Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - netusbaqc111usbnet 読み取り呼び出しのエラー処理を修正しますsyzbot の好意である Syzkaller が、usb 読み取り呼び出しの結果のサニタイズが不完全なために引き起こされるエラーを、aqc111 ドライバーで特定しましたレポート [1] 参照。この問題は、コミット 920a9fa27e78 で修正されたものと非常に類似していますnetasixUSB 読み取りエラーの適切なエラー処理を追加します。たとえば、usbnet_read_cmd() は呼び出し側が完全な量を予想した場合でも「size」バイトより少ない値を読み取ることがあり、aqc111_read_cmd() はその結果を適切にチェックしません。[1] が示すように、これによって aqc111_bind() の MAC アドレスが部分的に初期化され、KMSAN 警告が発生する可能性があります。読み取りバイト数が想定通りでそれ以下ではないことを検証することで、 の問題を修正します。 [1] 部分的な syzbot レポート
    バグ KMSANis_valid_ether_addr include/linux/etherdevice.h:208 [インライン] の uninit-value バグ KMSAN
    usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 is_valid_ether_addr include/linux/etherdevice.h:208 [inline] usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 usb_probe_interface の uninit-value +0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [インライン] true_probe+0x4d1/0xd90 drivers/base/dd.c:658 __driver_probe_device+0x268/0x380 drivers/ base/dd.c:800 ... Uninit は次のメモリに格納されました dev_addr_mod+0xb0/0x550 net/core/dev_addr_lists.c:582 __dev_addr_set include/linux/netdevice.h:4874 [インライン] eth_hw_addr_set include/linux/etherdevice.h:325 [インライン] aqc111_bind+0x35f /0x1150 drivers/net/usb/aqc111.c:717 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 ... Uninit はメモリに保存されました ether_addr_copy include/linux/etherdevice.h:305 [inline] aqc111_read_perm_mac drivers/net/usb/aqc111.c:663 [inline] aqc111_bind+0x794/0x1150 drivers/net/usb/aqc111.c 713 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] ... ローカル変数 buf.i は次で作成されました aqc111_read_perm_mac drivers/net/usb/aqc111.c:656 [inline] aqc111_bind+0x221/0x1150 drivers/net/usb/aqc111.c:713 usbnet_probe+0xbe6/0x4390 drivers/net/usb/ usbnet.c:1772CVE-2025-38153

