遠端 Azure Linux 3.0 主機上安裝的核心版本比測試版舊。因此，此版本會受到 CVE-2024-39472 公告中提及的一個弱點影響。

  - 已解決 Linux 核心中的下列弱點：xfs: fix log recovery buffer allocation for the legacy h_size fixup Commit a70f9fe52daa (xfs: detect and handle invalid iclog size set by mkfs) added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 (xfs: clean up calculation of LR header blocks) cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation. (CVE-2024-39472)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

偵測

Azure Linux 3.0 安全性更新核心 (CVE-2024-39472)

medium Nessus Plugin ID 215816

版本 1.3