An update of the linux package has been released.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ipv6防止 rt6_nlmsg_size() 中的无限循环在测试之前的修补程序时我能够在 rt6_nlmsg_size() 的以下位置触发无限循环 list_for_each_entry_rcu(sibling, &f6i->fib6_siblings, fib6_siblings) { rt6_nh_nlmsg_size(sibling->fib6_nh) &nexthop_len);这是因为 fib6_del_route() 和 fib6_add_rt2node() 使用了 list_del_rcu()后者可能会使 rcu 阅读器混淆因为它们可能再也看不到列表的标头。如果 f6i->fib6_nsiblings 为零则重新启动循环。
    (CVE-2025-38588)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - ipv6rt6_nlmsg_size() の無限ループを防ぎます以前のパッチのテスト中に、次の場所で rt6_nlmsg_size() の無限ループを引き起こすことができました list_for_each_entry_rcu(sibling, &f6i->fib6_siblings, fib6_siblings) { rt6_nh_nlmsg_size(sibling->fib6_nh) 、&nexthop_len);これは、fib6_del_route() および fib6_add_rt2node() が list_del_rcu() を使用するためで、リストの先頭が表示されない可能性があるため、rcu リーダーは混乱する可能性があります。f6i->fib6_nsiblings がゼロの場合、ループを再起動します。
    (CVE-2025-38588)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - ipv6防止 rt6_nlmsg_size() 中發生無限迴圈 測試之前的修補程式時我可在下列位置的 rt6_nlmsg_size() 中觸發無限迴圈 list_for_each_entry_rcu(sibling, &f6i->fib6_siblings, fib6_siblings) { rt6_nh_nlmsg_size(sibling->fib6_nh) 、 &nexthop_len);這是因為 fib6_del_route() 和 fib6_add_rt2node() 使用可混淆 rcu 讀取器的 list_del_rcu()因為它們可能無法再看見清單的開頭。如果 f6i->fib6_nsiblings 為零則重新啟動迴圈。
    (CVE-2025-38588)

請注意，Nessus 依賴供應商報告的套件存在。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv6: prevent infinite loop in rt6_nlmsg_size() While testing prior patch, I was able to trigger an     infinite loop in rt6_nlmsg_size() in the following place: list_for_each_entry_rcu(sibling,     &f6i->fib6_siblings, fib6_siblings) { rt6_nh_nlmsg_size(sibling->fib6_nh, &nexthop_len); } This is because     fib6_del_route() and fib6_add_rt2node() uses list_del_rcu(), which can confuse rcu readers, because they     might no longer see the head of the list. Restart the loop if f6i->fib6_nsiblings is zero.
    (CVE-2025-38588)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1169 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Avoid race in open_cached_dir with lease breaks (CVE-2025-37954)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (CVE-2025-38162)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: fix double free in delayed_free (CVE-2025-38206)

    In the Linux kernel, the following vulnerability has been resolved:

    xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)

    In the Linux kernel, the following vulnerability has been resolved:

    net/sched: Restrict conditions for adding duplicating netems to qdisc tree (CVE-2025-38553)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: reject malicious packets in ipv6_gso_segment() (CVE-2025-38572)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: fix possible infinite loop in fib6_info_uses_dev() (CVE-2025-38587)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: prevent infinite loop in rt6_nlmsg_size() (CVE-2025-38588)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
261144	Photon OS 5.0: Linux PHSA-2025-5.0-0610	Nessus	PhotonOS Local Security Checks	9/3/2025	9/3/2025	high
260111	Linux Distros 未修补的漏洞：CVE-2025-38588	Nessus	Misc.	8/31/2025	9/7/2025	medium
260111	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38588	Nessus	Misc.	8/31/2025	9/7/2025	medium
260111	Linux Distros 未修補的弱點：CVE-2025-38588	Nessus	Misc.	8/31/2025	9/7/2025	medium
260111	Linux Distros Unpatched Vulnerability : CVE-2025-38588	Nessus	Misc.	8/31/2025	9/7/2025	medium
261737	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1169)	Nessus	Amazon Linux Local Security Checks	9/8/2025	9/8/2025	high

Detections

Analytics

Plugins Search

high

medium

medium

medium

medium

high