Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - mediarcgpio-ir-recv添加删除函数如果启用了运行时 PM请执行运行时 PM 清理以删除 cpu 延迟 qos 请求否则驱动删除的内容可能低于内核转储[ 19.463299] 无法处理内核虚拟地址 0000000000000048 处的空指针取消引用 [ 19.472161] Mem 中止信息
    [ 19.474985] ESR = 0x0000000096000004 [ 19.478754] EC = 0x25DABT当前 EL, IL = 32 位 [ 19.484081] SET = 0, FnV = 0 [ 19.487149] EA = 0, S1PTW = 0 [ 19.490361] FSC = 0x04级别 0 转换错误 [19.495256] Data 中止信息[ 19.498149] ISV = 0, ISS = 0x00000004 [ 19.501997] CM = 0, WnR = 0 [19.504977] user pgtable: 4k pages, 48 -bit VAs, pgdp=0000000049f81000 [ 19.511432] [0000000000000048] pgd=0000000000000000, p4d=0000000000000000 [ 19.518245] 内部错误Oops: 0000000096000004 [#1] PREEMPT SMP [ 19.524520] 中链接的模块gpio_ir_recv(+) rc_core [上次卸载的rc_core ] [ 19.531845] CPU: 0 PID: 445 Comminsmod Not tainted 6.2.0-rc1-00028-g2c397a46d47c #72 [ 19.531854] 硬件名称FSL i.MX8MM EVK 板 (DT) [ 19.531859] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [19.551777] pc cpu_latency_qos_remove_request+0x20/0x110 [ 19.557277] lr
    gpio_ir_recv_runtime_suspend+0x18/0x30 [gpio_ir_recv] [ 19.557294] spffff800008ce3740 [ 19.557297] x29
    ffff800008ce3740 x280000000000000000 x27ffff800008ce3d50 [ 19.574270] x26ffffc7e3e9cea100 x25
    00000000000f4240 x24ffffc7e3f9ef0e30 [ 19.574284] x230000000000000000x22ffff0061803820f4 x21
    0000000000000008 [ 19.574296] x20ffffc7e3fa75df30 x190000000000000020 x18: ffffffffffffffff [19.588570] x17: 0000000000000000 x16ffffc7e3f9efab70 x15: ffff ffff 19.595712ffff]
    ffff800008ce37b8 x13ffff800008ce37aa x120000000000000001 [ 19.602853] x11: 0000000000000001 x10
    ffffcbe3ec0dff87 x9 : 0000000000000008 [ 19.609991] x8 : 0101010101010101 x7 : 0000000000000000 x6
    000000000f0bfe9f [ 19.624261] x5 : 00ffffffffffffff x4 : 0025ab8e00000000 x3 : ffff006180382010 [19.631405] x2 : ffffc7e3e9ce8030 x1 : ffffc7e3fc3eb810 x0 : 0000000000000020 [ 19.638548] Call trace: [19.640995] cpu_latency_qos_remove_request+0x20/0x110 [ 19.646142] gpio_ir_recv_runtime_suspend+0x18 /0x30 [gpio_ir_recv] [ 19.652339] pm_generic_runtime_suspend+0x2c/0x44 [ 19.657055] __rpm_callback+0x48/0x1dc [19.660807] rpm_callback+0x6c/0x80 [ 19.664301] rpm_suspend+0x10c/0x640 [ 19.667880] rpm_idle+0x250/0x2d0 [19.671198] update_autosuspend+0x38/0xe0 [ 19.675213] pm_runtime_set_autosuspend_delay+0x40/0x60 [19.680442] gpio_ir_recv_probe+0x1b4/0x21c [gpio_ir_recv] [ 19.685941] platform_probe+0x68/0xc0 [19.689610] real_probe+0xc0/0x3dc [ 19.693189] __driver_probe_device+0x7c/0x190 [ 19.697550] driver_probe_device+0x3c/0x110 [ 19.701739] __driver_attach+0xf4/0x200 [ 19.705578] bus_for_each_dev+0x70/0xd0 [ 19.709417] driver_attach+0x24/0x30 [ 19.712998] bus_add_driver+0x17c /0x240 [19.716834] driver_register+0x78/0x130 [ 19.720676] __platform_driver_register+0x28/0x34 [ 19.725386] gpio_ir_recv_driver_init+0x20/0x1000 [gpio_i r_recv] [ 19.731404] do_one_initcall+0x44/0x2ac [ 19.735243] do_init_module+0x48/0x1d0 [ 19.739003] load_module+0x19fc/0x2034 [ 19.742759]
    __do_sys_finit_module+0xac/0x12c [ 19.747124] __arm64_sys_finit_module+0x20/0x30 [ 19.751664] invoke_syscall+0x48/0x114 [ 19.755420] el0_svc_common.constprop.0+0xcc/0xec [ 19.760132] do_el0_svc+0x38/0xb0 [ 19.763456] el0_svc +0x2c/0x84 [ 19.766516] el0t_64_sync_handler+0xf4/0x120 [19.770789] el0t_64_sync+0x190/0x194 [ 19.774460] Code: 910003fd a90153f3 aa0003f3 91204021 (f9401400) [19.780556000000 ] 结束跟踪 00000 (CVE-2023-53098)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - mediarcgpio-ir-recv新增移除函式。在啟用了運行時間 PM 的情況下執行運行時間 PM 清理以移除 cpu 延遲 qos 要求否則驅動程式移除可能有下列核心轉儲存[ 19.463299] 無法處理核心虛擬位址 0000000000000048 的 NULL 指標解除參照 [ 19.472161] 記憶體中止資訊
