Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - slip使 slhc_remember() 針對惡意封包更健全 syzbot 發現 slhc_remember() 遺漏針對惡意封包的檢查 [1]。 slhc_remember() 只檢查了封包大小至少為 20這還不夠好。我們必須確認封包內含預期要傳送的 IPv4 和 TCP 標頭。新增 iph 和 th 指標使程式碼更具可讀性。 [1] 錯誤KMSAN
    slhc_remember+0x2e8/0x7b0 drivers/net/slip/slhc.c:666 slhc_remember+0x2e8/0x7b0 drivers/net/slip/slhc.c:666 ppp_receive_nonmp_frame+0xe45/0x35e0 drivers/net/ppp/ppp_generic.c 中的 uninit-value 2455 ppp_receive_frame drivers/net/ppp/ppp_generic.c:2372 [內嵌] ppp_do_recv+0x65f/0x40d0 drivers/net/ppp/ppp_generic.c:2212 ppp_input+0x7dc/0xe60 drivers/net/ppp/ppp_generic.c:2327 pppoe_rcv_core +0x1d3/0x720 drivers/net/ppp/pppoe.c:379 sk_backlog_rcv+0x13b/0x420 include/net/sock.h:1113
    __release_sock+0x1da/0x330 net/core/sock.c:3072 release_sock+0x6b/0x250 net/core/sock.c:3626 pppoe_sendmsg+0x2b8/0xb90 drivers/net/ppp/pppoe.c:903 sock_sendmsg_nosec net/socket.c :729 [內嵌]
    __sock_sendmsg+0x30f/0x380 net/socket.c:744____sys_sendmsg+0x903/0xb60 net/socket.c:2602
    ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656 __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742
    __do_sys_sendmmsg net/socket.c:2771 [內嵌] __se_sys_sendmmsg net/socket.c:2768 [內嵌]
    __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768 x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308 do_syscall_x64 arch/x86/entry/common.c:52 [內嵌] do_syscall_64+0xcd /0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit 的建立於 slab_post_alloc_hook mm/slub.c:4091 [內嵌] slab_alloc_node mm/slub.c:4134 [內嵌] kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587
    __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678 alloc_skb include/linux/skbuff.h:1322 [內嵌] sock_wmalloc+0xfe/0x1a0 net/core/sock.c:2732 pppoe_sendmsg+0x3a7/0xb90 drivers/net/ ppp/pppoe.c:867 sock_sendmsg_nosec net/socket.c:729 [內嵌] __sock_sendmsg+0x30f/0x380 net/socket.c:744
    ____sys_sendmsg+0x903/0xb60 net/socket.c:2602 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656
    __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742 __do_sys_sendmmsg net/socket.c:2771 [內嵌]
    __se_sys_sendmmsg net/socket.c:2768 [內嵌] __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768 x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308 do_syscall_x64 arch/x86/entry/ common.c:52 [內嵌] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU0 UID0 PID 5460 Commsyz.2.33 未受污染的 6.12.0-rc2 -syzkaller-00006-g87d6aab2389e #0 硬體名稱Google Google Compute Engine/Google Compute Engine、BIOS Google 09/13/2024 (CVE-2024-50033)

請注意，Nessus 依賴供應商報告的套件存在。

偵測

Linux Distros 未修補的弱點：CVE-2024-50033

high Nessus Plugin ID 230353

版本 1.1