There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: f2fs: split initial and dynamic
    conditions for extent_cache Let's allocate the extent_cache tree without dynamic conditions to avoid a
    missing condition causing a panic as below. # create a file w/ a compressed flag # disable the compression
    # panic while updating extent_cache F2FS-fs (dm-64): Swapfile: last extent is not aligned to section F2FS-
    fs (dm-64): Swapfile (3) is not align to section: 1) creat(), 2) ioctl(F2FS_IOC_SET_PIN_FILE), 3)
    fallocate(2097152 * N) Adding 124996k swap on ./swap-file. Priority:0 extents:2 across:17179494468k
    ================================================================== BUG: KASAN: null-ptr-deref in
    instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline] BUG: KASAN: null-ptr-
    deref in atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline] BUG:
    KASAN: null-ptr-deref in queued_write_lock out/common/include/asm-generic/qrwlock.h:92 [inline] BUG:
    KASAN: null-ptr-deref in __raw_write_lock out/common/include/linux/rwlock_api_smp.h:211 [inline] BUG:
    KASAN: null-ptr-deref in _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295 Write of size
    4 at addr 0000000000000030 by task syz-executor154/3327 CPU: 0 PID: 3327 Comm: syz-executor154 Tainted: G
    O 5.10.185 #1 Hardware name: emulation qemu-x86/qemu-x86, BIOS 2023.01-21885-gb3cc1cd24d 01/01/2023 Call
    Trace: __dump_stack out/common/lib/dump_stack.c:77 [inline] dump_stack_lvl+0x17e/0x1c4
    out/common/lib/dump_stack.c:118 __kasan_report+0x16c/0x260 out/common/mm/kasan/report.c:415
    kasan_report+0x51/0x70 out/common/mm/kasan/report.c:428 kasan_check_range+0x2f3/0x340
    out/common/mm/kasan/generic.c:186 __kasan_check_write+0x14/0x20 out/common/mm/kasan/shadow.c:37
    instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline]
    atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline]
    queued_write_lock out/common/include/asm-generic/qrwlock.h:92 [inline] __raw_write_lock
    out/common/include/linux/rwlock_api_smp.h:211 [inline] _raw_write_lock+0x5a/0x110
    out/common/kernel/locking/spinlock.c:295 __drop_extent_tree+0xdf/0x2f0
    out/common/fs/f2fs/extent_cache.c:1155 f2fs_drop_extent_tree+0x17/0x30
    out/common/fs/f2fs/extent_cache.c:1172 f2fs_insert_range out/common/fs/f2fs/file.c:1600 [inline]
    f2fs_fallocate+0x19fd/0x1f40 out/common/fs/f2fs/file.c:1764 vfs_fallocate+0x514/0x9b0
    out/common/fs/open.c:310 ksys_fallocate out/common/fs/open.c:333 [inline] __do_sys_fallocate
    out/common/fs/open.c:341 [inline] __se_sys_fallocate out/common/fs/open.c:339 [inline]
    __x64_sys_fallocate+0xb8/0x100 out/common/fs/open.c:339 do_syscall_64+0x35/0x50
    out/common/arch/x86/entry/common.c:46 (CVE-2023-52770)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - f2fs分割 extent_cache 的初始和動態條件讓我們在沒有動態條件的情況下配置 extent_cache 樹狀結構以避免遺漏條件而造成如下錯誤。 # 建立具有壓縮旗標的檔案 # 停用壓縮 # 更新 extent_cache F2FS-fs (dm-64): Swapfile最後一個範圍未與 F2FS-fs 區段對齊 (dm-64)未與區段對齊1) creat()、2) ioctl(F2FS_IOC_SET_PIN_FILE)、3) fallocate(2097152 * N) 在 ./swap-file 上新增 124996k 交換。Priority:0 extents:2 cross:17179494468k ========================================= ========================= 錯誤
    KASAN Instrument_atomic_read_write out/common/include/linux/instrumented.h:101 中的 null-ptr-deref [內嵌] 錯誤 KASANatomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented 中的 null-ptr-deref。 h:705 [內嵌] 錯誤KASAN queued_write_lock out/common/include/asm-generic/qrwlock.h:92 中的 null-ptr-deref [內嵌] 錯誤 KASAN__raw_write_lock out/common/ 中的 null-ptr-deref include/linux/rwlock_api_smp.h:211 [內嵌] 錯誤KASAN null-ptr-deref in
    _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295 工作 syz-executor154/3327 CPU在 addr 0000000000000030 寫入大小為 4 的問題 syz-executor154/3327 CPU0 PID3327 通訊syz-executor154 污染GO 5.10.185 #1 硬體名稱模擬 qemu-x86/qemu-x86BIOS 2023.01-21885-gb3cc1cd24d 01/01/2023 呼叫追踪
    __dump_stack out/common/lib/dump_stack.c:77 [內嵌] dump_stack_lvl+0x17e/0x1c4 out/common/lib/dump_stack.c:118 __kasan_report+0x16c/0x260 out/common/mm/kasan/report.c:415 kasan_report +0x51/0x70 out/common/mm/kasan/report.c:428 kasan_check_range+0x2f3/0x340 out/common/mm/kasan/generic.c:186 __kasan_check_write+0x14/0x20 out/common/mm/kasan/shadow。 c:37 Instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [內嵌] atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [內嵌] queued_write_lock out/common/include/asm- generic/qrwlock.h:92 [內嵌] __raw_write_lock out/common/include/linux/rwlock_api_smp.h:211 [內嵌] _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295 __drop_extent_tree+0xdf/0x2f0 out/common/fs/f2fs/extent_cache.c:1155 f2fs_drop_extent_tree+0x17/0x30 out/common/fs/f2fs/extent_cache.c:1172 f2fs_insert_range out/common/fs/f2fs/file.c:1600 [內嵌] f2fs_fallocate+ 0x19fd/0x1f40 out/common/fs/f2fs/file.c:1764 vf s_fallocate+0x514/0x9b0 out/common/fs/open.c:310 ksys_fallocate out/common/fs/open.c:333 [內嵌] __do_sys_fallocate out/common/fs/open.c:341 [內嵌] __se_sys_fallocate out/common /fs/open.c:339 [內嵌]
    __x64_sys_fallocate+0xb8/0x100 out/common/fs/open.c:339 do_syscall_64+0x35/0x50 out/common/arch/x86/entry/common.c:46 (CVE-2023-52770)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - f2fs拆分 extent_cache 的初始条件和动态条件 我们假设在没有动态条件的情况下分配 extent_cache 树以避免缺少条件造成以下错误。 # 创建具有压缩标记的文件 # 禁用压缩 # 更新 extent_cache F2FS-fs (dm-64): Swapfile最后一个盘区与区段不符 F2FS-fs (dm-64): Swapfile (3) 是不符合 节1) creat()2) ioctl(F2FS_IOC_SET_PIN_FILE)3) fallocate(2097152 * N) 在 ./swap-file 中添加 124996k 交换。Priority:0 extents:2 cross:17179494468k ========================================= ========================= 缺陷
    KASANinstrument_atomic_read_write out/common/include/linux/instrumented.h:101 [内联] 缺陷KASANatomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented 中存在 null-ptr-deref。 h:705 [内联] BUGKASANqueued_write_lock out/common/include/asm-generic/qrwlock.h:92 [inline] BUGKASANqueued_write_lock out/common/ 中存在 null-ptr-deref include/linux/rwlock_api_smp.h:211 [内联] 缺陷KASAN中的 null-ptr-deref
    _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295 由任务 syz-executor154/3327 在 addr 0000000000000030 进行的大小 4 的 4 写入CPU: 0 PID: 3327 Comm: syz-executor154 受感染的: GO 5.10.185 #1 硬件名称仿真 qemu-x86/qemu-x86、BIOS 2023.01-21885-gb3cc1cd24d 01/01/2023 调用跟踪
    __dump_stack out/common/lib/dump_stack.c:77 [inline] dump_stack_lvl+0x17e/0x1c4 out/common/lib/dump_stack.c:118 __kasan_report+0x16c/0x260 out/common/mm/kasan/report.c:415 kasan_report +0x51/0x70 out/common/mm/kasan/report.c:428 kasan_check_range+0x2f3/0x340 out/common/mm/kasan/generic.c:186 __kasan_check_write+0x14/0x20 out/common/mm/kasan/shadow。 c:37 Instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [内联] atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [内联] queued_write_lock out/common/include/asm- generic/qrwlock.h:92 [inline] __raw_write_lock out/common/include/linux/rwlock_api_smp.h:211 [inline] _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295 __drop_extent_tree+0xdf/0x2f0 out/common/fs/f2fs/extent_cache.c:1155 f2fs_drop_extent_tree+0x17/0x30 out/common/fs/f2fs/extent_cache.c:1172 f2fs_insert_range out/common/fs/f2fs/file.c:1600 [inline] f2fs_fallocate+ 0x19fd/0x1f40 out/common/fs/f2fs/file.c:1764 vf s_fallocate+0x514/0x9b0 out/common/fs/open.c:310 ksys_fallocate out/common/fs/open.c:333 [inline] __do_sys_fallocate out/common/fs/open.c:341 [inline] __se_sys_fallocate out/common /fs/open.c:339 [内联]
    __x64_sys_fallocate+0xb8/0x100 out/common/fs/open.c:339 do_syscall_64+0x35/0x50 out/common/arch/x86/entry/common.c:46 (CVE-2023-52770)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - f2fsextent_cache のために初期条件と動的条件を分割します。動的条件なしで extent_cache ツリーを割り当て、以下のようにパニックを引き起こす欠落した条件を回避します。 # 圧縮フラグのあるファイルを作成します # 圧縮を無効にします # extent_cache の更新中のパニック F2FS-fsdm-64スワップファイル最後のエクステントがセクション F2FS-fsdm-64スワップファイル3はセクションに整列しない1) create()、2) ioctl(F2FS_IOC_SET_PIN_FILE)、3) fallocate2097152 * N ./swap-file に 124996k スワップを追加。優先度:0 範囲:17179494468k ====================================== ========================== バグ
    KASANinstrument_atomic_read_write out/common/include/linux/instrumented.h:101 での null-ptr-deref バグ KASANatomic_try_cmpxchg_acquire での null-ptr-deref out/common/include/asm-generic/atomic-instrumented で。 h:705 [インライン] バグ KASANqueued_write_lock out/common/include/asm-generic/qrwlock.h:92 [インライン] バグ KASAN__raw_write_lock out/common/ の null-ptr-deref include/linux/rwlock_api_smp.h:211 [インライン] バグ KASANnull-ptr-deref in
    _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295 タスク syz-executor154/3327 による addr 000000000000030 におけるサイズ 4 の書き込み PID: 3327 Comm: syz-executor154 汚染: GO 5.10.185 #1 ハードウェア名エミュレーション qemu-x86/qemu-x86、BIOS 2023.01-21885-gb3cc1cd24d 01/01/2023 Call Trace
    __dump_stack out/common/lib/dump_stack.c:77 [inline] dump_stack_lvl+0x17e/0x1c4 out/common/lib/dump_stack.c:118 __kasan_report+0x16c/0x260 out/common/mm/kasan/report.c:415 kasan_report +0x51/0x70 out/common/mm/kasan/report.c:428 kasan_check_range+0x2f3/0x340 out/common/mm/kasan/generic.c:186 __kasan_check_write+0x14/0x20 out/common/mm/kasan/shadow。 c:37instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline] atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline] queued_write_lock out/common/include/asm- generic/qrwlock.h:92 [インライン] __raw_write_lock out/common/include/linux/rwlock_api_smp.h:211 [インライン] _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295 __drop_extent_tree+0xdf/0x2f0 out/common/fs/f2fs/extent_cache.c:1155 f2fs_drop_extent_tree+0x17/0x30 out/common/fs/f2fs/extent_cache.c:1172 f2fs_insert_range out/common/fs/f2fs/file.c:1600 [inline] f2fs_fallocate+ 0x19fd/0x1f40 out/common/fs/f2fs/file.c:1764 vf s_fallocate+0x514/0x9b0 out/common/fs/open.c:310 ksys_fallocate out/common/fs/open.c:333 [inline] __do_sys_fallocate out/common/fs/open.c:341 [inline] __se_sys_fallocate out/common /fs/open.c:339 [inline]
    __x64_sys_fallocate+0xb8/0x100 out/common/fs/open.c:339 do_syscall_64+0x35/0x50 out/common/arch/x86/entry/common.c:46CVE-2023-52770

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - f2fs: split initial and dynamic conditions for extent_cache Let's allocate the extent_cache tree without     dynamic conditions to avoid a missing condition causing a panic as below. # create a file w/ a compressed     flag # disable the compression # panic while updating extent_cache F2FS-fs (dm-64): Swapfile: last extent     is not aligned to section F2FS-fs (dm-64): Swapfile (3) is not align to section: 1) creat(), 2)     ioctl(F2FS_IOC_SET_PIN_FILE), 3) fallocate(2097152 * N) Adding 124996k swap on ./swap-file. Priority:0     extents:2 across:17179494468k ================================================================== BUG:
    KASAN: null-ptr-deref in instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline]     BUG: KASAN: null-ptr-deref in atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-     instrumented.h:705 [inline] BUG: KASAN: null-ptr-deref in queued_write_lock out/common/include/asm-     generic/qrwlock.h:92 [inline] BUG: KASAN: null-ptr-deref in __raw_write_lock     out/common/include/linux/rwlock_api_smp.h:211 [inline] BUG: KASAN: null-ptr-deref in
    _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295 Write of size 4 at addr     0000000000000030 by task syz-executor154/3327 CPU: 0 PID: 3327 Comm: syz-executor154 Tainted: G O 5.10.185     #1 Hardware name: emulation qemu-x86/qemu-x86, BIOS 2023.01-21885-gb3cc1cd24d 01/01/2023 Call Trace:
    __dump_stack out/common/lib/dump_stack.c:77 [inline] dump_stack_lvl+0x17e/0x1c4     out/common/lib/dump_stack.c:118 __kasan_report+0x16c/0x260 out/common/mm/kasan/report.c:415     kasan_report+0x51/0x70 out/common/mm/kasan/report.c:428 kasan_check_range+0x2f3/0x340     out/common/mm/kasan/generic.c:186 __kasan_check_write+0x14/0x20 out/common/mm/kasan/shadow.c:37     instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline]     atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline]     queued_write_lock out/common/include/asm-generic/qrwlock.h:92 [inline] __raw_write_lock     out/common/include/linux/rwlock_api_smp.h:211 [inline] _raw_write_lock+0x5a/0x110     out/common/kernel/locking/spinlock.c:295 __drop_extent_tree+0xdf/0x2f0     out/common/fs/f2fs/extent_cache.c:1155 f2fs_drop_extent_tree+0x17/0x30     out/common/fs/f2fs/extent_cache.c:1172 f2fs_insert_range out/common/fs/f2fs/file.c:1600 [inline]     f2fs_fallocate+0x19fd/0x1f40 out/common/fs/f2fs/file.c:1764 vfs_fallocate+0x514/0x9b0     out/common/fs/open.c:310 ksys_fallocate out/common/fs/open.c:333 [inline] __do_sys_fallocate     out/common/fs/open.c:341 [inline] __se_sys_fallocate out/common/fs/open.c:339 [inline]
    __x64_sys_fallocate+0xb8/0x100 out/common/fs/open.c:339 do_syscall_64+0x35/0x50     out/common/arch/x86/entry/common.c:46 (CVE-2023-52770)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
464642	Echo: linux: security update to 6.5.13-1	Tenable Self-Hosted Container Security	Echo Local Security Checks	10/2/2026	10/2/2026	medium
464642	Echo: linux: security update to 6.5.13-1	Tenable Cloud Security	Echo Local Security Checks	10/2/2026	10/2/2026	medium
227361	Linux Distros 未修補的弱點：CVE-2023-52770	Nessus	Misc.	3/5/2025	7/17/2026	medium
227361	Linux Distros 未修补的漏洞：CVE-2023-52770	Nessus	Misc.	3/5/2025	7/17/2026	medium
227361	Linux Distros のパッチ未適用の脆弱性: CVE-2023-52770	Nessus	Misc.	3/5/2025	7/17/2026	medium
227361	Linux Distros Unpatched Vulnerability : CVE-2023-52770	Nessus	Misc.	3/5/2025	7/17/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium