The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2_reconnect_server(),     a dummy tcon is passed down to smb2_reconnect() with ->query_interface uninitialized, so we can't call     queue_delayed_work() on it. Fix the following warning by ensuring that we're queueing the delayed worker     from correct tcon. WARNING: CPU: 4 PID: 1126 at kernel/workqueue.c:2498 __queue_delayed_work+0x1d2/0x200     Modules linked in: cifs cifs_arc4 nls_ucs2_utils cifs_md4 [last unloaded: cifs] CPU: 4 UID: 0 PID: 1126     Comm: kworker/4:0 Not tainted 6.16.0-rc3 #5 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 +     ICH9, 2009), BIOS 1.16.3-4.fc42 04/01/2014 Workqueue: cifsiod smb2_reconnect_server [cifs] RIP:
    0010:__queue_delayed_work+0x1d2/0x200 Code: 41 5e 41 5f e9 7f ee ff ff 90 0f 0b 90 e9 5d ff ff ff bf 02 00     00 00 e8 6c f3 07 00 89 c3 eb bd 90 0f 0b 90 e9 57 f> 0b 90 e9 65 fe ff ff 90 0f 0b 90 e9 72 fe ff ff 90     0f 0b 90 e9 RSP: 0018:ffffc900014afad8 EFLAGS: 00010003 RAX: 0000000000000000 RBX: ffff888124d99988 RCX:
    ffffffff81399cc1 RDX: dffffc0000000000 RSI: ffff888114326e00 RDI: ffff888124d999f0 RBP: 000000000000ea60     R08: 0000000000000001 R09: ffffed10249b3331 R10: ffff888124d9998f R11: 0000000000000004 R12:
    0000000000000040 R13: ffff888114326e00 R14: ffff888124d999d8 R15: ffff888114939020 FS:
    0000000000000000(0000) GS:ffff88829f7fe000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0:
    0000000080050033 CR2: 00007ffe7a2b4038 CR3: 0000000120a6f000 CR4: 0000000000750ef0 PKRU: 55555554 Call     Trace: <TASK> queue_delayed_work_on+0xb4/0xc0 smb2_reconnect+0xb22/0xf50 [cifs]     smb2_reconnect_server+0x413/0xd40 [cifs] ? __pfx_smb2_reconnect_server+0x10/0x10 [cifs] ?     local_clock_noinstr+0xd/0xd0 ? local_clock+0x15/0x30 ? lock_release+0x29b/0x390     process_one_work+0x4c5/0xa10 ? __pfx_process_one_work+0x10/0x10 ? __list_add_valid_or_report+0x37/0x120     worker_thread+0x2f1/0x5a0 ? __kthread_parkme+0xde/0x100 ? __pfx_worker_thread+0x10/0x10     kthread+0x1fe/0x380 ? kthread+0x10f/0x380 ? __pfx_kthread+0x10/0x10 ? local_clock_noinstr+0xd/0xd0 ?     ret_from_fork+0x1b/0x1f0 ? local_clock+0x15/0x30 ? lock_release+0x29b/0x390 ? rcu_is_watching+0x20/0x50 ?
