The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace     when NETDEV_REGISTER is received on netvsc NIC. During deletion of the namespace,     default_device_exit_batch() >> default_device_exit_net() is called. When netvsc NIC is moved back and     registered to the default namespace, it automatically brings VF NIC back to the default namespace. This     will cause the default_device_exit_net() >> for_each_netdev_safe loop unable to detect the list end, and     hit NULL ptr: [ 231.449420] mana 7870:00:00.0 enP30832s1: Moved VF to namespace with: eth0 [ 231.449656]     BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 231.450246] #PF: supervisor read access     in kernel mode [ 231.450579] #PF: error_code(0x0000) - not-present page [ 231.450916] PGD 17b8a8067 P4D 0     [ 231.451163] Oops: Oops: 0000 [#1] SMP NOPTI [ 231.451450] CPU: 82 UID: 0 PID: 1394 Comm: kworker/u768:1     Not tainted 6.16.0-rc4+ #3 VOLUNTARY [ 231.452042] Hardware name: Microsoft Corporation Virtual     Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 11/21/2024 [ 231.452692] Workqueue: netns     cleanup_net [ 231.452947] RIP: 0010:default_device_exit_batch+0x16c/0x3f0 [ 231.453326] Code: c0 0c f5 b3     e8 d5 db fe ff 48 85 c0 74 15 48 c7 c2 f8 fd ca b2 be 10 00 00 00 48 8d 7d c0 e8 7b 77 25 00 49 8b 86 28     01 00 00 <48> 8b 50 10 4c 8b 2a 4c 8d 62 f0 49 83 ed 10 4c 39 e0 0f 84 d6 00 [ 231.454294] RSP:
    0018:ff75fc7c9bf9fd00 EFLAGS: 00010246 [ 231.454610] RAX: 0000000000000000 RBX: 0000000000000002 RCX:
    61c8864680b583eb [ 231.455094] RDX: ff1fa9f71462d800 RSI: ff75fc7c9bf9fd38 RDI: 0000000030766564 [     231.455686] RBP: ff75fc7c9bf9fd78 R08: 0000000000000000 R09: 0000000000000000 [ 231.456126] R10:
    0000000000000001 R11: 0000000000000004 R12: ff1fa9f70088e340 [ 231.456621] R13: ff1fa9f70088e340 R14:
    ffffffffb3f50c20 R15: ff1fa9f7103e6340 [ 231.457161] FS: 0000000000000000(0000) GS:ff1faa6783a08000(0000)     knlGS:0000000000000000 [ 231.457707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.458031] CR2:
    0000000000000010 CR3: 0000000179ab2006 CR4: 0000000000b73ef0 [ 231.458434] Call Trace: [ 231.458600]     <TASK> [ 231.458777] ops_undo_list+0x100/0x220 [ 231.459015] cleanup_net+0x1b8/0x300 [ 231.459285]     process_one_work+0x184/0x340 To fix it, move the ns change to a workqueue, and take rtnl_lock to avoid     changing the netdev list when default_device_exit_net() is using it. (CVE-2025-38683)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - hv_netvscVF で名前空間を削除する際のパニックを修正します。既存のコードは、NETDEV_REGISTER が netvsc NIC で受信された際に、VF NIC を新しい名前空間に移動します。名前空間の削除中に、default_device_exit_batch() >> default_device_exit_net() が呼び出されます。netvsc NIC が戻されてデフォルト名前空間に登録されると、VF NIC は自動的にデフォルト名前空間に戻されます。