount on sk->sk_refcnt if     the work was scheduled. This refcount will be released by mptcp_worker(). [A] if (schedule_work(...)) {     [B] sock_hold(sk); return true; } Problem is that mptcp_worker() can run immediately and complete before     [B] We need instead : sock_hold(sk); if (schedule_work(...)) return true; sock_put(sk); [1] refcount_t:
    addition on 0; use-after-free. WARNING: CPU: 1 PID: 29 at lib/refcount.c:25     refcount_warn_saturate+0xfa/0x1d0 lib/refcount.c:25 Call Trace: <TASK> __refcount_add     include/linux/refcount.h:-1 [inline] __refcount_inc include/linux/refcount.h:366 [inline] refcount_inc     include/linux/refcount.h:383 [inline] sock_hold include/net/sock.h:816 [inline]     mptcp_schedule_work+0x164/0x1a0 net/mptcp/protocol.c:943 mptcp_tout_timer+0x21/0xa0     net/mptcp/protocol.c:2316 call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers     kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c:2372 [inline]
    __run_timer_base+0x648/0x970 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline]     run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x22f/0x710 kernel/softirq.c:622
    __do_softirq kernel/softirq.c:656 [inline] run_ktimerd+0xcf/0x190 kernel/softirq.c:1138     smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160 kthread+0x711/0x8a0 kernel/kthread.c:463     ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30     arch/x86/entry/entry_64.S:245 (CVE-2025-40258)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - mptcp修复 mptcp_schedule_work() 中的争用条件syzbot 报告 mptcp_schedule_work() 中的释放后使用 [1] 此处的问题是 mptcp_schedule_work() 计划工作然后在计划该工作时在 sk->sk_refcnt 上获取 refcount。此 refcount 将由 mptcp_worker() 释放。[A] if (schedule_work(...)) {[B] sock_hold(sk);返回 true;问题是 mptcp_worker() 可立即运行并在 [B] 之前完成我们需要 sock_hold(sk); if (schedule_work(...)) 返回 true； sock_put(sk); [1] refcount_t
    0 上的加法释放后使用。警告lib/refcount.c:25 refcount_warn_slurate+0xfa/0x1d0 lib/refcount.c:25 调用跟踪CPU1 PID: 29 <TASK> __refcount_add include/linux/refcount.h:-1 [内联] __refcount_inc include/ linux/refcount.h:366 [内联] refcount_inc include/linux/refcount.h:383 [内联] sock_hold include/net/sock.h:816 [内联] mptcp_schedule_work+0x164/0x1a0 net/mptcp/protocol.c:943 mptcp_tout_timer+0x21/0xa0 net/mptcp/protocol.c:2316 call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c 2372 [内联]
    __run_timer_base+0x648/0x970 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [内联] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x22f/0x710 内核/softirq。 c:622
    __do_softirq kernel/softirq.c:656 [inline] run_ktimerd+0xcf/0x190 kernel/softirq.c:1138 smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc /0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 (CVE-2025-40258)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - mptcp修正 mptcp_schedule_work() 中的爭用情形 syzbot 報告在 mptcp_schedule_work() 中有釋放後使用問題 [1] 此處的問題是 mptcp_schedule_work() 會排程工作然後如果工作已排程則在 sk->sk_refcnt 上取得 refcount。此 refcount 將由 mptcp_worker() 釋放。[A] if (schedule_work(...)) {[B] sock_hold(sk);傳回 true問題是 mptcp_worker() 可以立即執行並在 [B] 我們需要 sock_hold(sk); 之前完成if (schedule_work(...)) 傳回 true sock_put(sk); [1] refcount_t
    0 上的加法運算釋放後使用。警告 CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_sature+0xfa/0x1d0 lib/refcount.c:25 呼叫追踪 <TASK> __refcount_add include/linux/refcount.h:-1 [內嵌] __refcount_inc include/ linux/refcount.h:366 [內嵌] refcount_inc include/linux/refcount.h:383 [內嵌] sock_hold include/net/sock.h:816 [內嵌] mptcp_schedule_work+0x164/0x1a0 net/mptcp/protocol.c:943 mptcp_tout_timer+0x21/0xa0 net/mptcp/protocol.c:2316 call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [內嵌] __run_timers kernel/time/timer.c 2372 [內嵌]
    __run_timer_base+0x648/0x970 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [內嵌] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x22f/0x710 kernel/softirq。 c:622
    __do_softirq kernel/softirq.c:656 [內嵌] run_ktimerd+0xcf/0x190 kernel/softirq.c:1138 smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc /0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 (CVE-2025-40258)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - mptcpmptcp_schedule_work() の競合状態を修正します syzbot は mptcp_schedule_work() の use-after-free を報告しました [1] 問題は、mptcp_schedule_work() が作業をスケジュールし、作業がスケジュールされている場合に sk->sk_refcnt で refcount を取得することです。この refcount は mptcp_worker() によりリリースされます。[A] if (schedule_work(...)) {[B] sock_hold(sk); true を返す} 問題は、mptcp_worker() がすぐに実行され、[B] より前に完了できることです。代わりに が必要です : sock_hold(sk); if (schedule_work(...)) が true を返す場合sock_put(sk); [1] refcount_t
    0 の追加use-after-free。警告CPU1PID29at lib/refcount.c:25refcount_warn_saturate+0xfa/0x1d0lib/refcount.c:25CallTrace <TASK> __refcount_add include/linux/refcount.h:-1[inline] __refcount_inc include/ linux/refcount.h:366 [インライン] refcount_inc include/linux/refcount.h:383 [インライン] sock_hold include/net/sock.h:816 [インライン] mptcp_schedule_work+0x164/0x1a0 net/mptcp/protocol.c:943 mptcp_tout_timer+0x21/0xa0 net/mptcp/protocol.c:2316 call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers kernel/time/timer.c 2372 [インライン]
    __run_timer_base+0x648/0x970 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x22f/0x710 kernel/softirq. c:622
    __do_softirq kernel/softirq.c:656 [inline] run_ktimerd+0xcf/0x190 kernel/softirq.c:1138 smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_for k+0x8a0 /0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245CVE-2025-40258]

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
278559	Debian dla-4404 : ata-modules-5.10.0-35-armmp-di - security update	Nessus	Debian Local Security Checks	2025/12/12	2025/12/12	high
277507	Linux Distros Unpatched Vulnerability : CVE-2025-40258	Nessus	Misc.	2025/12/4	2025/12/12	high
277507	Linux Distros 未修补的漏洞：CVE-2025-40258	Nessus	Misc.	2025/12/4	2025/12/12	high
277507	Linux Distros 未修補的弱點：CVE-2025-40258	Nessus	Misc.	2025/12/4	2025/12/12	high
277507	Linux Distros のパッチ未適用の脆弱性: CVE-2025-40258	Nessus	Misc.	2025/12/4	2025/12/12	high

检测

插件搜索

high

high

high

high

high