Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - cxl/pmem修正 nvdimm 註冊爭用下列形式的迴圈 while true執行 modprobe cxl_pci modprobe -r cxl_pci完成 ...失敗並出現下列損毀簽章錯誤核心 NULL 指標解除參照位址
    0000000000000040 [..] RIP: 0010:cxl_internal_send_cmd+0x5/0xb0 [cxl_core] [..] Call Trace: <TASK> cxl_pmem_ctl+0x121/0x240 [cxl_pmem] nvdimm_get_config_data+0xd6/0x1a0 [libnvdimm] nd_label_data_init+0x135/0x7e0 [libnvdimm] nvdimm_probe+0xd6/0x1c0 [libnvdimm] nvdimm_bus_probe+0x7a/0x1e0 [libnvdimm] emerge_probe+0xde/0x380 __driver_probe_device+0x78/0x170 driver_probe_device+0x1f/0x90
    __device_attach_driver+0x85/0x110 bus_for_each_drv+0x7d/0xc0 __device_attach+0xb4/0x1e0 bus_probe_device+0x9f/0xc0 device_add+0x445/0x9c0 nd_async_device_register+0xe/0x40 [libnvdimm] async_run_entry_fn+0x30/0xsync1 ndinamespace 的下半部分...分別裝置該底半部註冊會在 CXL 移除 cxl_pmem_ctl() 所需的內容之後執行。ACPI NFIT 案例可從表格中所列的項目並行啟動多個 nvdimm 裝置註冊而獲益不同CXL 已標記為 PROBE_PREFER_ASYNCHRONOUS。因此提供同步註冊路徑以防止此狀況發生。 (CVE-2023-54323)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - cxl/pmem当为真时修复 nvdimm 注册争用 A 形式的循环do modprobe cxl_pci; modprobe -r cxl_pci; did ...因以下崩溃签名而失败缺陷缺陷内核空指针取消引用地址
    0000000000000040 [..] RIP: 0010:cxl_internal_send_cmd+0x5/0xb0 [cxl_core] [..] Call Trace: <TASK> cxl_pmem_ctl+0x121/0x240 [cxl_pmem] nvdimm_get_config_data+0xd6/0x1a0 [libnvdimm] nd_label_data_init+0x135/0x7e0 [libnvdimm] nvdimm_probe+0xd6/0x1c0 [libnvdimm] nvdimm_bus_probe+0x7a/0x1e0 [libnvdimm] real_probe+0xde/0x380 __driver_probe_device+0x78/0x170 driver_probe_device+0x1f/0x90
    __device_attach_driver+0x85/0x110 bus_for_each_drv+0x7d/0xc0 __device_attach+0xb4/0x1e0 bus_probe_device+0x9f/0xc0 device_add+0x445/0x9c0 nd_async_device_register+0xe/0x40 [libnvdimm] async_run_entry_fn+0x445/0x9c0 nd_async_device_register+0xe/0x40 [libnvdimm] async_run_entry_fn+0x445/0x9c0 nd_async_device_register+0xe/0x40 [libnvdimm] async_run_entry_fn+0x445/0x40 [libnvdimm]注册在 CXL 拆卸 cxl_pmem_ctl() 所需的上下文之后运行。ACPI NFIT 案例受益于表中列出的并行启动多个 nvdimm 设备注册，而 CXL 则已被标记为 PROBE_PREFER_ASYNCHRONOUS。因此提供同步注册路径以防止出现这种情况。 (CVE-2023-54323)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - cxl/pmemnvdimm 登録競合を修正 形式のループ while true; modprobe cxl_pci を行うmodprobe -r cxl_pci;次のクラッシュシグネチャで失敗しますバグカーネル NULL ポインターデリファレンス、アドレス
    0000000000000040 [..] RIP: 0010:cxl_internal_send_cmd+0x5/0xb0 [cxl_core] [..] Call Trace: <TASK> cxl_pmem_ctl+0x121/0x240 [cxl_pmem] nvdimm_get_config_data+0xd6/0x1a0 [libnvdimm] nd_label_data_init+0x135/0x7e0 [libnvdimm] nvdimm_probe+0xd6/0x1c0 [libnvdimm] nvdimm_bus_probe+0x7a/0x1e0 [libnvdimm] true_probe+0xde/0x380 __driver_probe_device+0x78/0x170 driver_probe_device+0x1f/0x90
    __device_attach_driver+0x85/0x110 bus_for_each_drv+0x7d/0xc0 __device_attach+0xb4/0x1e0 bus_probe_device+0x9f/0xc0 device_add+0x445/0x9c0 nd_async_device_register+0xe/0x40 [libnvdimm] async_run_entry_fn+0x30/0x130 ...namely that the bottom half of async nvdimm device登録は、CXL が cxl_pmem_ctl() が必要とするコンテキストをすでに取り壊した後に実行されます。テーブルにリストされているものから並行して複数の nvdimm デバイス登録を起動することで恩恵を受ける ACPI NFIT のケースとは異なり、CXL はすでに PROBE_PREFER_ASYNCHRONOUS とマークされています。このため、このシナリオを除外するために同期登録パスを提供します。CVE-2023-54323

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cxl/pmem: Fix nvdimm registration races A loop of the form: while true; do modprobe cxl_pci; modprobe -r     cxl_pci; done ...fails with the following crash signature: BUG: kernel NULL pointer dereference, address:
    0000000000000040 [..] RIP: 0010:cxl_internal_send_cmd+0x5/0xb0 [cxl_core] [..] Call Trace: <TASK>     cxl_pmem_ctl+0x121/0x240 [cxl_pmem] nvdimm_get_config_data+0xd6/0x1a0 [libnvdimm]     nd_label_data_init+0x135/0x7e0 [libnvdimm] nvdimm_probe+0xd6/0x1c0 [libnvdimm] nvdimm_bus_probe+0x7a/0x1e0     [libnvdimm] really_probe+0xde/0x380 __driver_probe_device+0x78/0x170 driver_probe_device+0x1f/0x90
    __device_attach_driver+0x85/0x110 bus_for_each_drv+0x7d/0xc0 __device_attach+0xb4/0x1e0     bus_probe_device+0x9f/0xc0 device_add+0x445/0x9c0 nd_async_device_register+0xe/0x40 [libnvdimm]     async_run_entry_fn+0x30/0x130 ...namely that the bottom half of async nvdimm device registration runs     after the CXL has already torn down the context that cxl_pmem_ctl() needs. Unlike the ACPI NFIT case that     benefits from launching multiple nvdimm device registrations in parallel from those listed in the table,     CXL is already marked PROBE_PREFER_ASYNCHRONOUS. So provide for a synchronous registration path to     preclude this scenario. (CVE-2023-54323)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
280780	Linux Distros 未修補的弱點：CVE-2023-54323	Nessus	Misc.	2025/12/31	2026/7/25	medium
280780	Linux Distros 未修补的漏洞：CVE-2023-54323	Nessus	Misc.	2025/12/31	2026/7/25	medium
280780	Linux Distros のパッチ未適用の脆弱性: CVE-2023-54323	Nessus	Misc.	2025/12/31	2026/7/25	medium
280780	Linux Distros Unpatched Vulnerability : CVE-2023-54323	Nessus	Misc.	2025/12/31	2026/7/25	medium

偵測

搜尋 Plugin

medium

medium

medium

medium