Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - ACPIPAD修正 exit_round_robin() 中的損毀 核心偶爾會在 exit_round_robin() 內呼叫的 cpumask_clear_cpu() 中損毀因為在 nr 設為 0xffffffff 的情況下執行 clear_bit(nr, addr) 時位址計算可能會造成會導致存取無效的記憶體位址。---------- 錯誤無法在 ffffffffe0740618 ... 處處理核心分頁要求CPU3 PID
    2919323 Commacpi_pad/14 Kdump 已載入 污染的 G OE X --------- - - 4.18.0-425.19.2.el8_7.x86_64 #1...
    RIP: 0010:power_ save_thread+0x313/0x411 [acpi_pad] 程式碼89 cd 48 89 d3 eb d1 48 c7 c7 55 70 72 c0 e8 64 86 b0 e4 c6 05 0d a1 02 00 01 e9 bc fd ff ff 45 89 e4 42 8b 04 a5 20 82 72 c0 <f0> 48 0f b3 05 f4 9c 01 00 42 c7 04 a5 20 82 72 c0 ff ff ff ff 31 RSP: 0018:ff72a5d51fa77ec8 EFLAGS: 00010202 RAX: 00000000ffffffff RBX: ff462981e5d8cb80 RCX: 0000000000000000 RDX: 0000000000000000 RSI 0000000000000246 RDI
    0000000000000246 RBP: ff46297556959d80 R08: 0000000000000382 R09: ff46297c8d0f38d8 R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000000e R13: 0000000000000000 R14: ffffffffffffffff R15:
    000000000000000e FS0000000000000000(0000) GS:ff46297a800c0000(0000) knlGS:0000000000000000 CS0010 DS
    0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffe0740618 CR3: 0000007e20410004 CR4: 0000000000771ee0 DR0
    呼叫 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffffe0ff0 DR7: 0000000000000554 PKRU?554 acpi_pad_add+0x120/0x120 [acpi_pad] kthread+0x10b/0x130 set_kthread_struct+0x50/0x50 ret_from_fork+0x1f/0x40 ... CR2ffffffffe0740618 crash> dis -lr ffffffffc0726923 ...
    /usr/src/debug/kernel-4.18.0-425.19.2.el8_7/linux-4.18.0-425.19.2.el8_7.x86_64/./include/linux/cpumask.h
    114 0xffffffffc0726918 <power_saving_thread+776>mov %r12d,%r12d /usr/src/debug/kernel-4.18.0-425.19.2.el8_7/linux-4.18.0-425.19.2.el8_7.x86_64/./include/linux/ cpumask.h
    325 0xffffffffc072691b <power_saving_thread+779>: mov -0x3f8d7de0(,%r12,4),%eax /usr/src/debug/kernel-4.18.0-425.19.2.el8_7/linux-4.18.0-425.19.2.el8_7.x86_64 /./arch/x86/include/asm/bitops.h: 80 0xffffffffc0726923 <power_saving_thread+787>: lock btr %rax,0x19cf4(%rip) # 0xffffffffc0740620 <pad_busy_cpus_bits> crash> px tsk_in_cpu[14] $66 = 0xffffffff crash> px 0xffffffffc072692c+0 $99 = 0xffffffffc0740620 crash> sym 0xffffffffc0740620 ffffffffc0740620 (b) pad_busy_cpus_bits [acpi_pad] crash> px pad_busy_cpus_bits[0] $42 = 0xfffc0 ---------- 若要修正此問題請務必在 tsk_in_cpu[tsk_index] != -1 之前呼叫 exit_round_robin() 中的 cpumask_clear_cpu() 如同它在 round_robin_cpu() 中所做的一樣。 [ rjw
    主旨編輯避免更新至相同值] (CVE-2024-49935)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-49935

medium Nessus Plugin ID 231010

版本 1.22