Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ice防止在重新加载期间发生空指针取消引用在重新加载期间调用 ethtool 可导致调用跟踪因为一段时间未配置 VSI但 netdev 还存在。若要修复此问题请为 VSI 的取消配置和配置添加 rtnl 锁定。释放后将 ::num_q_vectors 设置为 0并在与 ring 相关的 ethtool 操作中添加 ::tx/rx_rings 检查。在 ice_start_eth() 中添加正确的过滤器展开。复制 $watch -n 0.1 -d 'ethtool -g enp24s0f0np0' $devlink dev reload pci/0000:18:00.0 action driver_reinit 调用跟踪修复后
    [66303.926205] 缺陷内核空指针取消引用地址0000000000000000 [66303.926259] #PF
    内核模式中的主管读取访问 [66303.926286] #PF: error_code(0x0000) - not-present 页面 [66303.926311] PGD 0 P4D 0 [66303.926332] Oops: 0000 [#1] PREEMPT SMP PTI [66303.926358] CPU 4 PID
    933821 Comm: ethtool Kdump已加载受感染G OE 6.4.0-rc5+ #1 [66303.926400] 硬件名称Intel Corporation S2600WFT/S2600WFTBIOS SE5C620.86B.00.01.0014.070920180847 07/09/2018 [66303.926446] RIP
    0010:ice_get_ringparam+0x22/0x50 [ice] [66303.926649] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 48 8b 87 c0 09 00 00 c7 46 04 e0 1f 00 00 c7 46 100 e0 1f 00 00 48 8b 50 20 <48> 8b 12 0f b7 52 3a 89 56 14 48 8b 40 28 48 8b 00 0f b7 40 58 48 [66303.92672266303.926749RSP: 0018:ffffad40472f39c8 EFLAGSff0ff R RBX: ffff98a8c46dd060 RCX: ffffad40472f3b48 [66303.926781] RDX
    0000000000000000 RSIffff98a8c46dd068 RDIffff98a8b23c4000 [66303.926811] RBPffffad40472f3b48 R08
    00000000000337b0 R090000000000000000 [66303.926843] R100000000000000001 R110000000000000100 R12
    ffff98a8b23c4000 [66303.926874] R13: ffff98a8c46dd060 R14: 000000000000000f R15: ffffad40472f3a50 [66303.926906] FS: 00007f6397966740(0000) GS:ffff98b390900000(0000) knlGS:0000000000000000 [66303.926941] CS: 0010 DS: 0000 ES: 0000 CR0 0000000080050033 [66303.926967] CR2: 0000000000000000 CR3:
    000000011ac20002 CR4: 00000000007706e0 [66303.926999] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
    0000000000000000 [66303.927029] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [66303.927060] PKRU: 55555554 [66303.927075] 调用跟踪 [66303.927094] <TASK> [66303.927111] ?
    __die+0x23/0x70 [66303.927140] page_fault_oops+0x171/0x4e0 [66303.927176] ? exc_page_fault+0x7f/0x180 [66303.927209] ? asm_exc_page_fault+0x26/0x30 [66303.927244] ?66303.927469ice_get_ringparam66303.927433=66303.927501​66303.927538​66303.927561​] ]?
    __pfx_ethnl_default_doit+0x10/0x10 [66303.927590] ?66303.927615...66303.927644​66303.927665​66303.927691​66303.927717​ [66303.927743]
    __sys_sendto+0x126/0x170 [66303.927780] __x64_sys_sendto+0x24/0x30 [66303.928593] do_syscall_64+0x5d/0x90 [66303.929370] ? __count_memcg_events+0x60/0xa0 [66303.930146] ? count_memcg_events.constprop.0+0x1a/0x30 [66303.930920] ? handle_mm_fault+0x9e/0x350 [66303.931688] ? do_user_addr_fault+0x258/0x740 [66303.932452] ? exc_page_fault+0x7f/0x180 [66303.933193] entry_SYSCALL_64_after_hwframe+0x72/0xdc (CVE-2023-54037)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-54037

medium Nessus 插件 ID 279976

版本 1.10