Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - ksmbd設定 mtime 時設定 ATTR_CTIME 旗標 David 報告來自 setattr_copy_mgtime 的新警告如下所示。 [ 113.215316] ------------[切到這裡]------------ [113.215974] 警告fs/attr.c 的 CPU1 PID 31 :300 setattr_copy+0x1ee/0x200 [ 113.219192] CPU1 UID0 PID31 通訊kworker/1:1 未受污染的 6.13.0-rc1+ #234 [ 113.220127] 硬體名稱QEMU Standard PC (i440FX + PIIX、 1996)、BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014 [ 113.221530] Workqueueksmbd-io handle_ksmbd_work [ksmbd] [ 113.222220] RIP 0010:setattr_copy+0x1ee/0x200 [113.222833] 程式碼24 28 49 8b 44 24 30 48 89 53 58 89 43 6c 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 89 df e8 77 d6 ff ff e9 cd fe ff ff <0f> 0b e9 be fe ff ff 66 0 [ 113.225110] RSP
    0018:ffffaf218010fb68 EFLAGS00010202 [ 113.225765] RAX0000000000000120 RBXffffa446815f8568 RCX
    0000000000000003 [ 113.226667] RDX ffffaf218010fd38 RSIffffa446815f8568 RDI ffffffff94eb03a0 [113.227531] RBP ffffaf218010fb90 R08[] 0000001a251e217d  0000 [] 006 [ R09755] 0000  0006 113.228426001a251e217d R10
    0000000002ba8a6d R11ffffa4468196c7a8 R12ffffaf218010fd38 [ 113.229304] R130000000000000120 R14
     R15ffffffff94eb03a0  : 0000000000000000 [ 113.230210] FS: 0000000000000000(0000) GS:ffffa44739d00000(0000) knlGS:0000000000000000 [ 113.231215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.232055] CR2:
    00007efe0053d27e CR3000000000331a000 CR400000000000006b0 [ 113.232926] DR00000000000000000 DR1
    0000000000000000 DR2: 0000000000000000 [113.233812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
    0000000000000400 [ 113.234797] 呼叫追踪[ 113.235116] <TASK> [ 113.235393] ? __warn+0x73/0xd0 [113.235802] ? setattr_copy+0x1ee/0x200 [ 113.236299] ? report_bug+0xf3/0x1e0 [ 113.236757] ? handle_bug+0x4d/0x90 [ 113.237202] ? exc_invalid_op+0x13/0x60 [ 113.237689] ? asm_exc_invalid_op+0x16/0x20 [ 113.238185] setattr_copy+0x1ee/0x200 [ 113.238692] btrfs_setattr+0x80/0x820 [btrfs] [ 113.239285] ? get_stack_info_noinstr+0x12/0xf0 [ 113.239857] ? __module_address+0x22/0xa0 [ 113.240368] ? handle_ksmbd_work+0x6e/0x460 [ksmbd] [ 113.240993] __module_text_address+0x9/0x50 [ 113.241545] ?
    __module_address+0x22/0xa0 [ 113.242033] ? unwind_next_frame+0x10e/0x920 [ 113.242600] ?
    __pfx_stack_trace_consume_entry+0x10/0x10 [ 113.243268] notify_change+0x2c2/0x4e0 [ 113.243746] ? stack_depot_save_flags+0x27/0x730 [ 113.244339] set_file_basic_info+0x130/0x2b0 [ksmbd] [ 113.244993] set_file_basic_info+0x130/0x2b0 [ksmbd] [ 113.245613] ? process_scheduled_works+0xbe/0x310 [ 113.246181] ? worker_thread+0x100/0x240 [ 113.246696] ? kthread+0xc8/0x100 [ 113.247126] ? ret_from_fork+0x2b/0x40 [113.247606] ? ret_from_fork_asm+0x1a/0x30 [ 113.248132] smb2_set_info+0x63f/0xa70 [ksmbd] ksmbd 嘗試透過 notify_change 設定 atime 和 mtime卻未同時設定 ctime。因此此修補程式會在設定 mtime 時新增 ATTR_CTIME 旗標以避免出現警告。 (CVE-2024-57895)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-57895

medium Nessus Plugin ID 230301

版本 1.7