Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - netfilternfnetlink_queue取得 instance_destroy_rcu() 中的 rcu_read_lock()。syzbot 報告沒有 rcu_read_lock()也可呼叫 nf_reinject()警告警告可疑的 RCU 使用方式 6.9.0-rc7-syzkaller-02060-g5c1672705a1a #0 未受污染的 net/netfilter /nfnetlink_queue.c:263 可疑的 rcu_dereference_check() 使用方式其他可協助我們除錯rcu_scheduler_active = 2, debug_locks = 1 syz-executor.4/13427 保留的 2 個鎖定 #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at:
    rcu_lock_acquire include/linux/rcupdate.h:329 [內嵌] #0ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2190 [內嵌] #0ffffffff8e334f60 (rcu_callback){....}-{0:0}、
    rcu_core+0xa86/0x1830 kernel/rcu/tree.c:2471 #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at:
    spin_lock_bh include/linux/spinlock.h:356 [內嵌] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at:
    nfqnl_flush net/netfilter/nfnetlink_queue.c:405 [內嵌] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: instance_destroy_rcu+0x30/0x220 net/netfilter/nfnetlink_queue.c 172 堆疊反向追踪CPU0 PID13427 Commsyz-executor.4 未受污染的 6.9.0-rc7-syzkaller-02060-g5c1672705a1a #0 硬體名稱Google Google Compute Engine/Google Compute Engine、BIOS Google 04/02/ 2024 呼叫追踪 <IRQ> __dump_stack lib/dump_stack.c:88 [內嵌] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712 nf_reinject net/netfilter/nfnetlink_queue。 c:323 [內嵌] nfqnl_reinject+0x6ec/0x1120 net/netfilter/nfnetlink_queue.c:397 nfqnl_flush net/netfilter/nfnetlink_queue.c:410 [內嵌] instance_destroy_rcu+0x1ae/0x220 net/netfilter/nfnetlink_queue.c:172 rcu_do_batch kernel/ rcu/tree.c:2196 [內嵌] rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2471 handle_softirqs+0x2d6/0x990 kernel/softirq.c:554
    __do_softirq kernel/softirq.c:588 [內嵌] invoke_softirq kernel/softirq.c:428 [內嵌]
    __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [內嵌] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/86/6/0xc0 kernel/apic/apic.c:1043 </IRQ> <TASK> (CVE-2024-36286)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-36286

medium Nessus Plugin ID 228778

版本 1.19