Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - PM / devfreq同步 devfreq_monitor_[start/stop] 如有在循环中完成调速器的频繁开关可能会导致定时器列表损坏其中定时器取消从 cancel_delayed_work_sync() 和随后的 expire_timers( ) 可从轨迹中得知 [1]。 while true do echo simple_ondemand > /sys/class/devfreq/1d84000.ufshc/governor echo performance > /sys/class/devfreq/1d84000.ufshc/governor did 这似乎是 devfreq 驱动程序的问题其中 device_monitor_[start/stop] 需要进行同步化以便延迟的工作在排队、运行或取消时应损坏。让我们使用轮询标记和 devfreq 锁定来同步两次排队的定时器实例并修复正在损坏的数据。 [1] ... .. <idle>-0 [003] 9436.209662timer_cancel timer=0xffffff80444f0428 <idle>-0 [003] 9436.209664timer_expire_entry timer=0xffffff80444f0428 now=0x10022da1c function=__typeid__ZTSFvP10timer_listE_global_addr baseclk=0x10022da1c <idle>-0 [003] 9436.209718timer_expire_exit timer=0xffffff80444f0428 kworker/ u16:6-14217 [003] 9436.209863timer_start timer=0xffffff80444f0428 function=__typeid__ZTSFvP10timer_listE_global_addr expires=0x10022da2b now=0x10022da1c flags=182452227 vendor.xxxyyy.ha-1593 [004] 9436.209888timer_cancel timer=0xffffff80444f0428 vendor.xxxyyy.ha-1593 [004] 9436.216390timer_init timer=0xffffff80444f0428 vendor.xxxyyy.ha-1593 [004] 9436.216392timer_start timer=0xffffff80444f0428 function=__typeid__ZTSFvP10timer_listE_global_addr expires=0x10022da2c now=0x10022da1d flags=186646532 vendor.xxxyyy.ha-1593 [005] 9436.220992timer_cancel timer=0xffffff80444f0428 xxxyyyTraceManag-7795 [004] 9436.261641timer_cancel timer=0xffffff80444f0428 [2] 9436.261653][ C4] 无法处理虚拟地址 dead00000000012a 处的内核分页请求 [9436.261664][ C4] Mem 中止信息[ 9436.261666][ C4] ESR = 0x96000044 [ 9436.261669][ C4] EC = 0x25 DABT当前 EL，IL = 32 位 [ 9436.261671][ C4] SET = 0，FnV = 0 [ 9436.261673][ C4] EA = 0，S1PTW = 0 [9436.261675][ C4] Data 中止信息[ 9436.261677][ C4] ISV = 0, ISS = 0x00000044 [ 9436.261680][ C4] CM = 0, WnR = 1 [ 9436.261682][ C4] [dead00000000012a] 用户与内核地址范围之间的地址 [9436.261685][ C4] 内部错误Oops96000044 [#1] PREEMPT SMP [ 9436.261701][ C4] 跳过 0x3a982d0 ... 的 md ftrace 缓冲区转储 ... [ 9436.262138][ C4] CPU: 4 PID: 7795 Comm :TraceManag TaintedGSWO 5.10.149-android12-9-o-g17f915d29d0c #1 [ 9436.262141][ C4] 硬件名称Qualcomm Technologies, Inc.
    (DT) [ 9436.262144][ C4] pstate: 22400085 (nzCv daIf +PAN -UAO +TCO BTYPE=--) [ 9436.262161][ C4] pc
    expire_timers+0x9c/0x438 [ 9436.262164][ C4] lr expire_timers+0x2a4/0x438 [ 9436.262168][ C4] sp
    ffffffc010023dd0 [ 9436.262171][ C4] x29ffffffc010023df0 x28ffffffd0636fdc18 [ 9436.262178][ C4] x27
    ffffffd063569dd0 x26: ffffffd063536008 [ 9436.262182][ C4] x25: 0000000000000001 x24: ffffff88f7c69280 [9436.262185][ C4] x23: 00000000000000e0 x22: dead000000000122 [ 9436.262188][ C4] x21: 000000010022da29 x20: ffffff8af72b4e80 [ 9436.262191][ C4] x19ffffffc010023e50 x18ffffffc010025038 [ 9436.262195][ C4] x17: 0000000000000240 x16: 0000000000000201 [ 9436.262199][ C4] x15ffffffffffffffff x14
    ffffff889f3c3100 [ 9436.262203][ C4] x13ffffff889f3c3100 x12: 00000000049f56b8 [ 9436.262207][ C4] x11
    00000000049f56b8 x10: 00000000ffffffff [ 9436.262212][ C4] x9 : ffffffc010023e50 x8 : dead000000000122 [9436.262216][ C4] x7 : ffffffffffffffff x6 : ffffffc0100239d8 [ 9436.262220][ C4] x5 : 0000000000000000 x4 : 0000000000000101 [ 9436.262223][ C4] x30000000000000080 x2ffffff8 ---truncated--- (CVE-2023-52635)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-52635

medium Nessus 插件 ID 226536

版本 1.16