Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - btrfs不會在 RST 上的重新配置 inode 上預先讀取。在重新定位時我們會在重新定位的 inode 上執行 readahead但是如果檔案系統是由 RAID 等量磁碟區樹狀結構支援我們就可以獲得 ENOENT (例如這是因為未在RST) 從查閱中讀取。但是 readahead 不會處理錯誤而是將無效的讀取提交給裝置造成分散-集中清單程式碼中的宣告BTRFS 資訊 (裝置 nvme1n1)平衡啟動 -d -m -s BTRFS 資訊 (裝置 nvme1n1)重新定位區塊群組 6480920576 旗標 data|raid0 BTRFS 錯誤 (裝置 nvme1n1)找不到邏輯 [6481928192、6481969152] devid 2、設定檔 raid0 的 raid-stripe ------------[此處截取 ]-- ---------- include/linux/scatterlist.h:115! 的核心錯誤Oops無效 opcode0000 [#1] PREEMPT SMP PTI CPU0 PID1012 Commbtrfs 未受污染 6.10.0-rc7+ #567 RIP0010:__blk_rq_map_sg+0x339/0x4a0 RSP0018:ffffc90001a43820 EFLAGS: 000RAX 0000000000000000 RBX 0000000000000000 RCX ffffea00045d4802 RDX 0000000117520000 RSI 0000000000000000 RDI
    ffff8881027d1000 RBP: 0000000000003000 R08: ffffea00045d4902 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000001000 R12: ffff8881003d10b8 R13: ffffc90001a438f0 R14: 0000000000000000 R15:
    000000000003000 FS: 00007fcc048a6900(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 CS: 0010 DS
    0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002cd11000 CR3: 00000001109ea001 CR4: 0000000000370eb0 呼叫追踪 <TASK> __die_body.cold+0x14/0x25 ? die+0x2e/0x50 ? do_trap+0xca/0x110 ? do_error_trap+0x65/0x80 ?
    __blk_rq_map_sg+0x339/0x4a0 ? exc_invalid_op+0x50/0x70 ? __blk_rq_map_sg+0x339/0x4a0 ? asm_exc_invalid_op+0x1a/0x20 ? __blk_rq_map_sg+0x339/0x4a0 nvme_prep_rq.part.0+0x9d/0x770 nvme_queue_rq+0x7d/0x1e0 __blk_mq_issue_directly+0x2a/0x90 ? blk_mq_get_budget_and_tag+0x61/0x90 blk_mq_try_issue_list_directly+0x56/0xf0 blk_mq_flush_plug_list.part.0+0x52b/0x5d0
    __blk_flush_plug+0xc6/0x110 blk_finish_plug+0x28/0x40 read_pages+0x160/0x1c0 page_cache_ra_unbounded+0x109/0x180 relocate_file_extent_cluster+0x611/0x6a0 ? btrfs_search_slot+0xba4/0xd20 balance_dirty_pages_ratelimited_flags+0x26/0xb00 relocate_data_extent.constprop.0+0x134/0x160 relocate_block_group+0x3f2/0x500 btrfs_relocate_block_group+0x250/0x430 btrfs_relocate_chunk+0x3f/0x130 btrfs_balance+0x71btrfs_balance+0x71btrfs_relocate_block_group+0x250/0x430 btrfs_relocate_chunk+0x3f/0x130 btrfs_balance+0x71b? kmalloc_trace_noprof+0x13b/0x280 btrfs_ioctl+0x2c2e/0x3030 kvfree_call_rcu+0x1e6/0x340 ? list_lru_add_obj+0x66/0x80 ? mntput_no_expire+0x3a/0x220 __x64_sys_ioctl+0x96/0xc0 do_syscall_64+0x54/0x110 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fcc04514f9b 程式碼無法存取位於 0x7fcc04514f7.1 的 opcode 位元組RSP002b00007ffeba923370 EFLAGS00000246 ORIG_RAX
    0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcc04514f9b RDX: 00007ffeba923460 RSI: 00000000c4009420 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000013 R09:
     R100000000000000001  : 00007fcc043fbba8 R11: 0000000000000246 R12: 00007ffeba924fc5 R13: 00007ffeba923460 R14: 0000000000000002 R15: 00000000004d4bb0 </TASK> Modules linked in: ---[ end trace 0000000000000000]--- RIP: 0010:__blk_rq_map_sg+0x339/ 0x4a0 RSP0018:ffffc90001a43820 EFLAGS00010202 RAX
    0000000000000000 RBX: 0000000000000000 RCX: ffffea00045d4802 RDX: 0000000117520000 RSI: 0000000000000000 RDI: ffff8881027d1000 RBP: 0000000000003000 R08: ffffea00045d4902 R09: 0000000000000000 R10:
     R110000000000000000  : 0000000000001000 R12: ffff8881003d10b8 R13: ffffc90001a438f0 R14: 0000000000000000 R15: 0000000000003000 FS: 00007fcc048a6900(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcc04514f71 CR3: 00000001109ea001 CR4: 0000000000370eb0 核心 p ---truncated--- (CVE-2024-49932)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-49932

medium Nessus Plugin ID 231776

版本 1.21