Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - wifiath11k为 IPQ5018 添加缺少的 hw_ops->get_ring_selector() 在客户端连接后发送数据期间hw_ops->get_ring_selector() 将被调用。但对于 IPQ5018未设置此成员因此将发生以下空指针异常[ 38.840478] 8<--- cut here --- [ 38.840517] 无法在虚拟地址处理内核空指针取消引用00000000 ... [ 38.923161] PC 位于 0x0 [38.927930] LR 位于 ath11k_dp_tx+0x70/0x730 [ath11k] ... [ 39.063264] 进程 hostapdPID1034堆栈限制 = 0x801ceb3d[ 39.068994] Stack(0x856a9a68 到 0x856aa000) ... [ 39.438467] [<7f323804>] (ath11k_dp_tx [ath11k]) 来自 [<7f314e6c>] (ath11k_mac_op_tx+0x80/0x190 [ath11k]) [ 39.446607] [<7f314e6c>] (ath11k_mac_op_tx [ ath11k]来自 [<7f17dbe0>] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211]) [39.456162] [<7f17dbe0>] (ieee80211_handle_wake_tx_queue [mac80211]) 来自 [<7f174450>] (ieee80211_probereq_get+0x584/0x704 [mac80211]) [ 39.4674432] [2111] ] [<7f174450>] (ieee80211_probereq_get [mac80211]) 来自 [<7f178c40>] (ieee80211_tx_prepare_skb+0x1f8/0x248 [mac80211]) [ 39.479334] [<7f178c40>] (ieee80211_tx_prepare_skb [mac80211]) 来自 [<7f179e28>] (__ieee80211_tx_prepare_skb+0x1f8/0x248 [mac80211]) [[] ] (__ieee80211_tx_prepare_skb [mac80211]) 0x3d4 [mac80211]) [ 39.491053] [<7f179e28>] (__ieee80211_subif_start_xmit [mac80211]) 来自 [<7f17af08>] (ieee80211_tx_control_port+0x19c/0x288 [mac80211]) [ 39.502946] [<7f17af08>] (ieee80211_tx_control_port [mac80211]) 来自 [<7f0fc704>] (nl80211_tx_control_port+0x174/0x1d4 [cfg80211]) [ 39.515017] [x_control_port [<7f0fc704>] cfg80211]) 来自 [<808ceac4>] (genl_rcv_msg+0x154/0x340) [ 39.526814] [<808ceac4>] (genl_rcv_msg) 来自 [<808cdb74>] (netlink_rcv_skb+0xb8/0x11c) [ 39.536446] [<808cdb74>] (netlink_rcv_skb) 来自 [ [<808ce1d0>] (genl_rcv+0x28/0x34) [ 39.544344] [<808ce1d0>] (genl_rcv) 来自 [<808cd234>] (netlink_unicast+0x174/0x274) [ 39.551895] [<808cd234>] (netlink_unicast) 来自 [<808cd510>] (netlink_sendmsg+0x1dc/0x440) [ 39.559362] [<808cd510>] (netlink_sendmsg) 来自 [<808596e0>] (____sys_sendmsg+0x1a8/0x1fc) [ 39.567697] [<808596e0>] (____sys_sendmsg) 来自 [<8085b1a8>] (___sys_sendmsg+0xa4 /0xdc) [ 39.575941<8085b1a8>] (sys_sendmsg+0x44/0x74) 中的 [<8085b310>[] ] [  ] (___sys_sendmsg) [ 39.583841] [<8085b310>] (sys_sendmsg) 来自 [<80300060>] (ret_fast_syscall+0x0/0x40) 。 .. [ 39.620734] 代码错误 PC 值 [ 39.625869] ---[ 结束跟踪 8aef983ad3cbc032 ]--- (CVE-2023-54141)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-54141

medium Nessus 插件 ID 279829

版本 1.15