Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - netmacb修正延伸緩衝區描述符號模式中的記憶體損毀問題我們一直在尋找一個看起來像是我們某些裝置上突然永久發生網路和 mmc 失敗的錯誤。此錯誤對於任何軟體變更都會非常敏感甚至對於任何核心除錯選項都會更加敏感。最後我們得到一個設定其問題可透過 CONFIG_DMA_API_DEBUG=y 重現而它揭露了 rx dma 的問題[ 16.992082] ------------[cut here ]-------- ------ [ 16.996779] DMA-APImacb ff0b0000.ethernet
    裝置驅動程式嘗試釋放尚未配置的 DMA 記憶體 [裝置 address=0x0000000875e3e244] [大小=1536 位元組] [ 17.011049] 警告 CPU: 0 PID: 85 at kernel/dma/debug.c:1011 check_unmap+0x6a0/0x900 [17.018977] 模組連結於 xxxxx [ 17.038823] CPU0 PID85 通訊irq/55-8000f000 未受污染 5.4.0 #28 [ 17.045345] 硬體名稱xxxxx [ 17.049528] pstate 60000005 (nZCv daif -PAN - UAO) [ 17.054322] pc check_unmap+0x6a0/0x900 [ 17.058243] lr check_unmap+0x6a0/0x900 [ 17.062163] sp ffffffc010003c40 [17.065470] x29 ffffffc010003c40 x28 000000004000c03c [ 17.0707830] x20748ffff60
    ffffff8878e38800 [ 17.076095] x25 ffffff8879d22810 x24 ffffffc010003cc8 [ 17.081407] ] x23
    0000000000000000 x22: ffffffc010a08750 [ 17.086719] x21: ffffff8878e3c7c0 x20: ffffffc010acb000 [17.092032] x19: 0000000875e3e244 x18: 0000000000000010 [ 17.097343] x17: 0000000000000000 x16:
    0000000000000000 [ 17.102647] x15 ffffff8879e4a988 x14 0720072007200720 [ 17.107959] x13
    0720072007200720 x12: 0720072007200720 [ 17.113261] x11: 0720072007200720 x10: 0720072007200720 [17.118565] x9 : 0720072007200720 x8 : 000000000000022d [ 17.123869] x7 : 0000000000000015 x6 :
    0000000000000098 [ 17.129173] x5 : 0000000000000000 x4 : 0000000000000000 [ 17.134475] x3 :
    00000000ffffffff x2 : ffffffc010a1d370 [ 17.139778] x1 : b420c9d75d27bb00 x0 : 0000000000000000 [17.145082] Call trace: [ 17.147524] check_unmap+0x6a0/0x900 [ 17.151091] debug_dma_unmap_page+0x88/0x90 [17.155266] gem_rx+0x114/0x2f0 [ 17.158396] macb_poll+0x58/0x100 [ 17.161705] net_rx_action+0x118/0x400 [17.165445] __do_softirq+0x138/0x36c [ 17.169100] irq_exit+0x98/0xc0 [ 17.172234]
    __handle_domain_irq+0x64/0xc0 [ 17.176320] gic_handle_irq+0x5c/0xc0 [ 17.179974] el1_irq+0xb8/0x140 [17.183109] xiic_process+0x5c/0xe30 [ 17.186677] irq_thread_fn+0x28/0x90 [ 17.190244] irq_thread+0x208/0xa2 [ 17.193724] kthread+0x130/0x140 [ 17.196945] ret_from_fork+0x10/0x20 [ 17.200510]
    ---[ end trace 7240980785f81d6f ]--- [ 237.021490] ------------[cut here ]------------ [ 237.026129] DMA-API超過 cacheline 0x0000000021d79e7b 的 7 個重疊對應 [ 237.033886] 警告 CPU: 0 PID: 0 at kernel/dma/debug.c:499 add_dma_entry+0x214/0x240 [ 237.041802] 連結在 xxxxx 中的模組 [ 237.061637] ] CPU 0 PID0 通訊swapper/0 污染GW 5.4.0 #28 [ 237.068941] 硬體名稱xxxxx [ 237.073116] pstate 80000085 (Nzcv daIf -PAN -UAO) [ 237.077900] pcadd_dma_entry+0x214/0x240 [ [ 237.081986] ] ] lr
    add_dma_entry+0x214/0x240 [ 237.086072] sp ffffffc010003c30 [ 237.089379] x29 ffffffc010003c30 x28
    ffffff8878a0be00 [ 237.094683] x270000000000000180 x26ffffff8878e387c0 [ 237.099987] x25
    0000000000000002 x24: 0000000000000000 [ 237.105290] x23: 000000000000003b x22: ffffffc010a0fa00 [237.110594] x21: 0000000021d79e7b x20: ffffffc010abe600 [ 237.115897] x19: 00000000ffffffef x18:
    0000000000000010 [ 237.121201] x170000000000000000 x16: 0000000000000000 [ 237.126504] x15
    ffffffc010a0fdc8 x14: 0720072007200720 [ 237.131807] x13: 0720072007200720 x12: 0720072007200720 [237.137111] x11: 0720072007200720 x10: 0720072007200720 [ 237.142415] x9 : 0720072007200720 x8 :
    0000000000000259 [ 237.147718] x7 0000000000000001 x6 0000000000000000 [ 237.15302 ---truncated--- (CVE-2023-54257)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - netmacb修复扩展的缓冲区描述符模式中的内存损坏在相当长的一段时间内我们都在寻找一个看起来像某些设备上的网络和 mmc 突然发生永久故障的缺陷。该缺陷对任何软件变更都非常敏感，对任何内核调试选项更敏感。最后我们得到了这样一个设置其中通过 CONFIG_DMA_API_DEBUG=y 可重现该问题并且它揭示了 rx dma 的问题[ 16.992082] ------------[在此剪切 ]------ ------ [ 16.996779] DMA-APImacb ff0b0000.ethernet
    设备驱动程序尝试释放其未分配的 DMA 内存 [设备 address=0x0000000875e3e244] [size=1536 字节] [ 17.011049] 警告CPU: 0 PID: 85kernel/dma/debug.c:1011 check_unmap+0x6a0/0x900 [17.018977] 链接的模块xxxxx [ 17.038823] CPU: 0 PID: 85 Comm: irq/55-8000f000 Not tainted 5.4.0 #28 [ 17.045345] 硬件名称xxxxx [ 17.049528] pstate: 60000005 (nZCv daif -PAN - UAO) [ 17.054322] pc check_unmap+0x6a0/0x900 [ 17.058243] lr check_unmap+0x6a0/0x900 [ 17.062163] sp ffffffc010003c40 [17.065470] x29: ffffffc010003c40 x28: 000000004000c03c [ 17.070783] x20ffc:1
    ffffff8878e38800 [ 17.076095] x25ffffff8879d22810 x24ffffffc010003cc8 [ 17.081407] x23
    0000000000000000 x22: ffffffc010a08750 [ 17.086719] x21: ffffff8878e3c7c0 x20: ffffffc010acb000 [17.092032] x19: 0000000875e3e244 x18: 0000000000000010 [ 17.097343] x17: 0000000000000000 x16:
    0000000000000000 [ 17.102647] x15ffffff8879e4a988 x140720072007200720 [ 17.107959] x13
    0720072007200720 x12: 0720072007200720 [ 17.113261] x11: 0720072007200720 x10: 0720072007200720 [17.118565] x9 : 0720072007200720 x8 : 000000000000022d [ 17.123869] x7 : 0000000000000015 x6 :
