Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - ice防止在重新載入期間發生 NULL 指標解除參照。在重新載入期間呼叫 ethtool 可能會導致呼叫追踪這是因為有一段時間未設定 VSI但 netdev 仍然存在。若要修正該問題新增 VSI deconfig 和 config 的 rtnl 鎖定。釋放後將 ::num_q_vectors 設為 0並在環相關 ethtool 作業中新增 ::tx/rx_rings 檢查。在 ice_start_eth() 中新增篩選器的適當展開。複製 $watch -n 0.1 -d 'ethtool -g enp24s0f0np0' $devlink dev reload pci/0000:18:00.0 action driver_reinit 修正前的呼叫追踪
    [66303.926205] 錯誤核心 NULL 指標解除參照位址0000000000000000 [66303.926259] #PF
    核心模式中的監督讀取存取 [66303.926286] #PFerror_code(0x0000) - 不存在頁面 [66303.926311] PGD 0 P4D 0 [66303.926332] Oops: 0000 [#1] PREEMPT SMP PTI [66303.926358] CPU 4 個 PID
    933821 Commethtool Kdump 已載入 受污染的 G OE 6.4.0-rc5+ #1 [66303.926400] 硬體名稱Intel Corporation S2600WFT/S2600WFT、BIOS SE5C620.86B.00.01.0014.070920180847 2018 年 7 月 9 日 [66303.926446] RIP
    0010:ice_get_ringparam+0x22/0x50 [ice] [66303.926649] 代碼90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 48 8b 87 c0 09 00 00 c7 46 04 e0 1f 00 00 c7 46 87 c0 09 00 00 c7 46 04 e0 1f 00 00 c7 46 10 e0 1f 00 00 48 8b 50 20 <48> 8b 12 0f b7 52 3a 89 56 14 48 8b 40 28 48 8b 00 0f b7 40 58 48 [66303.926722] RSP0018:ffffad40472f39c8 EFLAGS: 0001 80246 RSP [66303.9267498] [ada ] 0001 80246 RSP: 0018:ffffad40472f39c8 EFLAGS: 0001 AX: ff898 RSP RBXffff98a8c46dd060 RCXffffad40472f3b48 [66303.926781] RDX
    0000000000000000 RSIffff98a8c46dd068 RDIffff98a8b23c4000 [66303.926811] RBPffffad40472f3b48 R08
    0000000000337b0 R090000000000000000 [66303.926843] R100000000000000001 R110000000000000100 R12
    ffff98a8b23c4000 [66303.926874] R13: ffff98a8c46dd060 R14: 000000000000000f R15: ffffad40472f3a50 [66303.926906] FS: 00007f6397966740(0000) GS:ffff98b390900000(0000) knlGS:0000000000000000 [66303.926941] CS: 0010 DS: 0000 ES: 0000 CR0 0000000080050033 [66303.926967] CR20000000000000000 CR3
    000000011ac20002 CR400000000007706e0 [66303.926999] DR00000000000000000 DR10000000000000000 DR2
    0000000000000000 [66303.927029] DR30000000000000000 DR600000000fffe0ff0 DR70000000000000400 [66303.927060] PKRU55555554 [66303.927075] 呼叫追踪 [66303.927094] ] <TASK> [66303.927111]
    __die+0x23/0x70 [66303.927140] ? page_fault_oops+0x171/0x4e0 [66303.927176] ? exc_page_fault+0x7f/0x180 [66303.927209] ? asm_exc_page_fault+0x26/0x30 [66303.927244] ? ice_get_ringparam+0x22/0x50 [ice] [66303.927433] ring_prepare_data+0x62/0x80 [66303.927469] ethnl_default_doit+0xe2/0x350 [66303.927501] genl_family_rcv_msg_doit.isra.0+0xe3/0x140 [66303.927538] genl_rcv_msg [[+0x1b1/0x2c066303.927561] ] ] ?
    __pfx_ethnl_default_doit+0x10/0x10 [66303.927590] ? __pfx_genl_rcv_msg+0x10/0x10 [66303.927615] netlink_rcv_skb+0x58/0x110 [66303.927644] genl_rcv+0x28/0x40 [66303.927665] netlink_unicast+0x19e/0x290 [66303.927691] netlink_sendmsg+0x254/0x4d0 [66303.927717] sockx_sendmsg [66303.927743]
    __sys_sendto+0x126/0x170 [66303.927780] __x64_sys_sendto+0x24/0x30 [66303.928593] do_syscall_64+0x5d/0x90 [66303.929370] ? __count_memcg_events+0x60/0xa0 [66303.930146] count_memcg_events.constprop.0+0x1a/0x30 [66303.930920] ? handle_mm_fault+0x9e/0x350 [66303.931688] ? do_user_addr_fault+0x258/0x740 [66303.932452] ? exc_page_fault+0x7f/0x180 [66303.933193] entry_SYSCALL_64_after_hwframe+0x72/0xdc (CVE-2023-54037)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-54037

medium Nessus Plugin ID 279976

版本 1.4