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - netusbaqc111修正 usbnet 讀取呼叫的錯誤處理方式由 syzbot 提供。Syzkaller 在 aqc111 驅動程式中發現一個錯誤 (請參閱報告 [1])這是因為未完整清理 usb 讀取呼叫結果所造成。此問題與在認可 920a9fa27e78 中修正的問題非常相似 (netasix新增 usb 讀取錯誤的適當錯誤處理)。例如usbnet_read_cmd() 可能讀取少於 'size' 位元組 (即使呼叫者預期為完整量)且 aqc111_read_cmd() 將無法正確檢查其結果。如 [1] 所示這可能導致 aqc111_bind() 中的 MAC 位址僅被部分初始化進而觸發 KMSAN 警告。驗證讀取的位元組數符合預期且不少於 藉此修正此問題。 [1] 部分 syzbot 報告
    錯誤KMSANis_valid_ether_addr include/linux/etherdevice.h:208 中的 uninit-value [內嵌] 錯誤KMSAN
    usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 is_valid_ether_addr include/linux/etherdevice.h:208 中的 uninit-value [內嵌] usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 usb_probe_interface +0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [內嵌] real_probe+0x4d1/0xd90 drivers/base/dd.c:658 __driver_probe_device+0x268/0x380 drivers/ base/dd.c:800 ... Uninit 儲存到記憶體的位置為dev_addr_mod+0xb0/0x550 net/core/dev_addr_lists.c:582 __dev_addr_set include/linux/netdevice.h:4874 [內嵌] eth_hw_addr_set include/linux/etherdevice.h:325 [內嵌] aqc111_bind+0x35f /0x1150 drivers/net/usb/aqc111.c:717 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 ... Uninit 儲存到記憶體的位置 ether_addr_copy include/linux/etherdevice.h:305 [內嵌] aqc111_read_perm_mac drivers/net/usb/aqc111.c:663 [內嵌] aqc111_bind+0x794/0x1150 drivers/net/usb/aqc111.c 713 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [內嵌] ... 本機變數 buf.i 建立於 aqc111_read_perm_mac drivers/net/usb/aqc111.c:656 [內嵌] aqc111_bind+0x221/0x1150 drivers/net/usb/aqc111.c:713 usbnet_probe+0xbe6/0x4390 drivers/net/usb/ usbnet.c:1772 (CVE-2025-38153)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - netusbaqc111修复 usbnet 读取调用的错误处理 Syzkaller 由 syzbot 提供在 aqc111 驱动程序中发现一个错误请参阅报告 [1]该错误是由未审查 usb 读取调用结果所导致。此问题与 commit 920a9fa27e78netasix添加 usb 读取错误的正确错误处理中修复的问题极为相似。例如usbnet_read_cmd() 可能读取少于“size”个字节即使调用程序预期读取全部数量并且 aqc111_read_cmd() 将无法正确检查其结果。如 [1] 所示这可能导致 aqc111_bind() 中的 MAC 地址仅部分初始化从而触发 KMSAN 警告。通过验证读取的字节数是否符合预期而不是少于预期来修复 问题。 [1] 部分 syzbot 报告
    缺陷 KMSANis_valid_ether_addr include/linux/etherdevice.h:208 中的 uninit-value [内联] 缺陷 KMSAN
    usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 中的 uninit-value is_valid_ether_addr include/linux/etherdevice.h:208 [inline] usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 usb_probe_interface +0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [内联] real_probe+0x4d1/0xd90 drivers/base/dd.c:658 __driver_probe_device+0x268/0x380 drivers/ base/dd.c:800 ... Uninit 已存储到内存位于dev_addr_mod+0xb0/0x550 net/core/dev_addr_lists.c:582 __dev_addr_set include/linux/netdevice.h:4874 [内联] eth_hw_addr_set include/linux/etherdevice.h:325 [内联] aqc111_bind+0x35f /0x1150 drivers/net/usb/aqc111.c:717 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 ... Uninit 已存储到内存位于ether_addr_copy include/linux/etherdevice.h:305 [内联] aqc111_read_perm_mac drivers/net/usb/aqc111.c:663 [内联] aqc111_bind+0x794/0x1150 drivers/net/usb/aqc111.c 713 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] ... 在以下位置创建了本地变量 buf.iaqc111_read_perm_mac drivers/net/usb/aqc111.c:656 [inline] aqc111_bind+0x221/0x1150 drivers/net/usb/aqc111.c:713 usbnet_probe+0xbe6/0x4390 drivers/net/usb/ usbnet.c:1772CVE-2025-38153