    [ 19.474985] ESR = 0x0000000096000004 [ 19.478754] EC = 0x25DABT (目前 EL)、IL = 32 位元 [ 19.484081] SET = 0、FnV = 0 [ 19.487149] EA = 0、S1PTW = 0 [ 19.490361] FSC = 0x04第 0 層轉譯錯誤 [19.495256] 資料中止資訊 [ 19.498149] ISV = 0、ISS = 0x00000004 [ 19.501997] CM = 0、WnR = 0 [19.504977] 使用者 pgtable4k 頁面、48 -位元 VA pgdp=0000000049f81000 [ 19.511432] [0000000000000048] pgd=0000000000000000、p4d=0000000000000000 [ 19.518245] 內部錯誤Oops0000000096000004 [#1] PREEMPT SMP [ 19.524520] 連結於 gpio_ir_recv(+) rc_core 的模組 [上次卸載rc_core ] [ 19.531845] CPU0 PID 445 通訊insmod 未受污染的 6.2.0-rc1-00028-g2c397a46d47c #72 [ 19.531854] 硬體名稱FSL i.MX8MM EVK 電路板 (DT) [ 19.531859] pstate80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [19.551777] pc cpu_latency_qos_remove_request+0x20/0x110 [ 19.557277] lr
    gpio_ir_recv_runtime_suspend+0x18/0x30 [gpio_ir_recv] [ 19.557294] sp : ffff800008ce3740 [ 19.557297] x29
    ffff800008ce3740 x280000000000000000 x27ffff800008ce3d50 [ 19.574270] x26ffffc7e3e9cea100 x25
    00000000000f4240 x24ffffc7e3f9ef0e30 [ 19.574284] x23 0000000000000000 x22ffff0061803820f4 x21
    0000000000000008 [ 19.574296] x20 ffffc7e3fa75df30 x19 0000000000000020 x18 ffffffffffffffff [19.588570] x17 000000000000000 x16 ffffc7e3f9efab70 x15 [ 19.59571215] ffff4:ff] ffff ff
    ffff800008ce37b8 x13ffff800008ce37aa x120000000000000001 [ 19.602853] x11: 0000000000000001 x10
    ffffcbe3ec0dff87 x9 0000000000000008 [ 19.609991] x8 0101010101010101 x7 0000000000000000 x6
    000000000f0bfe9f [ 19.624261] x5 : 00ffffffffffffff x4 : 0025ab8e00000000 x3 : ffff006180382010 [19.631405] x2 : ffffc7e3e9ce8030 x1 : ffffc7e3fc3eb810 x0 : 0000000000000020 [ 19.638548] Call trace: [19.640995] cpu_latency_qos_remove_request+0x20/0x110 [ 19.646142] gpio_ir_recv_runtime_suspend+0x18 /0x30 [gpio_ir_recv] [ 19.652339] pm_generic_runtime_suspend+0x2c/0x44 [ 19.657055] __rpm_callback+0x48/0x1dc [19.660807] rpm_callback+0x6c/0x80 [ 19.664301] rpm_suspend+0x10c/0x640 [ 19.667880] rpm_idle+0x250/0x2d0 [19.671198] update_autosuspend+0x38/0xe0 [ 19.675213] pm_runtime_set_autosuspend_delay+0x40/0x60 [19.680442] gpio_ir_recv_probe+0x1b4/0x21c [gpio_ir_recv] [ 19.685941] platform_probe+0x68/0xc0 [19.689610] real_probe+0xc0/0x3dc [ 19.693189] ] __driver_probe_device+0x7c/0x190 [ 19.697550] driver_probe_device+0x3c/0x110 [ 19.701739] __driver_attach+0xf4/0x200 [ 19.705578] bus_for_each_dev+0x70/0xd0 [ 19.709417] driver_attach+0x24/0x30 [ 19.712998] bus_add_driver+0x17c /0x240 [19.716834] driver_register+0x78/0x130 [ 19.720676] __platform_driver_register+0x28/0x34 [ 19.725386] gpio_ir_recv_driver_init+0x20/0x1000 [gpio_i r_recv] [ 19.731404] do_one_initcall+0x44/0x2ac [ 19.735243] do_init_module+0x48/0x1d0 [ 19.739003] load_module+0x19fc/0x2034 [ 19.742759]
    __do_sys_finit_module+0xac/0x12c [ 19.747124] __arm64_sys_finit_module+0x20/0x30 [ 19.751664] invoke_syscall+0x48/0x114 [ 19.755420] el0_svc_common.constprop.0+0xcc/0xec [ 19.760132] do_el0_svc+0x38/0xb0 [ 19.763456] el0_svc +0x2c/0x84 [ 19.766516] el0t_64_sync_handler+0xf4/0x120 [19.770789] el0t_64_sync+0x190/0x194 [ 19.774460] 程式碼 910003fd a90153f3 aa0003f3 91204021 (f9401400)19.780556] [00000000000000000000000000000000] [0000000000] [0000000000000] (CVE-2023-53098)

