The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: marvell: prestera: fix handling IPv4 routes with nhid Fix handling IPv4 routes referencing a nexthop     via its id by replacing calls to fib_info_nh() with fib_info_nhc(). Trying to add an IPv4 route     referencing a nextop via nhid: $ ip link set up swp5 $ ip a a 10.0.0.1/24 dev swp5 $ ip nexthop add dev     swp5 id 20 via 10.0.0.2 $ ip route add 10.0.1.0/24 nhid 20 triggers warnings when trying to handle the     route: [ 528.805763] ------------[ cut here ]------------ [ 528.810437] WARNING: CPU: 3 PID: 53 at     include/net/nexthop.h:468 __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.820434] Modules linked in:
    prestera_pci act_gact act_police sch_ingress cls_u32 cls_flower prestera arm64_delta_tn48m_dn_led(O)     arm64_delta_tn48m_dn_cpld(O) [last unloaded: prestera_pci] [ 528.837485] CPU: 3 PID: 53 Comm: kworker/u8:3     Tainted: G O 6.4.5 #1 [ 528.845178] Hardware name: delta,tn48m-dn (DT) [ 528.849641] Workqueue:
    prestera_ordered __prestera_router_fib_event_work [prestera] [ 528.857352] pstate: 60000005 (nZCv daif
    -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 528.864347] pc : __prestera_fi_is_direct+0x2c/0x68 [prestera] [     528.870135] lr : prestera_k_arb_fib_evt+0xb20/0xd50 [prestera] [ 528.876007] sp : ffff80000b20bc90 [     528.879336] x29: ffff80000b20bc90 x28: 0000000000000000 x27: ffff0001374d3a48 [ 528.886510] x26:
    ffff000105604000 x25: ffff000134af8a28 x24: ffff0001374d3800 [ 528.893683] x23: ffff000101c89148 x22:
    ffff000101c89000 x21: ffff000101c89200 [ 528.900855] x20: ffff00013641fda0 x19: ffff800009d01088 x18:
    0000000000000059 [ 528.908027] x17: 0000000000000277 x16: 0000000000000000 x15: 0000000000000000 [     528.915198] x14: 0000000000000003 x13: 00000000000fe400 x12: 0000000000000000 [ 528.922371] x11:
    0000000000000002 x10: 0000000000000aa0 x9 : ffff8000013d2020 [ 528.929543] x8 : 0000000000000018 x7 :
    000000007b1703f8 x6 : 000000001ca72f86 [ 528.936715] x5 : 0000000033399ea7 x4 : 0000000000000000 x3 :
    ffff0001374d3acc [ 528.943886] x2 : 0000000000000000 x1 : ffff00010200de00 x0 : ffff000134ae3f80 [     528.951058] Call trace: [ 528.953516] __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.958952]
    __prestera_router_fib_event_work+0x100/0x158 [prestera] [ 528.965348] process_one_work+0x208/0x488 [     528.969387] worker_thread+0x4c/0x430 [ 528.973068] kthread+0x120/0x138 [ 528.976313]     ret_from_fork+0x10/0x20 [ 528.979909] ---[ end trace 0000000000000000 ]--- [ 528.984998] ------------[ cut     here ]------------ [ 528.989645] WARNING: CPU: 3 PID: 53 at include/net/nexthop.h:468
    __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.999628] Modules linked in: prestera_pci act_gact     act_police sch_ingress cls_u32 cls_flower prestera arm64_delta_tn48m_dn_led(O)     arm64_delta_tn48m_dn_cpld(O) [last unloaded: prestera_pci] [ 529.016676] CPU: 3 PID: 53 Comm: kworker/u8:3     Tainted: G W O 6.4.5 #1 [ 529.024368] Hardware name: delta,tn48m-dn (DT) [ 529.028830] Workqueue:
    prestera_ordered __prestera_router_fib_event_work [prestera] [ 529.036539] pstate: 60000005 (nZCv daif
    -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 529.043533] pc : __prestera_fi_is_direct+0x2c/0x68 [prestera] [     529.049318] lr : __prestera_k_arb_fc_apply+0x280/0x2f8 [prestera] [ 529.055452] sp : ffff80000b20bc60 [     529.058781] x29: ffff80000b20bc60 x28: 0000000000000000 x27: ffff0001374d3a48 [ 529.065953] x26:
    ffff000105604000 x25: ffff000134af8a28 x24: ffff0001374d3800 [ 529.073126] x23: ffff000101c89148 x22:
    ffff000101c89148 x21: ffff00013641fda0 [ 529.080299] x20: ffff000101c89000 x19: ffff000101c89020 x18:
    0000000000000059 [ 529.087471] x17: 0000000000000277 x16: 0000000000000000 x15: 0000000000000000 [     529.094642] x14: 0000000000000003 x13: 00000000000fe400 x12: 0000000000000000 [ 529.101814] x11:
