Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - staging: graybus: audio_helper移除未使用和錯誤的 debugfs 使用方式在 graybus audio_helper 程式碼中dapm 的 debugfs 檔案可能遭到移除且記憶體將會洩漏。此程式碼也有可能從系統中移除所有 debugfs 項目而且如果執行此程式碼似乎真的會發生這種情況。這完全是錯誤的因為 graybus 音訊驅動程式並未建立此 debugfs 檔案而音效核心會建立且控制其壽命。因此請移除 audio_helper 程式碼中的所有 debugfs 邏輯因為其不可能是正確的。若確實需要該版本可針對錯誤使用 debugfs_lookup() 呼叫提供修正以解決造成系統注意到此問題的原因。 (CVE-2022-50400)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - staginggreybusaudio_helper删除未使用且错误的 debugfs 使用情况在 greybus audio_helper 代码中dapm 的 debugfs 文件可能会被删除而且内存会泄漏。此代码也非常有可能从系统中删除所有 debugfs 条目而且似乎这就是此代码运行时真正发生的情况。这一切都是非常错误的因为 greybus 音频驱动程序不会创建此 debugfs 文件是声音核心创建了并控制着它的使用期限。因此请从 audio_helper 代码中删除所有 debugfs 逻辑因为其不可能是正确的。如果确实需要可返回 debugfs_lookup() 调用的错误使用补丁修复此问题完全无法引起注意。 (CVE-2022-50400)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - staginggreybusaudio_helper未使用および誤った debugfs 使用を削除します。greybus audio_helper コードでは、dapm 用の debugfs ファイルが削除され、メモリが漏洩する可能性があります。また、このコードには、すべての debugfs エントリをシステムから削除するという、非常に潜在的な潜在性もあります。このコードが実行されると、実際に発生するようです。greybus オーディオドライバーがこの debugfs ファイルを作成せず、サウンドコアが作成し、その寿命をコントロールしているので、これは非常に間違っています。正しい方法がないため、audioop_helper コードからすべての debugfs ロジックを削除します。これが本当に必要な場合は、debugfs_lookup() の呼び出しの不適切な使用を修正して返すことができます。これは、通知すべてが通知される原因となっています。CVE-2022-50400

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003936 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    staging: greybus: audio_helper: remove unused and wrong debugfs usage

    In the greybus audio_helper code, the debugfs file for the dapm has the     potential to be removed and memory will be leaked.  There is also the     very real potential for this code to remove ALL debugfs entries from the     system, and it seems like this is what will really happen if this code     ever runs.  This all is very wrong as the greybus audio driver did not     create this debugfs file, the sound core did and controls the lifespan     of it.

    So remove all of the debugfs logic from the audio_helper code as there's     no way it could be correct.  If this really is needed, it can come back     with a fixup for the incorrect usage of the debugfs_lookup() call which     is what caused this to be noticed at all.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992250 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    staging: greybus: audio_helper: remove unused and wrong debugfs usage

    In the greybus audio_helper code, the debugfs file for the dapm has the     potential to be removed and memory will be leaked.  There is also the     very real potential for this code to remove ALL debugfs entries from the     system, and it seems like this is what will really happen if this code     ever runs.  This all is very wrong as the greybus audio driver did not     create this debugfs file, the sound core did and controls the lifespan     of it.

    So remove all of the debugfs logic from the audio_helper code as there's     no way it could be correct.  If this really is needed, it can come back     with a fixup for the incorrect usage of the debugfs_lookup() call which     is what caused this to be noticed at all.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - staging: greybus: audio_helper: remove unused and wrong debugfs usage In the greybus audio_helper code,     the debugfs file for the dapm has the potential to be removed and memory will be leaked. There is also the     very real potential for this code to remove ALL debugfs entries from the system, and it seems like this is     what will really happen if this code ever runs. This all is very wrong as the greybus audio driver did not     create this debugfs file, the sound core did and controls the lifespan of it. So remove all of the debugfs     logic from the audio_helper code as there's no way it could be correct. If this really is needed, it can     come back with a fixup for the incorrect usage of the debugfs_lookup() call which is what caused this to     be noticed at all. (CVE-2022-50400)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
265917	Linux Distros 未修補的弱點：CVE-2022-50400	Nessus	Misc.	9/25/2025	9/30/2026	medium
265917	Linux Distros 未修补的漏洞：CVE-2022-50400	Nessus	Misc.	9/25/2025	9/30/2026	medium
265917	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50400	Nessus	Misc.	9/25/2025	9/30/2026	medium
288207	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003936)	Nessus	Unity Linux Local Security Checks	1/16/2026	1/17/2026	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	10/9/2026	high
280247	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992250)	Nessus	Unity Linux Local Security Checks	12/30/2025	12/30/2025	medium
265917	Linux Distros Unpatched Vulnerability : CVE-2022-50400	Nessus	Misc.	9/25/2025	9/30/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

high

medium

medium