これにより、default_device_exit_net() >> for_each_netdev_safe ループがリストの終端を検出できず、NULL ポインターにつながります [ 231.449420] mana 7870:00:00.0 enP30832s1次で VF を名前空間に移動しました eth0 [ 231.449656] BUGカーネル NULLポインターデリファレンス、アドレス: 000000000000010 231.450246] #PFカーネルモードでのスーパーバイザー読み取り 231.451163アクセス 231.450916231.4505790000 [#1SMP NOPTI 231.451450] CPU82 UID0 PID1394 Commkworker/u768:1 汚染されていない 6.16.0-rc4+ #3 VOLUNTARY 231.452042] ハードウェア名Microsoft Corporation Virtual Machine/仮想マシン、BIOS Hyper-V UEFI Release v4.1 2024 年 11 月 21 日 231.452692] ワークキューnetns cleanup_net [ 231.452947RIP: 0010:default_device_exit_batch+0x16c/0x3f0 231.453326] コード: c0 0c f5 b3 e8 d5 db fe ff 48 85 c0 74 15 48 c7 c2 f8 fd ca b2 be 10 00 00 00 48 8d 7b 77 25 00 49 8b 86 28 01 00 00 <48> 8b 50 10 4c 8b 2a 4c 8d 62 f30083 ed 10 4c 39 e0 0f 84 d6 00 [ 231.454294] RSP
    0018:ff75fc7c9bf9fd00 EFLAGS: 00010246 [ 231.454610] RAX: 00000000000000000000 RBX: 0000000000000002 RCX
    61c8864680b583eb [ 231.455094] RDX: ff1fa9f71462d800 RSI: ff75fc7c9bf9fd38 RDI: 0000000030766564 [231.455686] RBP: ff75fc7c9bf9fd78 R08: 0000000000000000 R09: 0000000000000000 [ 231.456126] R10:
    000000000000001 R110000000000000004 R12ff1fa9f70088e340 231.456621、 R13ff1fa9f70088e340 R14
     R15ffffffffb3f50c20  : ff1fa9f7103e6340 [ 231.457161] FS: 0000000000000000(0000) GS:ff1faa6783a08000(0000) knlGS:0000000000000000 [ 231.457707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.458031] CR2:
    000000000000010 CR3: 0000000179ab2006 CR4: 0000000000b73ef0 [ 231.458434] Call Trace: [ 231.458600] <TASK>231.458777] ops_undo_list+0x100/0x220 231.459015[ ] cleanup_net+0x1b8/0x300 231.459285] process_one_work+0x4 [] 、 ns の変更を workqueue に移動し、default_device_exit_net() が使用している netdev リストの変更を避けるために rtnl_lock を利用します。CVE-2025-38683

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - hv_netvsc修正使用 VF 刪除命名空間時發生的錯誤。當 netvsc NIC 收到 NETDEV_REGISTER 時現有的程式碼會將 VF NIC 移至新的命名空間。刪除命名空間期間會呼叫 default_device_exit_batch() >> default_device_exit_net()。當 netvsc NIC 移回並註冊到預設命名空間時它會自動將 VF NIC 帶回預設命名空間。這會造成 default_device_exit_net() >> for_each_netdev_safe 迴圈無法偵測清單結尾而命中 NULL 指標 [ 231.449420] mana 7870:00:00.0 enP30832s1將 VF 移至 eth0 的命名空間 [ 231.449656] 錯誤核心 NULL指標解除參照、位址0000000000000010 [ 231.450246] #PF在核心模式中監督讀取存取 [ 231.450579] #PFerror_code(0x0000) - 不存在的頁面 [ 231.450916] PGD 17b8a8067 P4D 0 [ 231.451163] OopsOops 0000 [#1] SMP NOPTI [ 231.451450] CPU82 UID0 PID1394 通訊kworker/u768:1 未受污染的 6.16.0-rc4+ #3 VOLUNTARY [ 231.452042] 硬體名稱Microsoft Corporation Virtual Machine/虛擬機器、BIOS Hyper-V UEFI 版本 v4.1 2024 年 11 月 21 日 [ 231.452692] 工作佇列 netns cleanup_net [ 231.452947] RIP 0010:default_device_exit_batch+0x16c/0x3f0 [ 231.453326] 程式碼c0 0c f5 b3 e8 d5 db fe ff 48 85 c0 74 15 48 c7 c2 f8 fd ca b2 be 10 00 00 00 48 8d 7d c0 e8 7b 77 25 00 49 8b 86 28 01 00 00 <48> 8b 50 10 4c 8b 2a 4c 8d 62 f0 4983 ed 10 4c 39 e0 0f 84 d6 00 [ 231.454294] RSP
    0018ff75fc7c9bf9fd00 EFLAGS00010246 [ 231.454610] RAX 0000000000000000 RBX 0000000000000002 RCX
    61c8864680b583eb [ 231.455094] RDX: ff1fa9f71462d800 RSI: ff75fc7c9bf9fd38 RDI: 0000000030766564 [231.455686] RBP: ff75fc7c9bf9fd78 R08: 0000000000000000 R09: 0000000000000000 [ 231.456126] R10:
    0000000000000001 R110000000000000004 R12ff1fa9f70088e340 [ 231.456621] R13ff1fa9f70088e340 R14
