Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 已解決 Linux 核心中的下列弱點：phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers The protocol converter configuration registers PCC8, PCCC, PCCD (implemented by the driver), as well as others, control protocol converters from multiple lanes (each represented as a different struct phy). So, if there are simultaneous calls to phy_set_mode_ext() to lanes sharing the same PCC register (either for the old or for the new protocol), corruption of the values programmed to hardware is possible, because lynx_28g_rmw() has no locking. Add a spinlock in the struct lynx_28g_priv shared by all lanes, and take the global spinlock from the phy_ops :: set_mode() implementation. There are no other callers which modify PCC registers. (CVE-2023-52505)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers The protocol converter configuration registers PCC8, PCCC, PCCD (implemented by the driver), as well as others, control protocol converters from multiple lanes (each represented as a different struct phy). So, if there are simultaneous calls to phy_set_mode_ext() to lanes sharing the same PCC register (either for the old or for the new protocol), corruption of the values programmed to hardware is possible, because lynx_28g_rmw() has no locking. Add a spinlock in the struct lynx_28g_priv shared by all lanes, and take the global spinlock from the phy_ops :: set_mode() implementation. There are no other callers which modify PCC registers. (CVE-2023-52505)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Linux カーネルでは、以下の脆弱性が解決されています: phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers The protocol converter configuration registers PCC8, PCCC, PCCD (implemented by the driver), as well as others, control protocol converters from multiple lanes (each represented as a different struct phy). So, if there are simultaneous calls to phy_set_mode_ext() to lanes sharing the same PCC register (either for the old or for the new protocol), corruption of the values programmed to hardware is possible, because lynx_28g_rmw() has no locking. Add a spinlock in the struct lynx_28g_priv shared by all lanes, and take the global spinlock from the phy_ops :: set_mode() implementation. There are no other callers which modify PCC registers. (CVE-2023-52505)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: phy: lynx-28g: serialize concurrent     phy_set_mode_ext() calls to shared registers The protocol converter configuration registers PCC8, PCCC,     PCCD (implemented by the driver), as well as others, control protocol converters from multiple lanes (each     represented as a different struct phy). So, if there are simultaneous calls to phy_set_mode_ext() to lanes     sharing the same PCC register (either for the old or for the new protocol), corruption of the values     programmed to hardware is possible, because lynx_28g_rmw() has no locking. Add a spinlock in the struct     lynx_28g_priv shared by all lanes, and take the global spinlock from the phy_ops :: set_mode()     implementation. There are no other callers which modify PCC registers. (CVE-2023-52505)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
247135	Linux Distros 未修補的弱點：CVE-2023-52505	Nessus	Misc.	8/10/2025	7/17/2026	medium
247135	Linux Distros 未修补的漏洞：CVE-2023-52505	Nessus	Misc.	8/10/2025	7/17/2026	medium
247135	Linux Distros のパッチ未適用の脆弱性: CVE-2023-52505	Nessus	Misc.	8/10/2025	7/17/2026	medium
247135	Linux Distros Unpatched Vulnerability : CVE-2023-52505	Nessus	Misc.	8/10/2025	7/17/2026	medium
203657	Photon OS 5.0: Linux PHSA-2023-5.0-0130	Nessus	PhotonOS Local Security Checks	7/23/2024	10/15/2025	high
332630	Photon OS 5.0: Linux PHSA-2023-5.0-91-0130	Nessus	PhotonOS Local Security Checks	8/5/2026	8/5/2026	high

Detections

Analytics

Plugins Search

medium

medium

medium

medium

high

high