Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - i2ci801還原 i2ci801以 I2C 匯流排鎖定取代 acpi_lock。這會還原認可 f707d6b9e7c18f669adfdb443906d46cfbaaa0c1。在極少數情況下多個 udev 執行緒可在開機時收集 i801 裝置資訊並以某種方式並行執行 i801_acpi_io_handler。第一個版本會記錄 acpi 保留的區域以防止進一步接觸。這最終會造成該區域遭到取消註冊。第二個弱點會在區域取消註冊之後但在可以檢查區域是否已取消註冊之前進入 i801_acpi_io_handler。 i2c_lock_bus 依賴現已取消註冊且含有 lock_ops 的區域來鎖定匯流排。最終會導致開機時發生核心錯誤且反向追踪如下[ 14.971872] ioatdma 0000:09:00.2啟用裝置 (0100 -> 0102) [ 14.971873] 錯誤核心 NULL 指標解除參照、位址
    0000000000000000 [ 14.971880] #PF核心模式中的監督讀取存取權 [ 14.971884] #PF
    error_code(0x0000) - 不存在頁面 [ 14.971887] PGD 0 P4D 0 [ 14.971894] Oops: 0000 [#1] PREEMPT SMP PTI [ 14.971900] ] CPU: 5 PID: 956 Comm: systemd-udevd 未受污染 5.14。 0-611.5.1.el9_7.x86_64 #1 [14.971905] 硬體名稱 XXXXXXXXXXXXXXXXXXXXXXX BIOS 1.20.10。SV91 2023 年 1 月 30 日 [ 14.971908] RIP
    0010:i801_acpi_io_handler+0x2d/0xb0 [i2c_i801] [ 14.971929] 程式碼00 00 49 8b 40 20 41 57 41 56 4d 8b b8 30 04 00 00 49 89 ce 41 55 41 89 d5 41 54 0 9 09 f4 00 55 4c 89 c5 53 89 fb <48> 8b 00 4c 89 c7 e8 18 61 54 e9 80 bd 80 04 00 00 00 75 09 4c 3b [ 14.971933] RSP: 0018:ffffbaa841483838 EFLAGS: 00010282 [14.971938] RAX: 0000000000000000 RBX0000000000000000 RCXffff9685e01ba568 [ 14.971941] RDX
    0000000000000008 RSI0000000000000002 RDI0000000000000000 [ 14.971944] RBPffff9685ca22f028 R08
    ffff9685ca22f028 R09ffff9685ca22f028 [ 14.971948] R10000000000000000b R110000000000000580 R12
    0000000000000580 [ 14.971951] R13: 0000000000000008 R14: ffff9685e01ba568 R15: ffff9685c222f000 [14.971954] FS: 00007f8287c0ab40(0000) GS:ffff96a47f940000(0000) knlGS:0000000000000000 [ 14.971959] CS:
    0010 DS0000 ES0000 CR00000000080050033 [ 14.971963] CR20000000000000000 CR30000000168090001 CR4
    00000000003706f0 [ 14.971966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [14.971968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 14.971972] Call Trace: [14.971977] <TASK> [ 14.971981] ? show_trace_log_lvl+0x1c4/0x2df [ 14.971994] ? show_trace_log_lvl+0x1c4/0x2df [ 14.972003] ? acpi_ev_address_space_dispatch+0x16e/0x3c0 [ 14.972014]
    __die_body.cold+0x8/0xd [ 14.972021] ? page_fault_oops+0x132/0x170 [ 14.972028] ? exc_page_fault+0x61/0x150 [ 14.972036] ? asm_exc_page_fault+0x22/0x30 [ 14.972045] i801_acpi_io_handler+0x2d/0xb0 [i2c_i801] [ 14.972061] acpi_ev_address_space_dispatch+0x16e/0x3c0 [14.972069] ? __pfx_i801_acpi_io_handler+0x10/0x10 [i2c_i801] [ 14.972085] acpi_ex_access_region+0x5b/0xd0 [ 14.972093] acpi_ex_field_datum_io+0x73/0x2e0 [ 14.972100] acpi_ex_read_data_from_field+0x8e/0x230 [14.972106] acpi_ex_resolve_node_to_value+0x23d/0x310 [ 14.972114] acpi_ds_evaluate_name_path+ 0xad/0x110 [14.972121] acpi_ds_exec_end_op+0x321/0x510 [ 14.972127] acpi_ps_parse_loop+0xf7/0x680 [ 14.972136] acpi_ps_parse_aml+0x17a/0x3d0 [ [] ] acpi_ps_execute_method+0x137/0x270 [ 14.972143] acpi_ps_parse_loop+0xf7/0x680 [ [] ] acpi_ps_execute_method+0x137/0x270 [ 14.972150x1evalf]4_nsx2_70 [0x2+ 14.972158] ] ] acpi_evalulate_object+0x134/0x2f0 [ 14.972164] acpi_evalulate_integer+0x50/0xe0 [ 14.972173] ? vsnprintf+0x24b/0x570 [ 14.972181] acpi_ac_get_state.part.0+0x23/0x70 [ 14.972189] get_ac_property+0x4e/0x60 [ 14.972195] power_supply_show_property+0x90/0x1f0 [ 14.972205] add_prop_uevent+0x29/0x90 [ 14.972213] power_supply_uevent +0x109/0x1d0 [ 14.972222] dev_uevent+0x10e/0x2f0 [ 14.972228] uevent_show+0x8e/0x100 [14.972236] dev_attr_show+0x19 ---truncated--- (CVE-2026-23369)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2026-23369

medium Nessus Plugin ID 303709

版本 1.15