Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ath11k修复 mhi_pm_disable_transition() 中的 dev_wake 警告当使用以下命令测试设备恢复时消息中存在警告如下。 echo assert > /sys/kernel/debug/ath11k/wcn6855\ hw2.0/simulate_fw_crash echo assert > /sys/kernel/debug/ath11k/qca6390\ hw2.0/simulate_fw_crash 警告消息 [ 1965.642121] ath11k_pci 0000:06 00.0.0 模拟固件断言崩溃 [ 1968.471364] ieee80211 phy0已请求硬件重新启动 [ 1968.511305] ------------[ 在此处切换 ]------------ [ 1968.511368] WARNINGCPU: 3 PID: 1546 at drivers/bus/mhi/core/pm.c:505 mhi_pm_disable_transition+0xb37/0xda0 [mhi] [1968.511443] 中链接的模块ath11k_pci ath11k mac80211 libarc4 cfg80211 qmi_helpers qrtr_mhi mhi qrtr nvme nvme_core [ 1968.511563] CPU3 PID1546 Commkworker/u17:0 Kdump 已加载 受感染的 GW 5.17.0-rc3-wt-ath+ #579 [ 1968.511629] 硬件名称Intel(R) Client Systems NUC8i7HVK /NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021 [ 1968.511704] Workqueuemhi_hiprio_wq mhi_pm_st_worker [mhi] [ 1968.511787] RIP: 0010:mhi_pm_disable_transition+0xb37/0xda0 [mhi] [ 1968.5118709] ] 代码a fe ff ff 4c 89 ff 44 89 04 24 e8 03 46 f6 e5 44 8b 04 24 41 83 f8 01 0f 84 21 fe ff ff e9 4c fd ff ff 0f 0b e9 af f8 ff ff <0f> 0b e9 5c f8 ff ff 48 89 df e8 da 9e ee e3 e9 12 fd ff ff 4c 89 [ 1968.511923] RSP
    0018ffffc900024efbf0 EFLAGS00010286 [ 1968.511969] RAX: 00000000ffffffff RBX: ffff88811d241250 RCX
    ffffffffc0176922 [ 1968.512014] RDX: 0000000000000000 RSI: 000000000000004 RDI: ffff888118a90a24 [1968.512059] RBP: ffff888118a90800 R080000000000000000 R09[81] 27a: ffff81 1968.512102] [81]27a R10: ffffffffc0176922
    ffffed1023152144 R110000000000000001 R12ffff888118a908ac [ 1968.512229] R13ffff888118a90928 R14
     R15dffffc0000000000  : ffff888118a90a24 [ 1968.512310] FS: 0000000000000000(0000) GS:ffff888234200000(0000) knlGS:0000000000000000 [ 1968.512405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1968.512493] CR2:
    00007f5538f443a8 CR3: 000000016dc28001 CR4: 00000000003706e0 [ 1968.512587] 调用跟踪[ 1968.512672] <TASK> [ 1968.512751] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1968.512859] mhi_pm_st_worker+0x3ac/0x790 [mhi] [1968.512959] ? mhi_pm_mission_mode_transition.isra.0+0x7d0/0x7d0 [mhi] [ 1968.513063] process_one_work+0x86a/0x1400 [ 1968.513184] ? pwq_dec_nr_in_flight+0x230/0x230 [ 1968.513312] ? move_linked_works+0x125/0x290 [ 1968.513416] worker_thread+0x6db/0xf60 [ 1968.513536] ? process_one_work+0x1400/0x1400 [ 1968.513627] kthread+0x241/0x2d0 [ 1968.513733] ? kthread_complete_and_exit+0x20/0x20 [ 1968.513821] ret_from_fork+0x22/0x30 [ 1968.513924] </TASK> 原因是从 mhi_device_put() 调用了 mhi_deassert_dev_wake()但从
    恢复进行中未调用 __mhi_device_get_sync()。提交 8e0559921f9abusmhicore跳过错误或关机状态下的设备唤醒为 __mhi_device_get_sync() 中的 mhi pm_state 添加检查在恢复完成之前pm_state 不是正常状态因此导致 dev_wake 不正确0 和更高版本检查 mhi_cntrl->dev_wake 时mhi_pm_disable_transition() 中打印警告。在 ath11k_pci_write32()/ath11k_pci_read32() 中添加检查以在 mhi_device_get_sync() 未真正执行唤醒时跳过调用 mhi_device_put()然后警告消失。已在以下设备上测试 WCN6855 hw2.0 PCI WLAN.HSP.1.1-03003-QCAHSPSWPL_V1_V2_SILICONZ_LITE-2 (CVE-2022-49543)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2022-49543

medium Nessus 插件 ID 226724

版本 1.8