Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ACPICA 修复 acpi 解析和 parseext 缓存泄漏 ACPICA commit 8829e70e1360c81e7a5a901b5d4f48330e021ea5 我是 Seunghun Han，在 大韩民国国家安全研究所工作。我研究了 ACPI发现在 ACPI 早期中止情况中存在 ACPI 缓存泄露。ACPI 缓存泄漏的启动日志如下[ 0.352414] ACPI添加了 _OSI模块设备 [ 0.353182] ACPI添加了 _OSI处理器设备 [0.353182] ACPI添加了 _OSI3.0 _SCP Extensions[ 0.353182] ACPI添加了 _OSI(Processor Aggregator Device) [ 0.356028] ACPI无法启动 ACPI 解释器 [ 0.356799] ACPI 错误无法删除 SCI 处理程序 (20170303/evmisc-281) [ 0.360215] kmem_cache_destroy Acpi-State Slab 缓存中仍有对象 [0.360648] CPU: 0 PID: 1 Comm: swapper/0 Tainted: GW 4.12.0-rc4-next-20170608+ #10 [ 0.361273] 硬件名称innotek gmb_h virtual_box/virtual_box、BIOS virtual_box 12/01/2006 [ 0.361873] 调用跟踪[0.362243] ? dump_stack+0x5c/0x81 [ 0.362591] ? kmem_cache_destroy+0x1aa/0x1c0 [ 0.362944] ? acpi_sleep_proc_init+0x27/0x27 [ 0.363296] ? acpi_os_delete_cache+0xa/0x10 [ 0.363646] ? acpi_ut_delete_caches+0x6d/0x7b [ 0.364000] ? acpi_terminate+0xa/0x14 [ 0.364000] ? acpi_init+0x2af/0x34f [ 0.364000] ? __class_create+0x4c/0x80 [ 0.364000] ? video_setup+0x7f/0x7f [ 0.364000] ? acpi_sleep_proc_init+0x27/0x27 [ 0.364000] ? do_one_initcall+0x4e/0x1a0 [ 0.364000] ? kernel_init_freeable+0x189/0x20a [ 0.364000] ? rest_init+0xc0/0xc0 [ 0.364000] ? kernel_init+0xa/0x100 [0.364000] ? ret_from_fork+0x25/0x30 我详细地分析了此内存泄漏。我发现 Acpi-State 缓存和 Acpi-Parse 缓存会合并因为缓存对象的大小为相同的 slab 缓存大小。本人最终发现 Acpi-Parse 缓存和 Acpi-parse_ext 缓存已通过 kmem_cache_create() 函数中的 SLAB_NEVER_MERGE 标记泄露。实际 ACPI 缓存泄漏点如下[ 0.360101] ACPI已添加
    _OSI模块设备 [ 0.360101] ACPI添加 _OSI处理器设备[ 0.360101] ACPI添加 _OSI(3.0 _SCP Extensions) [ 0.361043] ACPI添加 _OSI处理器聚合设备[ 0.364016] ACPI无法启动 ACPI 解释器 [ 0.365061] ACPI 错误无法删除 SCI 处理程序 (20170303/evmisc-281) [0.368174] kmem_cache_destroy Acpi-ParseSlab 缓存中仍有对象 [ 0.369332] CPU: 1 PID: 1 Comm其他
    swapper/0 TaintedGW 4.12.0-rc4-next-20170608+ #8 [ 0.371256] 硬件名称innotek gmb_h virtual_box/virtual_box, BIOS virtual_box 12/01/2006 [ 0.372000] 调用跟踪 [ 0.372000] ? dump_stack+0x5c/0x81 [ 0.372000] ? kmem_cache_destroy+0x1aa/0x1c0 [ 0.372000] ? acpi_sleep_proc_init+0x27/0x27 [ 0.372000] ? acpi_os_delete_cache+0xa/0x10 [ 0.372000] ? acpi_ut_delete_caches+0x56/0x7b [ 0.372000] ? acpi_terminate+0xa/0x14 [ 0.372000] ? acpi_init+0x2af/0x34f [ 0.372000] ? __class_create+0x4c/0x80 [ 0.372000] ? video_setup+0x7f/0x7f [ 0.372000] ? acpi_sleep_proc_init+0x27/0x27 [ 0.372000] ? do_one_initcall+0x4e/0x1a0 [ 0.372000] ? kernel_init_freeable+0x189/0x20a [ 0.372000] ? rest_init+0xc0/0xc0 [ 0.372000] ? kernel_init+0xa/0x100 [0.372000] ? ret_from_fork+0x25/0x30 [ 0.388039] kmem_cache_destroy Acpi-parse_extSlab 缓存中仍有对象 [ 0.389063] CPU1 PID1 Comm: swapper/0 TaintedGW 4.12.0-rc4-next-20170608+ #8 [ 0.390557] 硬件名称innotek gmb_h virtual_box/virtual_box, BIOS virtual_box 12/01/2006 [ 0.392000] 调用跟踪
    [ 0.392000] dump_stack+0x5c/0x81 [ 0.392000] ? kmem_cache_destroy+0x1aa/0x1c0 [ 0.392000] ? acpi_sleep_proc_init+0x27/0x27 [ 0.392000] ? acpi_os_delete_cache+0xa/0x10 [ 0.392000] ? acpi_ut_delete_caches+0x6d/0x7b [ 0.392000] ? acpi_terminate+0xa/0x14 [ 0.392000] ? acpi_init+0x2af/0x3
    ---truncated--- (CVE-2025-38344)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-38344

medium Nessus 插件 ID 243651

版本 1.32