Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - drm/amdkfd修复 srcu 的锁定依存关系警告 ======================================= =============== 警告已检测到潜在的循环锁定依赖关系 6.5.0-kfd-yangp #2289 未受感染
    -------------------------------------------------- ---- kworker/0:2/996 尝试获取锁定
    (srcu){.+.+}-{0:0}__synchronize_srcu+0x5/0x1a0但任务已在持有锁定
    ((work_completion)(&svms->deferred_list_work)){+.+.}-{0:0}, atprocess_one_work+0x211/0x560 哪些锁定已经依赖于新的锁定。现有依存关系链按相反顺序为 -> #3 ((work_completion)(&svms->deferred_list_work)){+.+.}-{0:0}: __flush_work+0x88/0x4f0 svm_range_list_lock_and_flush_work+0x3d/0x110 [amdgpu ] svm_range_set_attr+0xd6/0x14c0 [amdgpu] kfd_ioctl+0x1d1/0x630 [amdgpu] __x64_sys_ioctl+0x88/0xc0 -> #2 (&info->lock#2){+.+.}-{3:3}
    __mutex_lock+0x99/0xc70 amdgpu_amdkfd_gpuvm_restore_process_bos+0x54/0x740 [amdgpu] restore_process_helper+0x22/0x80 [amdgpu] restore_process_worker+0x2d/0xa0 [amdgpu] process_one_work+0x29b/0x560 work_thread+0x3d #1 / &process->restore_work)->work)){+.+.}-{0:0}__flush_work+0x88/0x4f0
    __cancel_work_timer+0x12c/0x1c0 kfd_process_notifier_release_internal+0x37/0x1f0 [amdgpu]
    __mmu_notifier_release+0xad/0x240 exit_mmap+0x6a/0x3a0 mmput+0x6a/0x120 do_exit+0x322/0xb90 do_group_exit+0x37/0xa0 __x64_sys_exit_group+0x18/0x20 do_syscall_64+0x38/0x80 -> #0 (srcu){.0:0}
    __lock_acquire+0x1521/0x2510 lock_sync+0x5f/0x90 __synchronize_srcu+0x4f/0x1a0
    __mmu_notifier_release+0x128/0x240 exit_mmap+0x6a/0x3a0 mmput+0x6a/0x120 svm_range_deferred_list_work+0x19f/0x350 [amdgpu] process_one_work+0x29b/0x560 worker_thread+0x3d/0x3d0 其他可帮助调试的信息Chainists of: srcu info->&infolock#2 --> (work_completion)(&svms->deferred_list_work) 可能不安全的锁定情况CPU0 CPU1 ---- ---- lock((work_completion)(&svms->deferred_list_work)); lock(&info->lock#2);
    lock((work_completion)(&svms->deferred_list_work)); sync(srcu); (CVE-2023-52632)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-52632

medium Nessus 插件 ID 227414

版本 1.21