Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - ipvlan新增 ipvlan_route_v6_outbound() 協助程式受到啟發而使用多個 ipvlan 裝置堆疊的 syzbot 報告。移動用於非內嵌協助程式中路由查閱的 flowi6 結構以減少 ipvlan_process_v6_outbound() 所需的堆疊大小。 ipvlan_route_v6_outbound() 需要堆疊上的 120 個位元組立即回收。另請確認 ipvlan_process_v4_outbound() 未內嵌。我們可能還必須降低 MAX_NEST_DEV 因為只有 syzbot 使用具有四個以上堆疊裝置的設定。錯誤TASK 堆疊保護頁面在 ffffc9000e803ff8 命中 (堆疊為 ffffc9000e804000..ffffc9000e808000) 堆疊保護頁面
    0000 [#1] SMP KASAN CPU0 PID 13442 Commsyz-executor.4 未受污染的 6.1.52-syzkaller #0 硬體名稱
    Google Google Compute Engine/Google Compute Engine、BIOS Google 10/09/2023 RIP
    0010:kasan_check_range+0x4/0x2a0 mm/kasan/generic.c:188 程式碼48 01 c6 48 89 c7 e8 db 4e c1 03 31 c0 5d c3 cc 0f 0b eb 02 0f 0b b8 ea ff ff ff 5d c3 cc 00 00 cc cc 00 00 cc cc 55 48 89 e5 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 a4 01 00 00 48 89 RSP0018ffffc9000e804000 EFLAGS00010246 RAX
    0000000000000000 RBX: 0000000000000000 RCX: ffffffff817e5bf2 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff887c6568 RBP: ffffc9000e804000 R08: 0000000000000000 R09: 0000000000000000 R10:
     R110000000000000000  : dffffc0000000001 R12: 1ffff92001d0080c R13: dffffc0000000000 R14: ffffffff87e6b100 R15: 0000000000000000 FS: 00007fd0c55826c0(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000e803ff8 CR3: 0000000170ef7000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 000000000000000 DR2: 000000000000006000 DR30000000000000000000000000000000000000000000000000000,
    00000000fffe0ff0 DR70000000000000400 呼叫追踪 <#DF> </#DF> <TASK> [<ffffffff81f281d1>]
    __kasan_check_read+0x11/0x20 mm/kasan/shadow.c:31 [<ffffffff817e5bf2>]instrument_atomic_read include/linux/instrumented.h:72 [內嵌] [<ffffffff817e5bf2>] _test_bit include/asm-generic/bitops/instrumented-non-atomic。 h:141 [內嵌] [<ffffffff817e5bf2>] cpumask_test_cpu include/linux/cpumask.h:506 [內嵌] [<ffffffff817e5bf2>] cpu_online include/linux/cpumask.h:1092 [內嵌] [<ffffffff817e5bf2>] trace_lock_acquire include/trace/events /lock.h:24 [內嵌] [<ffffffff817e5bf2>] lock_acquire+0xe2/0x590 kernel/locking/lockdep.c:5632 [<ffffffff8563221e>] rcu_lock_acquire+0x2e/0x40 include/linux/rcupdate.h:306 [<ffffffff8561464d>] rcu_read_lock include/linux/rcupdate.h:747 [內嵌] [<ffffffff8561464d>] ip6_pol_route+0x15d/0x1440 net/ipv6/route.c:2221 [<ffffffff85618120>] ip6_pol_route_output+0x50/0x80 net/ipv6/route.c:2606 [<ffffffff856f65b5>] pol_lookup_func include/net/ip6_fib.h:584 [內嵌] [<ffffffff856f65b5>] fib6_rule_lookup+0x265/0x620 net/ipv6/fib6_rules.c:116 [<ffffffff85618009>] ip6_route_output_flags_noref+0x2d9/0x3a0 net/ipv6/route.c 2638 [<ffffffff8561821a>] ip6_route_output_flags+0xca/0x340 net/ipv6/route.c:2651 [<ffffffff838bd5a3>] ip6_route_output include/net/ip6_route.h:100 [內嵌] [<ffffffff838bd5a3>] ipvlan_process_v6_outbound drivers/net/ipvlan/ipvlan_core.c:473 [內嵌] [<ffffffff838bd5a3>] ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:529 [內嵌] [<ffffffff838bd5a3>] ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core .c:602 [內嵌] [<ffffffff838bd5a3>] ipvlan_queue_xmit+0xc33/0x1be0 drivers/net/ipvlan/ipvlan_core.c:677 [<ffffffff838c2909>] ipvlan_start_xmit+0x49/0x100 drivers/net/ipvlan/ipvlan_main.c:229 [<ffffffff84d03900>] netdev_start_xmit include/linux/netdevice.h:4966 [內嵌] [<ffffffff84d03900>] xmit_one net/core/dev.c:3644 [內嵌] [<ffffffff84d03900>] dev_hard_start_xmit+0x320/0x980 net/core/dev.c:3660 [<ffffffff84d080e2>]
    __dev_queue_xmit+0x16b2/0x3370 net/core/dev.c:4324 [ <ffffffff855ce4cd> ] dev_queue_xmit include/linux/netdevice.h:3067 [內嵌] [ <ffffffff855ce4cd> ] neigh_hh_output include/net/neighbour.h:529 [內嵌] [ <f ---truncated--- [] ( <a id="x4"> )CVE-2023-52796

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-52796

high Nessus Plugin ID 226203

版本 1.19