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot, identified an     error (see report [1]) in aqc111 driver, caused by incomplete sanitation of usb read calls' results. This     problem is quite similar to the one fixed in commit 920a9fa27e78 (net: asix: add proper error handling of     usb read errors). For instance, usbnet_read_cmd() may read fewer than 'size' bytes, even if the caller     expected the full amount, and aqc111_read_cmd() will not check its result properly. As [1] shows, this may     lead to MAC address in aqc111_bind() being only partly initialized, triggering KMSAN warnings. Fix the     issue by verifying that the number of bytes read is as expected and not less. [1] Partial syzbot report:
    BUG: KMSAN: uninit-value in is_valid_ether_addr include/linux/etherdevice.h:208 [inline] BUG: KMSAN:
    uninit-value in usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 is_valid_ether_addr     include/linux/etherdevice.h:208 [inline] usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830     usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1     [inline] really_probe+0x4d1/0xd90 drivers/base/dd.c:658 __driver_probe_device+0x268/0x380     drivers/base/dd.c:800 ... Uninit was stored to memory at: dev_addr_mod+0xb0/0x550     net/core/dev_addr_lists.c:582 __dev_addr_set include/linux/netdevice.h:4874 [inline] eth_hw_addr_set     include/linux/etherdevice.h:325 [inline] aqc111_bind+0x35f/0x1150 drivers/net/usb/aqc111.c:717     usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310     drivers/usb/core/driver.c:396 ... Uninit was stored to memory at: ether_addr_copy     include/linux/etherdevice.h:305 [inline] aqc111_read_perm_mac drivers/net/usb/aqc111.c:663 [inline]     aqc111_bind+0x794/0x1150 drivers/net/usb/aqc111.c:713 usbnet_probe+0xbe6/0x4390     drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396     call_driver_probe drivers/base/dd.c:-1 [inline] ... Local variable buf.i created at: aqc111_read_perm_mac     drivers/net/usb/aqc111.c:656 [inline] aqc111_bind+0x221/0x1150 drivers/net/usb/aqc111.c:713     usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 (CVE-2025-38153)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5973 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5973-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     August 12, 2025                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-36350 CVE-2024-36357 CVE-2024-36913 CVE-2024-41013                      CVE-2024-56758 CVE-2024-57883 CVE-2025-21816 CVE-2025-22119                      CVE-2025-27558 CVE-2025-37958 CVE-2025-38000 CVE-2025-38001                      CVE-2025-38003 CVE-2025-38004 CVE-2025-38031 CVE-2025-38034                      CVE-2025-38035 CVE-2025-38037 CVE-2025-38040 CVE-2025-38043                      CVE-2025-38044 CVE-2025-38048 CVE-2025-38051 CVE-2025-38052                      CVE-2025-38058 CVE-2025-38061 CVE-2025-38062 CVE-2025-38063                      CVE-2025-38065 CVE-2025-38066 CVE-2025-38067 CVE-2025-38068                      CVE-2025-38071 CVE-2025-38072 CVE-2025-38074 CVE-2025-38075                      CVE-2025-38077 CVE-2025-38078 CVE-2025-38079 CVE-2025-38083                      CVE-2025-38084 CVE-2025-38085 CVE-2025-38086 CVE-2025-38088                      CVE-2025-38090 CVE-2025-38097 CVE-2025-38100 CVE-2025-38102                      CVE-2025-38103 CVE-2025-38107 CVE-2025-38108 CVE-2025-38111                      CVE-2025-38112 CVE-2025-38113 CVE-2025-38115 CVE-2025-38118                      CVE-2025-38119 CVE-2025-38120 CVE-2025-38122 CVE-2025-38124                      CVE-2025-38126 CVE-2025-38131 CVE-2025-38135 CVE-2025-38136                      CVE-2025-38138 CVE-2025-38142 CVE-2025-38143 CVE-2025-38145                      CVE-2025-38146 CVE-2025-38147 CVE-2025-38148 CVE-2025-38151                      CVE-2025-38153 CVE-2025-38154 CVE-2025-38157 