Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - drm/meson在模組卸載時明確移除匯總驅動程式由於在卸載 meson_drm 模組時未呼叫 component_master_del因此匯總裝置會永遠留存在全域 aggregate_devices 清單中。這表示當卸載及重新載入 meson_dw_hdmi 模組時component_add 會呼叫 try_to_bring_up_aggregate_device 並尋找未系結的 meson_drm 匯總裝置。這會導致將匯總裝置與 meson_drv_unbind 解除系結時指向 devres API 自動釋放的記憶體的某些 aggregate_device 結構項目解除參照並觸發釋放後使用錯誤 [ +0.000014] ====== ================================================== ===== [ +0.000007] 錯誤KASAN在 find_components+0x468/0x500 中發生釋放後使用 [ +0.000017] 工作 modprobe/2536 的位址 ffff000006731688 的大小為 8 的讀取 [ +0.000018] CPU4 PID2536 通訊modprobe 受污染的 GCO 5.19.0-rc6-lrmbkasan+ #1 [ +0.000010] 硬體名稱Hardkernel ODROID-N2Plus (DT) [ +0.000008] 呼叫追踪 [ +0.000005] dump_backtrace+0x1ec/ 0x280 [ +0.000011] show_stack+0x24/0x80 [ +0.000007] dump_stack_lvl+0x98/0xd4 [ +0.000010] print_address_description.constprop.0+0x80/0x520 [ +0.000011] print_report+0x128/0x260 [ +0.000007] kasan_report+0xb8/0xfc [ +0.000007]
    __asan_report_load8_noabort+0x3c/0x50 [ +0.000009] find_components+0x468/0x500 [ +0.000008] try_to_bring_up_aggregate_device+0x64/0x390 [ +0.000009] __component_add+0x1dc/0x49c [ +0.000009] component_add+0x20/0x30 [ +0.000008] meson_dw_hdmi_probe+0x28/0x34 [meson_dw_hdmi] [ +0.000013] platform_probe+0xd0/0x220 [ +0.000008] emerge_probe+0x3ac/0xa80 [ +0.000008]
    __driver_probe_device+0x1f8/0x400 [ +0.000008] driver_probe_device+0x68/0x1b0 [ +0.000008]
    __driver_attach+0x20c/0x480 [ +0.000009] bus_for_each_dev+0x114/0x1b0 [ +0.000007] driver_attach+0x48/0x64 [ +0.000009] bus_add_driver+0x390/0x564 [ +0.000007] driver_register+0x1a8/0x3e4 [ +0.000009]
    __platform_driver_register+0x6c/0x94 [ +0.000007] meson_dw_hdmi_platform_driver_init+0x30/0x1000 [meson_dw_hdmi] [ +0.000014] do_one_initcall+0xc4/0x2b0 [ +0.000008] do_init_module+0x154/0x570 [+0.000010] load_module+0x1aea78/0x140.000008] __do_sys_init_module+0x184/0x1cc [ +0.000008]
    __arm64_sys_init_module+0x78/0xb0 [ +0.000008] invoke_syscall+0x74/0x260 [ +0.000008] el0_svc_common.constprop.0+0xcc/0x260 [ +0.000009] do_el0_svc+0x50/0x70 [ +0.000008] el0_svc+0x68/0x1a0 [ +0.000009] el0t_64_sync_handler+0x11c/0x150 [ +0.000009] el0t_64_sync+0x18c/0x190 [ +0.000014] 由工作 902 分配 [ +0.000007] kasan_save_stack+0x2c/0x5c [ +0.000009] __kasan_kmalloc+0x90/0xd0 [ +0.000007]
    __kmalloc_node+0x240/0x580 [ +0.000010] memcg_alloc_slab_cgroups+0xa4/0x1ac [ +0.000010] memcg_slab_post_alloc_hook+0xbc/0x4c0 [ +0.000008] kmem_cache_alloc_node+0x1d0/0x490 [ +0.000009]
    __alloc_skb+0x1d4/0x310 [ +0.000010] alloc_skb_with_frags+0x8c/0x620 [ +0.000008] sock_alloc_send_pskb+0x5ac/0x6d0 [ +0.000010] unix_dgram_sendmsg+0x2e0/0x12f0 [ +0.000010] sock_10 [+] sock_10 [+0.000007] 0x sock_write_iter+0x1d0/0x304 [ +0.000008] new_sync_write+0x364/0x460 [+0.000007] vfs_write+0x420/0x5ac [ +0.000008] ksys_write+0x19c/0x1f0 [ +0.000008]
    __arm64_sys_write+0x78/0xb0 [ +0.000007] invoke_syscall+0x74/0x260 [ +0.000008] el0_svc_common.constprop.0+0x1a8/0x260 [ +0.000009] do_el0_svc+0x50/0x70 [ +0.000007] el0_svc+0x68/0x1a0 [ +0.000008] el0t_64_sync_handler+0x11c/0x150 [ +0.000008] el0t_64_sync+0x18c/0x190 [ +0.000013] 由工作 2509 釋放[ +0.000008] kasan_save_stack+0x2c/0x5c [ +0.000007] kasan_set_track+0x2c/0x40 [ +0.000008] kasan_set_free_info+0x28/0x50 [ +0.000008]____kasan_slab_free+0x128/0x1d4 [ +0.000008]
    __kasan_slab_free+0x18/0x24 [ +0.000007] slab_free_freelist_hook+0x108/0x230 [ +0.000010] ---truncated--- (CVE-2022-50560)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2022-50560

medium Nessus Plugin ID 276862

版本 1.14