     R15ffffffffb3f50c20  : ff1fa9f7103e6340 [ 231.457161] FS: 0000000000000000(0000) GS:ff1faa6783a08000(0000) knlGS:0000000000000000 [ 231.457707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.458031] CR2:
    0000000000000010 CR30000000179ab2006 CR40000000000b73ef0 [ 231.458434] 呼叫追踪[ 231.458600] <TASK> [ 231.458777] ops_undo_list+0x100/0x220 [ 231.459015] cleanup_net+0x1b8/0x300 [ 231.459285] process_340+0x184/0 process_340 修正將 ns 變更移至工作佇列並採用 rtnl_lock在 default_device_exit_net() 使用時避免變更 netdev 清單。 (CVE-2025-38683)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - hv_netvsc修复删除 VF 的命名空间期间的错误 netvsc NIC 上接收到 NETDEV_REGISTER 时现有代码将 VF NIC 移动到新的命名空间。在删除命名空间期间调用 default_device_exit_batch() >> default_device_exit_net()。将 netvsc NIC 移回并注册至默认命名空间时会自动将 VF NIC 带回默认命名空间。这将造成 default_device_exit_net() >> for_each_netdev_safe 循环无法检测到列表末端并命中空指针[ 231.449420] mana 7870:00:00.0 enP30832s1已将 VF 移动到命令空间eth0 [ 231.449656] 缺陷内核空指针取消引用地址地址0000000000000010 [ 231.450246] #PF内核模式下的主管读取访问权限 [ 231.450579] #PF: error_code(0x0000) - 不存在页面 [ 231.450916] PGD 17b8a8067 P4D 0 [ 231.451163] 错误错误0000 [#1] SMP NOPTI [ 231.451450] CPU: 82 UID: 0 PID: 1394 Comm: kworker/u768:1 Not tainted 6.16.0-rc4+ #3 VOLUNTARY [ 231.452042] 硬件名称Microsoft Corporation Virtual Machine/虚拟机BIOS Hyper-V UEFI 版本 v4.1 2024 年 11 月 21 日 [ 231.452692] Workqueue: netns cleanup_net [ 231.452947] RIP: 0010:default_device_exit_batch+0x16c/0x3f0 [ 231.453326] 代码c0 0c f5 b3 e8 d5 db fe ff 48 85 c0 74 15 48 c7 c2 f8 fd ca b2 be 10 00 00 00 48 8d 7d c0 e8 7b 77 25 00 49 8b 86 28 01 00 00 <48> 8b 50 10 4c 8b 2a 4c 8d 62 f0 49 83 ed 10 4c 39 e0 0f 84 d6 00 [ 231.454294] RSP
    0018:ff75fc7c9bf9fd00 EFLAGS00010246 [ 231.454610] RAX: 0000000000000000 RBX: 0000000000000002 RCX
    61c8864680b583eb [ 231.455094] RDX: ff1fa9f71462d800 RSI: ff75fc7c9bf9fd38 RDI: 0000000030766564 [231.455686] RBP: ff75fc7c9bf9fd78 R08: 0000000000000000 R09: 0000000000000000 [ 231.456126] R10:
    0000000000000001 R110000000000000004 R12ff1fa9f70088e340 [ 231.456621] R13ff1fa9f70088e340 R14
     R15ffffffffb3f50c20  : ff1fa9f7103e6340 [ 231.457161] FS: 0000000000000000(0000) GS:ff1faa6783a08000(0000) knlGS:0000000000000000 [ 231.457707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.458031] CR2:
    0000000000000010 CR3: 0000000179ab2006 CR4: 0000000000b73ef0 [ 231.458434] 调用跟踪[ 231.458600] <TASK> [ 231.458777] ops_undo_list+0x100/0x220 [ 231.459015] cleanup_net+0x1b8/0x300 [ 231.459285] it process_one_work+0x340将 ns 变更移动到工作队列并进行 rtnl_lock以避免在 default_device_exit_net() 使用该列表时更改 netdev 列表。 (CVE-2025-38683)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

ID	Name	Product	Family	Published	Updated	Severity
261587	Linux Distros Unpatched Vulnerability : CVE-2025-38683	Nessus	Misc.	9/6/2025	9/6/2025	medium
261587	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38683	Nessus	Misc.	9/6/2025	9/6/2025	medium
261587	Linux Distros 未修補的弱點：CVE-2025-38683	Nessus	Misc.	9/6/2025	9/6/2025	medium
261587	Linux Distros 未修补的漏洞：CVE-2025-38683	Nessus	Misc.	9/6/2025	9/6/2025	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium