Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - fs/ntfs3增強屬性大小檢查這會結合溢位和邊界檢查因此在列舉所有屬性大小時都會對其進行正確檢查。 [ 169.181521] 錯誤KASANrun_unpack+0x2e3/0x570 中的 slab 超出邊界 [ 169.183161] 工作 mount/247 在 addr ffff8880094b6240 讀取大小 1 [169.184046] [ 169.184925] CPU: 0 PID 247 Commmount 未受污染的 6.0.0-rc7+ #3 [ 169.185908] 硬體名稱QEMU Standard PC (i440FX + PIIX, 1996)BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01 /2014 [ 169.187066] 呼叫追踪 [ 169.187492] <TASK> [ 169.188049] dump_stack_lvl+0x49/0x63 [ 169.188495] print_report.cold+0xf5/0x689 [ 169.188964] ? run_unpack+0x2e3/0x570 [ 169.189331] kasan_report+0xa7/0x130 [ 169.189714] ? run_unpack+0x2e3/0x570 [ 169.190079] __asan_load1+0x51/0x60 [ 169.190634] run_unpack+0x2e3/0x570 [ 169.191290] ? run_pack+0x840/0x840 [ 169.191569] ? run_lookup_entry+0xb3/0x1f0 [169.192443] ? mi_enum_attr+0x20a/0x230 [ 169.192886] run_unpack_ex+0xad/0x3e0 [ 169.193276] ? run_unpack+0x570/0x570 [ 169.193557] ? ni_load_mi+0x80/0x80 [ 169.193889] ? debug_smp_processor_id+0x17/0x20 [ 169.194236] ? mi_init+0x4a/0x70 [ 169.194496] attr_load_runs_vcn+0x166/0x1c0 [ 169.194851] ? attr_data_write_ passenger+0x250/0x250 [ 169.195188] mi_read+0x133/0x2c0 [ 169.195481] ntfs_iget5+0x277/0x1780 [ 169.196017] ? call_rcu+0x1c7/0x330 [169.196392] ? ntfs_get_block_bmap+0x70/0x70 [ 169.196708] ? evict+0x223/0x280 [ 169.197014] ?
    __kmalloc+0x33/0x540 [ 169.197305] ? wnd_init+0x15b/0x1b0 [ 169.197599] ntfs_fill_super+0x1026/0x1ba0 [169.197994] ? put_ntfs+0x1d0/0x1d0 [ 169.198299] ? vsprintf+0x20/0x20 [ 169.198583] ? mutex_unlock+0x81/0xd0 [ 169.198930] set_blocksize+0x95/0x150 [ 169.199269] get_tree_bdev+0x232/0x370 [169.199750] ? put_ntfs+0x1d0/0x1d0 [ 169.200094] ntfs_fs_get_tree+0x15/0x20 [ 169.200431] vfs_get_tree+0x4c/0x130 [ 169.200714] path_mount+0x654/0xfe0 [ 169.201067] ? putname+0x80/0xa0 [169.201358] ? finish_automount+0x2e0/0x2e0 [ 169.201965] ? putname+0x80/0xa0 [ 169.202445] ? kmem_cache_free+0x1c4/0x440 [ 169.203075] ? putname+0x80/0xa0 [ 169.203414] do_mount+0xd6/0xf0 [169.203719] ? path_mount+0xfe0/0xfe0 [ 169.203977] ? __kasan_check_write+0x14/0x20 [ 169.204382]
    __x64_sys_mount+0xca/0x110 [ 169.204711] do_syscall_64+0x3b/0x90 [ 169.205059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.205571] RIP 0033:0x7f67a80e948a [ 169.206327] 代碼48 8b 0d 11 fa 2a 00017 d8 64 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 008 [ 169.208296] RSP: 002b:00007ffddf020f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [169.209253] RAX: ffffffffffffffda RBX000055e2547a6060 RCX00007f67a80e948a [ 169.209777] RDX
    000055e2547a6260 RSI 000055e2547a62e0 RDI 000055e2547aeaf0 [ 169.210342] RBP 0000000000000000 R08
    000055e2547a6280 R090000000000000020 [ 169.210843] R1000000000c0ed0000 R110000000000000202 R12
    000055e2547aeaf0 [ 169.211307] R13000055e2547a6260 R140000000000000000 R1500000000ffffffff [169.211913] </TASK> [ 169.212304] [ 169.212680] 由工作 0 配置[ 169.212963] (堆疊不可用) [ 169.213200] [ 169.213472] 錯誤位址屬於 ffff8880094b5e00 處的物件 [169.213472]其屬於大小 1152 的快取 UDP [ 169.214095169.214095錯誤位址位於 1152 位元組區域內 1088 位元組 [ffff8880094b5e00、 ffff8880094b6280) [ 169.214639] [169.215004] 錯誤位址屬於實體頁面[ 169.215766] page:000000002e324c8c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x94b4 [ 169.218412] head:000000002e324c8c 順序2 compound_mapcount:0 compound_pincount:0 [ 169.219078] 旗標
    0xfffffc0010200(slab|head|node=0|zone=1|lastcpupid=0x1fffff) [ 169.220272] raw000fffffc0010200
    ---truncated--- (CVE-2023-53486)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-53486

medium Nessus Plugin ID 269553

找不到變更記錄