Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - netvlan開啟時不傳播旗標使用裝置執行個體鎖定現在可能會發生鎖死[ 1.211455] =================== ========================= [ 1.211571] 警告偵測到可能的遞回鎖定 [ 1.211687] 6.14.0-rc5-01215-g032756b4ca7a-dirty #5 未受污染 [ 1.211823]
    -------------------------------------------------------- [ 1.211936] ip/ 184 嘗試取得鎖定 [ 1.212032] ffff8881024a4c30 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x4e/0xb0 [ 1.212207] [ 1.212207] 但工作已暫停lock[ 1.212332] ffff8881024a4c30 (&dev->lock){+.+.}-{4:4}, at: dev_open+0x50/0xb0 [1.212487] [ 1.212487] 其他可協助我們除錯的資訊[ 1.212626] 可能的不安全鎖定情況[ 1.212626] [ 1.212751] CPU0 [ 1.212815] ---- [ 1.212871] lock(&dev->lock); [ 1.212944] lock(&dev->lock); [ 1.213016] [ 1.213016] *** DEADLOCK *** [ 1.213016] [ 1.213143] 可能是因為缺少鎖定巢狀標記法所致 [ 1.213143] [ 1.213294] ip/184 保留的 3 個鎖定[ 1.213371] #0ffffffff838b53e0 (rtnl_mutex){+.+.}-{4:4} 位於 rtnl_nets_lock+0x1b/0xa0 [ 1.213543] #1ffffffff84e5fc70 (&net->rtnl_mutex){+.+.}-{4:4}、@rtnl_nets_lock+0x37/0xa0 [ 1.213727] #2ffff8881024a4c30 (&dev->lock){+.+.}-{4:4}、@dev_open+0x50/0xb0 [ 1.213895] [ 1.213895]堆疊反向追踪 [ 1.213991] CPU
    0 UID0 PID184 Commip 未受污染的 6.14.0-rc5-01215-g032756b4ca7a-dirty #5 [ 1.213993] 硬體名稱
    QEMU Standard PC (i440FX + PIIX, 1996)、BIOS Arch Linux 1.16.3-1-1 04/01/2014 [ 1.213994] 呼叫追踪 [1.213995] <TASK> [ 1.213996] dump_stack_lvl+0x8e/0xd0 [ 1.214000] print_deadlock_bug+0x28b/0x2a0 [1.214020] lock_acquire+0xea/0x2a0 [ 1.214027] __mutex_lock+0xbf/0xd40 [ 1.214038] dev_set_allmulti+0x4e/0xb0 # real_dev->flags & IFF_ALLMULTI [ 1.214040] vlan_dev_open+0xa5/0x170 # vlandev 上的 ndo_open [ 1.214042] __dev_open+0x145/0x270 [ 1.214046] __dev_change_flags+0xb0/0x1e0 [1.214051] netif_change_flags+0x22/0x60 # IFF_UP vlandev [ 1.214053] dev_change_flags+0x61/0xb0 # 針對來自 群組中的每個裝置dev->vlan_info [ 1.214055] vlan_device_event+0x766/0x7c0 # on netdevsim0 [ 1.214058] notifier_call_chain+0x78/0x120 [ 1.214062] netif_open+0x6d/0x90 [ 1.214064] dev_open+0x5b/0xb0 # 鎖定 netdevsim0 [ 1.214066] bond_enslave+0x64c/0x1230 [ 1.214075] netdevsim0 上的 do_set_master+0x175/0x1e0 # on netdevsim0 [1.214077] do_setlink+0x516/0x13b0 [ 1.214094] rtnl_newlink+0xaba/0xb80 [ 1.214132] rtnetlink_rcv_msg+0x440/0x490 [ 1.214144] netlink_rcv_skb+ 0xeb/0x120 [ 1.214150] netlink_unicast+0x1f9/0x320 [ 1.214153] netlink_sendmsg+0 x346/0x3f0 [ 1.214157] __sock_sendmsg+0x86/0xb0 [1.214160]____sys_sendmsg+0x1c8/0x220 [ 1.214164] ___sys_sendmsg+0x28f/0x2d0 [ 1.214179]
    __x64_sys_sendmsg+0xef/0x140 [ 1.214184] do_syscall_64+0xec/0x1d0 [ 1.214190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1.214191] RIP: 0033:0x7f2d1b4a7e56 裝置設定netdevsim0 (關閉) ^ ^1 連結全部 netdevsim1.100@netsim=on (向下) 當我們從屬具有 vlan 的較低裝置 (netdevsim0) 時我們會在 ndo_open 期間傳播 vlan 的 allmuti/promisc 旗標。這會造成 (重新) 鎖定 real_dev。在旗標變更時傳播 allmulti/promisc而非在開啟時傳播。目前有一個輕微的語意變更已關閉的 vlans 現在會傳播旗標但這似乎不太可能導致真正的問題。Reproducer: echo 0 1 > /sys/bus/netdevsim/new_device dev_path=$(ls -d /sys/bus/netdevsim/devices/netdevsim0/net/*) dev=$(echo $dev_path | rev | cut -d/ -f1 | rev) ip link set dev $dev name netdevsim0 ip link set dev netdevsim0 up ip link add link netdevsim0 name netdevsim0.100 type vlan id 100 ip連結設定 dev netdevsim0.100 allm ---truncated--- (CVE-2025-23163)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-23163

medium Nessus Plugin ID 244589

版本 1.10

版本 1.9

版本 1.5

版本 1.4

版本 1.3

版本 1.2

版本 1.10 Oct 28, 2025, 5:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510281756
版本 1.9 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
版本 1.5 Sep 6, 2025, 10:42 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509061042
版本 1.4 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
版本 1.3 Sep 1, 2025, 12:37 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509011237
版本 1.2 Aug 21, 2025, 7:41 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202508210741