Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - fs/inode防止 dump_mapping() 访问无效 dentry.d_name.name 据发现用户正在访问 hugetlb 时在热删除内存设备期间发生崩溃。请参阅如下所示的 calltrace
    ------------[在这里切]------------ 警告: CPU: 1 PID: 14045 at arch/x86/mm/fault.c:1278 do_user_addr_fault+ 0x2a0/0x790 Modules linked in: kmem device_dax cxl_mem cxl_pmem cxl_port cxl_pci dax_hmem dax_pmem nd_pmem cxl_acpi nd_btt cxl_core crc32c_intel nvme virtiofs fuse nvme_core nfit libnvdimm dm_multipath scsi_dh_rdac scsi_dh_emc s mirror dm_region_hash dm_log dm_mod CPU: 1 PID: 14045 Comm: daxctl Not tainted 6.10.0-rc2 -lizhijian+ #492 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 RIP0010:do_user_addr_fault+0x2a0/0x790 Code :48 8b 00 a8 04 0f 84 b5 fe ff ff e9 1c ff ff ff 4c 89 e9 4c 89 e2 be 01 00 00 00 bf 02 00 00 00 e8 b5 ef 24 00 e9 42 fe ff ff <0f> 0b 48 83 c4 08 4c 89 ea 48 89 ee 4c 89 e7 5b 5d 41 5c 41 5d 41 RSP
    0000:ffffc90000a575f0 EFLAGS: 00010046 RAX: ffff88800c303600 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000001000 RSI: ffffffff82504162 RDI: ffffffff824b2c36 RBP: 0000000000000000 R08:
     R090000000000000000  : 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90000a57658 R13: 0000000000001000 R14: ffff88800bc2e040 R15: 0000000000000000 FS: 00007f51cb57d880(0000) GS:ffff88807fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES0000 CR00000000080050033 CR2
    0000000000001000 CR3: 00000000072e2004 CR4: 00000000001706f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? __warn+0x8d/0x190 ? do_user_addr_fault+0x2a0/0x790 ? report_bug+0x1c3/0x1d0 ? handle_bug+0x3c/0x70 ? exc_invalid_op+0x14/0x70 ? asm_exc_invalid_op+0x16/0x20 ? do_user_addr_fault+0x2a0/0x790 ? exc_page_fault+0x31/0x200 exc_page_fault+0x68/0x200 <...snip...> BUG无法处理地址 0000000000001000 的页面错误 #PF内核模式下存在主管读取访问 #PFerror_code (0x0000) - not-present page PGD 800000000ad92067 P4D 800000000ad92067 P4D 800000000ad9207 6627 PMD 0 OopsOops0000 [#1] PREEMPT SMP PTI
    ---[结束跟踪 0000000000000000]---缺陷无法处理地址 0000000000001000 的页面错误 #PF
    内核模式下的主管读取访问 #PFerror_code(0x0000) - not-present page PGD 800000000ad92067 P4D 800000000ad92067 PUD 7677067 PMD 0 Oops: Oops: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 14045 Comm: daxctl Kdump受感染GW 6.10.0-rc2-lizhijian+ #492 硬件名称QEMU Standard PC (Q35 + ICH9, 2009)BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 RIP 0010dentry_name+0x1f4/0x440 <...snip...> dentry_name+0x2fa/0x440 vsnprintf+0x1f3/0x4f0 vprintk_store+0x23a/0x540 vprintk_emit+0x6d/0x330 _printk+0x58/0x80 dump_mapping+0x10b/0x1a0 ? __pfx_free_object_rcu+0x10/0x10
    __dump_page+0x26b/0x3e0 ? vprintk_emit+0xe0/0x330 ? _printk+0x58/0x80 dump_page+0x17/0x50 dump_page+0x17/0x50 do_migrate_range+0x2f7/0x7f0 do_migrate_range+0x42/0x7f0 ?离线_pages+0x2f4/0x8c0离线_pages+0x60a/0x8c0内存_subsys_offline+0x9f/0x1c0 lockdep_hardirqs_on+0x77/0x100 ?
    _raw_spin_unlock_irqrestore+0x38/0x60 device_offline+0xe3/0x110 state_store+0x6e/0xc0 kernfs_fop_write_iter+0x143/0x200 vfs_write+0x39f/0x560 ksys_write+0x65/0xf0do_syscall_64+0x62/0x130 之前已在 print_syscall_64+0x62/0x130 中执行某些 checksanity尽管有权限解析 '%pd'但仍然可能遇到无效的 dentry.d_name.name。由于 dump_mapping() 仅需要转储文件名因此请以更安全的方式单独检索文件名以防止不必要的崩溃。请注意无论是通过“%pd”或 strncpy_from_kernel_nofault() 检索文件名文件名可能不可靠。 (CVE-2024-49934)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2024-49934

medium Nessus 插件 ID 230882

版本 1.22