Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - macvlan在 macvlan_common_newlink() 错误路径中观察到 RCU 宽限期据 valis 报告在使用上一个修补程序后仍然会发生争用条件。 macvlan_common_newlink() 可能在检测到错误之前使 @dev 可见其调用程序将直接调用 free_netdev(dev)。必须在 macvlan 中或核心网络堆栈中遵守 RCU 句点。在 macvlan_forward_source_one() 中添加临时 mdelay(1000) 以打开争用窗口后valis repro 为ip link add p1 type veth peer p2 ip link set address 00:00:00:00:00:20 dev p1 ip link set up dev p1 ip 链接 set up dev p2 ip 链接添加 mv0 链接 p2 type macvlan mode source(ip link add invalid% link p2 type macvlan mode source macaddr add 00:00:00:00:00:20 &) sleep 0.5 ; ping -c1 -I p1 1.2.3.4 PING 1.2.3.4 (1.2.3.4)56 数据字节 RTNETLINK 答案无效参数 BUGKASANmacvlan_forward_source 中的 slab-use-after-free (drivers/net/macvlan.c:408 drivers/net /macvlan.c:444) 由任务 e/175 CPU:1 UID: 1000 PID: 175 Comm: e 未受感染 6.19.0-rc8+ #33 NONE 硬件名称QEMU Standard PC (i440FX + PIIX1996BIOS 1.14.0-2 04/01/2014 调用跟踪 <IRQ> dump_stack_lvl (lib/dump_stack.c:123) print_report (mm/kasan/report.c:379 mm/kasan/report.c:482) ? macvlan_forward_source (drivers/net/macvlan.c:408 drivers/net/macvlan.c:444) kasan_report (mm/kasan/report.c:597) macvlan_forward_source (drivers/net/macvlan.c:408 drivers/net/macvlan.c:444) macvlan_forward_source (drivers/net/macvlan.c:408 drivers/net/macvlan.c:444) ? tasklet_init (kernel/softirq.c:983) macvlan_handle_frame (drivers/net/macvlan.c:501) 由任务分配 169kasan_save_stack (mm/kasan/common.c:58) kasan_save_track (./arch/x86/include/asm /current.h:25 mm/kasan/common.c:70 mm/kasan/common.c:79) __kasan_kmalloc (mm/kasan/common.c:419) __kvmalloc_node_noprof (./include/linux/kasan.h:263 mm/slub.c:5657 mm/slub.c:7140) alloc_netdev_mqs (net/core/dev.c:12012) rtnl_create_link (net/core/rtnetlink.c:3648) rtnl_newlink (net/core/rtnetlink.c:3830) net/core/rtnetlink.c:3957 net/core/rtnetlink.c:4072) rtnetlink_rcv_msg (net/core/rtnetlink.c:6958) netlink_rcv_skb (net/netlink/af_netlink.c:2550) netlink_unicast (net/netlink/af_netlink) .c:1319 net/netlink/af_netlink.c:1344) netlink_sendmsg (net/netlink/af_netlink.c:1894) __sys_sendto (net/socket.c:727 net/socket.c:742 net/socket.c:2206) __x64_sys_sendto (net/socket.c:2209) do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry) _64.S:131)已被任务释放 169kasan_save_stack (mm/kasan/common.c:58) kasan_save_track (./arch/x86/include/asm/current.h:25 mm/kasan/common.c:70 mm /kasan/common.c:79) kasan_save_free_info (mm/kasan/generic.c:587) __kasan_slab_free (mm/kasan/common.c:287) kfree (mm/slub.c:6674 mm/slub.c:6882) rtnl_newlink (net/core/rtnetlink.c:3845 net/core/rtnetlink.c:3957 net/core/rtnetlink.c:4072) rtnetlink_rcv_msg (net/core/rtnetlink.c:6958) netlink_rcv_skb (net/netlink/af_netlink. c:2550) netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) netlink_sendmsg (net/netlink/af_netlink.c:1894) __sys_sendto (net/socket.c:727 net/socket. c:742 net/socket.c:2206) __x64_sys_sendto (net/socket.c:2209) do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/ x86/entry/entry_64.S:131) (CVE-2026-23273)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2026-23273

high Nessus 插件 ID 303222

版本 1.13

版本 1.12

版本 1.11

版本 1.10

版本 1.9

版本 1.8

版本 1.7

版本 1.6

版本 1.5

版本 1.4

版本 1.3

版本 1.2

版本 1.1

版本 1.13 May 9, 2026, 2:20 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605090220
版本 1.12 May 8, 2026, 1:55 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605080155
版本 1.11 May 5, 2026, 5:46 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605050546
版本 1.10 May 3, 2026, 4:59 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605030459
版本 1.9 May 2, 2026, 11:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605022312
版本 1.8 Apr 29, 2026, 12:50 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604291250
版本 1.7 Apr 28, 2026, 8:33 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604280833
版本 1.6 Apr 17, 2026, 10:08 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604172208
版本 1.5 Apr 17, 2026, 5:33 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604170533
版本 1.4 Apr 6, 2026, 3:39 PM CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202604061539
版本 1.3 Mar 26, 2026, 1:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603260129
版本 1.2 Mar 24, 2026, 8:21 PM CVSS metrics ("CVSSv2 score" set to 4.9) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSS metrics ("CVSSv3 score" set to 6.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H") CVSSv2 severity (based on CVE-2026-23273, severity decreased from "High" to "Medium") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202603242021
版本 1.1 Mar 21, 2026, 9:15 AM New Plugin Feed: 202603210915