請注意，Nessus 依賴供應商報告的套件存在。

リモートの SUSE Linux SLES15 / SLES_SAP15 ホストには、SUSE-SU-2025:02262-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    SUSE Linux Enterprise 15 SP4 カーネルが更新され、さまざまなセキュリティバグ修正が行われています。

    次のセキュリティバグを修正しました。

    - CVE-2022-49110: netfilter: conntrack: gc 自動調整を再検討します (bsc#1237981)。
    - CVE-2022-49139: Bluetooth: hci_sync_conn_complete_evt の NULL ポインターデリファレンスを修正します (bsc#1238032)。
    - CVE-2022-49767: 9p/trans_fd: 常に O_NONBLOCK 読み取り/書き込みを使用します (bsc#1242493)。
    - CVE-2022-49775: tcp: cdg: tcp_cdg_release() を複数回呼び出すことを許可します (bsc#1242245)。
    - CVE-2022-49858: octeontx2-pf: SQE しきい値チェックを修正します (bsc#1242589)。
    - CVE-2023-53058: net/mlx5: E-Switch、エラー処理コードの Oops を修正します (bsc#1242237)。
    - CVE-2023-53060: igb: デッドロックを引き起こす rtnl_lock() を元に戻します (bsc#1242241)。
    - CVE-2023-53064: iavf: ice による再起動のハングアップを修正します (bsc#1242222)。
    - CVE-2023-53066: qed/qed_sriov: qed_iov_get_vf_info からの NULL デリファレンスに対する保護 (bsc#1242227)。
    - CVE-2023-53079: net/mlx5: ステアリングルールのクリーンアップを修正します (bsc#1242765)。
    - CVE-2023-53114: i40e: アダプターがリカバリモードの場合の再起動中のカーネルクラッシュを修正します (bsc#1242398)。
    - CVE-2023-53134: bnxt_en: TPA データ用の order-5 のメモリ割り当てを回避 (bsc#1242380)
    - CVE-2024-53168: net: sock_inuse_add() を利用可能にします (bsc#1234887)。
    - CVE-2024-56558: nfsd: svc_export_show の前に exp がアクティブであることを確認します (bsc#1235100)。
    - CVE-2025-21888: RDMA/mlx5: DM タイプに対する dereg_mr 中の WARN を修正します (bsc#1240177)。
    - CVE-2025-21999: proc: proc_get_inode() の UAF を修正します (bsc#1240802)。
    - CVE-2025-22056: netfilter: nft_tunnel: geneve_opt の型の混同に関する修正を追加 (bsc#1241525)。
    - CVE-2025-22060: net: mvpp2: パーサー TCAM メモリ破損を防ぎます (bsc#1241526)。
    - CVE-2025-23138: watch_queue: パイプアカウントの不一致を修正します (bsc#1241648)。
    - CVE-2025-23145: mptcp: can_accept_new_subflow の NULL ポインターを修正します (bsc#1242596)。
    - CVE-2025-37785: ext4: dotdot dir をチェックする際の OOB 読み取りを修正します (bsc#1241640)。
    - CVE-2025-37789: net: openvswitch: set() アクションのネストされたキーの長さの検証を修正します (bsc#1242762)。


Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - メディアrcgpio-ir-recv削除関数を追加します runtime PM が有効な場合、cpu レイテンシ qos リクエストを削除するために runtime PM クリーンアップを行います。そうでなければ、ドライバーの削除はカーネルダンプ未満になることがあります [ 19.463299] カーネルを処理できません仮想アドレス 0000000000000048 での NULL ポインターデリファレンス 19.472161] Mem 中止情報
    [ 19.474985] ESR = 0x000000096000004 [ 19.478754] EC = 0x25: DABT現在の EL、IL = 32 ビット [ 19.484081] SET = 0、FnV = 0 [ 19.487149] EA = 0、S1PTW = 0 [ 19.490361] FSC = 0x04レベル 0 変換障害 [19.495256] データ中止情報 [ 19.498149] ISV = 0、ISS = 0x00000004 [ 19.501997] CM = 0、WnR = 0 [19.504977] user pgtable: 4k ページ、48 -bit VAs、 pgdp=0000000049f81000 [ 19.511432] [0000000000000048] pgd=0000000000000000、p4d=0000000000000000 [ 19.518245] 内部エラーOops: 0000000096000004 [#1] PREEMPT SMP [ 19.524520] モジュールのリンク化: gpio_ir_recv(+) rc_core [前回アンロード: rc_core] [ 19.531845] CPU: 0 PID: 445 通信: insmod 汚染されていない 6.2.0-rc1-00028-g2c397a46d47c #72 [ 19.531854] ハードウェア名: FSL i.MX8MM EVK ボードDT[ 19.531859] pstate: 80000005 Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--[19.551777] pc:cpu_latency_qos_remove_request+0x20/0x110[ 19.557277]lr:
    gpio_ir_recv_runtime_suspend+0x18/0x30 [gpio_ir_recv] [ 19.557294] sp : ffff800008ce3740 [ 19.557297] x29
    ffff800008ce3740 x28: 0000000000000000 x27: ffff800008ce3d50 [ 19.574270] x26: fffc7e3e9cea100 x25:
    00000000000f4240 x24: fffc7e3f9ef0e30 [ 19.574284] x23: 0000000000000000 x22: ffff0061803820f4 x21:
    0000000000000008 [ 19.574296] x20: ffffc7e3fa75df30 x19: 0000000000000020 x18: ffffffffffffffff [19.588570] x17: 0000000000000000 x16: ffffc7e3f9efab70 x15: ffffffffffffffff [ 19.595712] x14:
    ffff800008ce37b8 x13: ffff800008ce37aa x12: 000000000000001 [ 19.602853x11: 000000000000001 x10:
    fffcbe3ec0dff87 x9 : 0000000000000008 [ 19.609991] x8 : 0101010101010101 x7 : 00000000000000000000000000000000000000000000000
    000000000f0bfe9f [ 19.624261] x5 : 00ffffffffffffff x4 : 0025ab8e00000000 x3 : ffff006180382010 [19.631405] x2 : ffffc7e3e9ce8030 x1 : ffffc7e3fc3eb810 x0 : 0000000000000020 [ 19.638548] Call trace: [19.640995] cpu_latency_qos_remove_request+0x20/0x110 [ 19.646142] gpio_ir_recv_runtime_suspend+0x18 /0x30 [gpio_ir_recv] [ 19.652339] pm_generic_runtime_suspend+0x2c/0x44 19.657055__rpm_callback+0x48/0x1dc19.660807rpm_callback+0x6c/0x80 19.664301] rpm_suspend+0x10c/0x640 19.667880] rpm_idle+0x250/0x200/0x200/ [19.671198] update_autosuspend+0x38/0xe0 [ 19.675213] pm_runtime_set_autosuspend_delay+0x40/0x60 [19.680442gpio_ir_recv_probe+0x1b4/0x21c [gpio_ir_recv] [ 19.685941] platform_probe+0x68/0xc0/19.689610] true_probe+0xc0/ [ 19.693189] ] __driver_probe_device+0x7c/0x190 [ 19.697550] driver_probe_device+0x3c/0x110 19.701739__driver_attach+0xf4/0x200 [ 19.705578] bus_for_each_dev+0x70/0xd0 [ 19.709417 ] driver_attach+0x24/0x30 [ 19.712998] bus_add_driver+0x170[] bus_add_driver+0x170 /0x240 [19.716834] driver_register+0x78/0x130 [ 19.720676] __platform_driver_register+0x28/0x34 [ 19.725386] gpio_ir_recv_driver_init+0x20/0x1000 [gpio_i r_recv] [ 19.731404] do_one_initcall+0x44/0x2ac [ 19.735243] do_init_module+0x48/0x1d0 [ 19.739003] load_module+0x19fc/0x2034 [ 19.742759]
    __do_sys_finit_module+0xac/0x12c [ 19.747124] __arm64_sys_finit_module+0x20/0x30 [ 19.751664] invoke_syscall+0x48/0x114 [ 19.755420] el0_svc_common.constprop.0+0xcc/0xec [ 19.760132] do_el0_svc+0x38/0xb 19.763456[0x ] +0x2c/0x84 [ 19.766516] el0t_64_sync_handler+0xf4/0x120 19.77446019.770789] el0003fd a90153f3 aa0003f3 91204021 (f9401400)19.780556] 000000000000000000000000000000000000000000000000000000000000000000CVE-2023-53098

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

リモートの SUSE Linux SLES15 / SLES_SAP15 ホストには、SUSE-SU-2025:02173-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    SUSE Linux Enterprise 15 SP5 カーネルが更新され、さまざまなセキュリティバグ修正が行われています。


