{"id":182837,"date":"2026-08-11T04:54:59","date_gmt":"2026-08-11T02:54:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera"},"modified":"2026-08-11T04:54:59","modified_gmt":"2026-08-11T02:54:59","slug":"sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","title":{"rendered":"SCTPhantom \u2014 Linux n\u00fcv\u0259sind\u0259 k\u00f6k giri\u015fini v\u0259 konteynerd\u0259n \u00e7\u0131x\u0131\u015f\u0131 t\u0259min ed\u0259n z\u0259iflik.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Linux n\u00fcv\u0259sind\u0259 t\u0259klif olunan SCTP protokolunun h\u0259yata ke\u00e7irilm\u0259sind\u0259 bir z\u0259iflik a\u015fkar edildi (CVE-2026-64564), bu da yerli istifad\u0259\u00e7iy\u0259 sistemd\u0259 root h\u00fcquqlar\u0131 \u0259ld\u0259 etm\u0259y\u0259 imkan verir. Z\u0259iflik, izolyasiya edilmi\u015f konteynerd\u0259 exploit-i i\u015f\u0259 salmaqla, \u0259sas sistemd\u0259 root giri\u015f \u0259ld\u0259 etm\u0259y\u0259 d\u0259 imkan tan\u0131y\u0131r. Debian 13, Rocky Linux 9, RHEL 9 v\u0259 Ubuntu 24.04-d\u0259 5.14, 6.6, 6.8 v\u0259 6.12 noybur\u0131nda i\u015fini n\u00fcmayi\u015f etdir\u0259n exploit-in prototipi haz\u0131rlanm\u0131\u015fd\u0131r. <\/p>\n

Z\u0259iflik, SCTP (ASCONF) \u00fcnvan dinamik konfiqurasiyas\u0131 kodunda art\u0131q azad edilmi\u015f yadda\u015fa m\u00fcraci\u0259t edilm\u0259si n\u0259tic\u0259sind\u0259 yaran\u0131r. N\u00fcv\u0259, paketin i\u00e7ind\u0259 g\u00f6st\u0259ril\u0259n transportun g\u00f6st\u0259ricisini (asconf->transport) \u00f6nc\u0259 cache edir, lakin bu g\u00f6st\u0259riciy\u0259 ba\u011fl\u0131 yadda\u015f t\u0259mizl\u0259n\u0259 bil\u0259r, eyni zamanda art\u0131q azad edilmi\u015f yadda\u015fa aid olan g\u00f6st\u0259rici dig\u0259r komandalar\u0131n i\u015fl\u0259nm\u0259si zaman\u0131 istifad\u0259 edilm\u0259y\u0259 davam ed\u0259c\u0259k. H\u00fccum, m\u00fc\u0259yy\u0259n bir ASCONF konfiqurasiya s\u0131ra komandas\u0131 m\u00fcdd\u0259ti il\u0259 yerli soket\u0259 g\u00f6nd\u0259rm\u0259kl\u0259 h\u0259yata ke\u00e7irilir: \u0259vv\u0259lc\u0259 m\u00fc\u0259yy\u0259n bir IP \u00fc\u00e7\u00fcn transportu silm\u0259k m\u0259qs\u0259dil\u0259 DEL-IP paketi g\u00f6nd\u0259rilir, ard\u0131ndan is\u0259 0.0.0.0 maskas\u0131 il\u0259 DEL-IP paketi g\u00f6nd\u0259rilir ki, bunun i\u015fl\u0259nm\u0259si qalan as\u0131lm\u0131\u015f g\u00f6st\u0259ricinin yenid\u0259n istifad\u0259 olunmas\u0131na s\u0259b\u0259b olacaq. <\/p>\n

Z\u0259iflik, 18 il \u0259vv\u0259l 2.6.25 n\u00fcv\u0259sind\u0259 (2008-ci il) edil\u0259n bir s\u0259hv\u0259 g\u00f6r\u0259dir v\u0259 6.6.148, 6.12.101, 6.18.42, 7.1.6 v\u0259 7.2-rc5 burax\u0131l\u0131\u015flar\u0131nda d\u00fcz\u0259ldilmi\u015fdir. Z\u0259iflikl\u0259rin aradan qald\u0131r\u0131lmas\u0131 statusunu distroslarda a\u015fa\u011f\u0131dak\u0131 s\u0259hif\u0259l\u0259rd\u0259n qiym\u0259tl\u0259ndir\u0259 bil\u0259rsiniz: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Gentoo, Arch, Fedora.
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SCTP, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-64564), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u0440\u0430\u0431\u043e\u0442\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Debian 13, Rocky Linux 9, RHEL 9 \u0438 Ubuntu 24.04 \u0441 \u044f\u0434\u0440\u0430\u043c\u0438 5.14, 6.6, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182837","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SCTPhantom \u2014 Linux n\u00fcv\u0259sind\u0259 root giri\u015f imkan\u0131 v\u0259 konteynerd\u0259n \u00e7\u0131x\u0131\u015f t\u0259qdim ed\u0259n z\u0259iflik | ProHoster","description":"Linux n\u00fcv\u0259sind\u0259 t\u0259klif olunan SCTP protokolunun h\u0259yata ke\u00e7irilm\u0259sind\u0259 bir z\u0259iflik a\u015fkar edildi (CVE-2026-64564), bu da yerli istifad\u0259\u00e7iy\u0259 sistemd\u0259 root h\u00fcquqlar\u0131 \u0259ld\u0259 etm\u0259y\u0259 imkan verir.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SCTPhantom \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 | ProHoster","og:description":"\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SCTP, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-64564), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T02:54:59+00:00","article:modified_time":"2026-08-11T02:54:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182837","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-11 06:43:47","updated":"2026-08-11 06:43:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/182837","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=182837"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/182837\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=182837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=182837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=182837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}