Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - f2fs修正以針對摘要資訊執行功能健全檢查如 Wenqing Liu 在 bugzilla 中所報告
    https://bugzilla.kernel.org/show_bug.cgi?id=216456 BUGKASAN在 restore_data+0x63ae/0x6ae0 中發生釋放後使用 [f2fs] 透過工作 mount/1013 CPU: 3 PID 在 addr ffff8881464dcd80 讀取大小 4 CPU: 3 PID
    1013 Commmount 污染GW 6.0.0-rc4 #1 硬體名稱QEMU Standard PC (Q35 + ICH9, 2009)、BIOS 1.15.0-1 2014 年 4 月 1 日 呼叫追踪 dump_stack_lvl+0x45/0x5e print_report.cold+0xf3 /0x68d kasan_report+0xa8/0x130 recover_data+0x63ae/0x6ae0 [f2fs] f2fs_recover_fsync_data+0x120d/0x1fc0 [f2fs] f2fs_fill_super+0x4665/0x61e0 [f2fs] mount_bdev+0x2cf/0x3b0 legacy_get_tree+0xed/0x1d0 vfs_get_tree+0x81/0x2b0 path_mount+0x47e/ 0x19d0 do_mount+0xce/0xf0 __x64_sys_mount+0x12c/0x1a0 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd 根本原因是在模糊的影像中SSA 表格損毀ofs_in_node 大於 ADDRS_PER_PAGE()導致超出範圍4k 大小頁面上的存取權。 - restore_data - do_recover_data - check_index_in_prev_nodes - f2fs_data_blkaddr 此修補程式新增了流程依賴的複原和 GC 流程中摘要資訊的功能健全檢查。在修補程式之後[29.310883] F2FS-fs (loop0)摘要不一致 ofs_in_node:65286ino:0、nid:6、max:1018 (CVE-2022-50753)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - f2fs: 修复以对汇总信息进行健全性检查 Wenqing Liu 在 bugzilla 中报告
    https://bugzilla.kernel.org/show_bug.cgi?id=216456 缺陷KASANrecover_data+0x63ae/0x6ae0 中存在释放后使用 [f2fs] 由任务 mount/1013 CPU: 3 PID读取地址 ffff8881464dcd80 上的大小 4
    1013 Commmount 受感染GW 6.0.0-rc4 #1 硬件名称QEMU Standard PCQ35 + ICH9、2009、BIOS 1.15.0-1 04/01/2014 调用跟踪dump_stack_lvl+0x45/0x5e print_report.cold+0xf3 /0x68d kasan_report+0xa8/0x130 recover_data+0x63ae/0x6ae0 [f2fs] f2fs_recover_fsync_data+0x120d/0x1fc0 [f2fs] f2fs_fill_super+0x4665/0x61e0 [f2fs] mount_bdev+0x2cf/0x3b0 legacy_get_tree+0xed/0x1d0 vfs_get_tree+0x81/0x2b0 path_mount+0x47e/ 0x19d0 do_mount+0xce/0xf0 __x64_sys_mount+0x12c/0x1a0 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd根本原因是在模糊的镜像中, SSA table is broken: ofs_in_node islarger Than ADDRS_PER_PAGE(), result in out-of-range 4k 大小页面上的访问权限。 - restore_data - do_recover_data - check_index_in_prev_nodes - f2fs_data_blkaddr 此修补程序在恢复流和 GC 流所依赖的地方添加了对汇总信息的健全性检查。之后修补程序 [29.310883] F2FS-fs (loop0)summary 中的 ino:0, nid:6, max:1018 不一致的 ofs_in_node:65286 (CVE-2022-50753)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - f2fsサマリー情報でサニティーチェックを行うように修正します Bugzilla で Wenqing Liu 氏が報告したように
    https://bugzilla.kernel.org/show_bug.cgi?id=216456 バグ KASANrecovery_data+0x63ae/0x6ae0 の use-after-free [f2fs] タスクマウント/1013 による addr ffff8881464dcd80 でのサイズ 4 の読み取り CPU3 PID
    1013 通信マウント汚染 GW 6.0.0-rc4 #1 ハードウェア名 QEMU Standard PCQ35 + ICH9、2009、BIOS 1.15.0-1 [] 2014 年 4 月 1 日、BIOS  2014 年 4 月 1 日、BIOS コールトレース dump_stack_lvl+0x45/0x5e print_report.cold+0xf3 /0x68d kasan_report+0xa8/0x130 recover_data+0x63ae/0x6ae0 [f2fs] f2fs_recover_fsync_data+0x120d/0x1fc0 [f2fs] f2fs_fill_super+0x4665/0x61e0 [f2fs] mount_bdev+0x2cf/0x3b0 legacy_get_tree+0xed/0x1d0 vfs_get_tree+0x81/0x2b0 path_mount+0x47e/ 0x19d0 do_mount+0xce/0xf0 __x64_sys_mount+0x12c/0x1a0 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd 基本的な原因は次のとおりです。ファジングされた画像で、SSA テーブルが破損していますofs_in_node が ADDRS_PER_PAGE() より大きいため、範囲外が発生します。 4k サイズのページでアクセス。 - Recovery_data - do_recover_data - check_index_in_prev_nodes - f2fs_data_blkaddr このパッチでは、フローが依存しているリカバリおよび GC フローのサマリー情報に対するサニティチェックが追加されます。パッチ後[29.310883] F2FS-fsloop0サマリー、ino:0、nid:6、max:1018 で整合性のない ofs_in_node:65286CVE-2022-50753]

