Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - of_numaカーネルパニックを引き起こす初期化されていないメモリノードを修正します。メモリ専用ノードCPU のないノードがある場合、これらのノードは適切に初期化されず、起動中にカーネルパニックを引き起こします。 of_numa_init of_numa_parse_cpu_nodes node_set(nid, numa_nodes_parsed); of_numa_parse_memory_nodes of_numa_parse_cpu_nodes では、numa_nodes_parsed は、CPU を含むノードに対してのみ更新されます。メモリのみノードが、of_numa_parse_memory_nodes で更新されるべきでしたが、更新されませんでした。続いて、free_area_init() がこれらの初期化されていないメモリノードの NODE_DATA() にアクセスしようとすると、NULL ポインターデリファレンスによりカーネルパニックが発生します。これは 1 CPU と 2 つのメモリノードの ARM64 QEMU で発生します qemu-system-aarch64 \ -cpu host -nographic \ -m 4G -smp 1 \ -machine virt、accel=kvm、gic-version=3、iommu=smmuv3 \ -object memory-backend-ram,size=2G,id=mem0 \ -object memory-backend-ram,size=2G,id=mem1 \ -numa node,nodeid=0,memdev=mem0 \ -numa node, nodeid=1,memdev=mem1 \ -kernel $IMAGE \ -hda $DISK \ -append console=ttyAM0 root=/dev/vda rw earlycon [ 0.000000] 物理 CPU 上の Linux 起動 0x0000000000 [0x481fd010] 0.000000Linux バージョン6.17.0-rc1-00001-gabb4b3daf18c-dirtyyintirui@local 12.3.1、GNU ldGNU Binutils[] 2.41#52 SMP PREEMPT Mon Aug 18 09:49:40 CST 2025 [ 0.000000] KASLR の有効化 [ 0.000000] ランダムcrng init が完了します [ 0.000000] マシンモデルlinux、dummy-virt [ 0.000000] efi: UEFI が見つかりません。 0.000000[  ] earlycon: pl11 at MMIO 0x0000000009000000 (options '') [ 0.000000] printk: legacy bootconsole [pl11] enabled [ 0.000000] OF: reserved mem: Reserved memory: No reserved-memory node in the DT [ 0.000000] NODE_DATA(0) 割り当て済み [mem 0xbfffd9c0-0xffffff] [ 0.000000セクション 23 を削除する前にノード 1 を削除する必要があります [ 0.000000] ゾーン範囲[ 0.000000] DMA [mem 0x0000000040000000-0x000000000000ffffffff] [ 0.000000] DMA32 空 0.000000正常 [mem 0x0000000100000000-0x000000013fffffff] 0.000000各ノードの移動可能ゾーン開始 [ 0.000000初期のメモリノード範囲 [ 0.000000] ノード 0: [mem 0.0000000000000040000000-0x000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
    [mem 0x00000000c0000000-0x000000013fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x00000000bfffffff] [ 0.000000] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0 [ 0.000000] Mem abort info: [ 0.000000] ESR = 0x0000000096000004 [0.000000] EC = 0x25: DABT (current EL)、IL = 32 ビット [ 0.000000] SET = 0、FnV = 0 [ 0.000000] EA = 0、S1PTW = 0 [ 0.000000] FSC = 0x04: レベル 0変換障害 [ 0.000000] データ中止情報[ 0.000000] ISV = 0、ISS = 0x00000004、ISS2 = 0x00000000 [ 0.000000] CM = 0、WnR = 0、TnD = 0、TagAccess = 0 [ 0.000000] GCS = 0、Overlay = 0、DirtyBit = 0、Xs = 0 [ 0.000000] [00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 ががががががががががががします。内部エラーに : Oops: 0000000096000000000000000000000000000040404040404040404040404にリンクされているモジュールで、これにリンクされています。 [#1SMP 0.000000モジュールがリンクされています 0.000000]0.000000] CPU:0 UID:0 PID:0 Comm:swapper Not tainted 6.17.0-rc1-00001-g760c6dabf762-dirty #54 PREEMPT [ 0.000000] ハードウェア名: linux、dummy-virtDT[ 0.000000] pstate800000c5Nzcv daIF -PAN -UAO -TCO
    -DIT -SSBS BTYPE=--) [ 0.000000] pc : free_area_init+0x50c/0xf9c [ 0.000000] lr
    free_area_init+0x5c0/0xf9c [ 0.000000] sp : ffffa02ca0f33c00 [ 0.000000] x29 : ffffa02ca0f33cb0 x28 :
    000000000000000 x26: 4ec4ec4ec4ec4ec5 x25: 0.000000000000000000000000000000000000000000000000000000000000000000000000
    00000000000c0000 [ 0.000000] x23: 0000000000040000 x22: 0000000000000000 x21: ffffa02ca0f3b368 [ 0.000000] x20: ffffa02ca14c7b98 x19: 0000000000000000 x18: 0000000000000002 [ 0.000000] x17: 000000000000cacc x16:
     0.00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
    0000000000000002 [ 0.0 ---truncated---CVE-2025-39903]

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - of_numa修正造成核心錯誤的未初始化記憶體節點。有僅限記憶體的節點 (沒有 CPU 的節點) 時這些節點未正確初始化進而在開機期間造成核心錯誤。 of_numa_init of_numa_parse_cpu_nodes node_set(nid, numa_nodes_parsed); of_numa_parse_memory_nodes 在 of_numa_parse_cpu_nodes 中numa_nodes_parsed 只會針對含有 CPU 的節點更新。Memory-only 節點應已在 of_numa_parse_memory_nodes 中更新但目前尚未更新。因此當 free_area_init() 嘗試存取這些未初始化記憶體節點的 NODE_DATA() 時由於 NULL 指標解除參照核心會發生錯誤。此問題可在具有 1 個 CPU 和 2 個記憶體節點的 QEMU 上重現 ARM64 qemu-system-aarch64 \ -cpu host -nographic \ -m 4G -smp 1 \ -machine virt,accel=kvm,gic-version=3,iommu=smmuv3 \ -object memory-backend-ram,size=2G,id=mem0 \ -object memory-backend-ram,size=2G,id=mem1 \ -numa node,nodeid=0,memdev=mem0 \ -numa node, nodeid=1,memdev=mem1 \ -kernel $IMAGE \ -hda $DISK \ -append console=ttyAMA0 root=/dev/vda rw earlycon [ 0.000000] 實體 CPU 上的 Linux 開機 0x0000000000 [0x481fd010] [ 0.000000] Linux 版本6.17.0-rc1-00001-gabb4b3daf18c-dirty (yintirui@local) (gcc (GCC) 12.3.1、GNU ld (GNU Binutils) 2.41) #52 SMP PREEMPT 2025 年 8 月 18 日星期一 09:49:40 CST 2025 [ 0.000000] KASLR 已啟用 [ 0.000000] randomcrng init 完成 [ 0.000000] 機器模型linux,dummy-virt [ 0.000000] efi找不到 UEFI。 [ 0.000000] earlyconpl11 at MMIO 0x0000000009000000 (選項「」) [ 0.000000] printk舊版 bootconsole [pl11] 已啟用 [ 0.000000] OF保留的記憶體保留的記憶體在 DT 中沒有保留的記憶體節點 [ 0.000000] NODE_DATA(0) executed [mem 0xbfffd9c0-0xbfffffff] [ 0.000000] 必須在移除區段 23 前移除節點 1 [ 0.000000] 區域範圍[ 0.000000] DMA [mem 0x0000000040000000-0x00000000ffffffff] [ 0.000000] DMA32 空白[ 0.000000] 正常 [mem 0x0000000100000000-0x000000013fffffff] [ 0.000000] 每個節點的可移動區域開始 [ 0.000000] 早期記憶體節點範圍 [ 0.000000] 節點 0[mem 0x0000000040000000-0x00000000bffffff] [ 0.000000] 節點 1
    [mem 0x00000000c0000000-0x000000013fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x00000000bfffffff] [ 0.000000] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0 [ 0.000000] Mem abort info: [ 0.000000] ESR = 0x0000000096000004 [0.000000] EC = 0x25DABT (目前 EL)IL = 32 位元 [ 0.000000] SET = 0, FnV = 0 [ 0.000000] EA = 0, S1PTW = 0 [ 0.000000] FSC = 0x04層級 0轉譯錯誤 [ 0.000000] 資料中止資訊 [ 0.000000] ISV = 0、ISS = 0x00000004、ISS2 = 0x00000000 [ 0.000000] CM = 0、WnR = 0、TnD = 0、TagAccess = 0 [ 0.000000] GCS = 0、Overlay = 0、DirtyBit = 0、Xs = 0 [ 0.000000] [00000000000000a0] 使用者位址但 active_mm 是 swapper [ 0.000000] 內部錯誤Oops 0000000096000004 [#1] ] SMP [ 0.000000] 連結的模組[0.000000] CPU0 UID0 PID0 Commswapper 未受污染的 6.17.0-rc1-00001-g760c6dabf762-dirty #54 PREEMPT [ 0.000000] 硬體名稱 linux,dummy-virt (DT) [ 0.000000] pstate800000c5 (Nzcv daIF -PAN -UAO -TCO
