Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - netfilternf_tables修正對應中來自中止路徑的 memleakThe delete set 命令並不依賴交易物件來移除元素因此從中止路徑刪除元素 + 刪除集的組合可能會導致將對應。針對中止路徑中的刪除元素命令檢查新一代是否有停用元素如果已清除新一代位元則略過還原狀態。這與使用 set walk 迭代器的啟動邏輯類似。 [6170.286929] ------------[cut here ]------------ [ 6170.286939] WARNING CPU6 PID: 790302 at net/netfilter/nf_tables_api .c:2086 nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.287071] 連結的模組[...] [ 6170.287633] CPU6 PID790302 通訊kworker/6:2 未受污染的 6.9.0-rc3+ #365 [6170.287768] RIP 0010:nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.287886] 程式碼df 48 8d 7d 58 e8 69 2e 3b df 48 8b 7d 58 e8 80 1b 37 df 48 8d 7d 68 df e8 57 2e 3b df 48 8b 7d 68 e8 6e 1b 37 df 48 89 ef eb c4 <0f> 0b 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc 0f [ 6170.287895] RSP
    0018:ffff888134b8fd08 EFLAGS00010202 [ 6170.287904] RAX0000000000000001 RBXffff888125bffb28 RCX
    dffffc0000000000 [ 6170.287912] RDX 0000000000000003 RSIfffffffa20298ab RDI ffff88811ebe4750 [6170.287919] RBPffff88811ebe4700 R08R09] ffff88838e812650  3 [ 6170.2879265] 5  R103 ]
    ffffffff8311d2af R110000000000000001 R12ffff888125bffb10 [ 6170.287933] R13ffff888125bffb10 R14
     R15dead000000000122  : dead000000000100 [ 6170.287940] FS: 0000000000000000(0000) GS:ffff888390b00000(0000) knlGS:0000000000000000 [ 6170.287948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 6170.287955] CR2:
    00007fd31fc00710 CR30000000133f60004 CR400000000001706f0 [ 6170.287962] 呼叫追踪 [ 6170.287967] <TASK> [ 6170.287973] __warn+0x9f/0x1a0 [ 6170.287986] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288092] report_bug+0x1b1/0x1e0 [ 6170.287986] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [6170.288092] report_bug+0x1b1/0x1e0 [ 6170.288104] ? handle_bug+0x3c/0x70 [ 6170.288112] ? exc_invalid_op+0x17/0x40 [ 6170.288120] ? asm_exc_invalid_op+0x1a/0x20 [ 6170.288132] ? nf_tables_chain_destroy+0x2b/0x220 [nf_tables] [ 6170.288243] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288366] nf_tables_chain_destroy+0x2b/0x220 [nf_tables] [ 6170.288483] nf_tables_trans_destroy_work+0x588/0x590 [nf_tables] (CVE-2024-27011)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-27011

medium Nessus Plugin ID 227462

版本 1.8