{"id":109268,"date":"2023-07-06T03:10:18","date_gmt":"2023-07-06T01:10:18","guid":{"rendered":"https:\/\/prohoster.info\/?p=109268"},"modified":"2023-07-06T09:41:48","modified_gmt":"2023-07-06T07:41:48","slug":"uyazvimost-stackrot-v-yadre-linux-pozvolyayushhaya-povysit-svoi-privilegii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-stackrot-v-yadre-linux-pozvolyayushhaya-povysit-svoi-privilegii","title":{"rendered":"StackRot haavatavus Linuxi tuumas, mis v\u00f5imaldab privileegide t\u00f5stmist.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Linux 6.1 tuumas toimunud VMA (Virtual Memory Area) andmestruktuuri t\u00f5lked «red-black tree» k\u00fcljest «maple tree» peale on p\u00f5hjustanud haavatavuse (CVE-2023-3269), mis v\u00f5imaldab privileege mitteomaval kasutajal k\u00e4ivitada oma koodi tuuma \u00f5igustes. Haavatavus, mille koodinimi on StackRot, ilmneb alates tuuma versioonist 6.1 ja on k\u00f5rvaldatud versioonides 6.4.1, 6.3.11 ja 6.1.37. <\/p>\n

Struktuur «maple tree» on B-puu variant, mis toetab v\u00e4\u00e4rtuste vahemiku indekseerimist ja on kavandatud t\u00e4nap\u00e4evaste protsessorite vahem\u00e4lu t\u00f5husaks kasutamiseks. Erinevalt «red-black tree» kasutamisest, v\u00f5imaldab «maple tree» suuremat j\u00f5udlust. Haavatavus tuleneb virna laiendamise t\u00f6\u00f6tleja veast \u2014 «maple tree» struktuuris, mida kasutatakse tuumas virtuaalm\u00e4lu piirkondade haldamiseks, v\u00f5is puu s\u00f5lm vahetuda ilma kirjutamisbloki seadmiseta, mis l\u00f5i tingimused m\u00e4lu piirkonna juurde p\u00e4\u00e4semiseks p\u00e4rast selle vabastamist (use-after-free). <\/p>\n

Haavatavuse kasutamine oli keeruline, kuna «maple tree» struktuuri s\u00f5lmed vabastatakse edasi l\u00fckatud re\u017eiimis, kasutades RCU (Read-copy-update) lukustustega callback-k\u00f5nesid. Sellegipoolest \u00f5nnestus uurijatel \u00fcle saada tekkinud raskustest ja valmistada ette t\u00f6\u00f6tav exploitable, mille nad plaanivad avaldada juuli l\u00f5pus, et anda kasutajatele aega oma s\u00fcsteemide v\u00e4rskendamiseks. Kasutamine on v\u00f5imalik peaaegu k\u00f5igis tuumakonfiguratsioonides ja vajab vaid minimaalset \u00f5iguste taset.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux 6.1 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 VMA (Virtual Memory Area) \u0441\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u0430\u043d\u043d\u044b\u0445 «red-black tree» \u043d\u0430 «maple tree» \u043f\u0440\u0438\u0432\u0451\u043b \u043a \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-3269), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f StackRot, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u044f\u0434\u0440\u0430 6.1 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 6.4.1, 6.3.11 \u0438 6.1.37. \u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 «maple […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-109268","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47StackRot haavatavus Linuxi tuumas, mis v\u00f5imaldab t\u00f5sta privileege | ProHoster","description":"Linuxi 6.1 s\u00fcdamikule tehtud \u00fclekanne VMA (Virtuaalm\u00e4lu Ala) andmestruktuurist \"red-black tree\" \"maple tree\" peale t\u00f5i esile haavatavuse (CVE-2023-3269), mis v\u00f5imaldab privileegideta kasutajal k\u00e4ivitada oma koodi s\u00fcdamiku \u00f5igustes. Haavatavus, mille koodinimeks on StackRot, ilmneb alates 6.1 s\u00fcdamiku v\u00e4ljaandest ja on k\u00f5rvaldatud v\u00e4rskendustes 6.4.1, 6.3.11 ja 6.1.37. Struktuur \"maple","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-stackrot-v-yadre-linux-pozvolyayushhaya-povysit-svoi-privilegii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c StackRot \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 | ProHoster","og:description":"\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux 6.1 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 VMA (Virtual Memory Area) \u0441\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u0430\u043d\u043d\u044b\u0445 "red-black tree" \u043d\u0430 "maple tree" \u043f\u0440\u0438\u0432\u0451\u043b \u043a \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-3269), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f StackRot, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u044f\u0434\u0440\u0430 6.1 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 6.4.1, 6.3.11 \u0438 6.1.37. \u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 "maple","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-stackrot-v-yadre-linux-pozvolyayushhaya-povysit-svoi-privilegii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-07-06T01:10:18+00:00","article:modified_time":"2023-07-06T07:41:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/109268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=109268"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/109268\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=109268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=109268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=109268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}