CVE-2025-38158                      CVE-2025-38159 CVE-2025-38160 CVE-2025-38161 CVE-2025-38163                      CVE-2025-38165 CVE-2025-38166 CVE-2025-38167 CVE-2025-38170                      CVE-2025-38173 CVE-2025-38174 CVE-2025-38180 CVE-2025-38181                      CVE-2025-38183 CVE-2025-38184 CVE-2025-38185 CVE-2025-38190                      CVE-2025-38191 CVE-2025-38193 CVE-2025-38194 CVE-2025-38197                      CVE-2025-38198 CVE-2025-38200 CVE-2025-38202 CVE-2025-38211                      CVE-2025-38212 CVE-2025-38214 CVE-2025-38215 CVE-2025-38218                      CVE-2025-38219 CVE-2025-38222 CVE-2025-38225 CVE-2025-38226                      CVE-2025-38227 CVE-2025-38229 CVE-2025-38230 CVE-2025-38231                      CVE-2025-38236 CVE-2025-38239 CVE-2025-38245 CVE-2025-38249                      CVE-2025-38251 CVE-2025-38257 CVE-2025-38259 CVE-2025-38260                      CVE-2025-38262 CVE-2025-38263 CVE-2025-38273 CVE-2025-38275                      CVE-2025-38277 CVE-2025-38280 CVE-2025-38282 CVE-2025-38285                      CVE-2025-38286 CVE-2025-38293 CVE-2025-38298 CVE-2025-38300                      CVE-2025-38304 CVE-2025-38305 CVE-2025-38310 CVE-2025-38312                      CVE-2025-38313 CVE-2025-38319 CVE-2025-38320 CVE-2025-38323                      CVE-2025-38324 CVE-2025-38326 CVE-2025-38328 CVE-2025-38331                      CVE-2025-38332 CVE-2025-38334 CVE-2025-38336 CVE-2025-38337                      CVE-2025-38342 CVE-2025-38344 CVE-2025-38345 CVE-2025-38346                      CVE-2025-38348 CVE-2025-38350 CVE-2025-38352 CVE-2025-38354                      CVE-2025-38362 CVE-2025-38363 CVE-2025-38364 CVE-2025-38365                      CVE-2025-38371 CVE-2025-38375 CVE-2025-38377 CVE-2025-38380                      CVE-2025-38382 CVE-2025-38384 CVE-2025-38385 CVE-2025-38386                      CVE-2025-38387 CVE-2025-38389 CVE-2025-38391 CVE-2025-38393                      CVE-2025-38395 CVE-2025-38396 CVE-2025-38399 CVE-2025-38400                      CVE-2025-38401 CVE-2025-38403 CVE-2025-38404 CVE-2025-38406                      CVE-2025-38409 CVE-2025-38410 CVE-2025-38412 CVE-2025-38415                      CVE-2025-38416 CVE-2025-38418 CVE-2025-38419 CVE-2025-38420                      CVE-2025-38422 CVE-2025-38424 CVE-2025-38425 CVE-2025-38428                      CVE-2025-38430 CVE-2025-38437 CVE-2025-38439 CVE-2025-38441                      CVE-2025-38443 CVE-2025-38444 CVE-2025-38445 CVE-2025-38448                      CVE-2025-38451 CVE-2025-38455 CVE-2025-38456 CVE-2025-38457                      CVE-2025-38458 CVE-2025-38459 CVE-2025-38460 CVE-2025-38461                      CVE-2025-38462 CVE-2025-38464 CVE-2025-38465 CVE-2025-38466                      CVE-2025-38467 CVE-2025-38468 CVE-2025-38470 CVE-2025-38471                      CVE-2025-38472 CVE-2025-38473 CVE-2025-38474 CVE-2025-38476                      CVE-2025-38477 CVE-2025-38478 CVE-2025-38480 CVE-2025-38481                      CVE-2025-38482 CVE-2025-38483 CVE-2025-38485 CVE-2025-38487                      CVE-2025-38488 CVE-2025-38494 CVE-2025-38495 CVE-2025-38497                      CVE-2025-38498 CVE-2025-38499

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 6.1.147-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
243683	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38153	Nessus	Misc.	8/5/2025	8/5/2025	low
243683	Linux Distros 未修補的弱點：CVE-2025-38153	Nessus	Misc.	8/5/2025	8/5/2025	low
243683	Linux Distros 未修补的漏洞：CVE-2025-38153	Nessus	Misc.	8/5/2025	8/5/2025	low
243683	Linux Distros Unpatched Vulnerability : CVE-2025-38153	Nessus	Misc.	8/5/2025	8/5/2025	low
249177	Debian dsa-5973 : affs-modules-6.1.0-37-4kc-malta-di - security update	Nessus	Debian Local Security Checks	8/13/2025	8/13/2025	medium

Detections

Analytics

Plugins Search

low

low

low

low

medium