Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - drm/vmwgfx在平面狀態上重設表面之前先取消對應表面切換至新的平面狀態需要取消參照所有保留的表面。在 mob 游標所需的工作中已開始快取對應的表面但並未重設指示表面目前是否已對應的變數。這會導致當機因為重複的狀態會錯誤地指出即使表面不存在也已對應表面。這是因為取消參照表面之後完全有可能以 bo (而非表面) 來支援平面。取消參照平面狀態表面時重設表面對應的旗標以修正清理中的 null 解除參照。修正 Wayland 上 KDE KWin 6.0 中的損毀問題 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 4 PID: 2533 Comm: kwin_wayland 未受污染的 6.7.0-rc3-vmwgfx #2 硬體名稱VMware, Inc.
    VMware Virtual Platform/440BX 桌面參照平台、BIOS 6.00 2020 年 11 月 12 日 RIP
    0010:vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] 程式碼00 00 00 75 3a 48 83 c4 10 5b 5d c3 cc cc cc 48 8b b3 a8 00 00 00 48 c7 c7 99 90 43 c0 4 e8 8b 3 db ca a8 00 00 00 <48> 8b 78 28 e8 e3 f> RSP0018:ffffb6b98216fa80 EFLAGS00010246 RAX0000000000000000 RBXffff969d84cdcb00 RCX
    0000000000000027 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff969e75f21600 RBP: ffff969d4143dc50 R08: 0000000000000000 R09: ffffb6b98216f920 R10: 0000000000000003 R11: ffff969e7feb3b10 R12:
    0000000000000000 R130000000000000000 R14000000000000027b R15ffff969d49c9fc00 FS
    00007f1e8f1b4180(0000) GS:ffff969e75f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0
    0000000080050033 CR2: 0000000000000028 CR3: 0000000104006004 CR4: 00000000003706f0 呼叫追踪 <TASK> 
    __die+0x23/0x70 ? page_fault_oops+0x171/0x4e0 exc_page_fault+0x7f/0x180 ? asm_exc_page_fault+0x26/0x30 ? vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] drm_atomic_helper_cleanup_planes+0x9b/0xc0 commit_tail+0xd1/0x130 drm_atomic_helper_commit+0x11a/0x140 drm_atomic_commit+0x97/0xd0
    __pfx___drm_printfn_info+0x10/0x10 drm_atomic_helper_update_plane+0xf5/0x160 drm_mode_cursor_universal+0x10e/0x270 drm_mode_cursor_common+0x102/0x230
    __pfx_drm_mode_cursor2_ioctl+0x10/0x10 drm_ioctl_kernel+0xb2/0x110 drm_ioctl+0x26d/0x4b0
    __pfx_drm_mode_cursor2_ioctl+0x10/0x10 ? __pfx_drm_ioctl+0x10/0x10 vmw_generic_ioctl+0xa4/0x110 [vmwgfx]
    __x64_sys_ioctl+0x94/0xd0 do_syscall_64+0x61/0xe0 ? __x64_sys_ioctl+0xaf/0xd0 ? syscall_exit_to_user_mode+0x2b/0x40 do_syscall_64+0x70/0xe0 ? __x64_sys_ioctl+0xaf/0xd0 ? syscall_exit_to_user_mode+0x2b/0x40 do_syscall_64+0x70/0xe0 ? exc_page_fault+0x7f/0x180 entry_SYSCALL_64_after_hwframe+0x6e/0x76 RIP: 0033:0x7f1e93f279ed Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff f> RSP002b:00007ffca0faf600 EFLAGS00000246 ORIG_RAX0000000000000010 RAXffffffffffffda RBX
    000055db876ed2c0 RCX: 00007f1e93f279ed RDX: 00007ffca0faf6c0 RSI: 00000000c02464bb RDI: 0000000000000015 RBP: 00007ffca0faf650 R08: 000055db87184010 R09: 0000000000000007 R10: 000055db886471a0 R11:
     R120000000000000246  : 00007ffca0faf6c0 R13: 00000000c02464bb R14: 0000000000000015 R15: 00007ffca0faf790 </TASK> Modules linked in: snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_ine> CR2: 0000000000000028 ---[ end trace 0000000000000000 ]--- RIP: 0010 :vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] 程式碼00 00 00 75 3a 48 83 c4 10 5b 5d c3 cc cc cc 48 8b b3 a8 00 00 00 48 c7 c7 99 90 43 c0 e8 93 c5 adb ca 888 00 00 00 <48> 8b 78 28 e8 e3 f> RSP0018:ffffb6b98216fa80 EFLAGS00010246 RAX0000000000000000 RBX
    ffff969d84cdcb00 RCX 0000000000000027 RDX 0000000000000000 RSI 0000000000000001 RDI ffff969e75f21600 RBP ffff969d4143 ---truncated--- (CVE-2023-52648)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-52648

medium Nessus Plugin ID 226582

版本 1.18