Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - net添加 vlan_get_protocol_and_depth() 辅助函数在不良提交之前在 __vlan_get_protocol() 和好友中使用 pskb_may_pull() 代替 skb_header_pointer()。少数调用程序依赖于使用 MAC 标头填充的 skb->headsyzbot 捕获其中一个 (skb_mac_gso_segment()) 添加 vlan_get_protocol_and_depth() 使 Intent 更清晰并在合理的情况下使用。这是比提交 e9d3f80935b6 (net/af_packet确保提取 mac 标头)更通用的补丁处理类似的问题。位于 include/linux/skbuff.h:2655 的内核缺陷无效 opcode0000 [#1] SMP KASAN CPU: 0 PID:
    1441 Comm：syz-executor199 未受感染 6.1.24-syzkaller #0 硬件名称 Google Google Compute Engine/Google Compute EngineBIOS Google 04/14/2023 RIP0010:__skb_pull include/linux/skbuff.h:2655 [内联] RIP0010:skb_mac_gso_segment+0x68f/0x6a0 net/core/gro.c:136 代码fd 48 8b 5c 24 10 44 89 6b 70 48 c7 c7 c0 ae 0d 86 44 89 e6 e8 a1 91 d0 00 48 c7 c7 00 af 0d 86 48 89 de 31 d2 e8 d1 4a e9 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 RSP: 0018:ffffc90001bd700 EFLAGS:6
    ffffffff8469736a RBX: ffff88810f31dac0 RCX: ffff888115a18b00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90001bd75e8 R08: ffffffff84697183 R09: fffff5200037adf9 R10:
     R110000000000000000  : dffffc0000000001 R12: 0000000000000012 R13: 000000000000fee5 R14: 0000000000005865 R15: 000000000000fed7 FS: 000055555633f300(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 0000000116fea000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3:000000000000000000000000000000000000000000000000000
    00000000fffe0ff0 DR7: 0000000000000400 调用跟踪 <TASK> [<ffffffff847018dd>]
    __skb_gso_segment+0x32d/0x4c0 net/core/dev.c:3419 [<ffffffff8470398a>] skb_gso_segment include/linux/netdevice.h:4819 [内联] [<ffffffff8470398a>] validate_xmit_skb+0x3aa/0xee0 net/core/dev.c:3725 [<ffffffff84707042>] __dev_queue_xmit+0x1332/0x3300 net/core/dev.c:4313 [<ffffffff851a9ec7>] dev_queue_xmit+0x17/0x20 include/linux/netdevice.h:3029 [<ffffffff851b4a82>] packet_snd net/packet/af_packet.c:3111 [ inline] [<ffffffff851b4a82>] packet_sendmsg+0x49d2/0x6470 net/packet/af_packet.c:3142 [<ffffffff84669a12>] sock_sendmsg_nosec net/socket.c:716 [内联] [<ffffffff84669a12>] sock_sendmsg net/socket.c:736 [内联] [<ffffffff84669a12>] __sys_sendto+0x472/0x5f0 net/socket.c:2139 [<ffffffff84669c75>] __do_sys_sendto net/socket.c:2151 [内联] [<ffffffff84669c75>]
    __se_sys_sendto net/socket.c:2147 [内联] [<ffffffff84669c75>] __x64_sys_sendto+0xe5/0x100 net/socket.c:2147 [<ffffffff8551d40f>] do_syscall_x64 arch/x86/entry/common.c:50 [内联] [<ffffffff8551d40f>] do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80 [<ffffffff85600087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd (CVE-2023-53433)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-53433

medium Nessus 插件 ID 265490

版本 1.12