Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - btrfs修复中止后在启用 qgroups 的情况下放置事务时的警告如果启用 qgroups 的情况下事务中止我们会在对事务执行最终放置时得到触发警告[552.6789] ------- -----[ cut here ]------------ [552.6815] 警告CPU:4 PID:81745 at fs/btrfs/transaction.c:144 btrfs_put_transaction+0x123/0x130 [btrfs ] [552.6817] 链接的模块btrfs blake2b_generic xor (...) [552.6819] CPU: 4 PID: 81745 Comm: btrfs-transacti Tainted: GW 6.4.0-rc6-btrfs-next-134+ #1 [552.6819] Hardware nameQEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.2-0-gea1b7a073390-prebuilt.qemu.org 04/01/2014552.6819] RIP
    0010btrfs_put_transaction+0x123/0x130 [btrfs] [552.6821] Codebd a0 01 00 (...) [552.6821] RSP
    0018ffffa168c0527e28 EFLAGS00010286 [552.6821] RAXffff936042caed00 RBXffff93604a3eb448 RCX
    0000000000000000 [552.6821] RDX: ffff93606421b028 RSI: ffffffff92ff0878 RDI: ffff93606421b010 [552.6821] RBP: ffff93606421b000 R08: 0000000000000000 R09: ffffa168c0d07c20 [552.6821] R10: 0000000000000000 R11:
    ffff93608dc52950 R12ffffa168c0527e70 [552.6821] R13ffff93606421b000 R14ffff93604a3eb420 R15
    ffff93606421b028 [552.6821] FS: 0000000000000000(0000) GS:ffff93675fb00000(0000) knlGS:0000000000000000 [552.6821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [552.6821] CR2: 0000558ad262b000 CR3:
    000000014feda005 CR4: 0000000000370ee0 [552.6822] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
    0000000000000000 [552.6822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [552.6822] 调用跟踪 [552.6822] <TASK> [552.6822] ? __warn+0x80/0x130 [552.6822] btrfs_put_transaction+0x123/0x130 [btrfs] [552.6824] ? report_bug+0x1f4/0x200 [552.6824] handle_bug+0x42/0x70 [552.6824] exc_invalid_op+0x14/0x70 [552.6824] ? asm_exc_invalid_op+0x16/0x20 [552.6824] ? btrfs_put_transaction+0x123/0x130 [btrfs] [552.6826] btrfs_cleanup_transaction+0xe7/0x5e0 [btrfs] [552.6828] ? _raw_spin_unlock_irqrestore+0x23/0x40 [552.6828] ? try_to_wake_up+0x94/0x5e0 [552.6828] ? __pfx_process_timeout+0x10/0x10 [552.6828] transaction_kthread+0x103/0x1d0 [btrfs] [552.6830] ? __pfx_transaction_kthread+0x10/0x10 [btrfs] [552.6832] kthread+0xee/0x120 [552.6832] ?
    __pfx_kthread+0x10/0x10 [552.6832] ret_from_fork+0x29/0x50 [552.6832] </TASK> [552.6832] ---[ end trace 0000000000000000 ]--- 对应于以下代码行 void btrfs_put_transaction(struct btrfs_transaction *transaction) { (...) WARN_ON(!RB_EMPTY_ROOT(&transaction->delayed_refs.dirty_extent_root)); (...) } 发生该警告的原因是在事务中止路径中调用了 btrfs_qgroup_destroy_extent_records()我们使用 rbtree_postorder_for_each_entry_safe() 释放了 rbtree dirty_extent_root 中的所有条目但我们并未实际清空 rbtree - 它仍然指向被释放。因此将 rbtree 的根节点设置为空以避免此警告分配 RB_ROOT。 (CVE-2023-53865)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-53865

medium Nessus 插件 ID 278340

版本 1.5