Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - mm/huge_memory如果需要避免 PMD 大小的頁面快取xarray 無法支援任意頁面快取大小。支援的最大頁面快取大小由認可 099d90642a71 定義為 MAX_PAGECACHE_ORDER (mm/filemap使 MAX_PAGECACHE_ORDER 為 xarray 所接受)。不過在基本頁面大小為 64KB 的系統 ARM64 中大型記憶體的折疊路徑可設有 512MB 頁面快取。 512MB 頁面快取超出限制當如下列範例所示分割 xarray 項目時會出現警告。 [root@dhcp-10-26-1-207 ~]# cat /proc/1/smaps | grep KernelPageSize KernelPageSize: 64 kB [root@dhcp-10-26-1-207 ~]# cat /tmp/test.c : int main(int argc, char **argv) { const char *filename = TEST_XFS_FILENAME; int fd = 0; void *buf = (void *)-1, *p int pgsize = getpagesize(); int ret = 0; if (pgsize != 0x10000) { fprintf(stdout需要具有 64KB 基本頁面大小的系統!\n);傳回 -EPERM } system(echo 0 > /sys/devices/virtual/bdi/253:0/read_ahead_kb); system(echo 1 > /proc/sys/vm/drop_caches); /* 開啟 xfs 檔案 */ fd = open(filename, O_RDONLY); assert(fd > 0); /* 建立 VMA */ buf = mmap(NULL, TEST_MEM_SIZE, PROT_READ, MAP_SHARED, fd, 0); assert(buf != (void *)-1);
    fprintf(stdout、0x%p 的對應緩衝區\n, buf) /* 填入 VMA */ ret = madvise(buf, TEST_MEM_SIZE, MADV_NOHUGEPAGE); assert(ret == 0); ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_READ); assert(ret == 0); /* 折疊 VMA */ ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE); assert(ret == 0); ret = madvise(buf, TEST_MEM_SIZE, MADV_COLLAPSE); if (ret) { fprintf(stdout、madvise 的錯誤 %d(MADV_COLLAPSE)\n、errno); goto out } /* 分割 xarray 項目。需要寫入權限 */ munmap(buf, TEST_MEM_SIZE); buf = (void *)-1; close(fd); fd = open(filename, O_RDWR); assert(fd > 0);
    fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE, TEST_MEM_SIZE - pgsize, pgsize); out if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd);傳回 ret } [root@dhcp-10-26-1-207 ~]# gcc /tmp/test.c -o /tmp/test [root@dhcp-10-26-1-207 ~]# /tmp/test ------------[剪到這裡] ------------ 警告 CPU 25 PID: 7560 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 連結的模組nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib \ nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_nattact \ nft_reject nft_nattact \ nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 \ ip_set rfkill nf_tables nfnetlink vfat fat virtio_balloon drm fuse \ xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64 virtio_net \ sha1_ce net_failover virtio_blk virtio_console failover dimlib virtio_mmio CPU: 25 PID: 7560 Comm: test Kdump: loaded Not tainted 6.10.0-rc7-gavin+ #9 硬體名稱QEMU KVM 虛擬機器、BIOS edk2-20240524-1.el9 05/24/2024 pstate 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc
    xas_split_alloc+0xf8/0x128 lrsplit_huge_page_to_list_to_order+0x1c4/0x780 spffff8000ac32f660 x29
    ffff8000ac32f660 x28: ffff0000e0969eb0 x27: ffff8000ac32f6c0 x26: 0000000000000c40 x25: ffff0000e0969eb0 x24: 000000000000000d x23: ffff8000ac32f6c0 x22: ffffffdfc0700000 x21: 0000000000000000 x20:
    0000000000000000 x19: ffffffdfc0700000 x18: 0000000000000000 x17: 0000000000000000 x16: ffffd5f3708ffc70 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11:
    ffffffffffffffc0 x10: 0000000000000040 x9 : ffffd5f3708e692c x8 : 0000000000000003 x7 : 0000000000000000 x6 : ffff0000e0969eb8 x5 : ffffd5f37289e378 x4 : 0000000000000000 x3 : 0000000000000c40 x2 :
    000000000000000d x1 : 000000000000000c x0 : 0000000000000000 Call trace: xas_split_alloc+0xf8/0x128 split_huge_page_to_list_to_order+0x1c4/0x780 truncate_inode_partial_folio+0xdc/0x160 truncate_inode_pages_range+0x1b4/0x4a8 truncate_pagecache_range+0x84/0xa ---truncated--- (CVE-2024-42317)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-42317

medium Nessus Plugin ID 229284

版本 1.7