    0000000000000002 x10: 0000000000000aa0 x9 : ffff8000013cee80 [ 529.108985] x8 : 0000000000000018 x7 :
    000000007b1703f8 x6 ---truncated--- (CVE-2023-53342)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - netmarvellpresteranhid での IPv4 ルート処理を修正します。fib_info_nh() への呼び出しを fib_info_nhc() で置き換えることで、id を通じて nexthop を参照する IPv4 ルート処理を修正します。nhid経由でnextopを参照するIPv4ルートを追加しようとします$ ip link set up swp5 $ ip aa 10.0.0.1/24 dev swp5 $ ip nexthop add dev swp5 id 20 via 10.0.0.2 $ ip route add 10.0.1.0/24 nhid 20により警告が発生しますルートを処理しようとする際[ 528.805763] ------------[ここで変換]----------------------- 528.810437] 警告CPU3 PID 53 at include/net/nexthop.h:468 __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.820434] モジュールがリンクされています
    prestera_pciact_gactact_police sch_ingress cls_u32 cls_lower prestera arm64_delta_tn48m_dn_led(O)arm64_delta_tn48m_dn_cpld(O) [last unloaded: prestera_pci] [ 528.837485] CPU:3 PID:53 Comm: kworker/u8:3 Tainted: [] GOD 6.4.5 #1 Hardware [ 528.845178 ] delta,tn48m-dnDT[ 528.849641] ワークキュー
    prestera_ordered __prestera_router_fib_event_work [prestera] [ 528.857352] pstate60000005nZCv daif
    -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 528.864347] pc : __prestera_fi_is_direct+0x2c/0x68 [prestera] [528.870135] lr : prestera_k_arb_fib_evt+0xb20/0xd50 [prestera] [ 528.876007] sp : ffff80000b20bc90 [528.879336] x29: ffff80000b20bc90 x28: 0000000000000000 x27: ffff0001374d3a48 [ 528.886510] x26:
    ffff000105604000 x25: ffff000134af8a28 x24: ffff0001374d3800 [ 528.893683] x23: ffff000101c89148 x22:
    ffff000101c89000 x21: ffff000101c89200 [ 528.900855] x20: ffff00013641fda0 x19: ffff800009d01088 x18:
    0000000000000059 [ 528.908027] x17: 0000000000000277 x16: 0000000000000000 x15: 0000000000000000 [528.915198] x14: 0000000000000003 x13: 00000000000fe400 x12: 0000000000000000 [ 528.922371] x11:
     528.929543000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
    000000007b1703f8 x6 : 000000001ca72f86 [ 528.936715] x5 : 0000000033399ea7 x4 : 0000000000000000 x3
    ffff0001374d3acc [ 528.943886] x2 : 00000000000000 x1 : ffff00010200de00 x0 : ffff000134ae3f80 [528.951058] コールトレース [ 528.953516] __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.958952]
    __prestera_router_fib_event_work+0x100/0x158 [prestera] [ 528.965348] process_one_work+0x208/0x488 [528.969387] worker_thread+0x4c/0x430 [ 528.973068] kthread+0x120/0x138 [ 528.976313] ret_from_fork+0x10/0x20 [ 528.979909] -- -[ end trace 000000000000000 ]----- [ 528.984998] ------------[ Cutここで ]-------------- [ 528.989645] 警告CPU3 PID: 53 at include/net/nexthop.h:468
    __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.999628] モジュールのリンク prestera_pciact_gactact_police sch_ingress cls_u32 cls_flow prestera arm64_delta_tn48m_dn_led(O)arm64_delta_tn48m_dn_cpld(O) [last unloaded: prestera_pci [ 529.0166763] CPU: [3] /u8:3 汚染GWO 6.4.5 #1529.024368] ハードウェア名delta,tn48m-dnDT[ 529.028830] Workqueue
    prestera_ordered __prestera_router_fib_event_work [prestera] [ 529.036539] pstate60000005nZCv daif
    -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 529.043533] pc : __prestera_fi_is_direct+0x2c/0x68 [prestera] [529.049318] lr : __prestera_k_arb_fc_apply+0x280/0x2f8 [prestera] [ 529.055452] sp : ffff80000b20bc60 [529.058781] x29: ffff80000b20bc60 x28: 0000000000000000 x27: ffff0001374d3a48 [ 529.065953] x26:
    ffff000105604000 x25: ffff000134af8a28 x24: ffff0001374d3800 [ 529.073126] x23: ffff000101c89148 x22:
    ffff000101c89148 x21: ffff00013641fda0 [ 529.080299] x20: ffff000101c89000 x19: ffff000101c89020 x18:
    0000000000000059 [ 529.087471] x17: 0000000000000277 x16: 0000000000000000 x15: 0000000000000000 [529.094642] x14: 0000000000000003 x13: 00000000000fe400 x12: 0000000000000000 [ 529.101814] x11:
     529.10898500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
    000000007b1703f8 x6 ---truncated---CVE-2023-53342

