Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - drm/gma500修复缺陷从无效上下文错误调用的休眠函数 gma_crtc_page_flip() 在调用采用 ww_mutex 的 crtc_funcs->mode_set_base() 时保持 event_lock 旋转锁。保留 event_lock 的唯一原因是清除 mode_set_base() 上的 gma_crtc->page_flip_event 错误。而是在设置 gma_crtc->page_flip_event 之后对其解锁以及在出错时重新锁定并清除仍处于设置状态的 gma_crtc->page_flip_event。这修复了以下 WARN/stacktrace: [ 512.122953] BUG从 kernel/locking/mutex.c:870 的无效上下文调用的休眠函数 [ 512.123004] in_atomic(): 1、irqs_disabled(): 1、non_block
    0、pid1253、名称gnome-shell [ 512.123031] preempt_count1、预期0 [ 512.123048] RCU 嵌套深度
    0、预期0 [ 512.123066] INFO lockdep 关闭。 [ 512.123080] irq 事件标记0 [ 512.123094] hardirqs 上次启用的时间 (0): [<0000000000000000>] 0x0 [ 512.123134] hardirqs 上次禁用的时间 (0)
    [<ffffffff8d0ec28c>] copy_process+0x9fc/0x1de0 [ 512.123176] softirqs 上次启用的时间为 (0)
    [<ffffffff8d0ec28c>] copy_process+0x9fc/0x1de0 [ 512.123207] softirqs 上次禁用的时间为 (0)
    [<0000000000000000>] 0x0 [ 512.123233] Preemption 禁用于 [ 512.123241] [<0000000000000000>] 0x0 [512.123275] CPU: 3 PID: 1253 Comm: gnome-shell 感染: GW 5.19.0+ #1 [ 512.123304] 硬件名称
    Packard Bell dot s/SJE01_CT, BIOS V1.10 07/23/2013 [ 512.123323] 调用跟踪[ 512.123346] <TASK> [512.123370] dump_stack_lvl+0x5b/0x77 [ 512.123412] __might_resched.cold+0xff/0x13a [ 512.123458] ww_mutex_lock+0x1e/0xa0 [ 512.123495] psb_gem_pin+0x2c/0x150 [gma500_gfx] [ 512.123601] gma_pipe_set_base+0x76/0x240 [gma500_gfx] [ 512.123708] gma_crtc_page_flip+0x95/0x130 [fm_mode_flip_ct] [gma500_gfx]512.123808gma500_gfx] 0x57d/0x5d0 [ 512.123897] drm_mode_cursor2_ioctl+0x10/0x10 [512.123936] drm_ioctl_kernel+0xa1/0x150 [ 512.123984] drm_ioctl+0x21f/0x420 [ 512.124025] ? drm_mode_cursor2_ioctl+0x10/0x10 [ 512.124070] ? rcu_read_lock_bh_held+0xb/0x60 [ 512.124104] ? lock_release+0x1ef/0x2d0 [ 512.124161] __x64_sys_ioctl+0x8d/0xd0 [ 512.124203] do_syscall_64+0x58/0x80 [512.124239] ? do_syscall_64+0x67/0x80 [ 512.124267] ? trace_hardirqs_on_prepare+0x55/0xe0 [ 512.124300] ? do_syscall_64+0x67/0x80 [ 512.124340] ? rcu_read_lock_sched_held+0x10/0x80 [ 512.124377] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 512.124411] RIP0033:0x7fcc4a70740f [ 512.124442] 代码00 48 89 44 24 18 31 c0 48 8d 44 80 20 8d 44 04 24 60 c7 104 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 512.124470RSP
    002b:00007ffda73f5390 EFLAGS00000246 ORIG_RAX: 0000000000000010 [ 512.124503] RAXffffffffffffffda RBX
    000055cc9e474500 RCX: 00007fcc4a70740f [ 512.124524] RDX: 00007ffda73f5420 RSI: 00000000c01864b0 RDI
    0000000000000009 [ 512.124544] RBP: 00007ffda73f5420 R08: 000055cc9c0b0cb0 R09: 0000000000000034 [512.124564] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000c01864b0 [ 512.124584] R13:
    0000000000000009 R14: 000055cc9df484d0 R15: 000055cc9af5d0c0 [ 512.124647] </TASK> (CVE-2022-48634)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2022-48634

medium Nessus 插件 ID 225269

版本 1.17