    0000000000000098 [ 17.129173] x5 : 0000000000000000 x4 : 0000000000000000 [ 17.134475] x3 :
    00000000ffffffff x2 : ffffffc010a1d370 [ 17.139778] x1 : b420c9d75d27bb00 x0 : 0000000000000000 [17.145082] Call trace: [ 17.147524] check_unmap+0x6a0/0x900 [ 17.151091] debug_dma_unmap_page+0x88/0x90 [17.155266] gem_rx+0x114/0x2f0 [ 17.158396] macb_poll+0x58/0x100 [ 17.161705] net_rx_action+0x118/0x400 [17.165445] __do_softirq+0x138/0x36c [ 17.169100] irq_exit+0x98/0xc0 [ 17.172234]
    __handle_domain_irq+0x64/0xc0 [ 17.176320] gic_handle_irq+0x5c/0xc0 [ 17.179974] el1_irq+0xb8/0x140 [17.183109] xiic_process+0x5c/0xe30 [ 17.186677] irq_thread_fn+0x28/0x90 [ 17.190244] irq_thread+0x208/0x140 [ 17.193724] kthread+0x130/0x140 [ 17.196945] ret_from_fork+0x10/0x20 [ 17.200510]
    ---[ 结束跟踪 7240980785f81d6f ]--- [ 237.021490] ------------[ 在此处切换 ]------------ [ 237.026129] DMA-API超出 7 个重叠缓存块 0x0000000021d79e7b [ 237.033886] 警告CPU: 0 PID: 0 at kernel/dma/debug.c:499 add_dma_entry+0x214/0x240 [ 237.041802] 链接的模块xxxxx [ 237.061637] CPU 0 PID：0 Comm：swapper/0 Tainted：GW 5.4.0 #28 [ 237.068941] 硬件名称xxxxx [ 237.073116] pstate: 80000085 (Nzcv daIf -PAN -UAO) [ 237.077900] pcadd_dma_entry+0x214/0x240 [ 237.081986] lr
    add_dma_entry+0x214/0x240 [ 237.086072] sp ffffffc010003c30 [ 237.089379] x29ffffffc010003c30 x28
    ffffff8878a0be00 [ 237.094683] x270000000000000180 x26ffffff8878e387c0 [ 237.099987] x25
    0000000000000002 x24: 0000000000000000 [ 237.105290] x23: 000000000000003b x22: ffffffc010a0fa00 [237.110594] x21: 0000000021d79e7b x20: ffffffc010abe600 [ 237.115897] x19: 00000000ffffffef x18:
    0000000000000010 [ 237.121201] x170000000000000000 x160000000000000000 [ 237.126504] x15
    ffffffc010a0fdc8 x14: 0720072007200720 [ 237.131807] x13: 0720072007200720 x12: 0720072007200720 [237.137111] x11: 0720072007200720 x10: 0720072007200720 [ 237.142415] x9 : 0720072007200720 x8 :
    0000000000000259 [ 237.147718] x7 : 0000000000000001 x6 : 0000000000000000 [ 237.15302 ---truncated--- (CVE-2023-54257)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - netmacb拡張バッファ記述子モードのメモリ破損を修正します かなり長い間、弊社はデバイスの一部におけるネットワークおよび mmc の突然の恒久的障害のようなバグを追跡していました。このバグは、ソフトウェアの変更や、カーネルのデバッグオプションに対してさらに影響を受けやすくなっていました。ついに、問題が CONFIG_DMA_API_DEBUG=y で再生可能なセットアップになり、rx dma の問題が漏洩しました [ 16.992082] ------------[ここで挿入]-------- ------ [ 16.996779] DMA-APImacb ff0b0000.ethernet
    デバイスドライバーが割り当てられていない DMA メモリを解放しようとします [device address=0x0000000875e3e244] [size=1536 bytes] 17.011049] 警告CPU:0 PID:85 at kernel/dma/debug.c:1011 check_unmap+0x6a0/0x900 []17.018977] リンクされているモジュールxxxxx [ 17.038823] CPU0 PID85 通信irq/55-8000f000 汚染されていない 5.4.0 #28 [ 17.045345] ハードウェア名xxxxxx 17.049528] pstate60000005nZCv daif -PAN - UAO 17.054322] pc : check_unmap+0x6a0/0x900 [ 17.058243] lr : check_unmap+0x6a0/0x900 [ 17.062163] sp : ffffffc010003c40 [ 17.07078317.065470] x29 : ffffffc010003c40 x28 : 000000004000c03c [ x28 : f0ff]
    ffffff8878e38800 17.076095x25: ffffff8879d22810 x24: fffff010003cc8 [ 17.081407] x23:
    0000000000000000 x22: ffffffc010a08750 [ 17.086719] x21: ffffff8878e3c7c0 x20: ffffffc010acb000 [17.092032] x19: 0000000875e3e244 x18: 0000000000000010 [ 17.097343] x17: 0000000000000000 x16:
    0000000000000000 17.102647] x15: ffffff8879e4a988 x14: 0720072007200720 17.107959x13:
    0720072007200720 x12: 0720072007200720 [ 17.113261] x11: 0720072007200720 x10: 0720072007200720 [17.118565] x9 : 0720072007200720 x8 : 000000000000022d [ 17.123869] x7 : 0000000000000015 x6 :
    0000000000000098 [ 17.129173] x5 : 0000000000000000 x4 : 0000000000000000 [ 17.134475] x3 :
    00000000ffffffff x2 : ffffffc010a1d370 [ 17.139778] x1 : b420c9d75d27bb00 x0 : 0000000000000000 [17.145082] Call trace: [ 17.147524] check_unmap+0x6a0/0x900 [ 17.151091] debug_dma_unmap_page+0x88/0x90 [17.155266] gem_rx+0x114/0x2f0 [ 17.158396macb_poll+0x58/0x100 [ 17.161705] net_rx_action+0x118/0x400 [17.165445] __do_softirq+0x138/0x36c [ 17.169100] irq_exit+0x98/0xc0 [ 17.172234]
    __handle_domain_irq+0x64/0xc0 [ 17.176320] gic_handle_irq+0x5c/0xc0 17.179974] el1_irq+0xb8/0x14017.183109] xiic_process+0x5c/0xe30 17.186677] irq_thread_fn+0x28/0x90 [ 17.190244irq_thread+0x208 [] irq_thread+0x208 [] [ 17.193724] kthread+0x130/0x140 [ 17.196945] ret_from_fork+0x10/0x20 [ 17.200510]
    ---[ end trace 7240980785f81d6f ]----- [ 237.021490] ------------[cutここで ]------------ [ 237.026129] DMA-APIキャッシュライン 0x0000000021d79e7b の 7 つの重複するマッピングを超えました 237.033886] 警告CPU: 0 PID: kernel/dma/debug.c:499 add_dma_entry+0x214/0x240 で 0 237.041802] モジュールがリンクされています xxxxx 237.061637CPU 0 PID:0 Comm: swapper/0 汚染: GW 5.4.0 #28 [ 237.068941] ハードウェア名: xxxxxx [ 237.073116] pstate: 80000085Nzcv daIf -PAN -UAO[ 237.077900] pc : add_dma_entry+0x214/0x240 [ [ 237.081986 ] lr