    次のセキュリティバグを修正しました。

    - CVE-2022-49775tcptcdgtcp_cdg_release() を複数回呼び出すことを許可しますbsc#1242245]。
    - CVE-2024-53168netsock_inuse_add() を利用可能にしますbsc#1234887。
    - CVE-2024-56558nfsdsvc_export_show の前に exp を必ずアクティブにしますbsc#1235100。
    - CVE-2025-21999: proc: proc_get_inode() の UAF を修正します (bsc#1240802)。
    - CVE-2025-22056netfilternft_tunnelgeneve_opt の型の取り違えType Confusionの追加を修正しますbsc#1241525。
    - CVE-2025-23145: mptcp: can_accept_new_subflow の NULL ポインターを修正します (bsc#1242596)。
    - CVE-2025-37789netopenvswitchset() アクションのネストされたキーの長さの検証を修正しますbsc#1242762。
    - CVE-2024-28956x86/itsITS-safe indirect thunk のサポートを追加しますbsc#1242006
    - CVE-2025-37785: ext4: dotdot dir をチェックする際の OOB 読み取りを修正します (bsc#1241640)。


Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993121 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: rc: gpio-ir-recv: add remove function

    In case runtime PM is enabled, do runtime PM clean up to remove     cpu latency qos request, otherwise driver removal may have below     kernel dump:

    [   19.463299] Unable to handle kernel NULL pointer dereference at     virtual address 0000000000000048     [   19.472161] Mem abort info:
    [   19.474985]   ESR = 0x0000000096000004     [   19.478754]   EC = 0x25: DABT (current EL), IL = 32 bits     [   19.484081]   SET = 0, FnV = 0     [   19.487149]   EA = 0, S1PTW = 0     [   19.490361]   FSC = 0x04: level 0 translation fault     [   19.495256] Data abort info:
    [   19.498149]   ISV = 0, ISS = 0x00000004     [   19.501997]   CM = 0, WnR = 0     [   19.504977] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000049f81000     [   19.511432] [0000000000000048] pgd=0000000000000000,     p4d=0000000000000000     [   19.518245] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP     [   19.524520] Modules linked in: gpio_ir_recv(+) rc_core [last     unloaded: rc_core]     [   19.531845] CPU: 0 PID: 445 Comm: insmod Not tainted     6.2.0-rc1-00028-g2c397a46d47c #72     [   19.531854] Hardware name: FSL i.MX8MM EVK board (DT)     [   19.531859] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS     BTYPE=--)     [   19.551777] pc : cpu_latency_qos_remove_request+0x20/0x110     [   19.557277] lr : gpio_ir_recv_runtime_suspend+0x18/0x30     [gpio_ir_recv]     [   19.557294] sp : ffff800008ce3740     [   19.557297] x29: ffff800008ce3740 x28: 0000000000000000 x27:
    ffff800008ce3d50     [   19.574270] x26: ffffc7e3e9cea100 x25: 00000000000f4240 x24:
    ffffc7e3f9ef0e30     [   19.574284] x23: 0000000000000000 x22: ffff0061803820f4 x21:
    0000000000000008     [   19.574296] x20: ffffc7e3fa75df30 x19: 0000000000000020 x18:
    ffffffffffffffff     [   19.588570] x17: 0000000000000000 x16: ffffc7e3f9efab70 x15:
    ffffffffffffffff     [   19.595712] x14: ffff800008ce37b8 x13: ffff800008ce37aa x12:
    0000000000000001     [   19.602853] x11: 0000000000000001 x10: ffffcbe3ec0dff87 x9 :
    0000000000000008     [   19.609991] x8 : 0101010101010101 x7 : 0000000000000000 x6 :
    000000000f0bfe9f     [   19.624261] x5 : 00ffffffffffffff x4 : 0025ab8e00000000 x3 :
    ffff006180382010     [   19.631405] x2 : ffffc7e3e9ce8030 x1 : ffffc7e3fc3eb810 x0 :
    0000000000000020     [   19.638548] Call trace:
    [   19.640995]  cpu_latency_qos_remove_request+0x20/0x110     [   19.646142]  gpio_ir_recv_runtime_suspend+0x18/0x30 [gpio_ir_recv]     [   19.652339]  pm_generic_runtime_suspend+0x2c/0x44     [   19.657055]  __rpm_callback+0x48/0x1dc     [   19.660807]  rpm_callback+0x6c/0x80     [   19.664301]  rpm_suspend+0x10c/0x640     [   19.667880]  rpm_idle+0x250/0x2d0     [   19.671198]  update_autosuspend+0x38/0xe0     [   19.675213]  pm_runtime_set_autosuspend_delay+0x40/0x60     [   19.680442]  gpio_ir_recv_probe+0x1b4/0x21c [gpio_ir_recv]     [   19.685941]  platform_probe+0x68/0xc0     [   19.689610]  really_probe+0xc0/0x3dc     [   19.693189]  __driver_probe_device+0x7c/0x190     [   19.697550]  driver_probe_device+0x3c/0x110     [   19.701739]  __driver_attach+0xf4/0x200     [   19.705578]  bus_for_each_dev+0x70/0xd0     [   19.709417]  driver_attach+0x24/0x30     [   19.712998]  bus_add_driver+0x17c/0x240     [   19.716834]  driver_register+0x78/0x130     [   19.720676]  __platform_driver_register+0x28/0x34     [   19.725386]  gpio_ir_recv_driver_init+0x20/0x1000 [gpio_ir_recv]     [   19.731404]  do_one_initcall+0x44/0x2ac     [   19.735243]  do_init_module+0x48/0x1d0     [   19.739003]  load_module+0x19fc/0x2034     [   19.742759]  __do_sys_finit_module+0xac/0x12c     [   19.747124]  __arm64_sys_finit_module+0x20/0x30     [   19.751664]  invoke_syscall+0x48/0x114     [   19.755420]  el0_svc_common.constprop.0+0xcc/0xec     [   19.760132]  do_el0_svc+0x38/0xb0     [   19.763456]  el0_svc+0x2c/0x84     [   19.766516]  el0t_64_sync_handler+0xf4/0x120     [   19.770789]  el0t_64_sync+0x190/0x194     [   19.774460] Code: 910003fd a90153f3 aa0003f3 91204021 (f9401400)     [   19.780556] ---[ end trace 0000000000000000 ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02173-1 advisory.