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - netmarvellprestera修正具有 nhid 的 IPv4 路由處理方式以 fib_info_nhc() 取代對 fib_info_nhc() 的呼叫修正透過其 ID 參照 nexthop 的 IPv4 路由的處理。嘗試透過 nhid: $ ip link set up swp5 $ ip aa 10.0.0.1/24 dev swp5 $ ip nexthop add dev swp5 id 20 10.0.0.2 $ ip route add 10.0.1.0/24 nhid 20 觸發警告當嘗試處理路由時[ 528.805763] ------------[ 切至此處 ]------------ [ 528.810437] 警告 CPU3 PID 53 at include/net/nexthop.h:468 __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.820434] 連結的模組
    prestera_pciact_gactact_police sch_ingress cls_u32 cls_flow prestera arm64_delta_tn48m_dn_led(O) arm64_delta_tn48m_dn_cpld(O) [上次卸載 prestera_pci] [ 528.837485] CPU 3 PID53 通訊 kworker/u8:3 污染GO 6.4.5 #1 [ 528.845178] 硬體名稱delta、tn48m-dn (DT) [ 528.849641] 工作佇列
    prestera_ordered __prestera_router_fib_event_work [prestera] [ 528.857352] pstate60000005 (nZCv daif
    -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 528.864347] pc __prestera_fi_is_direct+0x2c/0x68 [prestera] [528.870135] lrprestera_k_arb_fib_evt+0xb20/0xd50 [prestera] [ 528.876007] sp ffff80000b20bc90 [528.879336] x29 ffff80000b20bc90 x28 0000000000000000 x27 ffff0001374d3a48 [ 528.886510] x26
    ffff000105604000 x25ffff000134af8a28 x24ffff0001374d3800 [ 528.893683] x23ffff000101c89148 x22
    ffff000101c89000 x21ffff000101c89200 [ 528.900855] x20 ffff00013641fda0 x19 ffff800009d01088 x18
    0000000000000059 [ 528.908027] x17: 0000000000000277 x16: 0000000000000000 x15: 0000000000000000 [528.915198] x14: 0000000000000003 x13: 00000000000fe400 x12: 0000000000000000 [ 528.922371] x11:
    0000000000000002 x100000000000000aa0 x9 ffff8000013d2020 [ 528.929543] x8 0000000000000018 x7
    000000007b1703f8 x6 000000001ca72f86 [ 528.936715] x5 0000000033399ea7 x4 0000000000000000 x3
    ffff0001374d3acc [ 528.943886] x2 000000000000000 x1 ffff00010200de00 x0 ffff000134ae3f80 [528.951058] 呼叫追踪 [ 528.953516] __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.958952]
    __prestera_router_fib_event_work+0x100/0x158 [prestera] [ 528.965348] process_one_work+0x208/0x488 [528.969387] worker_thread+0x4c/0x430 [ 528.973068] kthread+0x120/0x138 [ 528.976313] ret_from_fork+0x10/0x20 [ 528.979909] -- -[ end trace 0000000000000000 ]--- [ 528.984998] ------------[cut here ]------------ [ 528.989645] 警告CPU 3 PID: 53 at include/net/nexthop.h:468
    __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.999628] 連結的模組prestera_pciact_gactact_police sch_ingress cls_u32 cls_flow prestera arm64_delta_tn48m_dn_led(O) arm64_delta_tn48m_dn_cpld(O) [上次卸載prestera_pci] [ 529.016676[3 ] Comm CPU: kworker5] kworker /u8:3 污染GWO 6.4.5 #1 [ 529.024368] 硬體名稱 delta,tn48m-dn (DT) [ 529.028830] 工作佇列
