Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Orangefs修复 Orangefs_sysfs_init() 中的 kmemleak 当插入和移除 Orangefs 模块时存在如下 kobjects 内存泄露unreferenced 对象 0xffff88810f95af00(size 64)comm insmod、pid 783、jiffies 4294813439(age 65.512s) hex 转储第一次32 字节a0 83 af 01 81 88 ff ff 08 af 95 0f 81 88 ff ff ....... 00 00 ............回溯
    [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000005a6e4dfe>] Orangefs_sysfs_init+0x42/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 未引用对象 0xffff88810f95ae80 (大小 64)comm insmod、pid 78365.4318() dumpage前 32 字节c8 90 0f 02 81 88 ff ff 88 ae 95 0f 81 88 ff ff ........ 88 ae 95 0f 81 88 ff ff 00 00 00 00<0000000031ab7788>00<000000004232d9f7>00 00<00000000722645ca>00<000000001a4841fa>... +0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/entry_SYSCALL_64_after_hwframe+0x46/对象 0xffff88810f95ae00（大小 64）：comm insmod，pid 783，jiffies 4294813440 (age 6 5.511s十六进制转储前 32 字节60 87 a1 00 81 88 ff ff 08 ae 95 0f 81 88 ff ff `....... 08 ae 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 ..... 回溯[<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000005915e797>] Orangefs_sysfs_init+0x12b/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_after_framew64 +0x46/0xb0 未引用对象 0xffff88810f95ad80 (size 64)comm insmod, pid 783, jiffies 4294813440 (age 65.511s) hex 转储前 32 字节78 90 0f 02 81 88 ff ff 88 ad 95 0f 81 88 ff ff x 88 ad 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 ..<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000007a14eb35>] Orangefs_sysfs_init+0x1ac/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b 0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 未引用对象 0xffff88810f95ac00 (大小 64)comm insmod、pid 783、jiffies 4294813440(age 65.531s) hex 转储(前 32 字节): 67 02 81 88 ff ff 08 ac 95 0f 81 88 ff ff .....08 ac 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 .... ...... backtrace[<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000001f38adcb>] Orangefs_sysfs_init+0x291/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/ ---truncated--- (CVE-2022-50316)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - Orangefs修正 Orangefs_sysfs_init() 中的 kmemleak。插入和移除 Orangefs 模組時會洩漏 kobjects 記憶體未參照的物件 0xffff88810f95af00 (大小 64)通訊 insmod、pid 783、jiffies 4294813439 (65.512s) 十六進位轉儲存 (第一個32 位元組)a0 83 af 01 81 88 ff ff 08 af 95 0f 81 88 ff ff ........ 08 af 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 ........ 反向追踪
    [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000005a6e4dfe>] Orangefs_sysfs_init+0x42/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3300 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 未參照的物件 0xffff88810f95ae80 (大小 64)comm insmod、pid 783、jiffies 465945183439 (前 32 個位元組)c8 90 0f 02 81 88 ff ff 88 ae 95 0f 81 88 ff ff ........ 88 ae 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 .... 反向追踪 [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000001a4841fa>] Orangefs_sysfs_init+0xc7/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall +0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframed+0x46/0unx46/0取消參照物件 0xffff88810f95ae00 (大小 64)comm insmod、pid 783、jiffies 4294813440 (6 時5.511s) 十六進位轉儲存 (前 32 個位元組)60 87 a1 00 81 88 ff ff 08 ae 95 0f 81 88 ff ff `........ 08 ae 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 ..... 反向追踪 [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000005915e797>] Orangefs_sysfs_init+0x12b/0x3a0 [<00000000722645ca>] 0xfffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_wframe_after +0x46/0xb0 未參照的物件 0xffff88810f95ad80 (大小 64)comm insmod、pid 783、jiffies 4294813440 (存在時間 65.511s) 十六進位轉儲存 (前 32 個位元組)78 90 0f 02 81 88 ff ff 88 ad 95 x 0f 81 88 ff ff ........ 88 ad 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 ........ 反向追踪 [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000007a14eb35>] Orangefs_sysfs_init+0x1ac/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b 0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 未參照物件 0xffff88810f95ac00 (大小 64)comm insmod、pid 783、jiffies 4294813440 (65.531s) 十六進位轉儲存 (前 32 個位元組) 67 02 81 88 ff ff 08 ac 95 0f 81 88 ff ff ..g. ..g. 08 ac 95 0f 81 88 ff 00 00 00 00 00 00 00 00 .... ........ 反向追踪 [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000001f38adcb>] Orangefs_sysfs_init+0x291/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/ ---truncated--- (CVE-2022-50316)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Orangefsorangefs_sysfs_init() の kmemleak を修正しますorangefs モジュールを挿入および削除するとき、以下のように kobjects メモリが漏洩します参照されていないオブジェクト 0xffff88810f95af00サイズ 64comm insmod、pid 783、jiffies 429481343965.512shex ダンプ最初32 バイト): a0 83 af 01 81 88 ff ff 08 af 95 0f 81 88 ff ff .08 af 95 0f 81 88 ff ff 00 00 00 00 0000000000 00 00 ----- backtrace
