{"id":110873,"date":"2023-10-16T15:10:24","date_gmt":"2023-10-16T13:10:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux"},"modified":"2023-10-16T15:10:24","modified_gmt":"2023-10-16T13:10:24","slug":"udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux","title":{"rendered":"Eine aus der Ferne ausnutzbare Sicherheitsanf\u00e4lligkeit im NVMe-oF\/TCP-Treiber des Linux-Kernels","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Im Linux-Subsystem nvmet-tcp (NVMe-oF\/TCP), das den Zugriff auf NVMe-Speicher \u00fcber das Netzwerk (NVM Express over Fabrics) unter Verwendung des TCP-Protokolls erm\u00f6glicht, wurde eine Schwachstelle (CVE-2023-5178) entdeckt, die potenziell die Remote-Ausf\u00fchrung von Code im Kernel oder bei lokalem Zugriff die Erh\u00f6hung der Privilegien im System erm\u00f6glicht. Ein Fix ist derzeit in Form eines Patches verf\u00fcgbar. Das Problem tritt bereits in der ersten Version des NVMe-oF\/TCP-Treibers auf (im Schwachstellenbericht wird Kernel Linux 5.15 erw\u00e4hnt, jedoch wurde die Unterst\u00fctzung von NVMe-oF\/TCP bereits im Kernel 5.0 hinzugef\u00fcgt). Verwundbar sind Systeme mit aktiviertem Server<\/a> NVMe-oF\/TCP (NVME_TARGET_TCP), das standardm\u00e4\u00dfig Verbindungen \u00fcber den Netzwerkport 4420 akzeptiert. <\/p>\n

Die Schwachstelle wird durch einen logischen Fehler verursacht, wodurch die Funktion nvmet_tcp_free_crypto zweimal aufgerufen wurde und zweimal einige Zeiger freigab und zudem freigegebene Adressen dereferenzierte. Solches Verhalten f\u00fchrt dazu, dass auf einen bereits freigegebenen Speicherbereich (use-after-free) zugegriffen wird, sowie zu einem doppelten Freigeben von Speicher (double-free) bei der Bearbeitung von speziell formatierten Nachrichten des Clients durch den NVMe-oF\/TCP-Server, der sich sowohl im lokalen als auch im globalen Netzwerk befinden kann.
\n
Quelle: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 Linux-\u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nvmet-tcp (NVMe-oF\/TCP), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043a NVMe-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f\u043c \u043f\u043e \u0441\u0435\u0442\u0438 (NVM Express over Fabrics), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b TCP, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-5178), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0432\u0438\u0434\u0435 \u043f\u0430\u0442\u0447\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0441\u0430\u043c\u043e\u0439 \u043f\u0435\u0440\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 NVMe-oF\/TCP (\u0432 \u043e\u0442\u0447\u0451\u0442\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110873","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Remote ausnutzbare Schwachstelle im NVMe-oF\/TCP-Treiber des Linux-Kernels | ProHoster","description":"Im Linux-Subsystem nvmet-tcp (NVMe-oF\/TCP), das den Zugriff auf NVMe-Speicher \u00fcber das Netzwerk (NVM Express over Fabrics) unter Verwendung des TCP-Protokolls erm\u00f6glicht, wurde eine Schwachstelle (CVE-2023-5178) entdeckt, die potenziell eine Remote-Angriffserlaubnis bietet.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 NVMe-oF\/TCP \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0412 Linux-\u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nvmet-tcp (NVMe-oF\/TCP), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043a NVMe-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f\u043c \u043f\u043e \u0441\u0435\u0442\u0438 (NVM Express over Fabrics), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b TCP, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-5178), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-16T13:10:24+00:00","article:modified_time":"2023-10-16T13:10:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110873","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:46:35","updated":"2026-02-09 21:46:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/110873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=110873"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/110873\/revisions"}],"predecessor-version":[{"id":160277,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/110873\/revisions\/160277"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=110873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=110873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=110873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}