    prestera_ordered __prestera_router_fib_event_work [prestera] [ 529.036539] pstate60000005 (nZCv daif
    -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 529.043533] pc __prestera_fi_is_direct+0x2c/0x68 [prestera] [529.049318] lr __prestera_k_arb_fc_apply+0x280/0x2f8 [prestera] [ 529.055452] sp ffff80000b20bc60 [529.058781] x29 ffff80000b20bc60 x28 0000000000000000 x27 ffff0001374d3a48 [ 529.065953] x26
    ffff000105604000 x25ffff000134af8a28 x24ffff0001374d3800 [ 529.073126] x23ffff000101c89148 x22
    ffff000101c89148 x21ffff00013641fda0 [ 529.080299] x20 ffff000101c89000 x19 ffff000101c89020 x18
    0000000000000059 [ 529.087471] x17: 0000000000000277 x16: 0000000000000000 x15: 0000000000000000 [529.094642] x14: 0000000000000003 x13: 00000000000fe400 x12: 0000000000000000 [ 529.101814] x11:
    0000000000000002 x100000000000000aa0 x9 ffff8000013cee80 [ 529.108985] x8 0000000000000018 x7
    000000007b1703f8 x6 ---truncated--- (CVE-2023-53342)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - netmarvellprestera修复以 nhid 处理 IPv4 路由的方式修复通过其 id 引用下一跳的 IPv4 路由的处理方法方法是以 fib_info_nhc() 取代对 fib_info_nh() 的调用。尝试通过 nhid 添加引用 nextop 的 IPv4 路由$ ip link set up swp5 $ ip aa 10.0.0.1/24 dev swp5 $ ip nexthop add dev swp5 id 20 via 10.0.0.2 $ ip route add 10.0.1.0/24 nhid 20 触发警告尝试处理路由时[ 528.805763] ------------[ cut here ]------------ [ 528.810437] WARNINGCPU3 PID 53 at include/net/nexthop.h:468 __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.820434] 链接的模块
    prestera_pciact_gactact_police sch_ingress cls_u32 cls_Flower prestera arm64_delta_tn48m_dn_led(O) arm64_delta_tn48m_dn_cpld(O) [上次卸载：prestera_pci] [ 528.837485] CPU: 3 PID: 53 Comm: kworker/u8:3 受感染: GO 6.4.5 #1 [ 528.845178] 硬件名称delta,tn48m-dn (DT) [ 528.849641] Workqueue
    prestera_ordered __prestera_router_fib_event_work [prestera] [ 528.857352] pstate60000005 (nZCv daif
    -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 528.864347] pc : __prestera_fi_is_direct+0x2c/0x68 [prestera] [528.870135] lr : prestera_k_arb_fib_evt+0xb20/0xd50 [prestera] [ 528.876007] sp ffff80000b20bc90 [528.879336] x29ffff80000b20bc90 x280000000000000000 x27ffff0001374d3a48 [ 528.886510] x26
    ffff000105604000 x25ffff000134af8a28 x24ffff0001374d3800 [ 528.893683] x23ffff000101c89148 x22
    ffff000101c89000 x21ffff000101c89200 [ 528.900855] x20ffff00013641fda0 x19ffff800009d01088 x18
    0000000000000059 [ 528.908027] x17: 0000000000000277 x16: 0000000000000000 x15: 0000000000000000 [528.915198] x14: 0000000000000003 x13: 00000000000fe400 x12: 0000000000000000 [ 528.922371] x11:
