Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - scsimessagemptlan修复 mptlan_remove() 中的释放后使用缺陷原因是争用条件 mptlan_probe() 调用可初始化 &priv->post_buckets_task 工作队列的 mpt_register_lan_device()。对 mpt_lan_wake_post_buckets_task() 的调用将随后启动该工作。在 mptlan_remove() 中卸载驱动程序期间可能会发生以下争用CPU0 CPU1 |mpt_lan_post_receive_buckets_work() mptlan_remove() | CPU0 CPU1 |mpt_lan_post_receive_buckets_work() mptlan_remove() | free_netdev() | free_netdev() kfree(dev); | | | dev->mtu | //使用 通过在 mptlan_remove() 中进行清理之前完成工作来修复此问题。 [mkp确实应该删除 mptlan 而不是尝试修复它] (CVE-2023-54310)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - scsi訊息mptlan修正 mptlan_remove() 中的釋放後使用錯誤這是因為爭用情形 mptlan_probe() 呼叫 mpt_register_lan_device()其會初始化 &priv->post_buckets_task 工作佇列所導致。對 mpt_lan_wake_post_buckets_task() 的呼叫隨後會開始工作。在 mptlan_remove() 中卸載驅動程式期間可能會發生下列爭用CPU0 CPU1 |mpt_lan_post_receive_buckets_work() mptlan_remove() | free_netdev() | kfree(dev); | | | dev->mtu | //use 透過在 mptlan_remove() 中進行清理之前完成工作來修正此問題。 [mkp我們確實應該移除 mptlan而非嘗試修正它] (CVE-2023-54310)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - scsimessagemptlan競合状態による mptlan_remove() での use-after-free バグを修正します mptlan_probe() は mpt_register_lan_device() を呼び出し、これにより &priv->post_buckets_task 作業キューが初期化されます。その後、mpt_lan_wake_post_buckets_task() を呼び出すと、作業が開始されます。mptlan_remove() でのドライバーのアンロード中、次の競合が発生する可能性があります。CPU0 CPU1 |mpt_lan_post_receive_buckets_work() mptlan_remove() | free_netdev() | kfree(dev); | | | dev->mtu | //use mptlan_remove() でクリーンアップする前に作業を完了することで、これを修正します。 [mkp修正を試みるのではなく、本当に削除する必要があります]CVE-2023-54310]

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013248 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition

    mptlan_probe() calls mpt_register_lan_device() which initializes the     &priv->post_buckets_task workqueue. A call to     mpt_lan_wake_post_buckets_task() will subsequently start the work.

    During driver unload in mptlan_remove() the following race may occur:

    CPU0                  CPU1

                        |mpt_lan_post_receive_buckets_work()     mptlan_remove()     |       free_netdev()     |         kfree(dev);     |                         |                         | dev->mtu                         |   //use

    Fix this by finishing the work prior to cleaning up in mptlan_remove().

    [mkp: we really should remove mptlan instead of attempting to fix it]

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100353 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition

    mptlan_probe() calls mpt_register_lan_device() which initializes the     &priv->post_buckets_task workqueue. A call to     mpt_lan_wake_post_buckets_task() will subsequently start the work.

    During driver unload in mptlan_remove() the following race may occur:

    CPU0                  CPU1

                        |mpt_lan_post_receive_buckets_work()     mptlan_remove()     |       free_netdev()     |         kfree(dev);     |                         |                         | dev->mtu                         |   //use

    Fix this by finishing the work prior to cleaning up in mptlan_remove().

    [mkp: we really should remove mptlan instead of attempting to fix it]

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition mptlan_probe()     calls mpt_register_lan_device() which initializes the &priv->post_buckets_task workqueue. A call to     mpt_lan_wake_post_buckets_task() will subsequently start the work. During driver unload in mptlan_remove()     the following race may occur: CPU0 CPU1 |mpt_lan_post_receive_buckets_work() mptlan_remove() |     free_netdev() | kfree(dev); | | | dev->mtu | //use Fix this by finishing the work prior to cleaning up in     mptlan_remove(). [mkp: we really should remove mptlan instead of attempting to fix it] (CVE-2023-54310)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
281678	Linux Distros 未修补的漏洞：CVE-2023-54310	Nessus	Misc.	1/5/2026	11/11/2026	high
281678	Linux Distros 未修補的弱點：CVE-2023-54310	Nessus	Misc.	1/5/2026	11/11/2026	high
281678	Linux Distros のパッチ未適用の脆弱性: CVE-2023-54310	Nessus	Misc.	1/5/2026	11/11/2026	high
307931	Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-013248)	Nessus	Unity Linux Local Security Checks	4/21/2026	9/6/2026	high
337029	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100353)	Nessus	Unity Linux Local Security Checks	8/17/2026	8/17/2026	high
281678	Linux Distros Unpatched Vulnerability : CVE-2023-54310	Nessus	Misc.	1/5/2026	11/11/2026	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	7/22/2021	11/2/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high