Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - scsihisi_sas遊走 sas_dev.list 的成員時抓取 sas_dev 鎖定。釋放函式 slot_complete_v3_hw() 中的插槽時可能會在其他地方遊走 sas_dev.list而且它可能會觸發 NULL 指標例外狀況如下所示==>cq thread ==>scsi_eh_6 ==>scsi_error_handler() ==>sas_eh_handle_sas_errors() ==>sas_scsi_find_task() ==>lldd_abort_task() ==>slot_complete_v3_hw() ==>hisi_sas_abort_task() ==>hisi_sas_slot_task_free( ) ==>dereg_device_v3_hw() ==>list_del_init() ==>list_for_each_entry_safe() [ 7165.434918] sas輸入 sas_scsi_recover_host busy32 失敗32 [7165.434926] sas嘗試尋找工作 0x00000000769b5ba5 [ 7165.434927] sas sas_scsi_find_task: aborting task 0x00000000769b5ba5 [ 7165.434940] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000769b5ba5) aborted [ 7165.434964] hisi_sas_v3_hw 0000:b4:02.0: slot complete: task(00000000c9f7aa07) ignored [7165.434965] hisi_sas_v3_hw 0000: b4:02.0插槽完成已忽略 task(00000000e2a1cf01) [ 7165.434968] 無法處理核心 NULL 指標r 在虛擬位址 0000000000000000 處解除參照 [ 7165.434972] Hisi_sas_v3_hw 0000:b4:02.0插槽完成已忽略 task(0000000022d52d93) 7165.434975] Hisi_sas_v3_hw 0000:b4:02.0插槽完成 task(0000000066 Mea7516c) 7165.434976已忽略info[ 7165.434982] ESR = 0x96000004 [ 7165.434991] 例外狀況類別 = DABT (目前 EL)、IL = 32 位元 [ 7165.434992] SET = 0、FnV = 0 [ 7165.434993] EA = 0、S1PTW = 0 [ 7165.434994] 資料中止資訊[ 7165.434994] ISV = 0, ISS = 0x00000004 [ 7165.434995] CM = 0, WnR = 0 [ 7165.434997] 使用者 pgtable4k 頁面, 48 位元 VA, pgdp = 00000000f29543f2 [ 7165.434998] [0000000000000000] pgd=0000000000000000 [ 7165.435003] 內部錯誤
    Oops96000004 [#1] SMP [ 7165.439863] 處理程序 scsi_eh_6 (pid4109、堆疊限制 = 0x00000000c43818d5) [7165.468862] pstate00c00009 (nzcv daif +PAN +UAO) [ 7165.473637] pc dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [ 7165.479443] lrdereg_device_v3_hw+0x2c/0xa8 [hisi_sas_v3_hw] [ 7165.485247] sp
    ffff00001d623bc0 [ 7165.488546] x29 ffff00001d623bc0 x28ffffa027d03b9508 [ 7165.493835] x27
    ffff80278ed50af0 x26ffffa027dd31e0a8 [ 7165.499123] x25ffffa027d9b27f88 x24ffffa027d9b209f8 [7165.504411] x23ffffa027c45b0d60 x22ffff80278ec07c00 [ 7165.509700] x2100020000000000000000000
    ffffa027d9b209f8 [ 7165.514988] x19ffffa027d9b27f88 x18ffffffffffffffff [ 7165.520276] x17
    0000000000000000 x16: 0000000000000000 [ 7165.525564] x15: ffff0000091d9708 x14: ffff0000093b7dc8 [7165.530852] x13: ffff0000093b7a23 x12: 6e7265746e692067 [ 7165.536140] x11: 0000000000000000 x10:
    0000000000000bb0 [ 7165.541429] x9 ffff00001d6238f0 x8 ffffa027d877af00 [ 7165.546718] x7
    ffffa027d6329600 x6 : ffff7e809f58ca00 [ 7165.552006] x5 : 0000000000001f8a x4 : 000000000000088e [7165.557295] x3 : ffffa027d9b27fa8 x2 : 0000000000000000 [ 7165.562583] x1 : 0000000000000000 x0 :
    000000003000188e [ 7165.567872] Call trace: [ 7165.570309] dereg_device_v3_hw+0x68/0xa8 [hisi_sas_v3_hw] [7165.575775] hisi_sas_abort_task+0x248/0x358 [hisi_sas_main] [ 7165.581415] sas_eh_handle_sas_errors+0x258/0x8e0 [libsas] [ 7165.586876] sas_scsi_recover_host+ 0x134/0x458 [libsas] [7165.592082] scsi_error_handler+0xb4/0x488 [ 7165.596163] kthread+0x134/0x138 [ 7165.599380] ret_from_fork+0x10/0x18 [ 7165.602940] 代碼d5033e9f b9000040 aa0103e2 eb03003f (f9400]0) 7165.609004]從 CPU 75 開始的核心錯誤 (0x1) 通知 [ 7165.700728] ---[ end trace fc042cbbea224efc ]--- [7165.705326] 核心錯誤 - 未同步嚴重例外狀況 若要修正此問題請在遊走 的成員時抓取 sas_dev 鎖定dereg_device_v3_hw() 和 Hisi_sas_release_tasks() 中的 sas_dev.list 以避免在新增和刪除成員的同時進行。時間 ---truncated--- (CVE-2023-53627)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-53627

medium Nessus Plugin ID 270199

版本 1.12