    0000000000000002 x10 : 0000000000000aa0 x9 : ffff8000013d2020 [ 528.929543] x8 : 0000000000000018 x7 :
    000000007b1703f8 x6 : 000000001ca72f86 [ 528.936715] x5 : 0000000033399ea7 x4: 0000000000000000 x3
    ffff0001374d3acc [ 528.943886] x2 : 0000000000000000 x1 : ffff00010200de00 x0 : ffff000134ae3f80 [528.951058] 调用跟踪 [ 528.953516] __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.958952]
    __prestera_router_fib_event_work+0x100/0x158 [prestera] [ 528.965348] process_one_work+0x208/0x488 [528.969387] worker_thread+0x4c/0x430 [ 528.973068] kthread+0x120/0x138 [ 528.976313] ret_from_fork+0x10/0x20 [ 528.979909] -- -[ end trace 0000000000000000 ]--- [ 528.984998] ------------[ 在此处剪切 ]------------ [ 528.989645] WARNING: CPU: 3 PID: 53 (include/net/nexthop.h:468)
    __prestera_fi_is_direct+0x2c/0x68 [prestera] [ 528.999628] 链接的模块prestera_pciact_gactact_police sch_ingress cls_u32 cls_Flower prestera arm64_delta_tn48m_dn_led(O) arm64_delta_tn48m_dn_cpld(O) [上次卸载prestera_pci: kpid_worker] [ 529.0166763  ] /u8:3 TaintedGWO 6.4.5 #1 [ 529.024368] 硬件名称 delta,tn48m-dn (DT) [ 529.028830] 工作队列
    prestera_ordered __prestera_router_fib_event_work [prestera] [ 529.036539] pstate60000005 (nZCv daif
    -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 529.043533] pc : __prestera_fi_is_direct+0x2c/0x68 [prestera] [529.049318] lr : __prestera_k_arb_fc_apply+0x280/0x2f8 [prestera] [ 529.055452] sp ffff80000b20bc60 [529.058781] x29ffff80000b20bc60 x280000000000000000 x27ffff0001374d3a48 [ 529.065953] x26
    ffff000105604000 x25ffff000134af8a28 x24ffff0001374d3800 [ 529.073126] x23ffff000101c89148 x22
    ffff000101c89148 x21ffff00013641fda0 [ 529.080299] x20ffff000101c89000 x19ffff000101c89020 x18
    0000000000000059 [ 529.087471] x17: 0000000000000277 x16: 0000000000000000 x15: 0000000000000000 [529.094642] x14: 0000000000000003 x13: 00000000000fe400 x12: 0000000000000000 [ 529.101814] x11:
    0000000000000002 x10: 0000000000000aa0 x9 : ffff8000013cee80 [ 529.108985] x8 : 0000000000000018 x7 :
    000000007b1703f8 x6 ---truncated--- (CVE-2023-53342)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

ID	Name	Product	Family	Published	Updated	Severity
265468	Linux Distros Unpatched Vulnerability : CVE-2023-53342	Nessus	Misc.	9/19/2025	9/19/2025	high
265468	Linux Distros のパッチ未適用の脆弱性: CVE-2023-53342	Nessus	Misc.	9/19/2025	9/19/2025	high
265468	Linux Distros 未修補的弱點：CVE-2023-53342	Nessus	Misc.	9/19/2025	9/19/2025	high
265468	Linux Distros 未修补的漏洞：CVE-2023-53342	Nessus	Misc.	9/19/2025	9/19/2025	high

Detections

Analytics

Plugins Search

high

high

high

high