Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - s390/qeth修正設定 hsuid 後的核心錯誤 症狀：若在對應的網路介面已啟動且第一次在 IQD Layer3 裝置上設定 hsuid 屬性核心將嘗試執行為 NULL 的 napi 函式指標。例如：
    -------------------------------------------------- ------------------------------------- [ 2057.572696] 不合法作業0001 ilc:1 [#1] SMP [ 2057.572702] 連結af_iucv 的模組qeth_l3 zfcp scsi_transport_fc sunrpc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nf_tables_set nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables libcrc32c nfnetlink ghash_s390 prng xts aes_s390 des_s390 de s_generic sha3_512_s390 sha3_256_s390 sha512_s390 vfio_ccw vfio_mdev mdev vfio_iommu_type1 eadm_sch vfio ext4 mbcache jbd2 qeth_l2 bridge stp llc dasd_eckd_mod qeth dasd_mod qdio ccwgroup pkey zcrypt [ 2057.572739] CPU6 PID60182 Commstress_client Kdump 已載入但未受污染的 4.18.0-541.el8.s390x #1 [ 2057.572742] 硬體名稱 IBM 3931 A01 704 (LPAR) [ 2057.572744] Krnl PSW 0704f00180000000 0000000000000002 (0x2) [ 2057.572748] R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:3 PM:0 RI:0 EA :3 [ 2057.572751] Krnl GPRS0000000000000004 0000000000000000 00000000a3b008d8 00 00000000000000 [ 2057.572754] 00000000a3b008d8 cb923a29c779abc5 0000000000000000 00000000814cfd80 [ 2057.572756] 000000000000012c 0000000000000000 00000000a3b008d8 00000000a3b008d8 [ 2057.572758] 00000000bab6d500 00000000814cfd80 0000000091317e46 00000000814cfc68 [2057.572762] Krnl Code:#0000000000000000: 0000 illegal >0000000000000002: 0000 illegal 0000000000000004:
    0000 illegal 0000000000000006: 0000 illegal 0000000000000008: 0000 illegal 000000000000000a: 0000 illegal 000000000000000c: 0000 illegal 000000000000000e: 0000 illegal [ 2057.572800] Call Trace: [ 2057.572801] ([<00000000ec639700>] 0xec639700) [ 2057.572803] [<00000000913183e2>] net_rx_action+ 0x2ba/0x398 [2057.572809] [<0000000091515f76>] __do_softirq+0x11e/0x3a0 [ 2057.572813] [<0000000090ce160c>] do_softirq_own_stack+0x3c/0x58 [ 2057.572817] ([<0000000090d2cbd6>] do_softirq.part.1+0x56/0x60) [2057.572822] [<0000000090d2cc60>] __local_bh_enable_ip+0x80/0x98 [ 2057.572825] [<0000000091314706>]
    __dev_queue_xmit+0x2be/0xd70 [ 2057.572827] [<000003ff803dd6d6>] afiucv_hs_send+0x24e/0x300 [af_iucv] [2057.572830] [<000003ff803dd88a>] iucv_send_ctrl+0x102/0x138 [af_iucv] [ 2057.572833] [<000003ff803de72a>] iucv_sock_connect+0x37a/0x468 [af_iucv] [ 2057.572835] [<00000000912e7e90>] __sys_connect+0xa0/0xd8 [2057.572839] [<00000000912e9580>] sys_socketcall+0x228/0x348 [ 2057.572841] [<0000000091514e1a>] system_call+0x2a6/0x2c8 [ 2057.572843] 上次中斷事件-Address[ 2057.572844] [<0000000091317e44>]
    __napi_poll+0x4c/0x1d8 [ 2057.572846] [ 2057.572847] 核心錯誤 - 未同步中斷中的嚴重例外狀況 ---------------------------------------- -------------------------------------------------- -------------- 分析每個 out_q 有一個 napi 結構card->qdio.out_qs[i].napi napi.poll 函式是在 qeth_open() 期間設定。自從提交 1cfef80d4c2b (s390/qeth不要呼叫 dev_close/dev_open (DOWN/UP)) qeth_set_offline()/qeth_set_online() 不再呼叫 dev_close()/ dev_open()。因此如果 qeth_free_qdio_queues() 清除了 card->qdio.out_qs[i].napi.poll而在網路介面使用中且介面卡離線則不會再次設定這些設定。Reproductionchzdev -e $devno layer2=0 ip link set dev $network_interface up echo 0 > /sys/bus/ccw ---truncated--- (CVE-2024-36928)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-36928

medium Nessus Plugin ID 228758

版本 1.19