Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - nethsr避免 skb_clone() 中可能發生的 NULL 解除參照 syzbot 在 skb_clone() 中發生損毀 [1]這是由 hsr_get_untagg_frame() 中的錯誤所造成。當 create_stripped_skb_hsr() 傳回 NULL 時不得嘗試呼叫 skb_clone()。執行期間以 netdev_warn_once() 取代 WARN_ONCE()。 [1] 一般保護錯誤可能是針對非正式位址 0xdffffc000000000f: 0000 [#1] PREEMPT SMP KASAN KASAN null-ptr-deref in range [0x00000000000000078-0x00000000007f] CPU1 PID754 Commsyz-executor.0未受污染的 6.0.0-syzkaller-02734-g0326074ff465 #0 硬體名稱Google Google Compute Engine/Google Compute Engine、BIOS Google 09/22/2022 RIP0010:skb_clone+0x108/0x3c0 net/core/skbuff.c:1641程式碼93 02 00 00 49 83 7c 24 28 00 0f 85 e9 00 00 00 e8 5d 4a 29 fa 4c 8d 75 7e 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 04 0 2 4c 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 9e 01 00 00 RSP: 0018:ffffc90003ccf4e0 EFLAGS
    00010207 RAXdffffc0000000000 RBXffffc90003ccf5f8 RCXffffc9000c24b000 RDX000000000000000f RSI
    ffffffff8751cb13 RDI: 0000000000000000 RBP: 0000000000000000 R08: 00000000000000f0 R09: 0000000000000140 R10: fffffbfff181d972 R11: 0000000000000000 R12: ffff888161fc3640 R13: 0000000000000a20 R14:
     R15000000000000007e  : ffffffff8dc5f620 FS: 00007feb621e4700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007feb621e3ff8 CR3:
    00000001643a9000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> hsr_get_untagged_frame+0x4e/0x610 net/hsr/hsr_forward.c:164 hsr_forward_do net/hsr/hsr_forward.c: 461 [內嵌] hsr_forward_skb+0xcca/0x1d50 net/hsr/hsr_forward.c:623 hsr_handle_frame+0x588/0x7c0 net/hsr/hsr_slave.c:69 __netif_receive_skb_core+0x9fe/0x38f0 net/core/dev.c:5379
    __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5483 __netif_receive_skb+0x1f/0x1c0 net/core/dev.c:5599 netif_receive_skb_internal net/core/dev.c:5685 [內嵌] netif_receive_skb+0x12f/0x8d0 net/core/ dev.c:5744 tun_rx_batched+0x4ab/0x7a0 drivers/net/tun.c:1544 tun_get_user+0x2686/0x3a00 drivers/net/tun.c:1995 tun_chr_write_iter+0xdb/0x200 drivers/net/tun.c:2025 call_write_iter include/ linux/fs.h:2187 [內嵌] new_sync_write fs/read_write.c:491 [內嵌] vfs_write+0x9e9/0xdd0 fs/read_write.c:584 ksys_write+0x127/0x250 fs/read_write.c:637 do_syscall_x64 arch/x86/ entry/common.c:50 [內嵌] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd (CVE-2022-50817)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2022-50817

medium Nessus Plugin ID 280813

版本 1.1