Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - bonding將 ipsec_lock 從微調鎖定變更為 mutex在提及的提交中已新增 bond->ipsec_lock 以保護 ipsec_list因此會在此鎖定內呼叫 xdo_dev_state_add 及 xdo_dev_state_delete。由於 ipsec_lock 是微調鎖定且此類 xfrmdev 作業可能進入休眠狀態因此在變更連結的作用中從屬時會觸發同時進行排程。 [ 101.055189] 錯誤在不可部分完成 bash/902/0x00000200 時排程 [101.055726] 連結於的模組 [ 101.058211] CPU3 PID 902 通訊 bash 未受污染的 6.9.0-rc4+ #1 [101.058760] 硬體name [ 101.059434] 呼叫追踪 [ 101.059436] <TASK> [ 101.060873] dump_stack_lvl+0x51/0x60 [ 101.061275] __schedule_bug+0x4e/0x60 [ 101.061682] __schedule+0x612/0x7c0 [101.062078] ? __mod_timer+0x25c/0x370 [ 101.062486] schedule+0x25/0xd0 [ 101.062845] schedule_timeout+0x77/0xf0 [ 101.063265] asm_common_interrupt+0x22/0x40 [ 101.063724] ?
    __bpf_trace_itimer_state+0x10/0x10 [ 101.064215] __wait_for_common+0x87/0x190 [ 101.064648] ? usleep_range_state+0x90/0x90 [ 101.065091] cmd_exec+0x437/0xb20 [mlx5_core] [ 101.065569] mlx5_cmd_do+0x1e/0x40 [mlx5_core] [ 101.066051] mlx5_cmd_exec+0x18/0x30 [mlx5_core] [ 101.066552] mlx5_crypto_create_dek_key+0xea/0x [mlx5_core] [ 101.067163] ? bonding_sysfs_store_option+0x4d/0x80 [bonding] [ 101.067738] kmalloc_trace+0x4d/0x350 [ 101.068156] mlx5_ipsec_create_sa_ctx+0x33/0x100 [mlx5_core] [ 101.068747] mlx5e_xfrm_add_state+0x47b/0xaa0 [mlx5_core] [ 101.069312] bond_change_active_slave+0x392/0x900 [連結] [ 101.069868] 1 bond_coption202_slave4_0+0x [bonding] [ 101.070454] __bond_opt_set+0xa6/0x430 [bonding] [ 101.070935] __bond_opt_set_notify+0x2f/0x90 [bonding] [ 101.071453] bond_opt_tryset_rtnl+0x72/0xb0 [bonding] [ 101.071965] bonding_sysfs_store_option+0x4d/0x80 [bonding ] [ 101.072567] kernfs_fop_write_iter+0x10c/0x1a0 [101.073033] vfs_write+0x2d8/0x400 [ 101.073416] ? alloc_fd+0x48/0x180 [ 101.073798] ksys_write+0x5f/0xe0 [101.074175] do_syscall_64+0x52/0x110 [ 101.074576] entry_SYSCALL_64_after_hwframe+0x4b/0x53因為 bond_ipsec_add_sa_all 和 bond_ipsec_del_sa_all 只會從 bond_ipsec_add_sa_all 呼叫而這需要保留 RTNL lock lock。而 bond_ipsec_add_sa 和 bond_ipsec_del_sa 是 xfrm 狀態 xdo_dev_state_add 和 xdo_dev_state_delete API，位於使用者內容中。因此 ipsec_lock 不一定非要為微調鎖定將其變更為 mutex即可解決上述問題。 (CVE-2024-46678)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-46678

medium Nessus Plugin ID 228944

版本 1.25