Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - btrfs啟動 fiemap 前將 inode 鎖定在共用模式中。目前 fiemap 不會採取 inode 的鎖定 (VFS 鎖定)它只會鎖定 inode 的 io 樹狀結構中的檔案範圍。不過如果檔案有並行 fsync 且 fiemap 程式碼在使用 fiemap_fill_next_extent() 存取使用者空間緩衝區時觸發了錯誤這可能會導致鎖死。鎖死發生在由 fsync 和 btrfs_page_mkwrite() 取得之 inode 的 i_mmap_lock semaphore上。此鎖死是由 syzbot 最近報告並觸發類似下列的追踪task:syz-executor361 state:D stack:20264 pid:5668 ppid:5119 flags:0x00004004 呼叫追踪 <TASK> context_switch kernel/sched/core.c:5293 [內嵌] __schedule+0x995/0xe20 kernel/sched/core.c:6606 schedule+0xcb/0x190 kernel/sched/core.c:6682 wait_on_state fs/btrfs/extent-io-tree.c:707 [內嵌] wait_extent_bit+ 0x577/0x6f0 fs/btrfs/extent-io-tree.c:751 lock_extent+0x1c2/0x280 fs/btrfs/extent-io-tree.c:1742 find_lock_delalloc_range+0x4e6/0x9c0 fs/btrfs/extent_io.c:488 writepage_delalloc+ 0x1ef/0x540 fs/btrfs/extent_io.c:1863 __extent_writepage+0x736/0x14e0 fs/btrfs/extent_io.c:2174 extent_write_cache_pages+0x983/0x1220 fs/btrfs/extent_io.c:3091 extent_writepages+0x219/0x5_ftrfs/btentio .c:3211 do_writepages+0x3c3/0x680 mm/page-writeback.c:2581 filemap_fdatawrite_wbc+0x11e/0x170 mm/filemap.c:388 __filemap_fdatawrite_range mm/filemap.c:421 [內嵌] filemap_fdatawrite_range+0x175/0x200 mm/filemap。 c:439 btrfs_ fdatawrite_range fs/btrfs/file.c:3850 [內嵌] start_ordered_ops fs/btrfs/file.c:1737 [內嵌] btrfs_sync_file+0x4ff/0x1190 fs/btrfs/file.c:1839 generic_write_sync include/linux/fs.h:2885 [內嵌] btrfs_do_write_iter+0xcd3/0x1280 fs/btrfs/file.c:1684 call_write_iter include/linux/fs.h:2189 [內嵌] new_sync_write fs/read_write.c:491 [內嵌] vfs_write+0x7dc/0xc50 fs/read_write。 c:584 ksys_write+0x177/0x2a0 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:50 [內嵌] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/ 0xcd RIP 0033:0x7f7d4054e9b9 RSP: 002b:00007f7d404fa2f8 EFLAGS
    00000246 ORIG_RAX 0000000000000001 RAX ffffffffffffffda RBX 00007f7d405d87a0 RCX 00007f7d4054e9b9 RDX
    0000000000000090 RSI: 0000000020000000 RDI: 0000000000000006 RBP: 00007f7d405a51d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 61635f65646f6e69 R13:
    65646f7475616f6e R147261637369646f6e R15: 00007f7d405d87a8 </TASK> INFO工作 syz-executor361:5697 遭到封鎖超過 145 秒。未受污染 6.2.0-rc3-syzkaller-00376-g7c6984405241 #0 echo 0 > /proc/sys/kernel/hung_task_timeout_secs 停用此訊息。 task:syz-executor361 state:D 堆疊21216 pid:5697 ppid:5119 flags:0x00004004 呼叫追踪 <TASK> context_switch kernel/sched/core.c:5293 [內嵌]
    __schedule+0x995/0xe20 kernel/sched/core.c:6606 schedule+0xcb/0x190 kernel/sched/core.c:6682 rwsem_down_read_slowpath+0x5f9/0x930 kernel/locking/rwsem.c:1095 __down_read_common+0x54/0x2a0 kernel/locking /rwsem.c:1260 btrfs_page_mkwrite+0x417/0xc80 fs/btrfs/inode.c:8526 do_page_mkwrite+0x19e/0x5e0 mm/memory.c:2947 wp_page_shared+0x15e/0x380 mm/memory.c:3295 handle_pte_fault mm/memory.c 4949 [內嵌] __handle_mm_fault mm/memory.c:5073 [內嵌] handle_mm_fault+0x1b79/0x26b0 mm/memory.c:5219 do_user_addr_fault+0x69b/0xcb0 arch/x86/mm/fault.c:1428 handle_page_fault arch/x86/mm /fault.c:1519 [內嵌] exc_page_fault+0x7a/0x110 arch/x86/mm/fault.c:1575 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:570 RIP0010:copy_user_short_string+0xd /0x40 arch/x86/lib/copy_user_64.S:233 程式碼74 0a 89 (...) RSP0018:ffffc9000570f330 EFLAGS: 000502
    ---truncated--- (CVE-2023-52737)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-52737

medium Nessus Plugin ID 227420

版本 1.22

版本 1.21

版本 1.20

版本 1.19

版本 1.18

版本 1.17

版本 1.16

版本 1.15

版本 1.14

版本 1.12

版本 1.11

版本 1.10

版本 1.9

版本 1.8

版本 1.7

版本 1.6

版本 1.3

版本 1.2

版本 1.1

版本 1.22 Aug 1, 2026, 6:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608010658
版本 1.21 Aug 1, 2026, 2:26 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608010226
版本 1.20 Jul 29, 2026, 6:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607290641
版本 1.19 Jul 25, 2026, 6:18 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607250618
版本 1.18 Jul 21, 2026, 12:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607210041
版本 1.17 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607071110
版本 1.16 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
版本 1.15 Jun 30, 2026, 12:42 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606300042
版本 1.14 Jun 28, 2026, 2:21 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606281421
版本 1.12 May 14, 2026, 3:47 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605140347
版本 1.11 Feb 7, 2026, 12:50 AM Detection (updated detection logic) Plugin Feed: 202602070050
版本 1.10 Jan 15, 2026, 2:04 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601151404
版本 1.9 Jan 10, 2026, 7:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601101958
版本 1.8 Jan 5, 2026, 10:40 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601052240
版本 1.7 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
版本 1.6 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510280902
版本 1.3 Aug 31, 2025, 7:32 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508311932
版本 1.2 Aug 15, 2025, 7:38 PM CVSS metrics ("CVSSv2 score" set to 4.7) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508151938
版本 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723