    __pfx_kthread+0x10/0x10 ret_from_fork+0x15b/0x1f0 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30     </TASK> irq event stamp: 1116206 hardirqs last enabled at (1116205): [<ffffffff8143af42>]
    __up_console_sem+0x52/0x60 hardirqs last disabled at (1116206): [<ffffffff81399f0e>]     queue_delayed_work_on+0x6e/0xc0 softirqs last enabled at (1116138): [<ffffffffc04562fd>]
    __smb_send_rqst+0x42d/0x950 [cifs] softirqs last disabled at (1116136): [<ffffffff823d35e1>]     release_sock+0x21/0xf0 (CVE-2025-38379)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - smbclientチャネル再接続時の警告を修正します。 smb2_reconnect_server() でチャネルを再接続するとき、ダミー tcon が ->query_interface の初期化されていない状態で smb2_reconnect() に渡されます。このため、query_delayed_work() を呼び出すことができません。適切な tcon から遅延したワーカーを確実にキューに入れることで、以下の警告を修正します。警告CPU4 PID1126 at kernel/workqueue.c:2498 __queue_delayed_work+0x1d2/0x200 リンクされているモジュールcifs cifs_arc4 nls_ucs2_utils cifs_md4 [最終アンロードcifs] CPU4 UID0 PID1126 Commkworker/4:0 汚染されていない 6.16.0-rc3 #5 PREEMPT(voluntary) ハードウェア名: QEMU Standard PC (Q35 + ICH9、2009)、BIOS 1.16.3-4.fc42 04/01/2014 ワークキュー: cifsiod smb2_reconnect_server [cifs] RIP:
    0010:__queue_delayed_work+0x1d2/0x200 コード: 41 5e 41 5f e9 7f ee ff ff 90 0f 0b 90 e9 5d ff ff bf 02 00 00 e8 6c f3 07 00 89 c3 eb bd 90 0f 0b 90 e 9 00000000000000000000 90 e9 65 fe ff ff 90 0f 0b 90 e9 72 fe ff ff 90 0f 0b 90 e9 RSP 0018 :ffffc900014afad8 EFLAGS 00010003 RAX 0000000000000000 RBX ffff888124d99988 RCX
    ffffffff81399cc1 RDX: dffffc0000000000 RSI: ffff888114326e00 RDI: ffff888124d999f0 RBP: 000000000000ea60 R08: 0000000000000001 R09: ffffed10249b3331 R10: ffff888124d9998f R11: 0000000000000004 R12:
    0000000000000040 R13ffff888114326e00 R14: ffff888124d999d8 R15ffff888114939020 FS
    00000000000000(0000) GS:ffff88829f7fe000(0000) knlGS:0000000000000000 CS:0010 DS:0000 ES:0000 CR0:
    0000000080050033 CR2: 00007ffe7a2b4038 CR3: 0000000120a6f000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> queue_delayed_work_on+0xb4/0xc0 smb2_reconnect+0xb22/0xf50 [cifs] smb2_reconnect_server+0x413/0xd40 [cifs] ? __pfx_smb2_reconnect_server+0x10/0x10 [cifs] ? local_clock_noinstr+0xd/0xd0 ? local_clock+0x15/0x30 ? lock_release+0x29b/0x390 process_one_work+0x4c5/0xa10 ? __pfx_process_one_work+0x10/0x10 ? __list_add_valid_or_report+0x37/0x120 worker_thread+0x2f1/0x5a0 ? __kthread_parme+0xde/0x100 ? __pfx_worker_thread+0x10/0x10 kthread+0x1fe/0x380 ? kthread+0x10f/0x380 ? __pfx_kthread+0x10/0x10 ? local_clock_noinstr+0xd/0xd0 ? ret_from_fork+0x1b/0x1f0 ? local_clock+0x15/0x30 ? lock_release+0x29b/0x390 ? rcu_is_watching+0x20/0x50 ?
