{"id":125748,"date":"2025-06-01T15:05:12","date_gmt":"2025-06-01T13:05:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka"},"modified":"2025-06-01T15:05:12","modified_gmt":"2025-06-01T13:05:12","slug":"inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka","title":{"rendered":"Incident se z\u00e1m\u011bnou commit\u016f ve v\u011btvi j\u00e1dra Linux od Kesa Cooka","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Linus Torvalds po\u017e\u00e1dal spr\u00e1vce kernel.org, aby okam\u017eit\u011b zablokoval \u00fa\u010det Kesa Kuka, b\u00fdval\u00e9ho hlavn\u00edho administr\u00e1tora kernel.org a vedouc\u00edho Ubuntu Security Team, kter\u00fd spravoval 14 podsystem\u016f t\u00fdkaj\u00edc\u00edch se zabezpe\u010den\u00ed v j\u00e1d\u0159e. Konstantin Rjabtsev, zodpov\u011bdn\u00fd za provoz infrastruktury kernel.org, provedl blokaci. D\u016fvodem pro blokaci byl pull request na za\u0159azen\u00ed zm\u011bn do v\u011btve j\u00e1dra 6.16, kter\u00fd odkazoval na git repository, v n\u011bm\u017e byla zm\u011bn\u011bna informace o autorstv\u00ed n\u011bkter\u00fdch commit\u016f. <\/p>\n

Ve podporovan\u00e9m git repozit\u00e1\u0159i Kesa se objevily fale\u0161n\u00e9 zm\u011bny, v poli autora a kommitera, kde byl uveden \u201eLinus Torvalds\u201c, ale Linus je nep\u0159idal. Nap\u0159\u00edklad pod jm\u00e9nem Linuse ve v\u011btvi Kesa byl commit, kter\u00fd opakoval jin\u00fd commit ve v\u011btvi Linuse, ale s jin\u00fdm hash SHA1. Oba commity vypadaj\u00ed stejn\u011b, s v\u00fdjimkou informac\u00ed o podpisu. <\/p>\n

Zm\u011bny nevypadaly jako n\u00e1hodn\u00e1 chyba p\u0159i prov\u00e1d\u011bn\u00ed operace \u201egit rebase\u201c, proto\u017ee obsahovaly nespr\u00e1vn\u00e9 informace o autorovi commitu. Linus Torvalds to pova\u017eoval za stopy potenci\u00e1ln\u011b \u0161kodliv\u00e9 \u010dinnosti a zah\u00e1jil blokaci p\u0159\u00edjmu jak\u00fdchkoli zm\u011bn od Kesa, dokud nebudou objasn\u011bny p\u0159\u00ed\u010diny t\u011bchto manipulac\u00ed a potvrzeno, \u017ee syst\u00e9m Kesa nebyl kompromitov\u00e1n. <\/p>\n

Kes odpov\u011bd\u011bl, \u017ee nech\u00e1pe, jak se to mohlo st\u00e1t. P\u0159edt\u00edm m\u011bl probl\u00e9my p\u0159i pokusu slou\u010dit n\u011bkolik sv\u00fdch git v\u011btv\u00ed, po \u010dem\u017e se pokusil je vy\u0159e\u0161it operac\u00ed \u201egit rebase\u201c, ale zd\u00e1 se, \u017ee to nepomohlo. To v\u0161e se odehr\u00e1valo na pozad\u00ed selh\u00e1n\u00ed SSD disku, kter\u00fd vykazoval chyby b\u011bhem kop\u00edrov\u00e1n\u00ed. Kes m\u011bl za to, \u017ee po selh\u00e1n\u00ed se mu poda\u0159ilo obnovit stav sv\u00fdch repozit\u00e1\u0159\u016f, ale jak se zd\u00e1, nebylo tomu tak. Pro obnoven\u00ed integrity se Kes chyst\u00e1 znovu vytvo\u0159it sv\u00e9 v\u011btve z jednotliv\u00fdch patch\u016f. Nejpravd\u011bpodobn\u011bj\u0161\u00ed p\u0159\u00ed\u010dinou vzniku zm\u011bny autora pova\u017euje ne\u00fasp\u011b\u0161n\u00fd pokus o obnovu repozit\u00e1\u0159e po jeho po\u0161kozen\u00ed. <\/p>\n

Linus nebyl s t\u00edmto vysv\u011btlen\u00edm spokojen, nebo\u0165 podle jeho n\u00e1zoru zm\u011bny historie commit\u016f v repozit\u00e1\u0159i Kesa velmi p\u0159ipom\u00ednaj\u00ed z\u00e1m\u011brn\u00e9 jedn\u00e1n\u00ed, nikoli n\u00e1hodnou chybu. P\u0159esun historie zm\u011bn pomoc\u00ed operace \u201egit rebase\u201c by mohl vysv\u011btlit p\u0159eps\u00e1n\u00ed kommitera, ale Linus nem\u016f\u017ee pochopit, jak takov\u00e1 operace \u201egit rebase\u201c mohla b\u00fdt provedena omylem. <\/p>\n

