Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - btrfs修正在以清除重新配置期間中止交易時的鎖死情況。在重新定位區塊群組之前我們會暫停清除執行重新定位然後再取消暫停清除。重新配置處理程序需要啟動並認可交易且如果交易認可路徑的重要區段發生失敗 (交易狀態 >= TRANS_STATE_COMMIT_START)在暫停清除的情況下就會發生鎖死。這會導致如下所示的堆疊追踪[42.479] BTRFS 資訊 (裝置 sdc)重新配置區塊群組 53876686848 旗標 metadata|raid6 [42.936] BTRFS 警告 (裝置 sdc)略過已中止交易的提交。 [42.936] ------------[cut here ]------------ [42.936] BTRFS交易中止 (錯誤 -28) [42.936] 警告CPU11 PID 346822 at fs/btrfs/transaction.c:1977 btrfs_commit_transaction+0xcc8/0xeb0 [btrfs] [42.936] 連結於 dm_flakey dm_mod 迴圈 btrfs 的模組 (...) [42.936] CPU11 PID 346822 Comm
    btrfs 受污染GW 6.3.0-rc2-btrfs-next-127+ #1 [42.936] 硬體名稱QEMU Standard PC (i440FX + PIIX, 1996)BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu .org 2014 年 4 月 1 日 [42.936] RIP
    0010:btrfs_commit_transaction+0xcc8/0xeb0 [btrfs] [42.936] 代碼ff ff 45 8b (...) [42.936] RSP
    0018:ffffb58649633b48 EFLAGS00010282 [42.936] RAX0000000000000000 RBXffff8be6ef4d5bd8 RCX
    0000000000000000 [42.936] RDX 0000000000000002 RSIffffffffb35e7782 RDI 00000000ffffffff [42.936] RBP
    ffff8be6ef4d5c98 R080000000000000000 R09ffffb586496339e8 [42.936] R100000000000000001 R11
    0000000000000001 R12ffff8be6d38c7c00 [42.936] R1300000000ffffffe4 R14ffff8be6c268c000 R15
    ffff8be6ef4d5cf0 [42.936] FS: 00007f381a82b340(0000) GS:ffff8beddfcc0000(0000) knlGS:0000000000000000 [42.936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [42.936] CR2: 00007f1e35fb7638 CR3:
    0000000117680006 CR40000000000370ee0 [42.936] DR00000000000000000 DR10000000000000000 DR2
    0000000000000000 [42.936] DR30000000000000000 DR600000000fffe0ff0 DR70000000000000400 [42.936] 呼叫追踪 [42.936] [] <TASK> [42.936] start_transaction+0xcb/0x610 [btrfs] [42.936] prepare_to_relocate+0x111/0x1a0 [btrfs] [42.936] relocate_block_group+0x57/0x5d0 [btrfs] [42.936] btrfs_wait_nocow_writers+0x25/0xb0 [btrfs] [42.936] btrfs_relocate_block_group+0x248/0x3c0 [btrfs] [42.936] __pfx_autoremove_wake_function+0x10/0x10 [42.936] btrfs_relocate_chunk+0x3b/0x150 [btrfs] [42.936] btrfs_balance+0x8ff/0x11d0 [btrfs] [42.936] ? __kmem_cache_alloc_node+0x14a/0x410 [42.936] btrfs_ioctl+0x2334/0x32c0 [btrfs] [42.937] ? mod_objcg_state+0xd2/0x360 [42.937] ? refill_obj_stock+0xb0/0x160 [42.937] ? seq_release+0x25/0x30 [42.937] ?
    __rseq_handle_notify_resume+0x3b5/0x4b0 [42.937] ? percpu_counter_add_batch+0x2e/0xa0 [42.937] ?
    __x64_sys_ioctl+0x88/0xc0 [42.937] __x64_sys_ioctl+0x88/0xc0 [42.937] do_syscall_64+0x38/0x90 [42.937] entry_SYSCALL_64_after_hwframe+0x72/0xdc [42.937] RIP 0033:0x7f381a6ffe9b 48 代碼 [42.937[9] ] 44 24 (...) [42.937] RSP002b:00007ffd45ecf060 EFLAGS00000246 ORIG_RAX0000000000000010 [42.937] RAX
    ffffffffffffffda RBX 0000000000000001 RCX 00007f381a6ffe9b [42.937] RDX 00007ffd45ecf150 RSI
    00000000c4009420 RDI0000000000000003 [42.937] RBP 0000000000000003 R080000000000000013 R09
    0000000000000000 [42.937] R1000007f381a60c878 R110000000000000246 R1200007ffd45ed0423 [42.937] R13
    00007ffd45ecf150 R140000000000000000 R1500007ffd45ecf148 [42.937] </TASK> [42.937] ---[ end trace 0000000000000000 ]--- [42.937] BTRFScleanup_transaction1977 中errno 錯誤=-28 無剩餘空間 [59.196] 資訊任務 btrfs:346772 的封鎖時間超過 120 秒。 [59.196] 受污染的 GW 6.3.0-rc2-btrfs-next-127+ #1 [59.196] echo 0 > /proc/sys/kernel/hung_ ---truncated--- (CVE-2023-53348)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-53348

medium Nessus Plugin ID 265658

找不到變更記錄