Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - arm64在 swsusp_arch_resume() 上设置 __nocfi当从休眠恢复时基于 android 的系统上报告[1] 存在 DABT。出现这种情况的原因是 swsusp_arch_suspend_exit() 标记有 SYM_CODE_*() 并且没有 CFI 哈希但 swsusp_arch_resume() 会在调用 swsusp_arch_suspend_exit() 的副本时尝试验证 CFI 哈希。考虑到现有要求 swsusp_arch_suspend_exit() 的入口点是 .hibernate_exit.text 部分的第一个字节我们无法通过使用 SYM_FUNC_*() 标记 swsusp_arch_suspend_exit() 来修复此问题。目前最简单的修复是禁用 swsusp_arch_resume() 中的 CFI 检查。将 swsusp_arch_resume() 标记为 __nocfi 以禁用 CFI 检查。 [1] [ 22.991934][T1] 无法处理虚拟地址 0000000109170ffc 处的内核分页请求 [ 22.991934][ T1] 内存中止信息 [ 22.991934][ T1] ESR = 0x0000000096000007 [ 22.991934][ T1] EC = 0x25DABT当前 EL，IL = 32 位 [ 22.991934][ T1] SET = 0，FnV = 0 [ 22.991934][ T1] EA = 0，S1PTW = 0 [ 22.991934][ T1] FSC = 0x07其他
    级别 3 转换错误 [ 22.991934][ T1] Data 中止信息[ 22.991934][ T1] ISV = 0ISS = 0x00000007, ISS2 = 0x00000000 [ 22.991934][ T1] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 22.991934][ T1] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 22.991934][ T1] [0000000109170ffc] 用户处理地址但 active_mm 为交换程序 [ 22.991934][ T1]内部错误Oops: 0000000096000007 [#1] PREEMPT SMP [ 22.991934][ T1] 转储 ftrace 缓冲区[ 22.991934][ T1] ftrace 缓冲区为空 [ 22.991934][ T1] 中链接的模块 [22.991934] [ T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.6.98-android15-8-g0b1d2aee7fc3-dirty-4k #1 688c7060a825a3ac418fe53881730b355915a419 [ 22.991934][ T1] 硬件名称Unisoc UMS9360-base Board (DT ) [22.991934][ T1] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 22.991934][ T1] pc
    swsusp_arch_resume+0x2ac/0x344 [ 22.991934][ T1] lr : swsusp_arch_resume+0x294/0x344 [ 22.991934][ T1] sp : ffffffc08006b960 [ 22.991934][ T1] x29: ffffffc08006b9c0 x28: 0000000000000000 x27: 0000000000000000 [22.991934][ T1] x260000000000000000 x250000000000000000 x240000000000000820 [ 22.991934][ T1] x23
    ffffffd0817e3000 x22ffffffd0817e3000 x210000000000000000 [ 22.991934][ T1] x20ffffff8089171000 x19
    ffffffd08252c8c8 x18ffffffc080061058 [ 22.991934][ T1] x17: 00000000529c6ef0 x16: 00000000529c6ef0 x15
    0000000000000004 [ 22.991934][ T1] x14: ffffff8178c88000 x13: 0000000000000006 x12: 0000000000000000 [22.991934][ T1] x11: 0000000000000015 x10: 0000000000000001 x9 : ffffffd082533000 [ 22.991934][ T1] x8 :
    0000000109171000 x7 : 205b5d3433393139 x6 : 392e32322020205b [ 22.991934][ T1] x5 : 000000010916f000 x4
    000000008164b000 x3 : ffffff808a4e0530 [ 22.991934][ T1] x2 : ffffffd08058e784 x1 : 0000000082326000 x0
    000000010a283000 [ 22.991934][ T1] 调用跟踪[ 22.991934][ T1] swsusp_arch_resume+0x2ac/0x344 [22.991934][ T1] hibernate_restore+0x158/0x18c [ 22.991934][ T1] load_image_and_restore+0xb0/0xec [22.991934][ T1] software_resume+0xf4/0x19c [ 22.991934][ T1] software_resume_initcall+0x34/0x78 [22.991934][ T1] do_one_initcall+0xe8/0x370 [ 22.991934][ T1] do_initcall_level+0xc8/0x19c [ 22.991934][ [ T1] do_initcalls+0x70/0xc0 [ 22.991934][ T1] do_basic_setup+0x1c/0x28 [ 22.991934][ T1] kernel_init_freeable+0xe0/0x148 [ 22.991934][ T1] kernel_init+0x20/0x1a8 [ 22.991934][ T1] ret_from_fork+0x10/0x20 [ 22.991934][ T1] Code: a9400a61 f94013e0 f9438923 f9400a64 (b85fc110) [catalin.marinas@arm.com提交日志由 Mark Rutland 更新] (CVE-2026-23128)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2026-23128

high Nessus 插件 ID 299069

版本 1.1