Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - wifiath12kpeer_id 查找期间处理锁定 ath12k_peer_find_by_id() 需要调用程序持有 ab->base_lock。目前 WBM 错误路径不会保持锁定并调用该函数导致 QCN9274中出现以下 lockdep_assert(): [105162.160893] ------------[ 在此处切换 ]---- -------- [105162.160916] 警告CPU: 3 PID: 0位于 drivers/net/wireless/ath/ath12k/peer.c:71 ath12k_peer_find_by_id+0x52/0x60 [ath12k] [105162.160933] 链接的模块inath12k(O) qrtr_mhi qrtr mac80211 cfg80211 mhi qmi_helpers libarc4 nvme nvme_core [上次卸载ath12k(O)] [105162.160967] CPU: 3 PID: 0 Comm: swapper/3 感染: GWO 6.1.0-rc2+ #3 [105162.160972] 硬件名称Intel(R) Client Systems NUC8i7HVK/NUC8i7HVBBIOS HNKBLi70.86A.0056.2019.0506.1527 05/06/2019 [105162.160977] RIP0010:ath12k_peer_find_by_id+0x52/0x60 [ath12k] [105162.160990] 代码07 eb 0f 39 68 24 74 0a 48 8b 00 48 39 f8 75 f3 31 c0 5b 5d c3 48 8d bf b0 f2 00 00 be ff ff ff ff ff e8 22 20 c4 e2 85 c0 75 bf <0f> 0b eb bb 66 2e 0f 1f 84 00 00 00 00 00 41 54 4c 8d a7 98 f2 00 [105162.160996] RSP: 0018:ffffa223001acc60 EFLAGS: 00010246 [105162.161003] RAX
    0000000000000000 RBX: ffff9f0573940000 RCX: 0000000000000000 [105162.161008] RDX: 0000000000000001 RSI
    fffffffffa3951c8e RDIfffffffffa39a96d7 [105162.161013] RBP000000000000000a R080000000000000000 R09
    0000000000000000 [105162.161017] R10: ffffa223001acb40 R11: fffffffffa3d57c60 R12: ffff9f057394f2e0 [105162.161022] R13: ffff9f0573940000 R14: ffff9f04d659c0 R15[] [] 105162.161026[ ] : ffff9f057394f2e0
    0000000000000000(0000) GS:ffff9f0575600000(0000) knlGS:0000000000000000 [105162.161031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [105162.161036] CR2: 00001d5c8277a008 CR3: 00000001e6224006 CR4:
    00000000003706e0 [105162.161041] 调用跟踪[105162.161046] <IRQ> [105162.161051] ath12k_dp_rx_process_wbm_err+0x6da/0xaf0 [ath12k] [105162.161072] ? ath12k_dp_rx_process_err+0x80e/0x15a0 [ath12k] [105162.161084] __lock_acquire+0x4ca/0x1a60 [105162.161104] ath12k_dp_service_srng+0x263/0x310 [ath12k] [105162.161120] ath12k_pci_ext_grp_napi_poll+0x1c/0x70 [ath12k] [105162.161133]
    __napi_poll+0x22/0x260 [105162.161141] net_rx_action+0x2f8/0x380 [105162.161153] __do_softirq+0xd0/0x4c9 [105162.161162] irq_exit_rcu+0x88/0xe0 [105162.161169] common_interrupt+0xa5/0xc0 [105162.161174] </IRQ> [105162.161179] <TASK> [105162.161184] asm_common_interrupt+0x22/0x40 处理 WBM 错误路径中的旋转锁定/解锁以保持 ath12k_peer_find_by_id() 预期的必要锁定。已在以下设备上进行测试 QCN9274 hw2.0 PCI WLAN.WBE.1.0-03171-QCAHKSWPL_SILICONZ-1 (CVE-2023-53764)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-53764

high Nessus 插件 ID 277642

版本 1.8