Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - fs/ntfs3验证 BOOT record_size 当 NTFS BOOT record_size 字段 < 0 时代表位移值。
    但是没有对位移结果进行健全性检查并且通过 blksize_bits() 进行的 sbi->record_bits 计算假设大小始终大于 256这可导致挂载畸形 NTFS 图像时发生 NPD。 [ 318.675159] 缺陷内核空指针取消引用地址0000000000000158 [ 318.675682] #PF
    内核模式中的主管读取访问 [ 318.675869] #PF: error_code(0x0000) - not-present 页面 [318.676246] PGD 0 P4D 0 [ 318.676502] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 318.676934] CPU 0 PID259 Commmount Not tainted 5.19.0 #5 [ 318.677289] Hardware nameQEMU Standard PC (i440FX + PIIX,1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 318.678136] RIP
    0010:ni_find_attr+0x2d/0x1c0 [ 318.678656] Code89 ca 4d 89 c7 41 56 41 55 41 54 41 89 cc 55 48 89 fd 53 48 89 d3 48 83 ec 20 65 48 8b 04 250 28 090 8 44 24 180 [ 318.679848] RSP: 0018:ffffa6c8c0297bd8 EFLAGS: 00000246 [ 318.680104] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080 [318.680790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.681679] RBP:
    0000000000000000 R080000000000000000 R090000000000000000 [ 318.682577] R100000000000000000 R11
    0000000000000005 R120000000000000080 [ 318.683015] R13ffff8d5582e68400 R140000000000000100 R15
    0000000000000000 [ 318.683618] FS: 00007fd9e1c81e40(0000) GS:ffff8d55fdc00000(0000) knlGS:0000000000000000 [ 318.684280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.684651] CR2: 0000000000000158 CR3:
    0000000002e1a000 CR4: 00000000000006f0 [ 318.685623] 调用跟踪[ 318.686607] <TASK> [ 318.686872] ? ntfs_alloc_inode+0x1a/0x60 [ 318.687235] attr_load_runs_vcn+0x2b/0xa0 [ 318.687468] mi_read+0xbb/0x250 [318.687576] ntfs_iget5+0x114/0xd90 [ 318.687750] ntfs_fill_super+0x588/0x11b0 [ 318.687953] ? put_ntfs+0x130/0x130 [ 318.688065] ? snprintf+0x49/0x70 [ 318.688164] ? put_ntfs+0x130/0x130 [ 318.688256] get_tree_bdev+0x16a/0x260 [ 318.688407] vfs_get_tree+0x20/0xb0 [ 318.688519] path_mount+0x2dc/0x9b0 [318.688877] do_mount+0x74/0x90 [ 318.689142] __x64_sys_mount+0x89/0xd0 [ 318.689636] do_syscall_64+0x3b/0x90 [ 318.689998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 318.690318] RIP
    0033:0x7fd9e133c48a [ 318.690687] Code48 8b 0d 11 fa 2a 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 0 0 0 0 ca b [ 318.691357] RSP002b:00007ffd374406c8 EFLAGS
    00000202 ORIG_RAX: 00000000000000a5 [ 318.691632] RAX: ffffffffffffffda RBX: 0000564d0b051080 RCX:
    00007fd9e133c48a [ 318.691920] RDX: 0000564d0b051280 RSI: 0000564d0b051300 RDI: 0000564d0b0596a0 [318.692123] RBP: 0000000000000000 R08: 0000564d0b0512a0 R09: 0000000000000020 [ 318.692349] R10:
    00000000c0ed0000 R110000000000000202 R120000564d0b0596a0 [ 318.692673] R130000564d0b051280 R14
    0000000000000000 R15: 00000000ffffffff [ 318.693007] </TASK> [ 318.693271] 模块中链接的模块[318.693614] CR2: 0000000000000158 [ 318.694446] ---[ end trace 0000000000000000 ]--- [ 318.694779] RIP
    0010:ni_find_attr+0x2d/0x1c0 [ 318.694952] Code89 ca 4d 89 c7 41 56 41 55 41 54 41 89 cc 55 48 89 fd 53 48 89 d3 48 83 ec 20 65 48 8b 04 250 28 090 8 44 24 180 [ 318.696042] RSP: 0018:ffffa6c8c0297bd8 EFLAGS: 00000246 [ 318.696531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080 [318.698114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.699286] RBP:
