Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - amd/amdkfd增强切换分区中的 kfd 进程检查当前切换分区仅检查 kfd_processes_table 是否为空。 kfd_processes_table 条目已在 kfd_process_notifier_release 中删除但 kfd_process 拆卸会在 kfd_process_wq_release 中进行。考虑使用两个进程进程 A (workqueue) -> kfd_process_wq_release -> 访问 kfd_node 成员进程 B 交换分区 -> amdgpu_xcp_pre_partition_switch -> amdgpu_amdkfd_device_fini_sw -> kfd_node 拆卸。进程 A 和 B 可能会触发争用如 dmesg 日志中所示。此修补程序通过添加原子 kfd_process 计数器 kfd_processes_count 来解决争用该问题在创建 kfd 进程时递增其在完成 kfd_process_wq_release 时递减。 v2按 kfd_dev 放置 kfd_processes_count将减量移动到 kfd_process_destroy_pdds 和缺陷补丁。(Philip Yang) [3966658.307702] 除法错误0000 [#1] SMP NOPTI [3966658.350818] i10nm_edac [3966658.356318] CPU124 PID38435 Commkworker/124:0 Kdumploaded Tainted [3966658.356890] Workqueuekfd_process_wq kfd_process_wq_release [amdgpu] [3966658.362839] nfit [3966658.366457] RIP0010:kfd_get_num_sdma_engines+0x17/0x40 [amdgpu] [3966658.366460] 代码00 00 e9 ac 81 02 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 0f 1f 44 00 00 48 8b 4f 08 48 8b b7 00 01 00 00 8b 81 58 26 03 00 99 <f7> be b8 01 00 00 80 b9 70 2e 00 00 00 74 0b 83 f8 02 ba 02 [3966658.38096700 ] x86_pkg_temp_thermal [3966658.391529] RSP: 0018:ffffc900a0edfdd8 EFLAGS: 00010246 [3966658.391531] RAX
    0000000000000008 RBX: ffff8974e593b800 RCX: ffff888645900000 [3966658.391531] RDX: 0000000000000000 RSI
    ffff888129154400 RDIffff888129151c00 [3966658.391532] RBPffff8883ad79d400 R080000000000000000 R09
    ffff8890d2750af4 [3966658.391532] R100000000000000018 R11R120000000000000018 [] 0000000000000000 [3966658.391533R14R13ffff8883ad79d400 R15ffffe87ff662ba00 [3966658.391533b] 5084
    0000000000000000(0000) GS:ffff88fe7f600000(0000) knlGS:0000000000000000 [3966658.391534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [3966658.391534] CR2: 0000000000d71000 CR3: 000000dd0e970004 CR4:
    0000000002770ee0 [3966658.391535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [3966658.391535] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 [3966658.391536] PKRU:
    55555554 [3966658.391536] 调用跟踪[3966658.391674] deallocate_sdma_queue+0x38/0xa0 [amdgpu] [3966658.391762] process_termination_cpsch+0x1ed/0x480 [amdgpu] [3966658.399754] intel_powerclam [3966658.402831] kfd_process_dequeue_from_all_devices+0x5b/0xc0 [amdgpu] [3966658.402908] kfd_process_wq_release+0x1a/0x1a0 [amdgpu] [3966658.410516] coretemp [3966658.434016] process_one_work+0x1ad/0x380 [3966658.434021] worker_thread+0x49/0x310 [3966658.438963] kvm_intel [3966658.446041] ? process_one_work+0x380/0x380 [3966658.446045] kthread+0x118/0x140 [3966658.446047] ?
    __kthread_bind_mask+0x60/0x60 [3966658.446050] ret_from_fork+0x1f/0x30 [3966658.446053] 链接的模块
    kpatch_20765354(OEK) [3966658.455310] kvm [3966658.464534] mptcp_diag xsk_diag raw_diag unix_diag af_packet_diag netlink_diag udp_diag act_pedit act_mirred act_vlan cls_flower kpatch_21951273(OEK) kpatch_18424469(OEK) kpatch_19749756(OEK) [3966658.473462] idxd_mdev [3966658.482306] kpatch_17971294(OEK) sch_ingress xt_conntrack amdgpu(OE) amdxcp(OE) amddrm_buddy(OE) amd_sched(OE) amdttm(OE) amdkcl(OE) intel_ifs iptable_mangle tcm_loop target_core_pscsi tcp_diag target_core_file inet_diag target_core_iblock target_core_user target_core_mod coldpgs kpatch_18383292(OEK) ip6table_nat ip6table_filter ip6_tables ip_set_hash_ipportip ip_set_hash_ipportnet ip_set_hash_ipport ip_set_bitmap_port xt_comment iptable_nat nf_nat iptable_filter ip_tables ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 sn_core_odd(OE) i40e overlay binfmt_misc tun bonding(OE) aisqos(OE) aisqo ---truncated--- (CVE-2025-68174)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2025-68174

high Nessus 插件 ID 278878

版本 1.22