Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - scsihisi_sas在 debugfs 初始化期间创建所有转储文件 对于 Hisi_sas 的当前 debugfs在用户触发转储之后驱动程序会分配内存空间以保存寄存器信息并创建 debugfs 文件以显示保存的信息。在此过程中，debugfs 文件会在每次转储后创建。因此当在取消绑定驱动程序的过程中触发转储时将会发生以下挂起情况
    [67840.853907] 无法处理虚拟地址 00000000000000a0 处的内核空指针取消引用 [67840.862947] Mem 中止信息[67840.865855] ESR = 0x0000000096000004 [67840.869713] EC = 0x25DABT当前 ELIL = 32 位 [67840.875125] SET = 0, FnV = 0 [67840.878291] EA = 0, S1PTW = 0 [67840.881545] FSC = 0x040 级转换错误 [67840.886528] Data 中止信息 [67840.889524] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [67840.895117] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [67840.900284] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [67840.905709] user pgtable 4k pages, 48-bit VAs, pgdp=0000002803a1f000 [67840.912263] [00000000000000a0] pgd=0000000000000000, p4d=0000000000000000 [67840.919177] 内部错误Oops: 0000000096000004 [#1] PREEMPT SMP [67840.996435] pstate: 80400009 (Nzcv daif + PAN -UAO -TCO -DIT -SSBS BTYPE=--) [67841.003628] pc down_write+0x30/0x98 [67841.007546] lr : start_creating.part.0+0x60/0x198 [67841.012495] sp ffff8000b979ba20 [67841.016046] x29
    ffff8000b979ba20 x28: 0000000000000010 x27: 0000000000024b40 [67841.023412] x26: 0000000000000012 x25
    ffff20202b355ae8 x24ffff20202b35a8c8 [67841.030779] x23ffffa36877928208 x22ffffa368b4972240 x21
    ffff8000b979bb18 [67841.038147] x20ffff00281dc1e3c0 x19fffffffffffffffe x180000000000000020 [67841.045515] x170000000000000000 x16ffffa368b128a530 x15ffff [67841.052888ffff ] ffff14
    ffff8000b979bc18 x13ffffffffffffffffx12ffff8000b979bb18 [67841.060263] x11: 0000000000000000 x10
    0000000000000000 x9 : ffffa368b1289b18 [67841.067640] x8 : 0000000000000012 x7 : 0000000000000000 x6
    00000000000003a9 [67841.075014] x5 : 0000000000000000 x4 : ffff002818c5cb00 x3 : 0000000000000001 [67841.082388] x2 : 0000000000000000 x1 : ffff002818c5cb00 x0 : 00000000000000a0 [67841.089759] Call trace: [67841.092456] down_write+0x30/0x98 [67841.096017] start_creating.part .0+0x60/0x198 [67841.100613] debugfs_create_dir+0x48/0x1f8 [67841.104950] debugfs_create_files_v3_hw+0x88/0x348 [hisi_sas_v3_hw] [67841.111447] debugfs_snapshot_regs_v3_hw+0x708/0x798 [hisi_sas_v3_hw] [67841.118111] debugfs_trigger_dump_v3_hw_write+0x9c/0x120 [hisi_sas_v3_hw ] [67841.125115] full_proxy_write+0x68/0xc8 [67841.129175] vfs_write+0xd8/0x3f0 [67841.132708] ksys_write+0x70/0x108 [67841.136317]
    __arm64_sys_write+0x24/0x38 [67841.140440] invoke_syscall+0x50/0x128 [67841.144385] el0_svc_common.constprop.0+0xc8/0xf0 [67841.149273] do_el0_svc+0x24/0x38 [67841.152773] el0_svc+0x38/0xd8 [67841.156009] el0t_64_sync_handler +0xc0/0xc8 [67841.160361] el0t_64_sync+0x1a4/0x1a8 [67841.164189] 代码
    b9000882 d2800002 d2800023 f9800011 (c85ffc05) [67841.170443] ---[ end trace 0000000000000000 ]--- 若要修复此问题请在 debugfs 初始化期间创建所有目录和文件。这样，驱动程序只需在每次用户触发转储时分配内存空间来保存信息。 (CVE-2024-56588)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2024-56588

medium Nessus 插件 ID 230803

版本 1.14