Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - md/raid0、raid10不设置请求队列的丢弃扇区 它应该使用 disk_stack_limits 获取正确的 max_discard_sectors 而不是通过堆栈驱动程序设置一个值。且存在一个缺陷。如果所有成员磁盘均为旋转设备raid0/raid10 设置 max_discard_sectors。因此成员设备不是 ssd/nvme但 raid0/raid10 会导出错误的值。它报告 函数中的警告消息
    mkfs.xfs 变成这样时的 __blkdev_issue_discard[ 4616.022599] ------------[ 在此处切换 ]------------ [4616.027779] 警告CPU4 PID 99634 at block/blk-lib.c:50 __blkdev_issue_discard+0x16a/0x1a0 [4616.140663] RIP: 0010:__blkdev_issue_discard+0x16a/0x1a0 [ 4616.146601] 代码24 4c 89 20 31 c0 e9 fe fe ff ff c1 e8 09 8d 48 ff 4c 89 f0 4c 09 e8 48 85 c1 0f 84 55 ff ff ff b8 ea ff ff ff e9 df fe ff ff <0f> 0b 48 8d 74 24 08 e8 ea d6 00 00 48 c7 c6 20 1e 89 ab 48 c7 c7 [ 4616.167567] RSP: 0018:ffffaab88cbffca8 EFLAGS: 00010246 [ 4616.173406] RAX: ffff9ba1f9e44678 RBX: 0000000000000000 RCX: ffff9ba1c9792080 [4616.181376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9ba1c9792080 [ 4616.189345] RBP:
    0000000000000cc0 R08ffffaab88cbffd10 R090000000000000000 [ 4616.197317] R100000000000000012 R11
    0000000000000000 R120000000000000000 [ 4616.205288] R130000000000400000 R140000000000000cc0 R15
    ffff9ba1c9792080 [ 4616.213259] FS: 00007f9a5534e980(0000) GS:ffff9ba1b7c80000(0000) knlGS:0000000000000000 [ 4616.222298] CS: 0010 DS: 0000 ES: 0000 CR0: 00000000 [ 4616.22871938:2] CR0
    000055a390a4c518 CR3: 0000000123e40006 CR4: 00000000001706e0 [ 4616.236689] Call Trace: [ 4616.239428] blkdev_issue_discard+0x52/0xb0 [ 4616.244108] blkdev_common_ioctl+0x43c/0xa00 [ 4616.248883] blkdev_ioctl+0x116/0x280 [ 4616.252977] __x64_sys_ioctl+0x8a/0xc0 [ 4616.257163] do_syscall_64+0x5c/0x90 [4616.261164] ? handle_mm_fault+0xc5/0x2a0 [ 4616.265652] ? do_user_addr_fault+0x1d8/0x690 [ 4616.270527] ? do_syscall_64+0x69/0x90 [ 4616.274717] ? exc_page_fault+0x62/0x150 [ 4616.279097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 4616.284748] RIP0033:0x7f9a55398c6b (CVE-2022-50583)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2022-50583

high Nessus 插件 ID 277639

版本 1.1