    add_dma_entry+0x214/0x240 [ 237.086072] sp : ffffffc010003c30 [ 237.089379] x29 : ffffffc010003c30 x28
    ffffff8878a0be00 237.094683x27: 0000000000000180 x26: ffffff8878e387c0 237.099987] x25:
    0000000000000002 x24: 237.115897000000000000000 237.105290x23:237.110594000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
     237.12120100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 237.126504​
    ffffffc010a0fdc8 x14: 0720072007200720 [ 237.131807] x13: 0720072007200720 x12: 0720072007200720 [237.137111] x11: 0720072007200720 x10: 0720072007200720 [ 237.142415] x9 : 0720072007200720 x8 :
    000000000000259 237.147718237.15302--truncated--- x7 :CVE-2023-5425700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: macb: fix a memory corruption in extended buffer descriptor mode For quite some time we were chasing     a bug which looked like a sudden permanent failure of networking and mmc on some of our devices. The bug     was very sensitive to any software changes and even more to any kernel debug options. Finally we got a     setup where the problem was reproducible with CONFIG_DMA_API_DEBUG=y and it revealed the issue with the rx     dma: [ 16.992082] ------------[ cut here ]------------ [ 16.996779] DMA-API: macb ff0b0000.ethernet:
    device driver tries to free DMA memory it has not allocated [device address=0x0000000875e3e244] [size=1536     bytes] [ 17.011049] WARNING: CPU: 0 PID: 85 at kernel/dma/debug.c:1011 check_unmap+0x6a0/0x900 [     17.018977] Modules linked in: xxxxx [ 17.038823] CPU: 0 PID: 85 Comm: irq/55-8000f000 Not tainted 5.4.0     #28 [ 17.045345] Hardware name: xxxxx [ 17.049528] pstate: 60000005 (nZCv daif -PAN -UAO) [ 17.054322] pc     : check_unmap+0x6a0/0x900 [ 17.058243] lr : check_unmap+0x6a0/0x900 [ 17.062163] sp : ffffffc010003c40 [     17.065470] x29: ffffffc010003c40 x28: 000000004000c03c [ 17.070783] x27: ffffffc010da7048 x26:
    ffffff8878e38800 [ 17.076095] x25: ffffff8879d22810 x24: ffffffc010003cc8 [ 17.081407] x23:
    0000000000000000 x22: ffffffc010a08750 [ 17.086719] x21: ffffff8878e3c7c0 x20: ffffffc010acb000 [     17.092032] x19: 0000000875e3e244 x18: 0000000000000010 [ 17.097343] x17: 0000000000000000 x16:
    0000000000000000 [ 17.102647] x15: ffffff8879e4a988 x14: 0720072007200720 [ 17.107959] x13:
    0720072007200720 x12: 0720072007200720 [ 17.113261] x11: 0720072007200720 x10: 0720072007200720 [     17.118565] x9 : 0720072007200720 x8 : 000000000000022d [ 17.123869] x7 : 0000000000000015 x6 :
    0000000000000098 [ 17.129173] x5 : 0000000000000000 x4 : 0000000000000000 [ 17.134475] x3 :
    00000000ffffffff x2 : ffffffc010a1d370 [ 17.139778] x1 : b420c9d75d27bb00 x0 : 0000000000000000 [     17.145082] Call trace: [ 17.147524] check_unmap+0x6a0/0x900 [ 17.151091] debug_dma_unmap_page+0x88/0x90 [     17.155266] gem_rx+0x114/0x2f0 [ 17.158396] macb_poll+0x58/0x100 [ 17.161705] net_rx_action+0x118/0x400 [     17.165445] __do_softirq+0x138/0x36c [ 17.169100] irq_exit+0x98/0xc0 [ 17.172234]
    __handle_domain_irq+0x64/0xc0 [ 17.176320] gic_handle_irq+0x5c/0xc0 [ 17.179974] el1_irq+0xb8/0x140 [     17.183109] xiic_process+0x5c/0xe30 [ 17.186677] irq_thread_fn+0x28/0x90 [ 17.190244]     irq_thread+0x208/0x2a0 [ 17.193724] kthread+0x130/0x140 [ 17.196945] ret_from_fork+0x10/0x20 [ 17.200510]
    ---[ end trace 7240980785f81d6f ]--- [ 237.021490] ------------[ cut here ]------------ [ 237.026129] DMA-     API: exceeded 7 overlapping mappings of cacheline 0x0000000021d79e7b [ 237.033886] WARNING: CPU: 0 PID: 0     at kernel/dma/debug.c:499 add_dma_entry+0x214/0x240 [ 237.041802] Modules linked in: xxxxx [ 237.061637]     CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.4.0 #28 [ 237.068941] Hardware name: xxxxx [ 237.073116]     pstate: 80000085 (Nzcv daIf -PAN -UAO) [ 237.077900] pc : add_dma_entry+0x214/0x240 [ 237.081986] lr :
    add_dma_entry+0x214/0x240 [ 237.086072] sp : ffffffc010003c30 [ 237.089379] x29: ffffffc010003c30 x28:
    ffffff8878a0be00 [ 237.094683] x27: 0000000000000180 x26: ffffff8878e387c0 [ 237.099987] x25:
    0000000000000002 x24: 0000000000000000 [ 237.105290] x23: 000000000000003b x22: ffffffc010a0fa00 [     237.110594] x21: 0000000021d79e7b x20: ffffffc010abe600 [ 237.115897] x19: 00000000ffffffef x18:
    0000000000000010 [ 237.121201] x17: 0000000000000000 x16: 0000000000000000 [ 237.126504] x15:
    ffffffc010a0fdc8 x14: 0720072007200720 [ 237.131807] x13: 0720072007200720 x12: 0720072007200720 [     237.137111] x11: 0720072007200720 x10: 0720072007200720 [ 237.142415] x9 : 0720072007200720 x8 :
    0000000000000259 [ 237.147718] x7 : 0000000000000001 x6 : 0000000000000000 [ 237.15302 ---truncated---     (CVE-2023-54257)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013598 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: macb: fix a memory corruption in extended buffer descriptor mode