    [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000005a6e4dfe>] Orangefs_sysfs_init+0x42/0x3a0<00000000722645ca>] 0xfffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320<000000003263bdea>load_module+0x2f390x390000000000000000000000000000000000<0000000052cd4153>[  ] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 unreferenced object 0xffff88810f95ae80 (size 64): comm insmod, pid 783, jiffies 4294813439 (age 65.512s) hex dump (最初の 32 バイト)c8 90 0f 02 81 88 ff ff 88 ae 95 0f 81 88 ff ff .88 ae 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 ... backtrace: [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000001a4841fa>] Orangefs_sysfs_init+0xc7/0x3a0 [<00000000722645ca>] 0xfffffffa02780fe [<000000004232d9f7>] do_one_initcall +0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0<00000000250ae02b>] do_syscall_64+0x35/0x800<00000000f11c03c7>] entry_SYSCALL_64_after_hw000000000000000000000オブジェクト 0xffff88810f95ae00サイズ 64comm insmod、pid 783、jiffies 4294813440age 6 5.511s) hex dump最初の 32 バイト60 87 a1 00 81 88 ff ff 08 ae 95 0f 81 88 ff ff `... 08 ae 95 0f 81 88 ff ff 00 00 00 00 00 00 00 ----- backtrace [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000005915e797>] Orangefs_sysfs_init+0x12b/0x3a0 [<00000000722645ca>] 0xfffffffa02780fe [<000000004232d9f7>do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>]entry_scall_scall_64+0x35/0x6_after +0x46/0xb0 参照されていないオブジェクト 0xffff88810f95ad80サイズ 64comm insmod、pid 783、jiffies 4294813440age 65.511shex ダンプ最初の 32 バイト78 90 0f 02 81 88 ff ff 88 ad 95 0f 88 xff 88 xff 81 .... 88 ad 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 ... backtrace []<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000007a14eb35>] Orangefs_sysfs_init+0x1ac/0x3a0 [<00000000722645ca>] 0xfffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b 0 [<00000000250ae02b>do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 参照されていないオブジェクト 0xffff88810f95ac00サイズ 64comm insmod、pid 783、jiffies 429481344065.531shexfftes最初の 302 バイト67 02 81 88 ff ff 08 ac 95 0f 81 88 ff ff ..g. . ---------------- backtrace[<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000001f38adcb>] Orangefs_sysfs_init+0x291/0x3a0 [<00000000722645ca>] 0xfffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/ ---truncated---CVE-2022-50316

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - orangefs: Fix kmemleak in orangefs_sysfs_init() When insert and remove the orangefs module, there are     kobjects memory leaked as below: unreferenced object 0xffff88810f95af00 (size 64): comm insmod, pid 783,     jiffies 4294813439 (age 65.512s) hex dump (first 32 bytes): a0 83 af 01 81 88 ff ff 08 af 95 0f 81 88 ff     ff ................ 08 af 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00 ................ backtrace:
    [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000005a6e4dfe>] orangefs_sysfs_init+0x42/0x3a0     [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>] do_one_initcall+0x87/0x2a0     [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>] load_module+0x2f98/0x3330     [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>] do_syscall_64+0x35/0x80     [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 unreferenced object 0xffff88810f95ae80 (size     64): comm insmod, pid 783, jiffies 4294813439 (age 65.512s) hex dump (first 32 bytes): c8 90 0f 02 81 88     ff ff 88 ae 95 0f 81 88 ff ff ................ 88 ae 95 0f 81 88 ff ff 00 00 00 00 00 00 00 00     ................ backtrace: [<0000000031ab7788>] kmalloc_trace+0x27/0xa0 [<000000001a4841fa>]     orangefs_sysfs_init+0xc7/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe [<000000004232d9f7>]     do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320 [<000000003263bdea>]     load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0 [<00000000250ae02b>]     do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 unreferenced object     0xffff88810f95ae00 (size 64): comm insmod, pid 783, jiffies 4294813440 (age 65.511s) hex dump (first 32     bytes): 60 87 a1 00 81 88 ff ff 08 ae 95 0f 81 88 ff ff `............... 08 ae 95 0f 81 88 ff ff 00 00 00     00 00 00 00 00 ................ backtrace: [<0000000031ab7788>] kmalloc_trace+0x27/0xa0     [<000000005915e797>] orangefs_sysfs_init+0x12b/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe     [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320     [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0     [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0     unreferenced object 0xffff88810f95ad80 (size 64): comm insmod, pid 783, jiffies 4294813440 (age 65.511s)     hex dump (first 32 bytes): 78 90 0f 02 81 88 ff ff 88 ad 95 0f 81 88 ff ff x............... 88 ad 95 0f 81     88 ff ff 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000031ab7788>] kmalloc_trace+0x27/0xa0     [<000000007a14eb35>] orangefs_sysfs_init+0x1ac/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe     [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320     [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0     [<00000000250ae02b>] do_syscall_64+0x35/0x80 [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0     unreferenced object 0xffff88810f95ac00 (size 64): comm insmod, pid 783, jiffies 4294813440 (age 65.531s)     hex dump (first 32 bytes): e0 ff 67 02 81 88 ff ff 08 ac 95 0f 81 88 ff ff ..g............. 08 ac 95 0f 81     88 ff ff 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000031ab7788>] kmalloc_trace+0x27/0xa0     [<000000001f38adcb>] orangefs_sysfs_init+0x291/0x3a0 [<00000000722645ca>] 0xffffffffa02780fe     [<000000004232d9f7>] do_one_initcall+0x87/0x2a0 [<0000000054f22384>] do_init_module+0xdf/0x320     [<000000003263bdea>] load_module+0x2f98/0x3330 [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0     [<00000000250ae02b>] do_syscall_64+0x35/ ---truncated--- (CVE-2022-50316)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
264988	Linux Distros 未修补的漏洞：CVE-2022-50316	Nessus	Misc.	9/16/2025	7/25/2026	medium
264988	Linux Distros 未修補的弱點：CVE-2022-50316	Nessus	Misc.	9/16/2025	7/25/2026	medium
264988	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50316	Nessus	Misc.	9/16/2025	7/25/2026	medium
264988	Linux Distros Unpatched Vulnerability : CVE-2022-50316	Nessus	Misc.	9/16/2025	7/25/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium