Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - idpf將控制佇列 mutex 轉換為 spinlock 在啟用 VIRTCHNL2_CAP_MACFILTER 的情況下載入模組時會產生下列警告[ 324.701677] 錯誤從 kernel/locking/mutex.c:578 的無效內容呼叫休眠函式 [ 324.701684] in_atomic ()1、irqs_disabled()0、non_block 0、pid 1582、名稱 NetworkManager [ 324.701689] preempt_count 201、預期 0 [ 324.701693] RCU 巢狀深度 0、預期 0 [ 324.701697] NetworkManager/1582 保留的 2 個鎖定 [ 324.701702] #0ffffffff9f7be770 (rtnl_mutex){....}-{3:3}位於 rtnl_newlink+0x791/0x21e0 [ 324.701730] #1ff1100216c380368 (_xmit_ETHER){ ....}-{2:2} 位於 __dev_open+0x3f0/0x870 [ 324.701749] 已在下列位置停用搶占 [ 324.701752] [<ffffffff9cd23b9d>] __dev_open+0x3dd/0x870 [ 324.701765] CPU30 UID 0 PID 1582 通訊NetworkManager 未受污染的 6.15.0-rc5+ #2 PREEMPT(自發) [ 324.701771] 硬體名稱: Intel Corporation M50FCP2SBSTD/M50FCP2SBSTD、BIOS SE5C741.86B.01.01.0001.2211140926 2022 年 11 月 14 日 [ 324.701774] 呼叫追踪[324.701777] <TASK> [ 324.701779] dump_stack_lvl+0x5d/0x80 [ 324.701788] ? __dev_open+0x3dd/0x870 [324.701793] __might_resched.cold+0x1ef/0x23d <..> [ 324.701818] __mutex_lock+0x113/0x1b80 <..> [324.701917] idpf_ctlq_clean_sq+0xad/0x4b0 [idpf] [ 324.701935] kasan_save_track+0x14/0x30 [ 324.701941] idpf_mb_clean+0x143/0x380 [idpf] <..> [ 324.701991] idpf_send_mb_msg+0x111/0x720 [idpf] [ 324.702009] idpf_vc_xn_exec+0x4cc/0x990 [idpf] [ 324.702021] rcu_is_watching+0x12/0xc0 [ 324.702035] idpf_add_del_mac_filters+0x3ed/0xb50 [idpf] <..> [ 324.702122] __hw_addr_sync_dev+0x1cf/0x300 [324.702126] ? find_held_lock+0x32/0x90 [ 324.702134] idpf_set_rx_mode+0x317/0x390 [idpf] [ 324.702152]
    __dev_open+0x3f8/0x870 [ 324.702159] ? __pfx___dev_open+0x10/0x10 [ 324.702174]
    __dev_change_flags+0x443/0x650 <..> [ 324.702208] netif_change_flags+0x80/0x160 [ 324.702218] do_setlink.isra.0+0x16a0/0x3960 <..> [ 324.702349] rtnl_newlink+0x12fd/0x21e0 順序如下
    rtnl_newlink()-> __dev_change_flags()-> __dev_open()-> dev_set_rx_mode() - > # 停用 BH 並抓取 dev->addr_list_lock idpf_set_rx_mode() -> # 僅在 VIRTCHNL2_CAP_MACFILTER 為 ON 時繼續
    __dev_uc_sync() -> idpf_add_mac_filter -> idpf_add_del_mac_filters -> idpf_send_mb_msg() -> idpf_mb_clean() -> idpf_ctlq_clean_sq() # mutex_lock(cq_lock) 透過將 cq_lock 轉換為 spinlock 來修正。新鎖定下的所有作業皆安全但釋放 DMA 記憶體除外其可能使用 vunmap()。透過要求 DMA 對應的連續實體記憶體來修正。 (CVE-2025-38392)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2025-38392

medium Nessus Plugin ID 252173

版本 1.1