Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - arm64：据报告[1]，在基于 Android 的系统从休眠状态恢复时，为 swsusp_arch_resume() 设置 Set __nocfi 会触发数据中止。发生这种情况的原因是 swsusp_arch_suspend_exit() 被标记为 SYM_CODE_*()，并且没有 CFI 哈希，但 swsusp_arch_resume() 将在调用 swsusp_arch_suspend_exit() 的副本时尝试验证 CFI 哈希。鉴于现有要求为 swsusp_arch_suspend_exit() 的入口点必须是 .hibernate_exit.text 部分的第一个字节，因此无法通过使用 SYM_FUNC_*() 标记 swsusp_arch_suspend_exit() 来修复此问题。目前最简单的修复方式是在 swsusp_arch_resume() 中禁用 CFI 检查。将 swsusp_arch_resume() 标记为 __nocfi，以禁用 CFI 检查。 [1] [ 22.991934][T1] 无法在虚拟地址 0000000109170ffc 处处理内核分页请求 [ 22.991934][ T1] 内存中止信息：[ 22.991934][ T1] ESR = 0x0000000096000007 [ 22.991934][ T1] EC = 0x25：DABT（当前异常级别），IL = 32 位 [ 22.991934][T1] SET = 0，FnV = 0 [ 22.991934][T1] EA = 0，S1PTW = 0 [ 22.991934][ T1] FSC = 0x07：
    3 级转换错误 [ 22.991934][ T1] 数据中止信息： [ 22.991934][ T1] ISV = 0，ISS = 0x00000007，ISS2 = 0x00000000 [ 22.991934][ T1] CM = 0，WnR = 0，TnD = 0，TagAccess = 0 [ 22.991934][ T1] GCS = 0，Overlay = 0，DirtyBit = 0，Xs = 0 [ 22.991934][ T1] [0000000109170ffc] 用户地址，但 active_mm 是 swapper [ 22.991934][ T1]内部错误：崩溃：0000000096000007 [#1] 抢占 SMP [ 22.991934][ T1] 转储 ftrace 缓冲区：[ 22.991934][ T1]（ftrace 缓冲区为空）[ 22.991934][ T1] 关联的模块：[22.991934] [ T1] CPU：0 PID：1 Comm：swapper/0 未污染 6.6.98-android15-8-g0b1d2aee7fc3-dirty-4k #1 688c7060a825a3ac418fe53881730b355915a419 [ 22.991934][ T1] 硬件名称：Unisoc UMS9360-base 板 (DT) [22.991934][ T1] pstate：804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 22.991934][ T1] pc：
    swsusp_arch_resume+0x2ac/0x344 [ 22.991934][ T1] lr : swsusp_arch_resume+0x294/0x344 [ 22.991934][ T1] sp : ffffffc08006b960 [ 22.991934][ T1] x29: ffffffc08006b9c0 x28: 0000000000000000 x27: 0000000000000000 [22.991934][ T1] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000820 [ 22.991934][ T1] x23:
    ffffffd0817e3000 x22: ffffffd0817e3000 x21: 0000000000000000 [ 22.991934][ T1] x20: ffffff8089171000 x19:
    ffffffd08252c8c8 x18: ffffffc080061058 [ 22.991934][ T1] x17: 00000000529c6ef0 x16: 00000000529c6ef0 x15:
    0000000000000004 [ 22.991934][ T1] x14: ffffff8178c88000 x13: 0000000000000006 x12: 0000000000000000 [22.991934][ T1] x11: 0000000000000015 x10: 0000000000000001 x9 : ffffffd082533000 [ 22.991934][ T1] x8 :
    0000000109171000 x7 : 205b5d3433393139 x6 : 392e32322020205b [ 22.991934][ T1] x5 : 000000010916f000 x4 :
    000000008164b000 x3 : ffffff808a4e0530 [ 22.991934][ T1] x2 : ffffffd08058e784 x1 : 0000000082326000 x0 :
    000000010a283000 [ 22.991934][ T1] 调用跟踪：[ 22.991934][ T1] swsusp_arch_resume+0x2ac/0x344 [22.991934][ T1] hibernation_restore+0x158/0x18c [ 22.991934][ T1] load_image_and_restore+0xb0/0xec [22.991934][ T1] software_resume+0xf4/0x19c [ 22.991934][ T1] software_resume_initcall+0x34/0x78 [22.991934][ T1] do_one_initcall+0xe8/0x370 [ 22.991934][ T1] do_initcall_level+0xc8/0x19c [ 22.991934][T1] do_initcalls+0x70/0xc0 [ 22.991934][ T1] do_basic_setup+0x1c/0x28 [ 22.991934][ T1] kernel_init_freeable+0xe0/0x148 [ 22.991934][ T1] kernel_init+0x20/0x1a8 [ 22.991934][ T1] ret_from_fork+0x10/0x20 [ 22.991934][ T1] Code: a9400a61 f94013e0 f9438923 f9400a64 (b85fc110) [catalin.marinas@arm.com：commit 日志由 Mark Rutland 更新] (CVE-2026-23128)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2026-23128

high Nessus 插件 ID 299069

版本 1.3