    For quite some time we were chasing a bug which looked like a sudden     permanent failure of networking and mmc on some of our devices.
    The bug was very sensitive to any software changes and even more to     any kernel debug options.

    Finally we got a setup where the problem was reproducible with     CONFIG_DMA_API_DEBUG=y and it revealed the issue with the rx dma:

    [   16.992082] ------------[ cut here ]------------     [   16.996779] DMA-API: macb ff0b0000.ethernet: device driver tries to free DMA memory it has not     allocated [device address=0x0000000875e3e244] [size=1536 bytes]     [   17.011049] WARNING: CPU: 0 PID: 85 at kernel/dma/debug.c:1011 check_unmap+0x6a0/0x900     [   17.018977] Modules linked in: xxxxx     [   17.038823] CPU: 0 PID: 85 Comm: irq/55-8000f000 Not tainted 5.4.0 #28     [   17.045345] Hardware name: xxxxx     [   17.049528] pstate: 60000005 (nZCv daif -PAN -UAO)     [   17.054322] pc : check_unmap+0x6a0/0x900     [   17.058243] lr : check_unmap+0x6a0/0x900     [   17.062163] sp : ffffffc010003c40     [   17.065470] x29: ffffffc010003c40 x28: 000000004000c03c     [   17.070783] x27: ffffffc010da7048 x26: ffffff8878e38800     [   17.076095] x25: ffffff8879d22810 x24: ffffffc010003cc8     [   17.081407] x23: 0000000000000000 x22: ffffffc010a08750     [   17.086719] x21: ffffff8878e3c7c0 x20: ffffffc010acb000     [   17.092032] x19: 0000000875e3e244 x18: 0000000000000010     [   17.097343] x17: 0000000000000000 x16: 0000000000000000     [   17.102647] x15: ffffff8879e4a988 x14: 0720072007200720     [   17.107959] x13: 0720072007200720 x12: 0720072007200720     [   17.113261] x11: 0720072007200720 x10: 0720072007200720     [   17.118565] x9 : 0720072007200720 x8 : 000000000000022d     [   17.123869] x7 : 0000000000000015 x6 : 0000000000000098     [   17.129173] x5 : 0000000000000000 x4 : 0000000000000000     [   17.134475] x3 : 00000000ffffffff x2 : ffffffc010a1d370     [   17.139778] x1 : b420c9d75d27bb00 x0 : 0000000000000000     [   17.145082] Call trace:
    [   17.147524]  check_unmap+0x6a0/0x900     [   17.151091]  debug_dma_unmap_page+0x88/0x90     [   17.155266]  gem_rx+0x114/0x2f0     [   17.158396]  macb_poll+0x58/0x100     [   17.161705]  net_rx_action+0x118/0x400     [   17.165445]  __do_softirq+0x138/0x36c     [   17.169100]  irq_exit+0x98/0xc0     [   17.172234]  __handle_domain_irq+0x64/0xc0     [   17.176320]  gic_handle_irq+0x5c/0xc0     [   17.179974]  el1_irq+0xb8/0x140     [   17.183109]  xiic_process+0x5c/0xe30     [   17.186677]  irq_thread_fn+0x28/0x90     [   17.190244]  irq_thread+0x208/0x2a0     [   17.193724]  kthread+0x130/0x140     [   17.196945]  ret_from_fork+0x10/0x20     [   17.200510] ---[ end trace 7240980785f81d6f ]---