    -DIT -SSBS BTYPE=--) [ 0.000000] pc free_area_init+0x50c/0xf9c [ 0.000000] lr
    free_area_init+0x5c0/0xf9c [ 0.000000] spffffa02ca0f33c00 [ 0.000000] x29ffffa02ca0f33cb0 x28
    0000000000000000 x270000000000000000 [ 0.000000] x264ec4ec4ec4ec4ec5 x25: 00000000000c0000 x24
    00000000000c0000 [ 0.000000] x23: 0000000000040000 x22: 0000000000000000 x21: ffffa02ca0f3b368 [ 0.000000] x20: ffffa02ca14c7b98 x19: 0000000000000000 x18: 0000000000000002 [ 0.000000] x17: 000000000000cacc x16:
    0000000000000001 x15000000000000001 [ 0.000000] x140000000080000000 x130000000000000018 x12
    0000000000000002 [ 0.0 ---truncated--- (CVE-2025-39903)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - of_numa修复造成内核错误的未初始化内存节点。有仅内存节点没有 CPU的节点时这些节点不会正确初始化在引导期间造成内核错误。 of_numa_init of_numa_parse_cpu_nodes node_set(nid, numa_nodes_parsed); of_numa_parse_memory_nodes 在 of_numa_parse_cpu_nodes 中仅包含 CPU 的节点更新 numa_nodes_parsed。本应在 of_numa_parse_memory_nodes 中更新仅内存节点但实际未更新。因此当 free_area_init() 尝试访问这些未初始化内存节点的 NODE_DATA() 时利用空指针取消引用导致内核错误。这可以在具有 1 个 CPU 和 2 个内存节点的 ARM64 QEMU 上重现qemu-system-aarch64 \ -cpu host -ngraphic \ -m 4G -smp 1 \ -machine virt,accel=kvm,gic-version=3、iommu=smmuv3 \ -object memory-backend-ram,size=2G,id=mem0 \ -object memory-backend-ram,size=2G,id=mem1 \ -numa node,nodeid=0,memdev=mem0 \ -numa node, nodeid=1,memdev=mem1 \ -kernel $IMAGE \ -hda $DISK \ -append console=ttyAMA0 root=/dev/vda rw earlycon [ 0.000000] 在物理 CPU 0x0000000000 [0x481fd010] [ 0.000000] Linux 版本6.17.0-rc1-00001-gabb4b3daf18c-dirty (yintirui@local) (gcc (GCC) 12.3.1, GNU ld (GNU Binutils) 2.41) #52 SMP PREEMPT Mon Aug 18 09:49:40 CST 2025 [ 0.000000] KASLR 已启用 [ 0.000000] random: crng init 完成 [ 0.000000] 机器型号linux,dummy-virt [ 0.000000] efi未找到 UEFI。 [ 0.000000] earlyconpl11 at MMIO 0x0000000009000000 (options '') [ 0.000000] printk旧的 bootconsole [pl11] 已启用 [ 0.000000] OF预留的内存预留的内存DT 中无预留内存节点 [ 0.000000] NODE_DATA(0) 分配 [mem 0xbfffd9c0-0xbffffff] [ 0.000000] 必须删除节点 1 才能删除区段 23 [ 0.000000] 区域范围[ 0.000000] DMA [mem 0x0000000040000000-0x00000000ffffffff] [ 0.000000] DMA32 空白[ 0.000000] Normal [mem 0x0000000100000000-0x000000013ffffffff] [ 0.000000] 各节点的可移动区域启动 [ 0.000000] 早期内存节点范围 [ 0.000000] 节点 0: [mem 0x0000000040000000-0x00000000bffffffff] [ 0.000000] 节点 1:
    [mem 0x00000000c0000000-0x000000013fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x00000000bfffffff] [ 0.000000] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0 [ 0.000000] Mem abort info: [ 0.000000] ESR = 0x0000000096000004 [0.000000] EC = 0x25DABT当前 EL，IL = 32 位 [ 0.000000] SET = 0，FnV = 0 [ 0.000000] EA = 0，S1PTW = 0 [ 0.000000] FSC = 0x04：级别 0转换错误 [ 0.000000] Data 中止信息[ 0.000000] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 0.000000] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 0.000000] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 0.000000] [00000000000000a0] user address but active_mm is swapper [ 0.000000] 内部错误Oops: 0000000096000004 [#1] SMP [ 0.000000] 中链接的模块[0.000000] CPU0 UID: 0 PID: 0 Comm: swapper Not tainted 6.17.0-rc1-00001-g760c6dabf762-dirty #54 PREEMPT [ 0.000000] 硬件名称linux,dummy-virt (DT) [ 0.000000] pstate800000c5 (Nzcv daIF -PAN -UAO -TCO
    -DIT -SSBS BTYPE=--) [ 0.000000] pc free_area_init+0x50c/0xf9c [ 0.000000] lr
    free_area_init+0x5c0/0xf9c [ 0.000000] sp ffffa02ca0f33c00 [ 0.000000] x29ffffa02ca0f33cb0 x28
    0000000000000000 x27: 0000000000000000 [ 0.000000] x26: 4ec4ec4ec4ec4ec5 x25: 00000000000c0000 x24
    00000000000c0000 [ 0.000000] x23: 0000000000040000 x22: 0000000000000000 x21: ffffa02ca0f3b368 [ 0.000000] x20: ffffa02ca14c7b98 x19: 0000000000000000 x18: 0000000000000002 [ 0.000000] x17: 000000000000cacc x16:
    0000000000000001 x15: 0000000000000001 [ 0.000000] x14: 0000000080000000 x13: 0000000000000018 x12
    0000000000000002 [ 0.0 ---truncated--- (CVE-2025-39903)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - of_numa: fix uninitialized memory nodes causing kernel panic When there are memory-only nodes (nodes     without CPUs), these nodes are not properly initialized, causing kernel panic during boot. of_numa_init     of_numa_parse_cpu_nodes node_set(nid, numa_nodes_parsed); of_numa_parse_memory_nodes In     of_numa_parse_cpu_nodes, numa_nodes_parsed gets updated only for nodes containing CPUs. Memory-only nodes     should have been updated in of_numa_parse_memory_nodes, but they weren't. Subsequently, when     free_area_init() attempts to access NODE_DATA() for these uninitialized memory nodes, the kernel panics     due to NULL pointer dereference. This can be reproduced on ARM64 QEMU with 1 CPU and 2 memory nodes: qemu-     system-aarch64 \ -cpu host -nographic \ -m 4G -smp 1 \ -machine virt,accel=kvm,gic-version=3,iommu=smmuv3     \ -object memory-backend-ram,size=2G,id=mem0 \ -object memory-backend-ram,size=2G,id=mem1 \ -numa     node,nodeid=0,memdev=mem0 \ -numa node,nodeid=1,memdev=mem1 \ -kernel $IMAGE \ -hda $DISK \ -append     console=ttyAMA0 root=/dev/vda rw earlycon [ 0.000000] Booting Linux on physical CPU 0x0000000000     [0x481fd010] [ 0.000000] Linux version 6.17.0-rc1-00001-gabb4b3daf18c-dirty (yintirui@local) (gcc (GCC)     12.3.1, GNU ld (GNU Binutils) 2.41) #52 SMP PREEMPT Mon Aug 18 09:49:40 CST 2025 [ 0.000000] KASLR enabled     [ 0.000000] random: crng init done [ 0.000000] Machine model: linux,dummy-virt [ 0.000000] efi: UEFI not     found. [ 0.000000] earlycon: pl11 at