    0000000000000000 R080000000000000000 R090000000000000000 [ 318.699795] R100000000000000000 R11
    0000000000000005 R120000000000000080 [ 318.700236] R13ffff8d5582e68400 R140000000000000100 R15
    0000000000000000 [ 318.700973] FS: 00007fd9e1c81e40(0000) GS:ffff8d55fdc00000(0000) knlGS:0000000000000000 [ ---truncated--- (CVE-2022-50262)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - fs/ntfs3驗證 BOOT record_size 當 NTFS BOOT record_size 欄位 < 0 時它代表移位值。
    然而並不會對移位結果進行任何功能健全檢查而且透過 blksize_bits() 進行的 sbi->record_bits 計算會假設大小一律 > 256這可能導致在掛載格式錯誤的 NTFS 影像時發生 NPD。 [ 318.675159] 錯誤核心 NULL 指標解除參照位址0000000000000158 [ 318.675682] #PF
    核心模式中的監督讀取存取權 [ 318.675869] #PFerror_code(0x0000) - 不存在頁面 [318.676246] PGD 0 P4D 0 [ 318.676502] Oops0000 [#1] PREEMPT SMP NOPTI [ 318.676934] CPU 0 PID259 通訊mount 未受污染 5.19.0 #5 [ 318.677289] 硬體名稱QEMU Standard PC (i440FX + PIIX, 1996)BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 318.678136] RIP
    0010:ni_find_attr+0x2d/0x1c0 [ 318.678656] 程式碼89 ca 4d 89 c7 41 56 41 55 41 54 41 89 cc 55 48 89 fd 53 48 89 d3 48 83 ec 20 65 48 8b 04 00 28 800 0 4 44 24 180 [ 318.679848] RSP: 0018:ffffa6c8c0297bd8 EFLAGS: 00000246 [ 318.680104] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080 [318.680790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.681679] RBP:
    0000000000000000 R080000000000000000 R090000000000000000 [ 318.682577] R100000000000000000 R11
    0000000000000005 R120000000000000080 [ 318.683015] R13ffff8d5582e68400 R140000000000000100 R15
    0000000000000000 [ 318.683618] FS: 00007fd9e1c81e40(0000) GS:ffff8d55fdc00000(0000) knlGS:0000000000000000 [ 318.684280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.684651] CR2: 0000000000000158 CR3:
    0000000002e1a000 CR400000000000006f0 [ 318.685623] 呼叫追踪 [ 318.686607] <TASK> [ 318.686872] ntfs_alloc_inode+0x1a/0x60 [ 318.687235] attr_load_runs_vcn+0x2b/0xa0 [ 318.687468] mi_read+0xbb/0x250 [318.687576] ntfs_iget5+0x114/0xd90 [ 318.687750] ntfs_fill_super+0x588/0x11b0 [ 318.687953] ? put_ntfs+0x130/0x130 [ 318.688065] ? snprintf+0x49/0x70 [ 318.688164] ? put_ntfs+0x130/0x130 [ 318.688256] get_tree_bdev+0x16a/0x260 [ 318.688407] vfs_get_tree+0x20/0xb0 [ 318.688519] path_mount+0x2dc/0x9b0 [318.688877] do_mount+0x74/0x90 [ 318.689142] __x64_sys_mount+0x89/0xd0 [ 318.689636] do_syscall_64+0x3b/0x90 [ 318.689998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 318.690318] RIP
    0033:0x7fd9e133c48a [ 318.690687] 代碼48 8b 0d 11 fa 2a 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 00 49 89 0 b [a 50000 49 89 0 b 8 a 5000 318.691357] RSP002b:00007ffd374406c8 EFLAGS
    00000202 ORIG_RAX00000000000000a5 [ 318.691632] RAXffffffffffffffda RBX0000564d0b051080 RCX
    00007fd9e133c48a [ 318.691920] RDX: 0000564d0b051280 RSI: 0000564d0b051300 RDI: 0000564d0b0596a0 [318.692123] RBP: 0000000000000000 R08: 0000564d0b0512a0 R09: 0000000000000020 [ 318.692349] R10:
