Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - scsilibiscsiメモリが割り当てられている場合にのみ iscsi_conn->dd_data を初期化します。iSER セットアップ中に ib_fast_reg_mr 割り当てエラーが発生した場合、メモリが割り当てられていない場合でも iscsi_conn->dd_data が無条件で初期化されるため、マシンはパニックに陥りますdd_size == 0)。これは、接続のティアダウン時の無効なポインターデリファレンスの原因になります。メモリが実際に割り当てられている場合のみ iscsi_conn->dd_data を設定することで を修正します。パニックトレース ------------ iseriser_create_fastreg_desc ib_fast_reg_mr err=-12 の割り当てに失敗しました iser
    iser_alloc_rx_descriptorsrx 記述子/データバッファの割り当てに失敗しました BUGアドレスのページフォールトを処理できません fffffffffffff8 RIP0010:swake_up_locked.part.5+0xa/0x40 Call Trace
    ?complete+0x31/0x40 iscsi_iser_conn_stop+0x88/0xb0 [ib_iser] iscsi_stop_conn+0x66/0xc0 [scsi_transport_iscsi] iscsi_if_stop_conn+0x14a/0x150 [scsi_transport_iscsi] iscsi_if_rx+0x1135/0x1834is [scsi_trans]port_is [scsi_trans]port_ netlink_lookup+0x12f/0x1b0 ? netlink_deliver_tap+0x2c/0x200 netlink_unicast+0x1ab/0x280 netlink_sendmsg+0x257/0x4f0 ? _copy_from_user+0x29/0x60 sock_sendmsg+0x5f/0x70CVE-2025-38700

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - scsilibiscsi仅在分配内存时初始化 iscsi_conn->dd_data 如果 iSER 设置期间发生 ib_fast_reg_mr 分配失败计算机会发生错误因为 iscsi_conn->dd_data 会无条件初始化即使未分配任何内存 (dd_size == 0。这会导致在连接拆卸期间造成无效的指针取消引用。通过仅在实际分配内存时设置 iscsi_conn->dd_data 来修复 。错误跟踪------------ iseriser_create_fastreg_desc无法分配 ib_fast_reg_mr err=-12 iser
    iser_alloc_rx_descriptors分配 rx 描述符/数据缓冲区失败缺陷无法处理地址 ffffffffffffffff8 RIP: 0010:swake_up_locked.part.5+0xa/0x40 调用跟踪的页面错误
    complete+0x31/0x40 iscsi_iser_conn_stop+0x88/0xb0 [ib_iser] iscsi_stop_conn+0x66/0xc0 [scsi_transport_iscsi] iscsi_if_stop_conn+0x14a/0x150 [scsi_transport_iscsi] iscsi_if_rx+0x1135/0x1834 [scsi_transport_iscsi] ? netlink_lookup+0x12f/0x1b0 ? netlink_deliver_tap+0x2c/0x200 netlink_unicast+0x1ab/0x280 netlink_sendmsg+0x257/0x4f0 _copy_from_user+0x29/0x60 sock_sendmsg+0x5f/0x70CVE-2025-38700