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla:
    https://bugzilla.kernel.org/show_bug.cgi?id=216456 BUG: KASAN: use-after-free in     recover_data+0x63ae/0x6ae0 [f2fs] Read of size 4 at addr ffff8881464dcd80 by task mount/1013 CPU: 3 PID:
    1013 Comm: mount Tainted: G W 6.0.0-rc4 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS     1.15.0-1 04/01/2014 Call Trace: dump_stack_lvl+0x45/0x5e print_report.cold+0xf3/0x68d     kasan_report+0xa8/0x130 recover_data+0x63ae/0x6ae0 [f2fs] f2fs_recover_fsync_data+0x120d/0x1fc0 [f2fs]     f2fs_fill_super+0x4665/0x61e0 [f2fs] mount_bdev+0x2cf/0x3b0 legacy_get_tree+0xed/0x1d0     vfs_get_tree+0x81/0x2b0 path_mount+0x47e/0x19d0 do_mount+0xce/0xf0 __x64_sys_mount+0x12c/0x1a0     do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd The root cause is: in fuzzed image, SSA     table is corrupted: ofs_in_node is larger than ADDRS_PER_PAGE(), result in out-of-range access on 4k-size     page. - recover_data - do_recover_data - check_index_in_prev_nodes - f2fs_data_blkaddr This patch adds     sanity check on summary info in recovery and GC flow in where the flows rely on them. After patch: [     29.310883] F2FS-fs (loop0): Inconsistent ofs_in_node:65286 in summary, ino:0, nid:6, max:1018     (CVE-2022-50753)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010955 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    f2fs: fix to do sanity check on summary info

    As Wenqing Liu reported in bugzilla:

    https://bugzilla.kernel.org/show_bug.cgi?id=216456

    BUG: KASAN: use-after-free in recover_data+0x63ae/0x6ae0 [f2fs]     Read of size 4 at addr ffff8881464dcd80 by task mount/1013

    CPU: 3 PID: 1013 Comm: mount Tainted: G        W          6.0.0-rc4 #1     Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014     Call Trace:
     dump_stack_lvl+0x45/0x5e      print_report.cold+0xf3/0x68d      kasan_report+0xa8/0x130      recover_data+0x63ae/0x6ae0 [f2fs]      f2fs_recover_fsync_data+0x120d/0x1fc0 [f2fs]      f2fs_fill_super+0x4665/0x61e0 [f2fs]      mount_bdev+0x2cf/0x3b0      legacy_get_tree+0xed/0x1d0      vfs_get_tree+0x81/0x2b0      path_mount+0x47e/0x19d0      do_mount+0xce/0xf0
     __x64_sys_mount+0x12c/0x1a0      do_syscall_64+0x38/0x90      entry_SYSCALL_64_after_hwframe+0x63/0xcd

    The root cause is: in fuzzed image, SSA table is corrupted: ofs_in_node     is larger than ADDRS_PER_PAGE(), result in out-of-range access on 4k-size     page.

    - recover_data
     - do_recover_data
      - check_index_in_prev_nodes
       - f2fs_data_blkaddr

    This patch adds sanity check on summary info in recovery and GC flow     in where the flows rely on them.

    After patch:
    [   29.310883] F2FS-fs (loop0): Inconsistent ofs_in_node:65286 in summary, ino:0, nid:6, max:1018

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013561 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    f2fs: fix to do sanity check on summary info

    As Wenqing Liu reported in bugzilla:

    https://bugzilla.kernel.org/show_bug.cgi?id=216456

    BUG: KASAN: use-after-free in recover_data+0x63ae/0x6ae0 [f2fs]     Read of size 4 at addr ffff8881464dcd80 by task mount/1013

    CPU: 3 PID: 1013 Comm: mount Tainted: G        W          6.0.0-rc4 #1     Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014     Call Trace:
     dump_stack_lvl+0x45/0x5e      print_report.cold+0xf3/0x68d      kasan_report+0xa8/0x130      recover_data+0x63ae/0x6ae0 [f2fs]      f2fs_recover_fsync_data+0x120d/0x1fc0 [f2fs]      f2fs_fill_super+0x4665/0x61e0 [f2fs]      mount_bdev+0x2cf/0x3b0      legacy_get_tree+0xed/0x1d0      vfs_get_tree+0x81/0x2b0      path_mount+0x47e/0x19d0      do_mount+0xce/0xf0
     __x64_sys_mount+0x12c/0x1a0      do_syscall_64+0x38/0x90      entry_SYSCALL_64_after_hwframe+0x63/0xcd

    The root cause is: in fuzzed image, SSA table is corrupted: ofs_in_node     is larger than ADDRS_PER_PAGE(), result in out-of-range access on 4k-size     page.

    - recover_data
     - do_recover_data
      - check_index_in_prev_nodes
       - f2fs_data_blkaddr

    This patch adds sanity check on summary info in recovery and GC flow     in where the flows rely on them.

    After patch:
    [   29.310883] F2FS-fs (loop0): Inconsistent ofs_in_node:65286 in summary, ino:0, nid:6, max:1018

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
280057	Linux Distros 未修補的弱點：CVE-2022-50753	Nessus	Misc.	12/26/2025	9/30/2026	high
280057	Linux Distros 未修补的漏洞：CVE-2022-50753	Nessus	Misc.	12/26/2025	9/30/2026	high
280057	Linux Distros のパッチ未適用の脆弱性: CVE-2022-50753	Nessus	Misc.	12/26/2025	9/30/2026	high
280057	Linux Distros Unpatched Vulnerability : CVE-2022-50753	Nessus	Misc.	12/26/2025	9/30/2026	high
308561	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010955)	Nessus	Unity Linux Local Security Checks	4/21/2026	4/22/2026	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	10/9/2026	high
309319	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013561)	Nessus	Unity Linux Local Security Checks	4/22/2026	4/26/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high