Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 已修复 Linux 内核中的下列漏洞：smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d (smp: Improve smp_call_function_single() CSD-lock diagnostics) changed smp_call_function_single() so that, when CSD lock debugging is enabled, async !wait calls use the destination CPU csd_data. That improves diagnostics, but it also removes the single-writer property that made the old csd_lock() safe: multiple CPUs can now prepare the same destination CPU CSD concurrently.
    csd_lock() currently waits for CSD_FLAG_LOCK to clear and then sets the bit with a non-atomic read-modify-write. Two senders can both see an unlocked CSD, set the bit, overwrite the callback fields, and enqueue the same llist node. Re-adding a node that is already the queue head can make node->next point to itself, leaving the target CPU stuck walking call_single_queue. Later synchronous work, such as a TLB shootdown, can then remain queued and trigger soft-lockup warnings or panics. Keep the single csd_lock() implementation, but when CSD lock debugging is enabled, acquire CSD_FLAG_LOCK with try_cmpxchg_acquire().
    This makes the destination CPU CSD a real atomic lock in the only configuration where it can be shared by multiple remote senders, while preserving the existing non-debug fast path. (CVE-2026-68438)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

检测

Linux Distros 未修补的漏洞：CVE-2026-68438

high Nessus 插件 ID 335289

版本 1.6

版本 1.5

版本 1.4

版本 1.3

版本 1.2

版本 1.1

版本 1.6 Nov 13, 2026, 4:53 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611131653
版本 1.5 Nov 12, 2026, 12:23 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611120023
版本 1.4 Aug 19, 2026, 10:20 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608192220
版本 1.3 Aug 15, 2026, 1:04 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608150104
版本 1.2 Aug 14, 2026, 5:17 PM CVSS metrics ("CVSSv2 score" set to 5.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:M/Au:N/C:N/I:P/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSSv2 severity (based on CVE-2026-68438, severity increased from "Low" to "Medium") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608141717
版本 1.1 Aug 14, 2026, 7:05 AM New Plugin Feed: 202608140705