    00000000c0ed0000 R110000000000000202 R120000564d0b0596a0 [ 318.692673] R130000564d0b051280 R14
    0000000000000000 R1500000000ffffffff [ 318.693007] </TASK> [ 318.693271] 連結的模組[318.693614] CR2 0000000000000158 [ 318.694446] ---[ end trace 0000000000000000 ]--- [ 318.694779] RIP
    0010:ni_find_attr+0x2d/0x1c0 [ 318.694952] 程式碼89 ca 4d 89 c7 41 56 41 55 41 54 41 89 cc 55 48 89 fd 53 48 89 d3 48 83 ec 20 65 48 8b 04 00 28 800 0 4 44 24 180 [ 318.696042] RSP: 0018:ffffa6c8c0297bd8 EFLAGS: 00000246 [ 318.696531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080 [318.698114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.699286] RBP:
    0000000000000000 R080000000000000000 R090000000000000000 [ 318.699795] R100000000000000000 R11
    0000000000000005 R120000000000000080 [ 318.700236] R13ffff8d5582e68400 R140000000000000100 R15
    0000000000000000 [ 318.700973] FS00007fd9e1c81e40(0000) GS:ffff8d55fdc00000(0000) knlGS:0000000000000000 [ ---truncated--- (CVE-2022-50262)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fs/ntfs3: Validate BOOT record_size When the NTFS BOOT record_size field < 0, it represents a shift value.
    However, there is no sanity check on the shift result and the sbi->record_bits calculation through     blksize_bits() assumes the size always > 256, which could lead to NPD while mounting a malformed NTFS     image. [ 318.675159] BUG: kernel NULL pointer dereference, address: 0000000000000158 [ 318.675682] #PF:
    supervisor read access in kernel mode [ 318.675869] #PF: error_code(0x0000) - not-present page [     318.676246] PGD 0 P4D 0 [ 318.676502] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 318.676934] CPU: 0 PID: 259     Comm: mount Not tainted 5.19.0 #5 [ 318.677289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),     BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 318.678136] RIP:
    0010:ni_find_attr+0x2d/0x1c0 [ 318.678656] Code: 89 ca 4d 89 c7 41 56 41 55 41 54 41 89 cc 55 48 89 fd 53     48 89 d3 48 83 ec 20 65 48 8b 04 25 28 00 00 00 48 89 44 24 180 [ 318.679848] RSP: 0018:ffffa6c8c0297bd8     EFLAGS: 00000246 [ 318.680104] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080 [     318.680790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.681679] RBP:
    0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.682577] R10: 0000000000000000 R11:
    0000000000000005 R12: 0000000000000080 [ 318.683015] R13: ffff8d5582e68400 R14: 0000000000000100 R15:
    0000000000000000 [ 318.683618] FS: 00007fd9e1c81e40(0000) GS:ffff8d55fdc00000(0000) knlGS:0000000000000000     [ 318.684280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.684651] CR2: 0000000000000158 CR3:
