{"id":170538,"date":"2026-05-09T00:24:31","date_gmt":"2026-05-08T22:24:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux"},"modified":"2026-05-09T00:24:31","modified_gmt":"2026-05-08T22:24:31","slug":"predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","title":{"rendered":"Se ha propuesto un killswitch para desactivar de emergencia funcionalidades vulnerables en el n\u00facleo de Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sasha Levin de NVIDIA, que se ocupa del mantenimiento de las ramas LTS del n\u00facleo de Linux y forma parte del consejo consultivo de la Linux Foundation, ha preparado un conjunto de parches que implementan un mecanismo de killswitch para el n\u00facleo de Linux. La funcionalidad propuesta permite desconectar instant\u00e1neamente el acceso a ciertas funcionalidades del n\u00facleo en funcionamiento. Se espera que el killswitch sea \u00fatil para bloquear temporalmente vulnerabilidades hasta que se instale una actualizaci\u00f3n del n\u00facleo con una soluci\u00f3n. <\/p>\n

La gesti\u00f3n del killswitch se realiza a trav\u00e9s del archivo \"\\\/sys\\\/kernel\\\/security\\\/killswitch\\\/control\", que permite configurar la interceptaci\u00f3n de las llamadas a funciones del n\u00facleo por sus nombres. Por ejemplo, para bloquear la vulnerabilidad Copy Fail, basta con escribir en el archivo de control el comando \"engage af_alg_sendmsg -1\" para activar la interceptaci\u00f3n de la llamada a la funci\u00f3n af_alg_sendmsg y, en lugar de ejecutar esta, retornar el c\u00f3digo de error \"-1\". <\/p>\n

Se pueden usar cualquier s\u00edmbolo en los nombres que sean compatibles con el subsistema kprobes. Muchas de las vulnerabilidades serias recientemente encontradas en el n\u00facleo est\u00e1n presentes en subsistemas utilizados por un n\u00famero relativamente peque\u00f1o de usuarios (por ejemplo, AF_ALG, ksmbd, nf_tables, vsock, ax25). Para la mayor\u00eda de los usuarios, el inconveniente de la interrupci\u00f3n de ciertas funciones no se compara con el riesgo de operar un n\u00facleo con una vulnerabilidad conocida y no corregida hasta que se instale una soluci\u00f3n. El mecanismo de killswitch es especialmente relevante en el contexto de la actual vulnerabilidad Dirty Frag, para la cual se public\u00f3 un exploit antes de que el problema fuera solucionado en el n\u00facleo.
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0430\u0448\u0430 \u041b\u0435\u0432\u0438\u043d (Sasha Levin) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NVIDIA, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c LTS-\u0432\u0435\u0442\u043e\u043a \u044f\u0434\u0440\u0430 Linux \u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u043e\u0432\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 killswitch \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u044f\u0434\u0440\u0430. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e killswitch \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u0435\u043d \u0434\u043b\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u044f \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170538","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Se propone un killswitch para desactivar de forma urgente funcionalidades vulnerables en el n\u00facleo de Linux | ProHoster","description":"Sasha Levin de NVIDIA, que se ocupa del mantenimiento de las ramas LTS del n\u00facleo de Linux y forma parte del consejo consultivo de la Linux Foundation, ha preparado un conjunto de parches que implementan el mecanismo.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d killswitch \u0434\u043b\u044f \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u0421\u0430\u0448\u0430 \u041b\u0435\u0432\u0438\u043d (Sasha Levin) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NVIDIA, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c LTS-\u0432\u0435\u0442\u043e\u043a \u044f\u0434\u0440\u0430 Linux \u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u043e\u0432\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-08T22:24:31+00:00","article:modified_time":"2026-05-08T22:24:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/170538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=170538"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/170538\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=170538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=170538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=170538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}