P\u0159eps\u00e1n\u00ed jednoho nebo dvou commit\u016f by se je\u0161t\u011b dalo pova\u017eovat za chybu, ale v Kessov\u011b repozit\u00e1\u0159i bylo p\u0159eps\u00e1no v\u00edce ne\u017e \u0161est tis\u00edc merge commit\u016f, z nich\u017e v 330 byl autorem Linus, p\u0159i\u010dem\u017e tyto commity nebyly z\u00edsk\u00e1ny z git stromu Linuse. Proveden\u00e9 zm\u011bny v\u00edce p\u0159ipom\u00ednaj\u00ed pr\u00e1ci skriptu ne\u017e v\u00fdsledek po\u0161kozen\u00ed informac\u00ed na disku, nebo\u0165 vy\u017eaduj\u00ed samostatn\u00e9 obnoven\u00ed ka\u017ed\u00e9ho commitu. <\/p>\n

Kes ujistil Linuse, \u017ee to neud\u011blal schv\u00e1ln\u011b a \u017ee by takov\u00e9 experimenty nem\u011bl prov\u00e1d\u011bt bez varov\u00e1n\u00ed (nap\u0159\u00edklad p\u0159edchoz\u00ed experiment s vyvol\u00e1n\u00edm koliz\u00ed commit\u016f byl dohodnut s Linusem). Tento t\u00fdden prov\u00e1d\u011bl n\u011bkolik ru\u010dn\u00edch operac\u00ed s repozit\u00e1\u0159em a nyn\u00ed se pokus\u00ed zjistit, co se pokazilo, a reprodukovat probl\u00e9m. Nap\u0159\u00edklad Kes provedl operaci rebase pro git- v\u011btve for-next\/hardening a for-linus\/hardening, p\u0159i\u010dem\u017e na rozd\u00edl od p\u0159edchoz\u00edch podobn\u00fdch transformac\u00ed pou\u017eil v\u011btev \u201emaster\u201c m\u00edsto rc2. B\u011bhem t\u00e9to operace provedl zm\u011bny ve skriptech pro kontrolu push-\u017e\u00e1dost\u00ed. <\/p>\n

Dopln\u011bn\u00ed: Kes Cook zve\u0159ejnil dal\u0161\u00ed zpr\u00e1vu, ve kter\u00e9 uvedl, \u017ee probl\u00e9m pravd\u011bpodobn\u011b vznikl z pou\u017eit\u00ed utilitky \u201egit-filter-repo\u201c, kter\u00e1 prov\u00e1d\u00ed p\u0159epis historie commit\u016f v repozit\u00e1\u0159i, ve spojen\u00ed s p\u0159\u00edkazem \u201eb4 trailers\u201c, kter\u00fd slou\u017e\u00ed k z\u00edsk\u00e1n\u00ed a aplikaci trailer\u016f k commit\u016fm (nap\u0159\u00edklad \u201eSigned-off-by:\u201c).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 kernel.org \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u041a\u0435\u0441\u0430 \u041a\u0443\u043a\u0430, \u0431\u044b\u0432\u0448\u0435\u0433\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0433\u043e \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u0430 kernel.org \u0438 \u043b\u0438\u0434\u0435\u0440\u0430 Ubuntu Security Team, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u0432 \u044f\u0434\u0440\u0435 14 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e. \u041a\u043e\u043d\u0441\u0442\u0430\u043d\u0442\u0438\u043d \u0420\u044f\u0431\u0446\u0435\u0432, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b kernel.org, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443. \u041f\u043e\u0432\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b pull-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0442\u043a\u0443 \u044f\u0434\u0440\u0430 6.16 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0441\u0441\u044b\u043b\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u043d\u0430 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-125748","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Incident s podvodem commit\u016f ve v\u011btvi j\u00e1dra Linuxu od Kessa Cooka | ProHoster","description":"Linus Torvalds po\u017eadoval od spr\u00e1vce kernel.org, aby okam\u017eit\u011b zablokoval \u00fa\u010det Kessa Cooka, b\u00fdval\u00e9ho hlavn\u00edho syst\u00e9mov\u00e9ho administr\u00e1tora kernel.org a vedouc\u00edho t\u00fdmu bezpe\u010dnosti Ubuntu, kter\u00fd zaji\u0161\u0165uje 14 subsyst\u00e9m\u016f v j\u00e1d\u0159e.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0432 \u0432\u0435\u0442\u043a\u0435 \u044f\u0434\u0440\u0430 Linux \u043e\u0442 \u041a\u0435\u0441\u0430 \u041a\u0443\u043a\u0430 | ProHoster","og:description":"\u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 kernel.org \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u041a\u0435\u0441\u0430 \u041a\u0443\u043a\u0430, \u0431\u044b\u0432\u0448\u0435\u0433\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0433\u043e \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u0430 kernel.org \u0438 \u043b\u0438\u0434\u0435\u0440\u0430 Ubuntu Security Team, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u0432 \u044f\u0434\u0440\u0435 14 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-06-01T13:05:12+00:00","article:modified_time":"2025-06-01T13:05:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"125748","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 13:07:05","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:07:05","updated":"2026-01-23 13:07:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/125748","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=125748"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/125748\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=125748"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=125748"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=125748"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}