    [  237.021490] ------------[ cut here ]------------     [  237.026129] DMA-API: exceeded 7 overlapping mappings of cacheline 0x0000000021d79e7b     [  237.033886] WARNING: CPU: 0 PID: 0 at kernel/dma/debug.c:499 add_dma_entry+0x214/0x240     [  237.041802] Modules linked in: xxxxx     [  237.061637] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G        W         5.4.0 #28     [  237.068941] Hardware name: xxxxx     [  237.073116] pstate: 80000085 (Nzcv daIf -PAN -UAO)     [  237.077900] pc : add_dma_entry+0x214/0x240     [  237.081986] lr : add_dma_entry+0x214/0x240     [  237.086072] sp : ffffffc010003c30     [  237.089379] x29: ffffffc010003c30 x28: ffffff8878a0be00     [  237.094683] x27: 0000000000000180 x26: ffffff8878e387c0     [  237.099987] x25: 0000000000000002 x24: 0000000000000000     [  237.105290] x23: 000000000000003b x22: ffffffc010a0fa00     [  237.110594] x21: 0000000021d79e7b x20: ffffffc010abe600     [  237.115897] x19: 00000000ffffffef x18: 0000000000000010     [  237.121201] x17: 0000000000000000 x16: 0000000000000000     [  237.126504] x15: ffffffc010a0fdc8 x14: 0720072007200720     [  237.131807] x13: 0720072007200720 x12: 0720072007200720     [  237.137111] x11: 0720072007200720 x10: 0720072007200720     [  237.142415] x9 : 0720072007200720 x8 : 0000000000000259     [  237.147718] x7 : 0000000000000001 x6 : 0000000000000000     [  237.15302
    ---truncated---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013369 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: macb: fix a memory corruption in extended buffer descriptor mode