MMIO 0x0000000009000000 (options '') [ 0.000000] printk: legacy     bootconsole [pl11] enabled [ 0.000000] OF: reserved mem: Reserved memory: No reserved-memory node in the     DT [ 0.000000] NODE_DATA(0) allocated [mem 0xbfffd9c0-0xbfffffff] [ 0.000000] node 1 must be removed     before remove section 23 [ 0.000000] Zone ranges: [ 0.000000] DMA [mem     0x0000000040000000-0x00000000ffffffff] [ 0.000000] DMA32 empty [ 0.000000] Normal [mem     0x0000000100000000-0x000000013fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early     memory node ranges [ 0.000000] node 0: [mem 0x0000000040000000-0x00000000bfffffff] [ 0.000000] node 1:
    [mem 0x00000000c0000000-0x000000013fffffff] [ 0.000000] Initmem setup node 0 [mem     0x0000000040000000-0x00000000bfffffff] [ 0.000000] Unable to handle kernel NULL pointer dereference at     virtual address 00000000000000a0 [ 0.000000] Mem abort info: [ 0.000000] ESR = 0x0000000096000004 [     0.000000] EC = 0x25: DABT (current EL), IL = 32 bits [ 0.000000] SET = 0, FnV = 0 [ 0.000000] EA = 0,     S1PTW = 0 [ 0.000000] FSC = 0x04: level 0 translation fault [ 0.000000] Data abort info: [ 0.000000] ISV =     0, ISS = 0x00000004, ISS2 = 0x00000000 [ 0.000000] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 0.000000] GCS     = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 0.000000] [00000000000000a0] user address but active_mm is     swapper [ 0.000000] Internal error: Oops: 0000000096000004 [#1] SMP [ 0.000000] Modules linked in: [     0.000000] CPU: 0 UID: 0 PID: 0 Comm: swapper Not tainted 6.17.0-rc1-00001-g760c6dabf762-dirty #54 PREEMPT     [ 0.000000] Hardware name: linux,dummy-virt (DT) [ 0.000000] pstate: 800000c5 (Nzcv daIF -PAN -UAO -TCO
    -DIT -SSBS BTYPE=--) [ 0.000000] pc : free_area_init+0x50c/0xf9c [ 0.000000] lr :
    free_area_init+0x5c0/0xf9c [ 0.000000] sp : ffffa02ca0f33c00 [ 0.000000] x29: ffffa02ca0f33cb0 x28:
    0000000000000000 x27: 0000000000000000 [ 0.000000] x26: 4ec4ec4ec4ec4ec5 x25: 00000000000c0000 x24:
    00000000000c0000 [ 0.000000] x23: 0000000000040000 x22: 0000000000000000 x21: ffffa02ca0f3b368 [ 0.000000]     x20: ffffa02ca14c7b98 x19: 0000000000000000 x18: 0000000000000002 [ 0.000000] x17: 000000000000cacc x16:
    0000000000000001 x15: 0000000000000001 [ 0.000000] x14: 0000000080000000 x13: 0000000000000018 x12:
    0000000000000002 [ 0.0 ---truncated--- (CVE-2025-39903)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
269686	Linux Distros のパッチ未適用の脆弱性: CVE-2025-39903	Nessus	Misc.	2025/10/8	2025/10/8	medium
269686	Linux Distros 未修補的弱點：CVE-2025-39903	Nessus	Misc.	2025/10/8	2025/10/8	medium
269686	Linux Distros 未修补的漏洞：CVE-2025-39903	Nessus	Misc.	2025/10/8	2025/10/8	medium
269686	Linux Distros Unpatched Vulnerability : CVE-2025-39903	Nessus	Misc.	2025/10/8	2025/10/8	medium

検出

プラグインの検索

medium

medium

medium

medium