Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - btrfs修复 lockdep splat 和运行延迟的项目失败后可能的死锁。运行延迟的项目时我们将保留延迟节点的互斥体然后我们将尝试修改子卷 btree 以插入/更新/删除延迟的项目。但是例如如果在插入期间发生错误btrfs_insert_delayed_items() 可能会返回已锁定范围缓冲区至少一个叶的路径然后我们尝试在 __btrfs_run_delayed_items() 释放延迟的节点这样需要延迟的节点的互斥体从而导致 ABBA 类型的死锁。此问题由 syzbot 报告且 lockdep splat 内容如下 警告检测到可能的循环锁定依存关系 6.5.0-rc7-syzkaller-00024-g93f5de5f648d #0 未受感染
    -------------------------------------------------- ---- syz-executor.2/13257 尝试获取锁定
    ffff88801835c0c0 (&delayed_node->mutex){+.+.}-{3:3}__btrfs_release_delayed_node+0x9a/0xaa0 fs/btrfs/delayed-inode.c:256但任务已持有锁定ffff88802a5ab8e8 (btrfs-tree- 00){++++}-{3:3}, at__btrfs_tree_lock+0x3c/0x2a0 fs/btrfs/locking.c:198 哪个锁定已经依赖于新的锁定。现有依存关系链以相反顺序排列为 -> #1 (btrfs-tree-00){++++}-{3:3}
    __lock_release kernel/locking/lockdep.c:5475 [inline] lock_release+0x36f/0x9d0 kernel/locking/lockdep.c:5781 up_write+0x79/0x580 kernel/locking/rwsem.c:1625 btrfs_tree_unlock_rw fs/btrfs/locking.h 189 [inline] btrfs_unlock_up_safe+0x179/0x3b0 fs/btrfs/locking.c:239 search_leaf fs/btrfs/ctree.c:1986 [inline] btrfs_search_slot+0x2511/0x2f80 fs/btrfs/ctree.c:2230 btrfs_insert_empty/080x189 fs/btrfs/ctree.c:4376 btrfs_insert_delayed_item fs/btrfs/delayed-inode.c:746 [内联] btrfs_insert_delayed_items fs/btrfs/delayed-inode.c:824 [内联]
    __btrfs_commit_inode_delayed_items+0xd24/0x2410 fs/btrfs/delayed-inode.c:1111
    __btrfs_run_delayed_items+0x1db/0x430 fs/btrfs/delayed-inode.c:1153 flush_space+0x269/0xe70 fs/btrfs/space-info.c:723 btrfs_async_reclaim_metadata_space+0x106/0x350 fs/btrfs/space-info.c:10_onework+process_one 0x92c/0x12c0 kernel/workqueue.c:2600 worker_thread+0xa63/0x1210 kernel/workqueue.c:2751 kthread+0x2b8/0x350 kernel/kthread.c:389 ret_from_fork+0x2e/0x60 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 -> #0 (&delayed_node->mutex){+.+.}-{3:3}
    check_prev_add kernel/locking/lockdep.c:3142 [inline] check_prevs_add kernel/locking/lockdep.c:3261 [inline] validate_chain kernel/locking/lockdep.c:3876 [inline] __lock_acquire+0x39ff/0x7f70 kernel/locking/lockdep。 c:5144 lock_acquire+0x1e3/0x520 kernel/locking/lockdep.c:5761
    __mutex_lock_common+0x1d8/0x2530 kernel/locking/mutex.c:603 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x1b/0x20 kernel/locking/mutex.c:799 __btrfs_release_delayed_node+0x9a/0xaa0 fs/btrfs/ delayed-inode.c:256 btrfs_release_delayed_node fs/btrfs/delayed-inode.c:281 [内联]
    __btrfs_run_delayed_items+0x2b5/0x430 fs/btrfs/delayed-inode.c:1156 btrfs_commit_transaction+0x859/0x2ff0 fs/btrfs/transaction.c:2276 btrfs_sync_file+0xf56/0x1330 fs/btrfs/file.c:1988 vsync_fsync_range.c:1988 vsync_range.c:1988 :188 [内联] vfs_fsync fs/sync.c:202 [内联] do_fsync fs/sync.c:212 [内联] __do_sys_fsync fs/sync.c:220 [内联] __se_sys_fsync fs/sync.c:218 [内联] __x64_sys_fsync +0x196/0x1e0 fs/sync.c:218 do_syscall_x64 arch/x86/entry/common.c:50 [内联] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd ---truncated--- (CVE-2023-54224)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2023-54224

medium Nessus 插件 ID 281545

版本 1.3