Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - net/mlx5e設定檔回复失敗時不呼叫清理。當 mlx5e_netdev_change_profile 中的設定檔回复失敗時netdev 設定檔 var 會設為 NULL。避免在卸載驅動程式時因在這種情況下不呼叫 profile->cleanup 而發生當機。測試時會遇到此問題使用 wq rescuer 執行緒建立中斷的原始觸發程式 (可能是因為 Ctrl+C-ing modprobe)其由 mlx5e_priv_init 轉換為 ENOMEM (-12)同樣的設定檔回復也失敗原因 (訊號仍處於作用中)所以設定檔保留為 NULL導致稍後
    _mlx5e_remove。 [ 732.473932] mlx5_core 0000:08:00.1: E-Switch卸載 vfsmode(OFFLOADS)、nvfs(2)、necvfs(0)、active vports(2) [ 734.525513] workqueue無法建立救援者 kthread針對 wq mlx5e
    -EINTR [ 734.557372] mlx5_core 0000:08:00.1: mlx5e_netdev_init_profile:6235:(pid 6086): mlx5e_priv_init 失敗err=-12 [ 734.559187] mlx5_core 0000:08:00.1 eth3: mlx5e_netdev_change_profile: new 設定檔初始化失敗 -12 [ 734.560153] 工作佇列無法建立 wq mlx5e: -EINTR 的救援者 kthread [734.589378] mlx5_core 0000:08:00.1: mlx5e_netdev_init_profile:6235:(pid 6086)mlx5e_priv_init 失敗err=-12 [ 734.591136] mlx5_core 0000:08:00.1 eth3: mlx5e_netdev_change_profile無法回復至原始設定檔-12 [ 745.537492] 錯誤核心 NULL 指標解除參照位址0000000000000008 [ 745.538222] #PF核心模式中的監督讀取存取 <snipped> [ 745.551290] 呼叫追踪[ 745.551590] <TASK> [745.551866] ? __die+0x20/0x60 [ 745.552218] ? page_fault_oops+0x150/0x400 [ 745.555307] ? exc_page_fault+0x79/0x240 [ 745.555729] ? asm_exc_page_fault+0x22/0x30 [ 745.556166] ? mlx5e_remove+0x6b/0xb0 [mlx5_core] [ 745.556698] aid_bus_remove+0x18/0x30 [ 745.557134] device_release_driver_internal+0x1df/0x240 [ 745.557654] bus_remove_device+0xd7/0x140 [ 745.558075] device_del+0x15b/0x3c0 [ 745.558456] mlx5_rescan_drivers_locked。 part.0+0xb1/0x2f0 [mlx5_core] [745.559112] mlx5_unregister_device+0x34/0x50 [mlx5_core] [ 745.559686] mlx5_uninit_one+0x46/0xf0 [mlx5_core] [ 745.560203] remove_one+0x4e/0xd0 [mlx5_core] [ 745.560694] pci_device_remove+0x39/0xa0 [745.561112] device_release_driver_internal+0x1df/0x240 [ 745.561631] driver_detach+0x47/0x90 [ 745.562022] bus_remove_driver+0x84/0x100 [ 745.562444] pci_unregister_driver+0x3b/0x90 [ 745.562890] mlx5_cleanup+0xc/0x1b [mlx5_core] [ 745.563415] __x64_sys_delete_module+0x14d/0x2f0 [ 745.563886] ? kmem_cache_free+0x1b0/0x460 [ 745.564313] ? lockdep_hardirqs_on_prepare+0xe2/0x190 [ 745.564825] do_syscall_64+0x6d/0x140 [ 745.565223] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 745.565725] RIP
    0033:0x7f1579b1288b (CVE-2024-50146)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-50146

medium Nessus Plugin ID 231690

版本 1.22