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - scsilibiscsi僅在已配置記憶體的情況下初始化 iscsi_conn->dd_data若在 iSER 設定期間發生 ib_fast_reg_mr 配置失敗則因為 iscsi_conn->dd_data 無條件初始化即使未配置記憶體亦會導致機器發生錯誤 (dd_size == 0)。這會導致在連線中斷期間發生無效的指標解除參照。僅在實際配置記憶體時設定 iscsi_conn->dd_data 來修正。錯誤追踪 ------------ iseriser_create_fastreg_desc無法配置 ib_fast_reg_mr err=-12 iser
    iser_alloc_rx_descriptors配置 rx 描述符號/資料緩衝區失敗 錯誤無法處理 ffffffffffffff8 位址的頁面錯誤 RIP0010:swake_up_locked.part.5+0xa/0x40 呼叫追踪
    complete+0x31/0x40 iscsi_iser_conn_stop+0x88/0xb0 [ib_iser] iscsi_stop_conn+0x66/0xc0 [scsi_transport_iscsi] iscsi_if_stop_conn+0x14a/0x150 [scsi_transport_iscsi] iscsi_if_rx+0x1135/0x1834 [scsi_transport_iscsi] netlink_lookup+0x12f/0x1b0 ? netlink_deliver_tap+0x2c/0x200 netlink_unicast+0x1ab/0x280 netlink_sendmsg+0x257/0x4f0 ? _copy_from_user+0x29/0x60 sock_sendmsg+0x5f/0x70 (CVE-2025-38700)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6009 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6009-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     September 22, 2025                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-47704 CVE-2024-57924 CVE-2024-58240 CVE-2025-23143                      CVE-2025-23160 CVE-2025-37931 CVE-2025-37968 CVE-2025-38322                      CVE-2025-38347 CVE-2025-38491 CVE-2025-38502 CVE-2025-38552                      CVE-2025-38614 CVE-2025-38670 CVE-2025-38676 CVE-2025-38677                      CVE-2025-38679 CVE-2025-38680 CVE-2025-38681 CVE-2025-38683                      CVE-2025-38684 CVE-2025-38685 CVE-2025-38687 CVE-2025-38691                      CVE-2025-38693 CVE-2025-38694 CVE-2025-38695 CVE-2025-38696                      CVE-2025-38697 CVE-2025-38698 CVE-2025-38699 CVE-2025-38700                      CVE-2025-38701 CVE-2025-38702 CVE-2025-38706 CVE-2025-38707                      CVE-2025-38708 CVE-2025-38711 CVE-2025-38712 CVE-2025-38713                      CVE-2025-38714 CVE-2025-38715 CVE-2025-38721 CVE-2025-38723                      CVE-2025-38724 CVE-2025-38725 CVE-2025-38727 CVE-2025-38728                      CVE-2025-38729 CVE-2025-38732 CVE-2025-38735 CVE-2025-38736                      CVE-2025-39673 CVE-2025-39675 CVE-2025-39676 CVE-2025-39681                      CVE-2025-39682 CVE-2025-39683 CVE-2025-39684 CVE-2025-39685                      CVE-2025-39686 CVE-2025-39687 CVE-2025-39689 CVE-2025-39691                      CVE-2025-39692 CVE-2025-39693 CVE-2025-39694 CVE-2025-39697                      CVE-2025-39701 CVE-2025-39702 CVE-2025-39703 CVE-2025-39706                      CVE-2025-39709 CVE-2025-39710 CVE-2025-39713 CVE-2025-39714                      CVE-2025-39715 CVE-2025-39716 CVE-2025-39718 CVE-2025-39719                      CVE-2025-39724 CVE-2025-39736 CVE-2025-39737 CVE-2025-39738                      CVE-2025-39742 CVE-2025-39743 CVE-2025-39749 CVE-2025-39751                      CVE-2025-39752 CVE-2025-39756 CVE-2025-39757 CVE-2025-39759                      CVE-2025-39760 CVE-2025-39766 CVE-2025-39770 CVE-2025-39772                      CVE-2025-39773 CVE-2025-39776 CVE-2025-39782 CVE-2025-39783                      CVE-2025-39787 CVE-2025-39788 CVE-2025-39790 CVE-2025-39794                      CVE-2025-39795 CVE-2025-39798 CVE-2025-39800 CVE-2025-39801                      CVE-2025-39806 CVE-2025-39808 CVE-2025-39812 CVE-2025-39813                      CVE-2025-39817 CVE-2025-39819 CVE-2025-39823 CVE-2025-39824                      CVE-2025-39825 CVE-2025-39826 CVE-2025-39827 CVE-2025-39828                      CVE-2025-39835 CVE-2025-39838 CVE-2025-39839 CVE-2025-39841                      CVE-2025-39842 CVE-2025-39843 CVE-2025-39844 CVE-2025-39845                      CVE-2025-39846 CVE-2025-39847 CVE-2025-39848 CVE-2025-39849                      CVE-2025-39853 CVE-2025-39857 CVE-2025-39860 CVE-2025-39864                      CVE-2025-39865 CVE-2025-39866 CVE-2025-40300

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 6.1.153-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an ib_fast_reg_mr     allocation failure during iSER setup, the machine hits a panic because iscsi_conn->dd_data is initialized     unconditionally, even when no memory is allocated (dd_size == 0). This leads invalid pointer dereference     during connection teardown. Fix by setting iscsi_conn->dd_data only if memory is actually allocated. Panic     trace: ------------ iser: iser_create_fastreg_desc: Failed to allocate ib_fast_reg_mr err=-12 iser:
    iser_alloc_rx_descriptors: failed allocating rx descriptors / data buffers BUG: unable to handle page     fault for address: fffffffffffffff8 RIP: 0010:swake_up_locked.part.5+0xa/0x40 Call Trace:
    complete+0x31/0x40 iscsi_iser_conn_stop+0x88/0xb0 [ib_iser] iscsi_stop_conn+0x66/0xc0     [scsi_transport_iscsi] iscsi_if_stop_conn+0x14a/0x150 [scsi_transport_iscsi] iscsi_if_rx+0x1135/0x1834     [scsi_transport_iscsi] ? netlink_lookup+0x12f/0x1b0 ? netlink_deliver_tap+0x2c/0x200     netlink_unicast+0x1ab/0x280 netlink_sendmsg+0x257/0x4f0 ? _copy_from_user+0x29/0x60 sock_sendmsg+0x5f/0x70     (CVE-2025-38700)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Published	Updated	Severity
261582	Linux Distros のパッチ未適用の脆弱性: CVE-2025-38700	Nessus	Misc.	9/6/2025	9/14/2025	medium
261582	Linux Distros 未修补的漏洞：CVE-2025-38700	Nessus	Misc.	9/6/2025	9/14/2025	medium
261582	Linux Distros 未修補的弱點：CVE-2025-38700	Nessus	Misc.	9/6/2025	9/14/2025	medium
265709	Debian dsa-6009 : affs-modules-6.1.0-37-4kc-malta-di - security update	Nessus	Debian Local Security Checks	9/22/2025	9/22/2025	medium
261582	Linux Distros Unpatched Vulnerability : CVE-2025-38700	Nessus	Misc.	9/6/2025	9/14/2025	medium
265433	Photon OS 4.0: Linux PHSA-2025-4.0-0864	Nessus	PhotonOS Local Security Checks	9/19/2025	9/19/2025	high

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

high