Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - cephファイルサイズが整列されていない暗号化された inode に対するカーネルのバグを回避します。generic/397 テストは、ファイルサイズが整列されていない暗号化 inode の場合、BUG_ON をヒットします。[ 877.737811] fstests generic/397 を実行します。 2025-01-03 12:34:40 [ 877.875761] libcephmon0 (2)127.0.0.1:40674 セッション確立 [877.876130] libcephclient4614 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 877.991965] libcephmon0 (2)127.0.0.1:40674セッション確立 [ 877.992334] libcephclient4617 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.017234] libcephmon0 (2)127.0.0.1:40674 セッション確立 [878.017594] libcephclient4620 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.031394] xfs_iopid 18988の設定が廃止されました。 v1 暗号化ポリシーv2 へのアップグレードを推奨します。 [ 878.054528] libcephmon0 (2)127.0.0.1:40674 セッションが確立されました [ 878.054892] libcephclient4623 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.070287] libcephmon0 (2)127.0.0.1:40674 セッションが確立されました [878.070704] libcephclient4626 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949878.264586] libcephmon0 (2)127.0.0.1:40674 セッションが確立されました [ 878.265258] libcephclient4629 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.374578] -----------[ ここで挿入 ]---- --------- [ 878.374586] net/ceph/messenger.c:1070! でカーネルのバグ[ 878.375150] Oops無効なオペコード0000 [#1] PREEMPT SMP NOPTI [878.378145] CPU2 UID0 PID4759 通信kworker/2:9 汚染されていない 6.13.0-rc5+ #1 [ 878.378969] Hardware名前 QEMU Standard PC (i440FX + PIIX, 1996)、BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 878.380167ワークキュー ceph-msgr ceph_con_workfn [ 878.381639] RIP
    0010:ceph_msg_data_cursor_init+0x42/0x50 [ 878.382152] コード: 89 17 48 8b 46 70 55 48 89 47 08 c7 47 18 00 00 00 48 e5 e8 de cc ff ff 5d 31 c1 31 d2 31 f6 31 f6 31 f6 31 cc cc cc 0f 0b <0f> 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 878.383928] RSP: 0018:ffffb4ffc7cbbd28 EFLAGS: 00010287 [878.384447] RAX: ffffffff82bb9ac0 RBX: ffff981390c2f1f8 RCX000000000000000 [ 878.385129RDX
    0000000000009000 RSIffff981288232b58 RDIffff981390c2f378 [ 878.385839] RBP ffffb4ffc7cbbe18 R08
     R0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 878.386539​ R10​ R11​ R12​
    ffff981390c2f030 [ 878.387203] R13: ffff981288232b58 R14: 0000000000000029 R15: 0000000000000001 [878.387877] FS: 0000000000000000(0000) GS:ffff9814b7900000(0000) knlGS:0000000000000000 [ 878.388663] CS:
    0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.389212] CR2: 00005e106a0554e0 CR3: 0000000112bf0001 CR4: 0000000000772ef0 [ 878.389921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [878.390620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 878.391307] PKRU55555554 [ 878.391567] Call Trace : [ 878.391807] <TASK> [ 878.392021] ? show_regs+0x71/0x90 [ 878.392391] ? diet+0x38/0xa0 [ 878.392667] ? do_trap+0xdb/0x100 [ 878.392981] ? do_error_trap+0x75/0xb0 [ 878.393372] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.393842] ? exc_invalid_op+0x53/0x80 [ 878.394232] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.394694] ? asm_exc_invalid_op+0x1b/0x20 [ 878.395099] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.395583] ? ceph_con_v2_try_read+0xd16/0x2220 878.396027] ?
    _raw_spin_unlock+0xe/0x40 [ 878.396428] ? raw_spin_rq_unlock+0x10/0x40 [ 878.396842] ? finish_task_switch.isra.0+0x97/0x310 [ 878.397338] ? __schedule+0x44b/0x16b0 [ 878.397738] ceph_con_workfn+0x326/0x750 [ 878.398121] process_one_work+0x188/0x3d0 [ 878.398522] ?
    __pfx_worker_thread+0x10/0x10 [ 878.398929] worker_thread+0x2b5/0x3c0 [ 878.399310] ?
    __pfx_worker_thread+0x10/0x10 [ 878.399727] kthread+0xe1/0x120 [ 878.400031] ? __pfx_kthread+0x10/0x10 [878.400431] ret_from_fork+0x43/0x70 [ 878.400771] ? __pfx_kthread+0x10/0x10 [ 878.401127] ret_from_fork_asm+0x1a/0x30 [ 878.401543] </TASK> [ 878.401760] モジュール l ---truncated---CVE-2025-38223

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ceph: avoid kernel BUG for encrypted inode with unaligned file size The generic/397 test hits a BUG_ON for     the case of encrypted inode with unaligned file size (for example, 33K or 1K): [ 877.737811] run fstests     generic/397 at 2025-01-03 12:34:40 [ 877.875761] libceph: mon0 (2)127.0.0.1:40674 session established [     877.876130] libceph: client4614 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 877.991965] libceph: mon0     (2)127.0.0.1:40674 session established [ 877.992334] libceph: client4617 fsid     19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.017234] libceph: mon0 (2)127.0.0.1:40674 session established [     878.017594] libceph: client4620 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.031394] xfs_io (pid 18988)     is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 878.054528] libceph: mon0     (2)127.0.0.1:40674 session established [ 878.054892] libceph: client4623 fsid     19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.070287] libceph: mon0 (2)127.0.0.1:40674 session established [     878.070704] libceph: client4626 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.264586] libceph: mon0     (2)127.0.0.1:40674 session established [ 878.265258] libceph: client4629 fsid     19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.374578] -----------[ cut here ]------------ [ 878.374586]     kernel BUG at net/ceph/messenger.c:1070! [ 878.375150] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [     878.378145] CPU: 2 UID: 0 PID: 4759 Comm: kworker/2:9 Not tainted 6.13.0-rc5+ #1 [ 878.378969] Hardware     name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014     [ 878.380167] Workqueue: ceph-msgr ceph_con_workfn [ 878.381639] RIP:
    0010:ceph_msg_data_cursor_init+0x42/0x50 [ 878.382152] Code: 89 17 48 8b 46 70 55 48 89 47 08 c7 47 18 00     00 00 00 48 89 e5 e8 de cc ff ff 5d 31 c0 31 d2 31 f6 31 ff c3 cc cc cc cc 0f 0b <0f> 0b 0f 0b 66 2e 0f 1f     84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 878.383928] RSP: 0018:ffffb4ffc7cbbd28 EFLAGS: 00010287 [     878.384447] RAX: ffffffff82bb9ac0 RBX: ffff981390c2f1f8 RCX: 0000000000000000 [ 878.385129] RDX:
    0000000000009000 RSI: ffff981288232b58 RDI: ffff981390c2f378 [ 878.385839] RBP: ffffb4ffc7cbbe18 R08:
    0000000000000000 R09: 0000000000000000 [ 878.386539] R10: 0000000000000000 R11: 0000000000000000 R12:
    ffff981390c2f030 [ 878.387203] R13: ffff981288232b58 R14: 0000000000000029 R15: 0000000000000001 [     878.387877] FS: 0000000000000000(0000) GS:ffff9814b7900000(0000) knlGS:0000000000000000 [ 878.388663] CS:
    0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.389212] CR2: 00005e106a0554e0 CR3: 0000000112bf0001     CR4: 0000000000772ef0 [ 878.389921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [     878.390620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 878.391307] PKRU: 55555554     [ 878.391567] Call Trace: [ 878.391807] <TASK> [ 878.392021] ? show_regs+0x71/0x90 [ 878.392391] ?     die+0x38/0xa0 [ 878.392667] ? do_trap+0xdb/0x100 [ 878.392981] ? do_error_trap+0x75/0xb0 [ 878.393372] ?     ceph_msg_data_cursor_init+0x42/0x50 [ 878.393842] ? exc_invalid_op+0x53/0x80 [ 878.394232] ?     ceph_msg_data_cursor_init+0x42/0x50 [ 878.394694] ? asm_exc_invalid_op+0x1b/0x20 [ 878.395099] ?     ceph_msg_data_cursor_init+0x42/0x50 [ 878.395583] ? ceph_con_v2_try_read+0xd16/0x2220 [ 878.396027] ?
    _raw_spin_unlock+0xe/0x40 [ 878.396428] ? raw_spin_rq_unlock+0x10/0x40 [ 878.396842] ?     finish_task_switch.isra.0+0x97/0x310 [ 878.397338] ? __schedule+0x44b/0x16b0 [ 878.397738]     ceph_con_workfn+0x326/0x750 [ 878.398121] process_one_work+0x188/0x3d0 [ 878.398522] ?
    __pfx_worker_thread+0x10/0x10 [ 878.398929] worker_thread+0x2b5/0x3c0 [ 878.399310] ?
    __pfx_worker_thread+0x10/0x10 [ 878.399727] kthread+0xe1/0x120 [ 878.400031] ? __pfx_kthread+0x10/0x10 [     878.400431] ret_from_fork+0x43/0x70 [ 878.400771] ? __pfx_kthread+0x10/0x10 [ 878.401127]     ret_from_fork_asm+0x1a/0x30 [ 878.401543] </TASK> [ 878.401760] Modules l ---truncated--- (CVE-2025-38223)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ceph避免未对齐文件大小的加密 inode 的内核缺陷 generic/397 测试针对未对齐文件大小例如 33K 或 1K的加密 inode 的情况命中 BUG_ON: [ 877.737811] 在以下处运行 fstest generic/397 2025-01-03 12:34:40 [ 877.875761] libceph: mon0 (2)127.0.0.1:40674 会话已建立 [877.876130] libceph: client4614 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 877.991965] libceph: mon0 (2)127.0.0.1:40674已建立会话 [ 877.992334] libceph: client4617 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.017234] libceph: client4617 fsid [] [ [] ] libceph: mon0 (2)127.0.0.1:40674 已建立会话 [878.017594] libceph: client4620 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.031394] xfs_io (pid 18988) 正在设置弃用v1 加密策略建议升级到 v2。 [ 878.054528] libceph: mon0 (2)127.0.0.1:40674 会话已建立 [ 878.054892] libceph: client4623 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.070287] libceph: mon0 (2)127.0.0.1:40674 会话已建立 [878.070704] libceph: client4626 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.264586] libceph: mon0 (2)127.0.0.1:40674 会话已建立 [ 878.265258] libceph: client4629 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.374578] -----------[ 在此处切换 ]--- --------- [ 878.374586] 内核缺陷位于 net/ceph/messenger.c:1070! [ 878.375150] Oops无效的 opcode0000 [#1] PREEMPT SMP NOPTI [878.378145] CPU: 2 UID: 0 PID: 4759 Comm: kworker/2:9 未受感染 6.13.0-rc5+ #1 [ 878.378969] 硬件nameQEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 878.380167] Workqueueceph-msgr ceph_con_workfn [ 878.381639] RIP
    0010ceph_msg_data_cursor_init+0x42/0x50 [ 878.382152] Code89 17 48 8b 46 70 55 48 89 47 08 c7 47 18 00 00 00 00 48 89 e5 e8 de cc ff ff 5d 31 c0 31 d2 31 f6 31 f6 cc3 cc cc cc 0f 0b <0f> 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 878.383928] RSP: 0018:ffffb4ffc7cbbd28 EFLAGS: 00010287 [878.384447] RAX: ffffffff82bb9ac0 RBX: ffff981390c2f1f8 RCX: 0000000000000000 [ 878.385129] RDX:
    0000000000009000 RSIffff981288232b58 RDIffff981390c2f378 [ 878.385839] RBPffffb4ffc7cbbe18 R08
    0000000000000000 R090000000000000000 [ 878.386539] R100000000000000000 R110000000000000000 R12
    ffff981390c2f030 [ 878.387203] R13: ffff981288232b58 R14: 0000000000000029 R15: 0000000000000001 [878.387877] FS: 0000000000000000(0000) GS:ffff9814b7900000(0000) knlGS:0000000000000000 [ 878.388663] CS:
    0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.389212] CR2: 00005e106a0554e0 CR3: 0000000112bf0001 CR4: 0000000000772ef0 [ 878.389921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [878.390620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 878.391307] PKRU: 55555554 [ 878.391567] 调用跟踪[ 878.391807] <TASK> [ 878.392021] ? show_regs+0x71/0x90 [ 878.392391] ? die+0x38/0xa0 [ 878.392667] do_trap+0xdb/0x100 [ 878.392981] ? do_error_trap+0x75/0xb0 [ 878.393372] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.393842] exc_invalid_op+0x53/0x80 [ 878.394232] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.394694] asm_exc_invalid_op+0x1b/0x20 [ 878.395099] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.395583] ceph_con_v2_try_read+0xd16/0x2220 [ 878.396027] ?
    _raw_spin_unlock+0xe/0x40 [ 878.396428] raw_spin_rq_unlock+0x10/0x40 [ 878.396842] ? finish_task_switch.isra.0+0x97/0x310 [ 878.397338] ? __schedule+0x44b/0x16b0 [ 878.397738] ceph_con_workfn+0x326/0x750 [ 878.398121] process_one_work+0x188/0x3d0 [ 878.398522] ?
    __pfx_worker_thread+0x10/0x10 [ 878.398929] worker_thread+0x2b5/0x3c0 [ 878.399310] ?
    __pfx_worker_thread+0x10/0x10 [ 878.399727] kthread+0xe1/0x120 [ 878.400031] ? __pfx_kthread+0x10/0x10 [878.400431] ret_from_fork+0x43/0x70 [ 878.400771] ? __pfx_kthread+0x10/0x10 [ 878.401127] ret_from_fork_asm+0x1a/0x30 [ 878.401543] </TASK> [ 878.401760] 模块 l ---truncated--- (CVE-2025-38223)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - ceph避免檔案大小不相符的加密 inode 的核心錯誤。一般/397 測試針對檔案大小不相符的加密 inode (例如 33K 或 1K) 命中 BUG_ON[ 877.737811] 在下列位置執行 fstests generic/397 2025-01-03 12:34:40 [ 877.875761] libceph: mon0 (2)127.0.0.1:40674 工作階段已建立 [877.876130] libcephclient4614 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 877.991965] libceph: mon0 (2)127.0.0.1:40674工作階段已建立 [ 877.992334] libcephclient4617 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.017234] libceph: mon0 (2)127.0.0.140674 工作階段已建立 [878.017594] libcephclient4620 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.031394] xfs_io (pid 18988) 設定已過時v1 加密原則建議升級至 v2。 [ 878.054528] libceph: mon0 (2)127.0.0.140674 工作階段已建立 [ 878.054892] libcephclient4623 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.070287] libceph: mon0 (2)127.0.0.140674 工作階段已建立 [878.070704] libcephclient4626 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.264586] libcephmon0 (2)127.0.0.140674 工作階段已建立 [ 878.265258] libcephclient4629 fsid 19b90bca-f1ae-47a6-93dd-0b03ee637949 [ 878.374578] -----------[cut here ]--- --------- [ 878.374586] net/ceph/messenger.c:1070! 的核心錯誤[ 878.375150] Oops無效 opcode0000 [#1] PREEMPT SMP NOPTI [878.378145] CPU2 UID 0 PID 4759 Commkworker/2:9 未受污染的 6.13.0-rc5+ #1 [ 878.378969] 硬體名稱QEMU Standard PC (i440FX + PIIX, 1996)BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 878.380167] 工作佇列 ceph-msgr ceph_con_workfn [ 878.381639] RIP
    0010:ceph_msg_data_cursor_init+0x42/0x50 [ 878.382152] 程式碼89 17 48 8b 46 70 55 48 89 47 08 c7 47 18 00 00 00 00 48 89 e5 e8 de cc ff ff 5d 31 c0 31 ff c d2 31 f6 3 cc 1 ff c d2 31 f6 3 cc cc cc 0f 0b <0f> 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 878.383928] RSP: 0018:ffffb4ffc7cbbd28 EFLAGS: 00010287 [878.384447] RAX: ffffffff82bb9ac0 RBX: ffff981390c2f1f8 RCX0000000000000000 [ 878.385129] RDX
    000000000009000 RSIffff981288232b58 RDIffff981390c2f378 [ 878.385839] RBPffffb4ffc7cbbe18 R08
    0000000000000000 R090000000000000000 [ 878.386539] R100000000000000000 R110000000000000000 R12
    ffff981390c2f030 [ 878.387203] R13: ffff981288232b58 R14: 0000000000000029 R15: 0000000000000001 [878.387877] FS: 0000000000000000(0000) GS:ffff9814b7900000(0000) knlGS:0000000000000000 [ 878.388663] CS:
    0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.389212] CR2: 00005e106a0554e0 CR3: 0000000112bf0001 CR4: 0000000000772ef0 [ 878.389921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [878.390620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 878.391307] PKRU55555554 [ 878.391567] 呼叫追踪[ 878.391807] <TASK> [ 878.392021] ? show_regs+0x71/0x90 [ 878.392391] ? die+0x38/0xa0 [ 878.392667] ? do_trap+0xdb/0x100 [ 878.392981] ? do_error_trap+0x75/0xb0 [ 878.393372] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.393842] exc_invalid_op+0x53/0x80 [ 878.394232] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.394694] asm_exc_invalid_op+0x1b/0x20 [ 878.395099] ? ceph_msg_data_cursor_init+0x42/0x50 [ 878.395583] ceph_con_v2_try_read+0xd16/0x2220 [ 878.396027]
    _raw_spin_unlock+0xe/0x40 [ 878.396428] ? raw_spin_rq_unlock+0x10/0x40 [ 878.396842] ? finish_task_switch.isra.0+0x97/0x310 [ 878.397338] ? __schedule+0x44b/0x16b0 [ 878.397738] ceph_con_workfn+0x326/0x750 [ 878.398121] process_one_work+0x188/0x3d0 [ 878.398522]
    __pfx_worker_thread+0x10/0x10 [ 878.398929] worker_thread+0x2b5/0x3c0 [ 878.399310] ?
    __pfx_worker_thread+0x10/0x10 [ 878.399727] kthread+0xe1/0x120 [ 878.400031] ? __pfx_kthread+0x10/0x10 [878.400431] ret_from_fork+0x43/0x70 [ 878.400771] ? __pfx_kthread+0x10/0x10 [ 878.401127] ret_from_fork_asm+0x1a/0x30 [ 878.401543] </TASK> [ 878.401760] 模組 l ---truncated--- (CVE-2025-38223)

請注意，Nessus 依賴供應商報告的套件存在。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
248297	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38223	Nessus	Misc.	2025/8/11	2025/8/11	high
248297	Linux Distros Unpatched Vulnerability : CVE-2025-38223	Nessus	Misc.	2025/8/11	2025/8/11	high
248297	Linux Distros 未修补的漏洞：CVE-2025-38223	Nessus	Misc.	2025/8/11	2025/8/11	high
248297	Linux Distros 未修補的弱點：CVE-2025-38223	Nessus	Misc.	2025/8/11	2025/8/11	high

検出

プラグインの検索

high

high

high

high