Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - vc_screen在 vcs_write() 中重新載入結構 vc_data 指標以避免 UAF。呼叫 vcs_write() 中的 console_unlock() 後vc_data 結構可由 vc_port_destruct() 釋放。因此必須在 vcs_write() 的 while 迴圈中在 console_lock() 之後重新載入 vc_data 指標以避免在呼叫 vcs_size() 時發生 UAF。Syzkaller 報告 vcs_size() 有一個 UAF。BUG: KASANvcs_size 中發生 slab釋放後使用 (drivers/tty/vt/vc_screen.c:215) 工作 repro_vcs_size/4119 呼叫追踪於 addr ffff8880beab89a8 讀取大小 4 <TASK> __asan_report_load4_noabort (mm/kasan/report_generic .c:380) vcs_size (drivers/tty/vt/vc_screen.c:215) vcs_write (drivers/tty/vt/vc_screen.c:664) vfs_write (fs/read_write.c:582 fs/read_write.c:564) ...<TASK> 由工作 1213 分配kmalloc_trace (mm/slab_common.c:1064) vc_allocate (./include/linux/slab.h:559 ./include/linux/slab.h:680 drivers/tty/vt/vt.c:1078 drivers/tty/vt/vt.c:1058) con_install (drivers/tty/vt/vt.c:3334) tty_init_dev (drivers/tty/tty_io.c:1303 drivers/tty/tty_io.c:1415 drivers/tty/ tty_io.c:1392) tty_open (drivers/tty/tty_io.c:2082 drivers/tty/tty_io.c:2128) chrdev_open (fs/char_dev.c:415) do_dentry_open (fs/open.c:921) vfs_open (fs /open.c:1052) ... 已由工作 4116 釋放 kfree (mm/slab_common.c:1016) vc_port_destruct (drivers/tty/vt/vt.c:1044) tty_port_destructor (drivers/tty/tty_port.c:296) tty_port_put (drivers/tty/tty_port.c) :312) vt_disallocate_all (drivers/tty/vt/vt_ioctl.c:662 (辨別器 2)) vt_ioctl (drivers/tty/vt/vt_ioctl.c:903) tty_ioctl (drivers/tty/tty_io.c:2778) ... 錯誤位址屬於 ffff8880beab8800 處的物件該物件屬於大小為 1024 的快取 kmalloc-1k。錯誤位址位於已釋放的 1024 位元組區域內 424 位元組 [ffff8880beab8800、ffff8880beab8c00) 錯誤位址屬於實體 page 00000000afc77580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xbeab8 head:00000000afc77580 order:3 whole_mapcount:0 nr_pages_mapped:0 pincount:0 旗標
    0xfffffc0010200(slab|head|node=0|zone=1|lastcpupid=0x1fffff) page_type: 0xffffffff() raw: 000fffffc0010200 ffff888100042dc0 ffffea000426de00 dead000000000002 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address:
    ffff8880beab8880: fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8880beab8900: fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff8880beab8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8880beab8a00fb fb fb fb fb fb fb fb fb fb fb ffff8880beab8a80fb fb fb fb fb fb fb fb fb fb fb fb fb ======== ================================================== ======== 因核心污染而停用鎖定除錯 (CVE-2023-53747)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-53747

high Nessus Plugin ID 277787

版本 1.7