Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - wifimt76mt7921s修正 sdio 主機中的 slab 超出邊界存取 SDIO 可能需要額外的 511 位元組來對齊匯流排作業。如果此 skb 的 tailroom 不夠大可能會存取無效的記憶體區域。針對低階作業增加 skb 大小以在 SDIO 主機中保留有效的記憶體存取。錯誤訊息 [69.951] 錯誤KASANsg_copy_buffer+0xe9/0x1a0 中的 slab 超出邊界 [69.951] kworker/u16:7/451 工作於 addr ffff88811c9cf000 讀取大小 64 [69.951] CPU 4 PID451 通訊kworker/u16:7 污染GW OE 6.1.0-rc5 #1 [69.951] 工作佇列kvub300c vub300_cmndwork_thread [vub300] [69.951] 呼叫追踪 [69.951] ] <TASK> [69.952] dump_stack_lvl+0x49/0x63 [69.952] print_report+0x171/0x4a8 [69.952] kasan_report+0xb4/0x130 [69.952] kasan_check_range+0x149/0x1e0 [69.952] memcpy+0x24/0x70 [69.952] sg_copy_buffer+0xe9/0x1a0 [69.952] sg_copy_to_buffer+0x12/0x20 [69.952]
    __command_write_data.isra.0+0x23c/0xbf0 [vub300] [69.952] vub300_cmndwork_thread+0x17f3/0x58b0 [vub300] [69.952] process_one_work+0x7ee/0x1320 [69.952] worker_thread+0x53c/0x1240 [69.952] kthread+0x2b8/ 0x370 [69.952] ret_from_fork+0x1f/0x30 [69.952] </TASK> [69.952] 由工作 854 分配[69.952] kasan_save_stack+0x26/0x50 [69.952] kasan_set_track+0x25/0x30 [69.952] kasan_save_alloc_info+0x1b /0x30 [69.952] __kasan_kmalloc+0x87/0xa0 [69.952] __kmalloc_node_track_caller+0x63/0x150 [69.952] kmalloc_reserve+0x31/0xd0 [69.952] __alloc_skb+0xfc/0x2b0 [69.952] __mt76_mcu_msg_alloc+0xbf0/mxt69.952[  ] mt76_mcu_send_and_get_msg+0xab/0x110 [mt76] [69.952] __mt76_mcu_send_firmware.cold+0x94/0x15d [mt76] [69.952] mt76_connac_mcu_send_ram_firmware+0x415/0x54d [mt76_connac_lib] [69.952] mt76_connac2_load_ram.cold+0x118/0x4bc [ mt76_connac_lib] [69.952] mt7921_run_firmware.cold+0x2e9/0x405 [mt7921_common] [69.952] mt7921s_mcu_init+0x45/0x80 [mt7921s] [69.953] mt7921_init_work+0xe1/0x2a0 [mt7921_common] [69.953] process_one_work+0x7ee/0x1320 [69.953] worker_thread+0x53c/0x1240 [69.953] kthread+0x2b8/0x370 [69.953] ret_from_fork+0x1f/0x30 [69.953] 錯誤位址屬於 ffff88811c9ce800 處的物件該物件屬於大小為 2048 的快取 kmalloc-2k [69.953] 錯誤位址位於 2048 位元組區域右側 0 位元組 [ffff88811c9ce800, ffff88811c9cf000) [69.953] 錯誤位址周圍的記憶體狀態[69.953] ffff88811c9cef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [69.953] ffff88811c9cef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [69.953] ] >ffff88811c fc fc fc fc fc fc fc fc fc f fc fc [69.953] ^ [69.953] ffff88811c9cf080fc fc fc fc fc fc fc fc fc fc fc fc [69.953] ffff88811c9cf100fc fc fc fc fc fc fc fc fc fc fc fc fc (CVE-2022-50701)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2022-50701

high Nessus Plugin ID 279918

版本 1.15