    __pfx_kthread+0x10/0x10 ret_from_fork+0x15b/0x1f0 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> irq イベントスタンプ1116206 hardirqs は 1116205で最後に有効化されました[<ffffffff8143af42>]
    __up_console_sem+0x52/0x60 hardirqs は、1116206 で最後に無効化されました[<ffffffff81399f0e>] queue_delayed_work_on+0x6e/0xc0 softirqs は、1116138で最後に有効化されました[<ffffffffc04562fd>]
    __smb_send_rqst+0x42d/0x950 [cifs] softirqs は 1116136で最後に無効になりました [<ffffffff823d35e1>] release_sock+0x21/0xf0CVE-2025-38379

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - smbclient修复重新连接通道时的警告在 smb2_reconnect_server() 中重新连接通道时虚拟 tcon 向下传递到 smb2_reconnect() 时 ->query_interface 未初始化因此无法在其上调用 queue_delayed_work()。修复以下警告通过确保从正确的 tcon 延迟工作线程排队。警告CPU: 4 PID: 1126 at kernel/workqueue.c:2498 __queue_delayed_work+0x1d2/0x200 链接的模块cifs cifs_arc4 nls_ucs2_utils cifs_md4 [上次卸载: cifs] CPU: 4 UID: 0 PID: 1126 Comm: kworker/4:0 未受感染 6.16.0-rc3 #5 PREEMPT(随意) 硬件名称QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-4.fc42 04/01/2014 工作队列cifsiod smb2_reconnect_server [cifs] RIP
    0010__queue_delayed_work+0x1d2/0x200 代码41 5e 41 5f e9 7f ee ff ff 90 0f 0b 90 e9 5d ff ff ff bf 02 00 00 00 e8 6c f3 07 00 89 c3 eb bd 90 0f 0b 90 f> 0b 57 f> e9 57 90 e9 65 fe ff ff 90 0f 0b 90 e9 72 fe ff ff 90 0f 0b 90 e9 RSP0018:ffffc900014afad8 EFLAGS: 00010003 RAX: 000000000000000 RBX: ffff888124d99988 RCX
    ffffffff81399cc1 RDX: dffffc0000000000 RSI: ffff888114326e00 RDI: ffff888124d999f0 RBP: 000000000000ea60 R08: 0000000000000001 R09: ffffed10249b3331 R10: ffff888124d9998f R11: 0000000000000004 R12:
    0000000000000040 R13ffff888114326e00 R14ffff888124d999d8 R15ffff888114939020 FS
    0000000000000000(0000) GS:ffff88829f7fe000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0:
    0000000080050033 CR2: 00007ffe7a2b4038 CR3: 0000000120a6f000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> queue_delayed_work_on+0xb4/0xc0 smb2_reconnect+0xb22/0xf50 [cifs] smb2_reconnect_server+0x413/0xd40 [cifs] ? __pfx_smb2_reconnect_server+0x10/0x10 [cifs] ? local_clock_noinstr+0xd/0xd0 ? local_clock+0x15/0x30 ? lock_release+0x29b/0x390 process_one_work+0x4c5/0xa10 __pfx_process_one_work+0x10/0x10 ? __list_add_valid_or_report+0x37/0x120 worker_thread+0x2f1/0x5a0 ? __kthread_arkme+0xde/0x100 ? __pfx_worker_thread+0x10/0x10 kthread+0x1fe/0x380 ? kthread+0x10f/0x380 ? __pfx_kthread+0x10/0x10 ? local_clock_noinstr+0xd/0xd0 ? ret_from_fork+0x1b/0x1f0 ? local_clock+0x15/0x30 ? lock_release+0x29b/0x390 ? rcu_is_watching+0x20/0x50
    __pfx_kthread+0x10/0x10 ret_from_fork+0x15b/0x1f0 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> irq 事件标记 1116206 hardirqs 最后启用于 (1116205): [<ffffffff8143af42>]
    __up_console_sem+0x52/0x60 hardirqs 上次禁用的时间 (1116206)[<ffffffff81399f0e>] queue_delayed_work_on+0x6e/0xc0 softirqs 上次启用的时间 (1116138): [<ffffffffc04562fd>]
