Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - bpf、sockmap修正在沒有擁有通訊端參照的情況下 sock_map_free() sock_map_free() 呼叫 release_sock(sk) 中的爭用。這會造成釋放後使用因為 syzbot 發現了 [1] Jakub Sitnicki 已經在認可 75e68e5bf2c7 的 sock_hash_free() 中解決一個類似問題 (bpf、sockhash映射釋放時同步從值區清單刪除) [1] refcount_t遞減命中 0洩漏記憶體。警告CPU: 0 PID: 3785 at lib/refcount.c:31 refcount_warn_sturate+0x17c/0x1a0 lib/refcount.c:31 Moduleslinked in: CPU: 0 PID:
    3785 Commkworker/u4:6 未受污染的 6.1.0-rc7-syzkaller-00103-gef4d3ea40565 #0 硬體名稱Google Google Compute Engine/Google Compute Engine、BIOS Google 2022 年 10 月 26 日 Workqueueevents_unbound bpf_map_free_deferred RIP 0010 refcount_warn_sature+0x17c/0x1a0 lib/refcount.c:31 代碼68 8b 31 c0 e8 75 71 15 fd 0f 0b e9 64 ff ff ff e8 d9 6e 4e fd c6 05 62 9c 3d 0a 01 48 c7 c7 80 bb 68 8b 31 c0 e8 54 71 15 fd <0f> 0b e9 43 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 fe ff RSP: 0018:ffffc9000456fb60 EFLAGS: 00010246 RAX: eae59bab72dcd700 RBX: 0000000000000004 RCX: ffff8880207057c0 RDX: 0000000000000000 RSI 0000000000000201 RDI0000000000000000 RBP0000000000000004 R08ffffffff816fdabd R09
     R10fffff520008adee5  : fffff520008adee5 R11: 1ffff920008adee4 R12: 0000000000000004 R13: dffffc0000000000 R14: ffff88807b1c6c00 R15: 1ffff1100f638dcf FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0 0000000080050033 CR20000001b30c30000 CR3
    000000000d08e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __refcount_dec include/linux/refcount.h:344 [inline] refcount_dec include/linux/refcount.h:359 [內嵌] __sock_put include/net/sock.h:779 [內嵌] tcp_release_cb+0x2d0/0x360 net/ipv4/tcp_output.c:1092 release_sock+0xaf/0x1c0 net/core/sock.c:3468 sock_map_free+0x219/0x2c0 net /core/sock_map.c:356 process_one_work+0x81c/0xd10 kernel/workqueue.c:2289 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch /x86/entry/entry_64.S:306 </TASK> (CVE-2022-50259)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2022-50259

high Nessus Plugin ID 265025

版本 1.2