    0000000002e1a000 CR4: 00000000000006f0 [ 318.685623] Call Trace: [ 318.686607] <TASK> [ 318.686872] ?     ntfs_alloc_inode+0x1a/0x60 [ 318.687235] attr_load_runs_vcn+0x2b/0xa0 [ 318.687468] mi_read+0xbb/0x250 [     318.687576] ntfs_iget5+0x114/0xd90 [ 318.687750] ntfs_fill_super+0x588/0x11b0 [ 318.687953] ?     put_ntfs+0x130/0x130 [ 318.688065] ? snprintf+0x49/0x70 [ 318.688164] ? put_ntfs+0x130/0x130 [ 318.688256]     get_tree_bdev+0x16a/0x260 [ 318.688407] vfs_get_tree+0x20/0xb0 [ 318.688519] path_mount+0x2dc/0x9b0 [     318.688877] do_mount+0x74/0x90 [ 318.689142] __x64_sys_mount+0x89/0xd0 [ 318.689636]     do_syscall_64+0x3b/0x90 [ 318.689998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 318.690318] RIP:
    0033:0x7fd9e133c48a [ 318.690687] Code: 48 8b 0d 11 fa 2a 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84     00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 008 [ 318.691357] RSP: 002b:00007ffd374406c8 EFLAGS:
    00000202 ORIG_RAX: 00000000000000a5 [ 318.691632] RAX: ffffffffffffffda RBX: 0000564d0b051080 RCX:
    00007fd9e133c48a [ 318.691920] RDX: 0000564d0b051280 RSI: 0000564d0b051300 RDI: 0000564d0b0596a0 [     318.692123] RBP: 0000000000000000 R08: 0000564d0b0512a0 R09: 0000000000000020 [ 318.692349] R10:
    00000000c0ed0000 R11: 0000000000000202 R12: 0000564d0b0596a0 [ 318.692673] R13: 0000564d0b051280 R14:
    0000000000000000 R15: 00000000ffffffff [ 318.693007] </TASK> [ 318.693271] Modules linked in: [     318.693614] CR2: 0000000000000158 [ 318.694446] ---[ end trace 0000000000000000 ]--- [ 318.694779] RIP:
    0010:ni_find_attr+0x2d/0x1c0 [ 318.694952] Code: 89 ca 4d 89 c7 41 56 41 55 41 54 41 89 cc 55 48 89 fd 53     48 89 d3 48 83 ec 20 65 48 8b 04 25 28 00 00 00 48 89 44 24 180 [ 318.696042] RSP: 0018:ffffa6c8c0297bd8     EFLAGS: 00000246 [ 318.696531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080 [     318.698114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.699286] RBP:
    0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.699795] R10: 0000000000000000 R11:
    0000000000000005 R12: 0000000000000080 [ 318.700236] R13: ffff8d5582e68400 R14: 0000000000000100 R15:
    0000000000000000 [ 318.700973] FS: 00007fd9e1c81e40(0000) GS:ffff8d55fdc00000(0000) knlGS:0000000000000000     [ ---truncated--- (CVE-2022-50262)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - fs/ntfs3BOOT レコード_サイズを検証します NTFS BOOT レコード_サイズフィールドが より前の場合、シフト値を表します。
    ただし、shift結果にはサニティチェックはなく、blksize_bits()によるsbi->record_bitsの計算では、サイズが常に256より大きいと想定されるため、不正な形式のNTFSイメージをマウントする際にNPDを引き起こす可能性があります。 [ 318.675159] バグカーネル NULL ポインターデリファレンス、アドレス 0000000000000158 [ 318.675682#PF
    カーネルモードのスーパーバイザー読み取りアクセス [ 318.675869] #PF: error_code(0x0000) - not-present page [318.676246] PGD 0 P4D 0 318.676502、 Oops: 0000 [#1] PREEMPT SMP NOPTI 318.676934] CPU: 0 PID259 通信マウントは汚染されていません 5.19.0 #5 [ 318.677289] ハードウェア名QEMU Standard PCi440FX + PIIX、1996、BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 318.678136[] RIP
    0010:ni_find_attr+0x2d/0x1c0 [ 318.678656] コード: 89 ca 4d 89 c7 41 56 41 55 41 54 41 89 cc 55 48 89 fd 53 48 89 d3 48 83 ec 20 65 48 8b 04 25 280 80 080 44 24 180 [ 318.679848] RSP: 0018:ffffa6c8c0297bd8 EFLAGS: 00000246 [ 318.680104] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080 [318.680790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.681679] RBP:
     R0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 R09​ 318.682577​ R10​ R11​