    For quite some time we were chasing a bug which looked like a sudden     permanent failure of networking and mmc on some of our devices.
    The bug was very sensitive to any software changes and even more to     any kernel debug options.

    Finally we got a setup where the problem was reproducible with     CONFIG_DMA_API_DEBUG=y and it revealed the issue with the rx dma:

    [   16.992082] ------------[ cut here ]------------     [   16.996779] DMA-API: macb ff0b0000.ethernet: device driver tries to free DMA memory it has not     allocated [device address=0x0000000875e3e244] [size=1536 bytes]     [   17.011049] WARNING: CPU: 0 PID: 85 at kernel/dma/debug.c:1011 check_unmap+0x6a0/0x900     [   17.018977] Modules linked in: xxxxx     [   17.038823] CPU: 0 PID: 85 Comm: irq/55-8000f000 Not tainted 5.4.0 #28     [   17.045345] Hardware name: xxxxx     [   17.049528] pstate: 60000005 (nZCv daif -PAN -UAO)     [   17.054322] pc : check_unmap+0x6a0/0x900     [   17.058243] lr : check_unmap+0x6a0/0x900     [   17.062163] sp : ffffffc010003c40     [   17.065470] x29: ffffffc010003c40 x28: 000000004000c03c     [   17.070783] x27: ffffffc010da7048 x26: ffffff8878e38800     [   17.076095] x25: ffffff8879d22810 x24: ffffffc010003cc8     [   17.081407] x23: 0000000000000000 x22: ffffffc010a08750     [   17.086719] x21: ffffff8878e3c7c0 x20: ffffffc010acb000     [   17.092032] x19: 0000000875e3e244 x18: 0000000000000010     [   17.097343] x17: 0000000000000000 x16: 0000000000000000     [   17.102647] x15: ffffff8879e4a988 x14: 0720072007200720     [   17.107959] x13: 0720072007200720 x12: 0720072007200720     [   17.113261] x11: 0720072007200720 x10: 0720072007200720     [   17.118565] x9 : 0720072007200720 x8 : 000000000000022d     [   17.123869] x7 : 0000000000000015 x6 : 0000000000000098     [   17.129173] x5 : 0000000000000000 x4 : 0000000000000000     [   17.134475] x3 : 00000000ffffffff x2 : ffffffc010a1d370     [   17.139778] x1 : b420c9d75d27bb00 x0 : 0000000000000000     [   17.145082] Call trace:
    [   17.147524]  check_unmap+0x6a0/0x900     [   17.151091]  debug_dma_unmap_page+0x88/0x90     [   17.155266]  gem_rx+0x114/0x2f0     [   17.158396]  macb_poll+0x58/0x100     [   17.161705]  net_rx_action+0x118/0x400     [   17.165445]  __do_softirq+0x138/0x36c     [   17.169100]  irq_exit+0x98/0xc0     [   17.172234]  __handle_domain_irq+0x64/0xc0     [   17.176320]  gic_handle_irq+0x5c/0xc0     [   17.179974]  el1_irq+0xb8/0x140     [   17.183109]  xiic_process+0x5c/0xe30     [   17.186677]  irq_thread_fn+0x28/0x90     [   17.190244]  irq_thread+0x208/0x2a0     [   17.193724]  kthread+0x130/0x140     [   17.196945]  ret_from_fork+0x10/0x20     [   17.200510] ---[ end trace 7240980785f81d6f ]---

