Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - drm/i915/gvt修复 gvt debugfs 破坏 当 gvt 调试 fs 破坏时需要进行合理的检查 drm minor 的 debugfs 根是否仍然可用否则在类似通过解绑定删除设备的情况下drm minor 的 debugfs 目录已存在已删除时intel_gvt_debugfs_clean() 会像下面一样作用于悬摆指针并发生 oops。 i915 0000:00:02.0i915/gvt/vid_0x8086_did_0x1926_rid_0x0a.golden_hw_state 的直接固件加载失败并发生错误 -2 i915 0000:00:02.0MDEV
    已注册 Console切换到颜色虚拟设备 80x25 i915 0000:00:02.0: MDEV正在取消注册 BUG
    kernel 空指针取消引用, address00000000000000a0 PGD 0 P4D 0 Oops: 0002 [#1] PREEMPT SMP PTI CPU: 2 PID: 2486 Comm: gfx-unbind.sh Tainted: GI 6.1.0-rc8+ #15 Hardware name: Dell Inc . XPS 13 9350/0JXC1H、BIOS 1.13.0 02/10/2020 RIP0010:down_write+0x1f/0x90 代码1d ff ff 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 53 48 89 fb e8 62 c0 ff ff bf 01 00 00 00 e8 28 5e 31 ff 31 c0 ba 01 00 00 00 <f0> 48 0f b1 13 75 33 65 48 8b 04 25 c0 bd 01 00 48 89 43 08 bf 01 RSP: 0018:ff01ffcc8 EFGSLAX:其他
    0000000000000000 RBX: 00000000000000a0 RCX: ffffff8100000000 RDX: 0000000000000001 RSI: 0000000000000064 RDI: ffffffffa48787a8 RBP: ffff9eb3036ffd30 R08: ffffeb1fc45a0608 R09: ffffeb1fc45a05c0 R10:
     R110000000000000002  : 0000000000000000 R12: 0000000000000000 R13: ffff91acc33fa328 R14: ffff91acc033f080 R15: ffff91acced533e0 FS: 00007f6947bba740(0000) GS:ffff91ae36d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000000000a0 CR3: 00000001133a2002 CR4: 00000000003706e0 调用跟踪 <TASK> simple_recursive_removal+0x9f/0x2a0 ? start_creating.part.0+0x120/0x120
    _raw_spin_lock+0x13/0x40 debugfs_remove+0x40/0x60 intel_gvt_debugfs_clean+0x15/0x30 [kvmgt] intel_gvt_clean_device+0x49/0xe0 [kvmgt] intel_gvt_driver_remove+0x2f/0xb0 i915_driver_remove+0xa4/0xf0 i915_pci_remove+0x1a/0x30 pci_device_remove+0x33/0xa0 device_release_driver_internal+0x1b2/ 0x230 unbind_store+0xe0/0x110 kernfs_fop_write_iter+0x11b/0x1f0 vfs_write+0x203/0x3d0 ksys_write+0x63/0xe0 do_syscall_64+0x37/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f6947cb5190 Code: 40 00 48 8b 15 71 9c 0d 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d 51 24 0e 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 8300 ec 48 28 48 89 RSP002b:00007ffcbac45a28 EFLAGS00000202 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000000000000000d RCX
    00007f6947cb5190 RDX: 000000000000000d RSI: 0000555e35c866a0 RDI: 0000000000000001 RBP: 0000555e35c866a0 R08: 0000000000000002 R09: 0000555e358cb97c R10: 0000000000000000 R11: 0000000000000202 R12:
    0000000000000001 R13000000000000000d R140000000000000000 R150000555e358cb8e0 </TASK> 链接模块kvmgt CR200000000000000a0 ---[结束跟踪 000000000] (---) [CVE-2023-5409800000 ]

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-54098

medium Nessus 插件 ID 279848

版本 1.9