Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 邮箱bcm2835修复挂起模式期间的超时在 noirq 挂起阶段Raspberry Pi 电源驱动程序遭受固件属性超时。原因是底层 BCM2835 邮箱的 IRQ 已禁用导致 rpi_firmware_property_list() 始终遇到超时 [1]。由于 VideoCore 端未被视为唤醒源请为邮箱 IRQ 设置 IRQF_NO_SUSPEND 标记以在暂停-恢复周期期间保持启用状态。 [1] PM设备的延迟暂停在 1.754 毫秒警告后完成
    CPU: 0 PID: 438 at drivers/firmware/raspberrypi.c:128 rpi_firmware_property_list+0x204/0x22c 固件事务 0x00028001 超时 中链接的模块CPU: 0 PID: 438 Comm: bash 感染了: GC 6.9.3-dirty #17 硬件名称: BCM2835 Call trace: unwind_backtrace from show_stack+0x18/0x1c show_stack from dump_stack_lvl+0x34/0x44 dump_stack_lvl from __warn+0x88/0xec __warn from warn_slowpath_fmt+0x7c/0xb0 warn_slowpath_fmt from rpi_firmware_property_list+0x204/0x22c rpi_firmware_property_list from rpi_firmware_property+0x68/0x8c rpi_firmware_property from rpi_firmware_set_power+0x54/0xc0 rpi_firmware_set_power from _genpd_power_off+0xe4/0x148 _genpd_power_off from genpd_sync_power_off+0x7c/0x11c genpd_sync_power_off from genpd_finish_suspend+0xcc/0xe0 genpd_finish_suspend from dpm_run_callback+0x78/0xd0 dpm_run_callback from device_suspend_noirq+0xc0/0x238 device_suspend_noirq from dpm_suspend_noirq+0xb0/0x168 dpm_suspend_noirq from suspend_devices_and_enter +0x1b8/0x5ac suspend_devices_and_enter 函数rom pm_suspend+0x254/0x2e4 pm_suspend from state_store+0xa8/0xd4 state_store from kernfs_fop_write_iter+0x154/0x1a0 kernfs_fop_write_iter from vfs_write+0x12c/0x184 vfs_write from ksys_write+0x78/0xc0 ksys_write from ret_fast_syscall+0x0/0x54 Exception stack(0xcc93dfa8 to 0xcc93dff0) [. ..] PM 3095.584 毫秒后设备的 noirq 暂停完成 (CVE-2024-49963)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2024-49963

medium Nessus 插件 ID 230628

版本 1.11