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2022-49775: tcp: cdg: allow tcp_cdg_release() to be called multiple times (bsc#1242245).
    - CVE-2024-53168: net: make sock_inuse_add() available (bsc#1234887).
    - CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1235100).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
    - CVE-2024-28956: x86/its: Add support for ITS-safe indirect thunk (bsc#1242006).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02262-1 advisory.

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

    The following security bugs were fixed:

    - CVE-2022-49110: netfilter: conntrack: revisit gc autotuning (bsc#1237981).
    - CVE-2022-49139: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (bsc#1238032).
    - CVE-2022-49767: 9p/trans_fd: always use O_NONBLOCK read/write (bsc#1242493).
    - CVE-2022-49775: tcp: cdg: allow tcp_cdg_release() to be called multiple times (bsc#1242245).
    - CVE-2022-49858: octeontx2-pf: Fix SQE threshold checking (bsc#1242589).
    - CVE-2023-53058: net/mlx5: E-Switch, Fix an Oops in error handling code (bsc#1242237).
    - CVE-2023-53060: igb: revert rtnl_lock() that causes deadlock (bsc#1242241).
    - CVE-2023-53064: iavf: Fix hang on reboot with ice (bsc#1242222).
    - CVE-2023-53066: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (bsc#1242227).
    - CVE-2023-53079: net/mlx5: Fix steering rules cleanup (bsc#1242765).
    - CVE-2023-53114: i40e: Fix kernel crash during reboot when adapter is in recovery mode (bsc#1242398).
    - CVE-2023-53134: bnxt_en: Avoid order-5 memory allocation for TPA data (bsc#1242380)
    - CVE-2024-53168: net: make sock_inuse_add() available (bsc#1234887).
    - CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1235100).
    - CVE-2025-21888: RDMA/mlx5: Fix a WARN during dereg_mr for DM type (bsc#1240177).
    - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
    - CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
    - CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
    - CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
    - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
    - CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
    - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM clean up to     remove cpu latency qos request, otherwise driver removal may have below kernel dump: [ 19.463299] Unable     to handle kernel NULL pointer dereference at virtual address 0000000000000048 [ 19.472161] Mem abort info:
    [ 19.474985] ESR = 0x0000000096000004 [ 19.478754] EC = 0x25: DABT (current EL), IL = 32 bits [ 19.484081]     SET = 0, FnV = 0 [ 19.487149] EA = 0, S1PTW = 0 [ 19.490361] FSC = 0x04: level 0 translation fault [     19.495256] Data abort info: [ 19.498149] ISV = 0, ISS = 0x00000004 [ 19.501997] CM = 0, WnR = 0 [     19.504977] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000049f81000 [ 19.511432] [0000000000000048]     pgd=0000000000000000, p4d=0000000000000000 [ 19.518245] Internal error: Oops: 0000000096000004 [#1]     PREEMPT SMP [ 19.524520] Modules linked in: gpio_ir_recv(+) rc_core [last unloaded: rc_core] [ 19.531845]     CPU: 0 PID: 445 Comm: insmod Not tainted 6.2.0-rc1-00028-g2c397a46d47c #72 [ 19.531854] Hardware name: FSL     i.MX8MM EVK board (DT) [ 19.531859] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [     19.551777] pc : cpu_latency_qos_remove_request+0x20/0x110 [ 19.557277] lr :
    gpio_ir_recv_runtime_suspend+0x18/0x30 [gpio_ir_recv] [ 19.557294] sp : ffff800008ce3740 [ 19.557297] x29:
    ffff800008ce3740 x28: 0000000000000000 x27: ffff800008ce3d50 [ 19.574270] x26: ffffc7e3e9cea100 x25:
    00000000000f4240 x24: ffffc7e3f9ef0e30 [ 19.574284] x23: 0000000000000000 x22: ffff0061803820f4 x21:
    0000000000000008 [ 19.574296] x20: ffffc7e3fa75df30 x19: 0000000000000020 x18: ffffffffffffffff [     19.588570] x17: 0000000000000000 x16: ffffc7e3f9efab70 x15: ffffffffffffffff [ 19.595712] x14:
    ffff800008ce37b8 x13: ffff800008ce37aa x12: 0000000000000001 [ 19.602853] x11: 0000000000000001 x10:
    ffffcbe3ec0dff87 x9 : 0000000000000008 [ 19.609991] x8 : 0101010101010101 x7 : 0000000000000000 x6 :
    000000000f0bfe9f [ 19.624261] x5 : 00ffffffffffffff x4 : 0025ab8e00000000 x3 : ffff006180382010 [     19.631405] x2 : ffffc7e3e9ce8030 x1 : ffffc7e3fc3eb810 x0 : 0000000000000020 [ 19.638548] Call trace: [     19.640995] cpu_latency_qos_remove_request+0x20/0x110 [ 19.646142] gpio_ir_recv_runtime_suspend+0x18/0x30     [gpio_ir_recv] [ 19.652339] pm_generic_runtime_suspend+0x2c/0x44 [ 19.657055] __rpm_callback+0x48/0x1dc [     19.660807] rpm_callback+0x6c/0x80 [ 19.664301] rpm_suspend+0x10c/0x640 [ 19.667880] rpm_idle+0x250/0x2d0 [     19.671198] update_autosuspend+0x38/0xe0 [ 19.675213] pm_runtime_set_autosuspend_delay+0x40/0x60 [     19.680442] gpio_ir_recv_probe+0x1b4/0x21c [gpio_ir_recv] [ 19.685941] platform_probe+0x68/0xc0 [     19.689610] really_probe+0xc0/0x3dc [ 19.693189] __driver_probe_device+0x7c/0x190 [ 19.697550]     driver_probe_device+0x3c/0x110 [ 19.701739] __driver_attach+0xf4/0x200 [ 19.705578]     bus_for_each_dev+0x70/0xd0 [ 19.709417] driver_attach+0x24/0x30 [ 19.712998] bus_add_driver+0x17c/0x240 [     19.716834] driver_register+0x78/0x130 [ 19.720676] __platform_driver_register+0x28/0x34 [ 19.725386]     gpio_ir_recv_driver_init+0x20/0x1000 [gpio_ir_recv] [ 19.731404] do_one_initcall+0x44/0x2ac [ 19.735243]     do_init_module+0x48/0x1d0 [ 19.739003] load_module+0x19fc/0x2034 [ 19.742759]
    __do_sys_finit_module+0xac/0x12c [ 19.747124] __arm64_sys_finit_module+0x20/0x30 [ 19.751664]     invoke_syscall+0x48/0x114 [ 19.755420] el0_svc_common.constprop.0+0xcc/0xec [ 19.760132]     do_el0_svc+0x38/0xb0 [ 19.763456] el0_svc+0x2c/0x84 [ 19.766516] el0t_64_sync_handler+0xf4/0x120 [     19.770789] el0t_64_sync+0x190/0x194 [ 19.774460] Code: 910003fd a90153f3 aa0003f3 91204021 (f9401400) [     19.780556] ---[ end trace 0000000000000000 ]--- (CVE-2023-53098)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992562 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    media: rc: gpio-ir-recv: add remove function