     318.683015000000000000005 R13R12R140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 R15​
    0000000000000000 [ 318.683618] FS: 00007fd9e1c81e40(0000) GS:ffff8d55fdc00000(0000) knlGS:0000000000000000 [ 318.684280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.684651] CR2: 0000000000000158 CR3:
    0000000002e1a000 CR4: 00000000000006f0 [ 318.685623] Call Trace: [ 318.686607] <TASK> [ 318.686872] ? ntfs_alloc_inode+0x1a/0x60 [ 318.687235] attr_load_runs_vcn+0x2b/0xa0 [ 318.687468] mi_read+0xbb/0x250 [318.687576] ntfs_iget5+0x114/0xd90 [ 318.687750] ntfs_fill_super+0x588/0x11b00xa0 [ 318.687953] ? put_ntfs+0x130/0x130 [ 318.688065] ? snprintf+0x49/0x70 [ 318.688164] ? put_ntfs+0x130/0x130 [ 318.688256] get_tree_bdev+0x16a/0x260 [ 318.688407] vfs_get_tree+0x20/0xb0 [ 318.688519] path_mount+0x2dc/0x9b0 [318.688877] do_mount+0x74/0x90 [ 318.689142] __x64_sys_mount+0x89/0xd0 [ 318.689636] do_syscall_64+0x3b/0x90 [ 318.689998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 318.690318] RIP
    0033:0x7fd9e133c48a [ 318.690687] コード48 8b 0d 11 fa 2a 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 ca b8 0000000000000000000000000000000000000000000 318.691357] RSP: 002b:00007ffd374406c8 EFLAGS
    00000202 ORIG_RAX: 00000000000000a5 [ 318.691632] RAX: ffffffffffffda RBX: 0000564d0b051080 RCX:
    00007fd9e133c48a [ 318.691920] RDX: 0000564d0b051280 RSI: 0000564d0b051300 RDI: 0000564d0b0596a0 [318.692123] RBP: 0000000000000000 R08: 0000564d0b0512a0 R09: 0000000000000020 [ 318.692349] R10:
    00000000c0ed0000 R11: 0000000000000202 R12: 0000564d0b0596a0 [ 318.692673] R13: 0000564d0b051280 R14:
     318.693007000000000000000 318.693271R15</TASK> 000000000000000ffffffff318.693614318.694446​ 318.694779​
    0010:ni_find_attr+0x2d/0x1c0 [ 318.694952] コード: 89 ca 4d 89 c7 41 56 41 55 41 54 41 89 cc 55 48 89 fd 53 48 89 d3 48 83 ec 20 65 48 8b 04 25 280 80 080 44 24 180 [ 318.696042] RSP: 0018:ffffa6c8c0297bd8 EFLAGS: 00000246 [ 318.696531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000080 [318.698114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.699286] RBP:
     R0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 R09​ 318.699795​ R10​ R11​
     318.700236000000000000005 R13R12R140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 R15​
    000000000000000 318.700973] FS:00007fd9e1c81e40(0000) GSCVE-2022-50262: ffff8d55fdc00000(0000) knlGS:--truncated--- 0000000000000000000000000000000000000000000000000000000000000000000000000000

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

ID	Name	Product	Family	Published	Updated	Severity
264956	Linux Distros 未修补的漏洞：CVE-2022-50262	Nessus	Misc.	9/16/2025	9/20/2025	high
264956	Linux Distros 未修補的弱點：CVE-2022-50262	Nessus	Misc.	9/16/2025	9/20/2025	high
264956	Linux Distros Unpatched Vulnerability : CVE-2022-50262	Nessus	Misc.	9/16/2025	9/20/2025	high
264956	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50262	Nessus	Misc.	9/16/2025	9/20/2025	high

Detections

Analytics

Plugins Search

high

high

high

high