    [  237.021490] ------------[ cut here ]------------     [  237.026129] DMA-API: exceeded 7 overlapping mappings of cacheline 0x0000000021d79e7b     [  237.033886] WARNING: CPU: 0 PID: 0 at kernel/dma/debug.c:499 add_dma_entry+0x214/0x240     [  237.041802] Modules linked in: xxxxx     [  237.061637] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G        W         5.4.0 #28     [  237.068941] Hardware name: xxxxx     [  237.073116] pstate: 80000085 (Nzcv daIf -PAN -UAO)     [  237.077900] pc : add_dma_entry+0x214/0x240     [  237.081986] lr : add_dma_entry+0x214/0x240     [  237.086072] sp : ffffffc010003c30     [  237.089379] x29: ffffffc010003c30 x28: ffffff8878a0be00     [  237.094683] x27: 0000000000000180 x26: ffffff8878e387c0     [  237.099987] x25: 0000000000000002 x24: 0000000000000000     [  237.105290] x23: 000000000000003b x22: ffffffc010a0fa00     [  237.110594] x21: 0000000021d79e7b x20: ffffffc010abe600     [  237.115897] x19: 00000000ffffffef x18: 0000000000000010     [  237.121201] x17: 0000000000000000 x16: 0000000000000000     [  237.126504] x15: ffffffc010a0fdc8 x14: 0720072007200720     [  237.131807] x13: 0720072007200720 x12: 0720072007200720     [  237.137111] x11: 0720072007200720 x10: 0720072007200720     [  237.142415] x9 : 0720072007200720 x8 : 0000000000000259     [  237.147718] x7 : 0000000000000001 x6 : 0000000000000000     [  237.15302
    ---truncated---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011182 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: macb: fix a memory corruption in extended buffer descriptor mode

    For quite some time we were chasing a bug which looked like a sudden     permanent failure of networking and mmc on some of our devices.
    The bug was very sensitive to any software changes and even more to     any kernel debug options.

    Finally we got a setup where the problem was reproducible with     CONFIG_DMA_API_DEBUG=y and it revealed the issue with the rx dma:

    [   16.992082] ------------[ cut here ]------------     [   16.996779] DMA-API: macb ff0b0000.ethernet: device driver tries to free DMA memory it has not     allocated [device address=0x0000000875e3e244] [size=1536 bytes]     [   17.011049] WARNING: CPU: 0 PID: 85 at kernel/dma/debug.c:1011 check_unmap+0x6a0/0x900     [   17.018977] Modules linked in: xxxxx     [   17.038823] CPU: 0 PID: 85 Comm: irq/55-8000f000 Not tainted 5.4.0 #28     [   17.045345] Hardware name: xxxxx     [   17.049528] pstate: 60000005 (nZCv daif -PAN -UAO)     [   17.054322] pc : check_unmap+0x6a0/0x900     [   17.058243] lr : check_unmap+0x6a0/0x900     [   17.062163] sp : ffffffc010003c40     [   17.065470] x29: ffffffc010003c40 x28: 000000004000c03c     [   17.070783] x27: ffffffc010da7048 x26: ffffff8878e38800     [   17.076095] x25: ffffff8879d22810 x24: ffffffc010003cc8     [   17.081407] x23: 0000000000000000 x22: ffffffc010a08750     [   17.086719] x21: ffffff8878e3c7c0 x20: ffffffc010acb000     [   17.092032] x19: 0000000875e3e244 x18: 0000000000000010     [   17.097343] x17: 0000000000000000 x16: 0000000000000000     [   17.102647] x15: ffffff8879e4a988 x14: 0720072007200720     [   17.107959] x13: 0720072007200720 x12: 0720072007200720     [   17.113261] x11: 0720072007200720 x10: 0720072007200720     [   17.118565] x9 : 0720072007200720 x8 : 000000000000022d     [   17.123869] x7 : 0000000000000015 x6 : 0000000000000098     [   17.129173] x5 : 0000000000000000 x4 : 0000000000000000     [   17.134475] x3 : 00000000ffffffff x2 : ffffffc010a1d370     [   17.139778] x1 : b420c9d75d27bb00 x0 : 0000000000000000     [   17.145082] Call trace:
    [   17.147524]  check_unmap+0x6a0/0x900     [   17.151091]  debug_dma_unmap_page+0x88/0x90     [   17.155266]  gem_rx+0x114/0x2f0     [   17.158396]  macb_poll+0x58/0x100     [   17.161705]  net_rx_action+0x118/0x400     [   17.165445]  __do_softirq+0x138/0x36c     [   17.169100]  irq_exit+0x98/0xc0     [   17.172234]  __handle_domain_irq+0x64/0xc0     [   17.176320]  gic_handle_irq+0x5c/0xc0     [   17.179974]  el1_irq+0xb8/0x140     [   17.183109]  xiic_process+0x5c/0xe30     [   17.186677]  irq_thread_fn+0x28/0x90     [   17.190244]  irq_thread+0x208/0x2a0     [   17.193724]  kthread+0x130/0x140     [   17.196945]  ret_from_fork+0x10/0x20     [   17.200510] ---[ end trace 7240980785f81d6f ]---

    [  237.021490] ------------[ cut here ]------------     [  237.026129] DMA-API: exceeded 7 overlapping mappings of cacheline 0x0000000021d79e7b     [  237.033886] WARNING: CPU: 0 PID: 0 at kernel/dma/debug.c:499 add_dma_entry+0x214/0x240     [  237.041802] Modules linked in: xxxxx     [  237.061637] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G        W         5.4.0 #28     [  237.068941] Hardware name: xxxxx     [  237.073116] pstate: 80000085 (Nzcv daIf -PAN -UAO)     [  237.077900] pc : add_dma_entry+0x214/0x240     [  237.081986] lr : add_dma_entry+0x214/0x240     [  237.086072] sp : ffffffc010003c30     [  237.089379] x29: ffffffc010003c30 x28: ffffff8878a0be00     [  237.094683] x27: 0000000000000180 x26: ffffff8878e387c0     [  237.099987] x25: 0000000000000002 x24: 0000000000000000     [  237.105290] x23: 000000000000003b x22: ffffffc010a0fa00     [  237.110594] x21: 0000000021d79e7b x20: ffffffc010abe600     [  237.115897] x19: 00000000ffffffef x18: 0000000000000010     [  237.121201] x17: 0000000000000000 x16: 0000000000000000     [  237.126504] x15: ffffffc010a0fdc8 x14: 0720072007200720     [  237.131807] x13: 0720072007200720 x12: 0720072007200720     [  237.137111] x11: 0720072007200720 x10: 0720072007200720     [  237.142415] x9 : 0720072007200720 x8 : 0000000000000259     [  237.147718] x7 : 0000000000000001 x6 : 0000000000000000     [  237.15302
    ---truncated---

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
281715	Linux Distros 未修補的弱點：CVE-2023-54257	Nessus	Misc.	1/5/2026	9/30/2026	critical
281715	Linux Distros 未修补的漏洞：CVE-2023-54257	Nessus	Misc.	1/5/2026	9/30/2026	critical
281715	Linux Distros のパッチ未適用の脆弱性: CVE-2023-54257	Nessus	Misc.	1/5/2026	9/30/2026	critical
281715	Linux Distros Unpatched Vulnerability : CVE-2023-54257	Nessus	Misc.	1/5/2026	9/30/2026	critical
309260	Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013598)	Nessus	Unity Linux Local Security Checks	4/22/2026	8/29/2026	critical
307967	Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-013369)	Nessus	Unity Linux Local Security Checks	4/21/2026	9/6/2026	critical
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	9/15/2026	high
301628	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1280)	Nessus	Huawei Local Security Checks	3/10/2026	3/10/2026	high
319448	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-2132)	Nessus	Huawei Local Security Checks	6/6/2026	6/6/2026	high
301595	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1244)	Nessus	Huawei Local Security Checks	3/10/2026	3/10/2026	high
308743	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-011182)	Nessus	Unity Linux Local Security Checks	4/21/2026	4/21/2026	critical
319325	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-2171)	Nessus	Huawei Local Security Checks	6/6/2026	6/6/2026	high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

high

high

high

high

critical

high