    In case runtime PM is enabled, do runtime PM clean up to remove     cpu latency qos request, otherwise driver removal may have below     kernel dump:

    [   19.463299] Unable to handle kernel NULL pointer dereference at     virtual address 0000000000000048     [   19.472161] Mem abort info:
    [   19.474985]   ESR = 0x0000000096000004     [   19.478754]   EC = 0x25: DABT (current EL), IL = 32 bits     [   19.484081]   SET = 0, FnV = 0     [   19.487149]   EA = 0, S1PTW = 0     [   19.490361]   FSC = 0x04: level 0 translation fault     [   19.495256] Data abort info:
    [   19.498149]   ISV = 0, ISS = 0x00000004     [   19.501997]   CM = 0, WnR = 0     [   19.504977] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000049f81000     [   19.511432] [0000000000000048] pgd=0000000000000000,     p4d=0000000000000000     [   19.518245] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP     [   19.524520] Modules linked in: gpio_ir_recv(+) rc_core [last     unloaded: rc_core]     [   19.531845] CPU: 0 PID: 445 Comm: insmod Not tainted     6.2.0-rc1-00028-g2c397a46d47c #72     [   19.531854] Hardware name: FSL i.MX8MM EVK board (DT)     [   19.531859] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS     BTYPE=--)     [   19.551777] pc : cpu_latency_qos_remove_request+0x20/0x110     [   19.557277] lr : gpio_ir_recv_runtime_suspend+0x18/0x30     [gpio_ir_recv]     [   19.557294] sp : ffff800008ce3740     [   19.557297] x29: ffff800008ce3740 x28: 0000000000000000 x27:
    ffff800008ce3d50     [   19.574270] x26: ffffc7e3e9cea100 x25: 00000000000f4240 x24:
    ffffc7e3f9ef0e30     [   19.574284] x23: 0000000000000000 x22: ffff0061803820f4 x21:
    0000000000000008     [   19.574296] x20: ffffc7e3fa75df30 x19: 0000000000000020 x18:
    ffffffffffffffff     [   19.588570] x17: 0000000000000000 x16: ffffc7e3f9efab70 x15:
    ffffffffffffffff     [   19.595712] x14: ffff800008ce37b8 x13: ffff800008ce37aa x12:
    0000000000000001     [   19.602853] x11: 0000000000000001 x10: ffffcbe3ec0dff87 x9 :
    0000000000000008     [   19.609991] x8 : 0101010101010101 x7 : 0000000000000000 x6 :
    000000000f0bfe9f     [   19.624261] x5 : 00ffffffffffffff x4 : 0025ab8e00000000 x3 :
    ffff006180382010     [   19.631405] x2 : ffffc7e3e9ce8030 x1 : ffffc7e3fc3eb810 x0 :
    0000000000000020     [   19.638548] Call trace:
    [   19.640995]  cpu_latency_qos_remove_request+0x20/0x110     [   19.646142]  gpio_ir_recv_runtime_suspend+0x18/0x30 [gpio_ir_recv]     [   19.652339]  pm_generic_runtime_suspend+0x2c/0x44     [   19.657055]  __rpm_callback+0x48/0x1dc     [   19.660807]  rpm_callback+0x6c/0x80     [   19.664301]  rpm_suspend+0x10c/0x640     [   19.667880]  rpm_idle+0x250/0x2d0     [   19.671198]  update_autosuspend+0x38/0xe0     [   19.675213]  pm_runtime_set_autosuspend_delay+0x40/0x60     [   19.680442]  gpio_ir_recv_probe+0x1b4/0x21c [gpio_ir_recv]     [   19.685941]  platform_probe+0x68/0xc0     [   19.689610]  really_probe+0xc0/0x3dc     [   19.693189]  __driver_probe_device+0x7c/0x190     [   19.697550]  driver_probe_device+0x3c/0x110     [   19.701739]  __driver_attach+0xf4/0x200     [   19.705578]  bus_for_each_dev+0x70/0xd0     [   19.709417]  driver_attach+0x24/0x30     [   19.712998]  bus_add_driver+0x17c/0x240     [   19.716834]  driver_register+0x78/0x130     [   19.720676]  __platform_driver_register+0x28/0x34     [   19.725386]  gpio_ir_recv_driver_init+0x20/0x1000 [gpio_ir_recv]     [   19.731404]  do_one_initcall+0x44/0x2ac     [   19.735243]  do_init_module+0x48/0x1d0     [   19.739003]  load_module+0x19fc/0x2034     [   19.742759]  __do_sys_finit_module+0xac/0x12c     [   19.747124]  __arm64_sys_finit_module+0x20/0x30     [   19.751664]  invoke_syscall+0x48/0x114     [   19.755420]  el0_svc_common.constprop.0+0xcc/0xec     [   19.760132]  do_el0_svc+0x38/0xb0     [   19.763456]  el0_svc+0x2c/0x84     [   19.766516]  el0t_64_sync_handler+0xf4/0x120     [   19.770789]  el0t_64_sync+0x190/0x194     [   19.774460] Code: 910003fd a90153f3 aa0003f3 91204021 (f9401400)     [   19.780556] ---[ end trace 0000000000000000 ]---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
247111	Linux Distros 未修补的漏洞：CVE-2023-53098	Nessus	Misc.	8/9/2025	7/17/2026	medium
247111	Linux Distros 未修補的弱點：CVE-2023-53098	Nessus	Misc.	8/9/2025	7/17/2026	medium
241966	SUSE SLES15 :Linux カーネルのセキュリティ更新(SUSE-SU-2025:02262-1)	Nessus	SuSE Local Security Checks	7/11/2025	6/25/2026	high
247111	Linux Distros のパッチ未適用の脆弱性: CVE-2023-53098	Nessus	Misc.	8/9/2025	7/17/2026	medium
241036	SUSE SLES15 セキュリティ更新 : kernel (SUSE-SU-2025:02173-1)	Nessus	SuSE Local Security Checks	7/1/2025	6/25/2026	medium
281241	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993121)	Nessus	Unity Linux Local Security Checks	12/31/2025	12/31/2025	medium
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	8/26/2026	high
241036	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:02173-1)	Nessus	SuSE Local Security Checks	7/1/2025	6/25/2026	medium
241966	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:02262-1)	Nessus	SuSE Local Security Checks	7/11/2025	6/25/2026	high
247111	Linux Distros Unpatched Vulnerability : CVE-2023-53098	Nessus	Misc.	8/9/2025	7/17/2026	medium
280611	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992562)	Nessus	Unity Linux Local Security Checks	12/30/2025	12/30/2025	medium

Detections

Analytics

Plugins Search

medium

medium

high

medium

medium

medium

high

medium

high

medium

medium