{"id":182595,"date":"2026-07-10T22:54:14","date_gmt":"2026-07-10T20:54:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup"},"modified":"2026-07-10T22:54:14","modified_gmt":"2026-07-10T20:54:14","slug":"v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/news\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","title":{"rendered":"Linux-da GhostLock a\u00e7\u0131\u011f\u0131 a\u015fkarland\u0131, root daxil olmas\u0131na imkan verir","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/i><\/a>
1 <\/p>\n

Linux n\u00fcv\u0259sind\u0259 bir z\u0259iflik a\u015fkar edildi CVE-2026-43499<\/a>, qeyri-r\u0259smi ad\u0131 GhostLock olan. Problem rtmutex kodunu v\u0259 prioritet irsi il\u0259 futex mexanizmini \u0259hat\u0259 edir v\u0259 onun istismar\u0131 yerli imtiyazs\u0131z istifad\u0259\u00e7inin h\u00fcquqlar\u0131n\u0131 root s\u0259viyy\u0259sin\u0259 qald\u0131rmas\u0131na imkan ver\u0259 bil\u0259r. M\u0259lumatlara g\u00f6r\u0259 AlmaLinux<\/a>, z\u0259iflik konteynerd\u0259n \u0259sas sistem\u0259 \u00e7\u0131x\u0131\u015f \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259r, \u0259g\u0259r sistem g\u00fcncellenm\u0259mi\u015f n\u00fcv\u0259d\u0259 i\u015fl\u0259yirs\u0259.<\/p>\n

<\/noindex> <\/p>\n

X\u0259tan\u0131n mahiyy\u0259ti kernel\/locking\/rtmutex.c-d\u0259ki remove_waiter() funksiyas\u0131 il\u0259 ba\u011fl\u0131d\u0131r. NVD-d\u0259 veril\u0259n t\u0259svir\u0259 g\u00f6r\u0259<\/a>, proxy-lock-un futex_requeue() ssenarisind\u0259 geri qaytar\u0131lmas\u0131 zaman\u0131 funksiya cari tap\u015f\u0131r\u0131qlarla (current) i\u015fl\u0259yib, halbuki bloklanmas\u0131n\u0131 g\u00f6zl\u0259y\u0259n tap\u015f\u0131r\u0131\u011f\u0131n (waiter::task) v\u0259ziyy\u0259tini t\u0259mizl\u0259m\u0259li idi. N\u0259tic\u0259d\u0259 pi_blocked_on v\u0259ziyy\u0259ti d\u00fczg\u00fcn t\u0259mizl\u0259nm\u0259y\u0259 bil\u0259rdi, bu da as\u0131l\u0131 i\u015far\u0259 burax\u0131lmas\u0131 v\u0259 use-after-free \u00fc\u00e7\u00fcn \u015f\u0259rait yarad\u0131r.<\/p>\n

<\/noindex> <\/p>\n

Nebula Security t\u0259dqiqat\u00e7\u0131lar\u0131 GhostLock-u<\/a> 2011-ci ild\u0259n etibar\u0259n Linux-un \u0259sas distroslar\u0131nda m\u00f6vcud olan bir x\u0259tas\u0131 kimi t\u0259svir edibl\u0259r. Z\u0259ifliyin ictimai m\u00fczakir\u0259si serverl\u0259r v\u0259 konteyner m\u00fchitl\u0259ri \u00fc\u00e7\u00fcn riskl\u0259ri art\u0131rd\u0131: CloudLinux<\/a> ayr\u0131ca CVE-2026-43499 \u00fc\u00e7\u00fcn art\u0131q ictimai proof-of-concept oldu\u011funu x\u0259b\u0259rdar edir, buna g\u00f6r\u0259 administratorlar\u0131n n\u00fcv\u0259ni yenil\u0259m\u0259y\u0259 gecikm\u0259m\u0259si t\u00f6vsiy\u0259 olunur.<\/p>\n

<\/noindex> <\/p>\n

Yenilikl\u0259rin \u0259sas k\u0259siyind\u0259 remove_waiter() b\u00fct\u00fcn \u0259laq\u0259li \u0259m\u0259liyyatlarda waiter::task istifad\u0259 etm\u0259lidir, not current oldu\u011fu bildirilir GitHub Advisory Database<\/a>, x\u0259tan\u0131n n\u0259tic\u0259l\u0259rini qeyd edir: t\u0259l\u0259b olunan bloklama olmadan rbtree-d\u0259n qeyri-d\u00fczg\u00fcn silinm\u0259, pi_blocked_on-un t\u0259mizl\u0259nm\u0259m\u0259si v\u0259 rt_mutex_adjust_prio_chain() il\u0259 d\u00fczg\u00fcn olmayan tap\u015f\u0131r\u0131qla i\u015fl\u0259m\u0259si.<\/p>\n

<\/noindex> <\/p>\n

Linux distros istifad\u0259\u00e7il\u0259rin\u0259 r\u0259smi repozitoriyalardan yeni n\u00fcv\u0259 yenil\u0259m\u0259l\u0259rini qura\u015fd\u0131rma\u011f\u0131 t\u00f6vsiy\u0259 olunur. Z\u0259iflik yerli xarakter da\u015f\u0131y\u0131r, buna g\u00f6r\u0259 d\u0259 uzaqdan giri\u015f imkan\u0131 vermir, lakin \u00e7oxistifad\u0259li serverl\u0259r, CI infrastrukturu, hosting v\u0259 konteyner sisteml\u0259rind\u0259 risk \u0259h\u0259miyy\u0259tli d\u0259r\u0259c\u0259d\u0259 art\u0131r: u\u011furlu istismar art\u0131q \u0259ld\u0259 edilmi\u015f a\u015fa\u011f\u0131 imtiyazl\u0131 giri\u015fin tam sistem \u00fcz\u0259rind\u0259 n\u0259zar\u0259t\u0259 \u00e7evrilm\u0259sin\u0259 s\u0259b\u0259b olur.<\/p>\n

M\u0259nb\u0259: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-43499, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostLock. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 rtmutex \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c futex \u0441 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430, \u0430 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e root. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c AlmaLinux, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u043e\u043c \u044f\u0434\u0440\u0435. \u0421\u0443\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182595","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux-da GhostLock z\u0259ifliyi a\u015fkar edildi, root h\u00fcquqlar\u0131 \u0259ld\u0259 etm\u0259y\u0259 imkan tan\u0131y\u0131r | ProHoster","description":"1 Linux n\u00fcv\u0259sind\u0259 bir z\u0259iflik a\u015fkar edildi","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c GhostLock, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f | ProHoster","og:description":"1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-10T20:54:14+00:00","article:modified_time":"2026-07-10T20:54:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182595","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:05","updated":"2026-08-05 12:22:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/182595","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=182595"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/182595\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=182595"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=182595"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=182595"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}