{"id":125569,"date":"2025-05-25T15:05:07","date_gmt":"2025-05-25T13:05:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai"},"modified":"2025-05-25T15:05:07","modified_gmt":"2025-05-25T13:05:07","slug":"udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","title":{"rendered":"Fjernelse af s\u00e5rbarhed i ksmbd-modulet i Linux-kernen, identificeret ved hj\u00e6lp af AI","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I ksmbd-modulet, der tilbyder en indbygget filserver-implementering baseret p\u00e5 SMB-protokollen i Linux-kernen, er der opdaget en s\u00e5rbarhed (CVE-2025-37899), som potentielt muligg\u00f8r udf\u00f8relse af egen kode p\u00e5 kern niveau gennem sending af specielt formaterede pakker. Det er bem\u00e6rkelsesv\u00e6rdigt, at problemet blev identificeret under kodeanalyse af AI-modellen OpenAI o3. Da den samlede kode til ksmbd-modulet overstiger den tilladte kontekstst\u00f8rrelse for modellen, blev kontrol udf\u00f8rt trin for trin for koden med implementering af individuelle SMB-kommandoer ved hj\u00e6lp af typiske foresp\u00f8rgsler. <\/p>\n

S\u00e5rbarheden skyldes adgang til allerede frigivet hukommelse (use-after-free) i koden til behandling af SMB-kommandoen «logoff»: strukturen sess->user blev brugt i en anden tr\u00e5d, hvis der kom en anmodning om oprettelse af en session fra et andet forbindelse, der blev knyttet til den frigivne session. Ved behandling af s\u00e5danne anmodninger blev funktionen smb2_sess_setup kaldt, som tilgik den allerede frigivne struktur sess->user. <\/p>\n

S\u00e5rbarheden er blevet rettet i opdateringerne 6.15-rc5, 6.14.6, 6.12.28, 6.6.90, 6.1.138. I 5.15-grenen, som indeholder ksmbd-modulet, opst\u00e5r problemet ikke. Overv\u00e5gningen af s\u00e5rbarhedens l\u00f8sning i distributioner kan findes p\u00e5 f\u00f8lgende sider: Debian, Ubuntu, Fedora, SUSE\/openSUSE, RHEL, Arch. <\/p>\n

Problemet blev identificeret af Sean Heelan, skaberen af koden profilering platformen Prodfiler, som specialiserer sig i optimering og udf\u00f8relse af sikkerhedsrevisioner af kode. Sean besluttede at vurdere, hvor parate moderne AI-modeller er til at udf\u00f8re sikkerhedsrevisioner, og konkluderede, at modellen o3 har gjort betydelige fremskridt inden for analyse og forst\u00e5else af struktur, logik og funktionalitet af kode. Det bem\u00e6rkes, at modellen for at identificere s\u00e5rbarheden kunne konstruere en r\u00e6kkef\u00f8lge af r\u00e6sonnering, der tog hensyn til muligheden for parallelle tilslutninger til server<\/a> og brugen af datakonstruktioner i forskellige situationer. <\/p>\n

Som et resultat identificerede modellen problemomr\u00e5det i koden, hvor det frigivne objekt forblev tilg\u00e6ngeligt i en anden tr\u00e5d. Modellen fandt problemet ud fra en generel foresp\u00f8rgsel, der bad om at unders\u00f8ge muligheden for s\u00e5rbarheder i koden, med fokus p\u00e5 at kontrollere h\u00e6ngende pegepinde og adgang til hukommelse efter frigivelse, samtidig med at falske positiver og hypotetiske problemer blev udelukket. <\/p>\n

F\u00f8r han s\u00f8gte efter nye s\u00e5rbarheder, testede Sean forskellige modeller for at identificere CVE-2025-37778-s\u00e5rbarheden i ksmbd, som han tidligere havde opdaget under en manuel audit og blevet l\u00f8st i opdateringen af kerneversionen 6.15-rc3. Modellen o3 klarede opgaven succesfuldt og viste det resultat, der var t\u00e6ttest p\u00e5 den manuelle audit, hvorefter Sean gik videre til eksperimenter med at finde tidligere ukendte s\u00e5rbarheder.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-37899), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0434\u0430 AI-\u043c\u043e\u0434\u0435\u043b\u044c\u044e OpenAI o3. \u0422\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0434\u0443\u043b\u044f ksmbd \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0439 \u0434\u043b\u044f \u043c\u043e\u0434\u0435\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-125569","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fjern-s\u00e5rbarhed i ksmbd-modulet af Linux-kernen, opdaget ved hj\u00e6lp af AI | ProHoster","description":"I ksmbd-modulet, som tilbyder en indbygget Linux-kerneimplementering af en filserver baseret p\u00e5 SMB-protokollen, er der blevet opdaget en s\u00e5rbarhed (CVE-2025-37899), som potentielt kan tillade udf\u00f8relse af brugerens kode p\u00e5 kernens niveau.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI | ProHoster","og:description":"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-37899), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-25T13:05:07+00:00","article:modified_time":"2025-05-25T13:05:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"125569","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:10:05","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:00:19","updated":"2026-02-09 22:10:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/125569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=125569"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/125569\/revisions"}],"predecessor-version":[{"id":160231,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/125569\/revisions\/160231"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=125569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=125569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=125569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}