远程 CentOS Linux 9 主机上安装的程序包受到 kernel-5.14.0-630.el9 版本变更日志中提及的漏洞影响。

  - 已修复 Linux 内核中的下列漏洞：crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.
    (CVE-2023-53494)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

检测

CentOS 9kernel-5.14.0-630.el9

medium Nessus 插件 ID 271731

版本 1.1