{"id":182837,"date":"2026-08-11T04:54:59","date_gmt":"2026-08-11T02:54:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera"},"modified":"2026-08-11T04:54:59","modified_gmt":"2026-08-11T02:54:59","slug":"sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","title":{"rendered":"SCTPhantom \u2014 zranitelnost v j\u00e1dru Linux, poskytuj\u00edc\u00ed root p\u0159\u00edstup a \u00fanik z kontejneru","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V implementaci protokolu SCTP, nab\u00edzen\u00e9ho v j\u00e1d\u0159e Linux, byla objevena zranitelnost (CVE-2026-64564), kter\u00e1 umo\u017e\u0148uje m\u00edstn\u00edmu u\u017eivateli z\u00edskat nad syst\u00e9my root opr\u00e1vn\u011bn\u00ed. Mimo jin\u00e9 tato zranitelnost umo\u017e\u0148uje z\u00edskat root p\u0159\u00edstup do hlavn\u00edho syst\u00e9mu p\u0159i spu\u0161t\u011bn\u00ed exploit v izolovan\u00e9m kontejneru. Byl p\u0159ipraven prototyp exploitu, jeho\u017e fungov\u00e1n\u00ed bylo demonstrov\u00e1no v distribuc\u00edch Debian 13, Rocky Linux 9, RHEL 9 a Ubuntu 24.04 s j\u00e1dry 5.14, 6.6, 6.8 a 6.12. <\/p>\n

Zranitelnost je zp\u016fsobena p\u0159\u00edstupem k ji\u017e uvoln\u011bn\u00e9 pam\u011bti v k\u00f3du dynamick\u00e9 rekonfigurace adres\u016f SCTP (ASCONF). J\u00e1dro uchov\u00e1v\u00e1 ukazatel na transport (asconf->transport) uveden\u00fd v paketu, ale p\u0159idru\u017een\u00e1 pam\u011b\u0165 m\u016f\u017ee b\u00fdt uvoln\u011bna, p\u0159i\u010dem\u017e samotn\u00fd ukazatel na ji\u017e uvoln\u011bnou pam\u011b\u0165 bude nad\u00e1le pou\u017e\u00edv\u00e1n p\u0159i zpracov\u00e1n\u00ed dal\u0161\u00edch p\u0159\u00edkaz\u016f. \u00datok prob\u00edh\u00e1 zasl\u00e1n\u00edm na lok\u00e1ln\u00ed soket ur\u010dit\u00e9 sekvence ASCONF p\u0159\u00edkaz\u016f na rekonfiguraci adresy: nejprve je zasl\u00e1n paket DEL-IP pro odstran\u011bn\u00ed transportu pro konkr\u00e9tn\u00ed IP, n\u00e1sledovan\u00fd paketem DEL-IP s maskou 0.0.0.0, jeho\u017e zpracov\u00e1n\u00ed povede k op\u011btovn\u00e9mu pou\u017eit\u00ed zb\u00fdvaj\u00edc\u00ed vis\u00edc\u00edho ukazatele. <\/p>\n

Zranitelnost je zp\u016fsobena chybou, kter\u00e1 byla ud\u011bl\u00e1na p\u0159ed 18 lety v j\u00e1d\u0159e 2.6.25 (rok 2008) a opravena ve verz\u00edch 6.6.148, 6.12.101, 6.18.42, 7.1.6 a 7.2-rc5. Stav odstran\u011bn\u00ed zranitelnost\u00ed v distribuc\u00edch lze hodnotit na t\u011bchto str\u00e1nk\u00e1ch: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Gentoo, Arch, Fedora.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SCTP, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-64564), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u0440\u0430\u0431\u043e\u0442\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Debian 13, Rocky Linux 9, RHEL 9 \u0438 Ubuntu 24.04 \u0441 \u044f\u0434\u0440\u0430\u043c\u0438 5.14, 6.6, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182837","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SCTPhantom \u2014 zranitelnost v j\u00e1d\u0159e Linux, kter\u00e1 poskytuje root p\u0159\u00edstup a \u00fanik z kontejneru | ProHoster","description":"V implementaci protokolu SCTP, nab\u00edzen\u00e9ho v j\u00e1d\u0159e Linux, byla objevena zranitelnost (CVE-2026-64564), kter\u00e1 umo\u017e\u0148uje m\u00edstn\u00edmu u\u017eivateli z\u00edskat root opr\u00e1vn\u011bn\u00ed v syst\u00e9mu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SCTPhantom \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 | ProHoster","og:description":"\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SCTP, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-64564), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T02:54:59+00:00","article:modified_time":"2026-08-11T02:54:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182837","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-11 06:43:47","updated":"2026-08-11 06:43:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/182837","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=182837"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/182837\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=182837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=182837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=182837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}