    __smb_send_rqst+0x42d/0x950 [cifs] softirqs 最后禁用于 (1116136): [<ffffffff823d35e1>] release_sock+0x21/0xf0 (CVE-2025-38379)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - smb用戶端修正重新連線通道時的警告。重新連線 smb2_reconnect_server() 中的通道時系統會將虛擬 tcon 向下傳遞至 ->query_interface 未初始化的 smb2_reconnect()因此我們無法在其上呼叫 queue_delayed_work()。確保將來自正確 tcon 的延遲背景工作排入佇列以修正下列警告。警告CPU4 PID1126 at kernel/workqueue.c:2498 __queue_delayed_work+0x1d2/0x200 模組連結cifs cifs_arc4 nls_ucs2_utils cifs_md4 [上次卸載cifs] CPU4 UID 0 PID1126 Commkworker/4:0 未受污染的 6.16.0-rc3 #5 PREEMPT(自發) 硬體名稱QEMU Standard PC (Q35 + ICH9, 2009)BIOS 1.16.3-4.fc42 2014 年 4 月 1 日 工作佇列cifsiod smb2_reconnect_server [cifs] RIP
    0010:__queue_delayed_work+0x1d2/0x200 程式碼41 5e 41 5f e9 7f ee ff ff 90 0f 0b 90 e9 5d ff ff ff bf 02 00 00 00 e8 6c f3 07 00 89 c3 eb bd 90 0f 0b 90 e9 5 0b7f>b7f>b7f> 0010 90 e9 65 fe ff ff 90 0f 0b 90 e9 72 fe ff ff 90 0f 0b 90 e9 RSP0018:ffffc900014afad8 EFLAGS00010003 RAX 0000000000000000 RBXffff888124d99988RCX:
    ffffffff81399cc1 RDX: dffffc0000000000 RSI: ffff888114326e00 RDI: ffff888124d999f0 RBP: 000000000000ea60 R08: 0000000000000001 R09: ffffed10249b3331 R10: ffff888124d9998f R11: 0000000000000004 R12:
    0000000000000040 R13ffff888114326e00 R14ffff888124d999d8 R15ffff888114939020 FS
    0000000000000000(0000) GS:ffff88829f7fe000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0
    0000000080050033 CR2: 00007ffe7a2b4038 CR3: 0000000120a6f000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> queue_delayed_work_on+0xb4/0xc0 smb2_reconnect+0xb22/0xf50 [cifs] smb2_reconnect_server+0x413/0xd40 [cifs] ? __pfx_smb2_reconnect_server+0x10/0x10 [cifs] ? local_clock_noinstr+0xd/0xd0 local_clock+0x15/0x30 lock_release+0x29b/0x390 process_one_work+0x4c5/0xa10 ? __pfx_process_one_work+0x10/0x10 ? __list_add_valid_or_report+0x37/0x120 worker_thread+0x2f1/0x5a0 ? __kthread_parkme+0xde/0x100 ? __pfx_worker_thread+0x10/0x10 kthread+0x1fe/0x380 ? kthread+0x10f/0x380 ? __pfx_kthread+0x10/0x10 ? local_clock_noinstr+0xd/0xd0 ret_from_fork+0x1b/0x1f0 ? local_clock+0x15/0x30 lock_release+0x29b/0x390 ? rcu_is_watching+0x20/0x50 ?
    __pfx_kthread+0x10/0x10 ret_from_fork+0x15b/0x1f0 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> irq 事件戳1116206 hardirqs 最後一次啟用是在 (1116205)[<ffffffff8143af42>]
    __up_console_sem+0x52/0x60 hardirqs 上次停用於 (1116206)[<ffffffff81399f0e>] queue_delayed_work_on+0x6e/0xc0 softirqs 上次啟用於 (1116138)[<ffffffffc04562fd>]
    __smb_send_rqst+0x42d/0x950 [cifs] softirqs 上次於 (1116136) 停用[<ffffffff823d35e1>] release_sock+0x21/0xf0 (CVE-2025-38379)

請注意，Nessus 依賴供應商報告的套件存在。

ID	Name	Product	Family	Published	Updated	Severity
251331	Linux Distros Unpatched Vulnerability : CVE-2025-38379	Nessus	Misc.	8/18/2025	8/18/2025	medium
251331	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38379	Nessus	Misc.	8/18/2025	8/18/2025	medium
251331	Linux Distros 未修补的漏洞：CVE-2025-38379	Nessus	Misc.	8/18/2025	8/18/2025	medium
251331	Linux Distros 未修補的弱點：CVE-2025-38379	Nessus	Misc.	8/18/2025	8/18/2025	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium