Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - drm/gud修正 UBSAN 警告 UBSAN 抱怨 bool 的無效值[ 101.165172] [drm] 已初始化 2-3 的 gud 1.0.0 20200422。2:1次要版本 1 上的 .0 [ 101.213360] gud 2-3.2:1.0[drm] fb1guddrmfb 框架緩衝區裝置 [ 101.213426] usbcore已註冊新介面驅動程式 gud [ 101.989431] ===================== ================================================== ========= [ 101.989441] UBSAN
    linux/include/linux/iosys-map.h:253:9 中的無效載入 [ 101.989447] 值 121 的載入不是 '_Bool' 類型的有效值 [ 101.989451] CPU1 PID455 通訊kworker /1:6 未受污染的 5.18.0-rc5-gud-5.18-rc5 #3 [101.989456] 硬體名稱Hewlett-Packard HP EliteBook 820 G1/1991BIOS L71 版本 01.44 2018 年 4 月 12 日 [101.989459] 工作佇列events_long gud_flush_work [gud] [ 101.989471] 呼叫追踪 [ 101.989474] <TASK> [101.989479] dump_stack_lvl+0x49/0x5f [ 101.989488] dump_stack+0x10/0x12 [ 101.989493] ubsan_epilogue+0x9/0x3b [ 101.989498] __ubsan_handle_load_invalid_value.cold+0x44/0x49 [ 101.989504] dma_buf_vmap.cold+0x38/0x3d [ 101.989511] find_busiest_group+0x48/0x300 [ 101.989520] drm_gem_shmem_vmap+0x76/0x1b0 [drm_shmem_helper] [ 101.989528] drm_gem_shmem_object_vmap+0x9/0xb [drm_shmem_helper] [ [] ] drm_gem_vmap+0x26/0x60 [drm] [[vmapx] drm_gem_shmem_object_vmap+0x9/0xb [drm_shmem_helper] [ 101.989535] drm_gem_vmap+0x26/0x60 [drm] [ 101.989594[vmapx ] drm_gem_shmem_object_vmap+0x9/0xb [drm_kms_helper] [ 101.989630] gud_prep_flush+0xc1/0x710 [gud] [ 101.989639] ? _raw_spin_lock+0x17/0x40 [101.989648] gud_flush_work+0x1e0/0x430 [gud] [ 101.989653] ? __switch_to+0x11d/0x470 [ 101.989664] process_one_work+0x21f/0x3f0 [ 101.989673] worker_thread+0x200/0x3e0 [ 101.989679] ? rescuer_thread+0x390/0x390 [ 101.989684] kthread+0xfd/0x130 [ 101.989690] ? kthread_complete_and_exit+0x20/0x20 [ 101.989696] ret_from_fork+0x22/0x30 [ 101.989706] </TASK> [101.989708] ========================== ================================================== ==== 此警告的來源是在 dma_buf_vmap() 呼叫的 iosys_map_clear() 中。它會根據 map->is_iomem 有條件地設定值。iosys_map 變數在堆疊上配置未初始化導致 ->is_iomem 具有所有類型的值而不僅是 0/1。透過歸零 iosys_map 變數來修正此問題。 (CVE-2022-50628)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2022-50628

high Nessus Plugin ID 277773

版本 1.4