Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - af_unix修正 user->unix_inflight 的資料爭用。在 spin_lock(unix_gc_lock) 下user->unix_inflight 已變更但是 Too_many_unix_fds() 會非鎖定地讀取它。讓我們將寫入/讀取存取註解為 user->unix_inflight。錯誤KCSANunix_attach_fds / unix_inflight 中的資料爭用由 cpu 1 上的工作 44798 寫入 8 位元組之 0xffffffff8546f2d0unix_inflight+0x157/0x180 net/unix/scm.c:66 unix_attach_fds+0x147/0x1e0 net/unix/scm.c :123 unix_scm_to_skb net/unix/af_unix.c:1827 [內嵌] unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950 unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [內嵌] unix_seqpacket_sendmsg+0xba/0x130 net/unix /af_unix.c:2292 sock_sendmsg_nosec net/socket.c:725 [內嵌] sock_sendmsg+0x148/0x160 net/socket.c:748____sys_sendmsg+0x4e4/0x610 net/socket.c:2494
    ___sys_sendmsg+0xc6/0x140 net/socket.c:2548 __sys_sendmsg+0x94/0x140 net/socket.c:2577 __do_sys_sendmsg net/socket.c:2586 [內嵌] __se_sys_sendmsg net/socket.c:2584 [內嵌] __x64_sys_sendmsg+0x45/ 0x50 net/socket.c:2584 do_syscall_x64 arch/x86/entry/common.c:50 [內嵌] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 讀取至 0xffffffff8546f2d0 (共 8 位元組)透過 cpu 0 上的工作 44814too_many_unix_fds net/unix/scm.c:101 [內嵌] unix_attach_fds+0x54/0x1e0 net/unix/scm.c:110 unix_scm_to_skb net/unix/af_unix.c:1827 [內嵌] unix_dgram_sendmsg+0x46a /0x14f0 net/unix/af_unix.c:1950 unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [內嵌] unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292 sock_sendmsg_nosec net/socket.c:725 [內嵌] sock_sendmsg +0x148/0x160 net/socket.c:748____sys_sendmsg+0x4e4/0x610 net/socket.c:2494
    ___sys_sendmsg+0xc6/0x140 net/socket.c:2548 __sys_sendmsg+0x94/0x140 net/socket.c:2577 __do_sys_sendmsg net/socket.c:2586 [內嵌] __se_sys_sendmsg net/socket.c:2584 [內嵌] __x64_sys_sendmsg+0x45/ 0x50 net/socket.c:2584 do_syscall_x64 arch/x86/entry/common.c:50 [內嵌] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 值已變更0x00000000000000c -> 0x000000000000000d 由 核心並行清理程式在此報告CPU: 0 PID: 44814 Commsystemd-coredum 未受污染的 6.4.0-11989-g6843306689af #6 硬體名稱: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0 -0-gd239552ce722-prebuilt.qemu.org 04/01/2014 (CVE-2023-53204)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-53204

medium Nessus Plugin ID 264982

版本 1.7