{"id":182435,"date":"2026-07-02T10:53:32","date_gmt":"2026-07-02T08:53:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka"},"modified":"2026-07-02T10:53:32","modified_gmt":"2026-07-02T08:53:32","slug":"v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka","title":{"rendered":"In Fedora 45 soll ein Schutz basierend auf einem Shadow-Stack integriert werden","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In der Fedora Linux Version 45, die f\u00fcr den Herbst 2026 geplant ist, soll auf x86_64-Systemen standardm\u00e4\u00dfig die Verwendung eines shadow stacks aktiviert werden, um Exploits zu blockieren, die die R\u00fcckgabewerte von Funktionen bei einem Buffer Overflow im Stack \u00fcberschreiben. Der Schutz soll f\u00fcr alle Anwendungen und Bibliotheken aktiviert werden, die mit den Compilern gcc (C, C++), clang (C, C++) und rustc (Rust) erstellt wurden. Der Plan ist noch nicht vom FESCo (Fedora Engineering Steering Committee) genehmigt worden, der f\u00fcr den technischen Teil der Entwicklung von Fedora Linux verantwortlich ist. Initiator der Einf\u00fchrung des shadow stacks in Fedora ist Arjun Shankar von Red Hat, der die Pakete mit glibc in Fedora und RHEL betreut.<\/p>\n

Der Schutz erfolgt mithilfe der Hardwarefunktionen der Prozessoren und besteht darin, dass nach der \u00dcbergabe der Kontrolle die R\u00fcckgabadressen vom Prozessor nicht nur im normalen Stack, sondern auch in einem separaten \u201eShadow\u201c-Stack gespeichert werden, der nicht direkt ver\u00e4ndert werden kann. Vor dem Verlassen der Funktion wird die R\u00fcckgabadresse aus dem Shadow-Stack extrahiert und mit der R\u00fcckgabadresse aus dem Haupt-Stack verglichen. Eine Nicht\u00fcbereinstimmung der Adressen f\u00fchrt zur Ausl\u00f6sung einer Ausnahme, die Situationen blockiert, in denen es einem Exploit gelungen ist, die Adresse im Haupt-Stack zu \u00fcberschreiben. Der Mechanismus des Shadow-Stacks wird seit der 11. Generation der Intel-Prozessoren (\u201eTiger Lake\u201c und \u201eRocket Lake\u201c) und der Zen3-Mikroarchitektur in AMD-Prozessoren unterst\u00fctzt.
\n
Quelle: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Fedora Linux 45, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043e\u0441\u0435\u043d\u044c 2026 \u0433\u043e\u0434\u0430, \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 x86_64 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 (shadow stack) \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0430\u0434\u0440\u0435\u0441 \u0432\u043e\u0437\u0432\u0440\u0430\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435. \u0417\u0430\u0449\u0438\u0442\u0443 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u043e\u0432 gcc (C, C++), clang (C, C++) \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182435","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47In Fedora 45 will man den Schutz auf Grundlage des shadow stacks aktivieren | ProHoster","description":"In der Fedora Linux Version 45, die f\u00fcr den Herbst 2026 geplant ist, soll auf x86_64-Systemen standardm\u00e4\u00dfig die Verwendung eines shadow stacks aktiviert werden, um Exploits zu blockieren, die die R\u00fcckgabewerte von Funktionen \u00fcberschreiben.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora 45 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 | ProHoster","og:description":"\u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Fedora Linux 45, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043e\u0441\u0435\u043d\u044c 2026 \u0433\u043e\u0434\u0430, \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 x86_64 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 (shadow stack) \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0430\u0434\u0440\u0435\u0441.","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-02T08:53:32+00:00","article:modified_time":"2026-07-02T08:53:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182435","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:11","updated":"2026-08-05 12:22:11","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/182435","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=182435"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/182435\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=182435"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=182435"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=182435"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}