Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 团队防止添加已为团队设备lower 的设备防止添加已为团队设备lower 的设备例如如果已添加 vlan1 而 veth0 是 vlan1 的lower 则添加 veth0。
    这在实践中无用并且会导致递归锁定$ ip link add veth0 type veth peer name veth1 $ ip link set veth0 up $ ip link set veth1 up $ ip link add link veth0 name veth0.1 type vlan protocol 802.1Q id 1 $ ip 链接添加 team0 type team $ ip 链接设置 veth0.1 down $ ip 链接设置 veth0.1 master team0 team0端口设备 veth0.1 已添加 $ ip 链接设置 veth0 down $ ip 链接设置 veth0 master team0 === ========================================= 警告检测到可能递归锁定 6.13.0 -rc2-virtme-00441-ga14a429069bb #46 未受感染 -------------------------------------- ------ ip/7684 is试图获取锁定ffff888016848e00 (team->team_lock_key){+.+.}-{4:4}来自 team_device_event (drivers/net/team/team_core.c:2928 drivers /net/team/team_core.c:2951 drivers/net/team/team_core.c:2973但任务已保持锁定ffff888016848e00 (team->team_lock_key){+.+.}-{4:4}，位于team_add_slave (drivers/net/team/team_core.c:1147 drivers/net/team/team_core.c:1977)可能有助于我们调试可能不安全的锁定情况CPU0 ---- lock(team->team_lock_key); lock(team->team_lock_key);
    *** DEADLOCK *** 可能由于缺少锁定嵌套标记 2 个锁定由 ip/7684: 堆栈回溯
    CPU3 UID0 PID7684 Commip Not tainted 6.13.0-rc2-virtme-00441-ga14a429069bb #46 硬件名称QEMU Standard PC (i440FX + PIIX,1996)BIOS 1.16.3-debian-1.16. 3-2 2014 年 4 月 1 日调用跟踪 <TASK> dump_stack_lvl (lib/dump_stack.c:122) print_deadlock_bug.cold (kernel/locking/lockdep.c:3040)
    __lock_acquire (kernel/locking/lockdep.c:3893 kernel/locking/lockdep.c:5226) ? netlink_broadcast_filtered (net/netlink/af_netlink.c:1548) lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5851) ? team_device_event (drivers/net/team/team_core.c:2928 drivers/net/team/team_core.c:2951 drivers/net/team/team_core.c:2973) trace_lock_acquire (./include/trace/events/lock.h:24标识符 2) team_device_event (drivers/net/team/team_core.c:2928 drivers/net/team/team_core.c:2951 drivers/net/team/team_core.c:2973) lock_acquire (kernel/locking/lockdep.c:5822) team_device_event (drivers/net/team/team_core.c:2928 drivers/net/team/team_core.c:2951 drivers/net/team/team_core.c:2973) __mutex_lock (kernel/locking/mutex.c:587 kernel/locking /mutex.c:735) ? team_device_event (drivers/net/team/team_core.c:2928 drivers/net/team/team_core.c:2951 drivers/net/team/team_core.c:2973) team_device_event (drivers/net/team/team_core.c:2928 drivers/net/team/team_core.c:2951 drivers/net/team/team_core.c:2973) fib_sync_up (net/ipv4/fib_semantics.c:2167) ? team_device_event (drivers/net/team/team_core.c:2928 drivers/net/team/team_core.c:2951 drivers/net/team/team_core.c:2973) team_device_event (drivers/net/team/team_core.c:2928 驱动程序) /net/team/team_core.c:2951 drivers/net/team/team_core.c:2973) notifier_call_chain (kernel/notifier.c:85) call_netdevice_notifiers_info (net/core/dev.c:1996) __dev_notify_flags (net/core/ dev.c:8993)
    __dev_change_flags (net/core/dev.c:8975) dev_change_flags (net/core/dev.c:9027) vlan_device_event (net/8021q/vlan.c:85 net/8021q/vlan.c:470) ? br_device_event (net/bridge/br.c:143) notifier_call_chain (kernel/notifier.c:85) call_netdevice_notifiers_info (net/core/dev.c:1996) dev_open (net/core/dev.c:1519 net/core/dev .c:1505) team_add_slave (drivers/net/team/team_core.c:1219 drivers/net/team/team_core.c:1977) ? __pfx_team_add_slave (drivers/net/team/team_core.c:1972) do_set_master (net/core/rtnetlink.c:2917) do_setlink.isra.0 (net/core/rtnetlink.c:3117) (CVE-2024-58071)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2024-58071

medium Nessus 插件 ID 232250

版本 1.15