{"id":170538,"date":"2026-05-09T00:24:31","date_gmt":"2026-05-08T22:24:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux"},"modified":"2026-05-09T00:24:31","modified_gmt":"2026-05-08T22:24:31","slug":"predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","title":{"rendered":"Ehk pikem vajadus kehtivuse katkestamiseks Linuxi tuumas.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

NVIDIA t\u00f6\u00f6taja Sasha Levin, kes tegeleb Linuxi tuuma LTS-haru haldamisega ning kuulub Linux Foundationi n\u00f5uandeorganisse, on valmistanud ette pat\u0161ide komplekti, mis rakendab killswitchi mehhanismi Linuxi tuumas. Pakutud funktsioon v\u00f5imaldab koheselt keelata juurdep\u00e4\u00e4su teatud funktsioonidele, mis on aktiivses tuumas. Eeldatakse, et killswitch on kasulik ajutiseks haavatavuste blokeerimiseks enne tuuma v\u00e4rskenduse rakendamist. <\/p>\n

Killswitch'i haldamine toimub faili «\/sys\/kernel\/security\/killswitch\/control» kaudu, mis v\u00f5imaldab seadistada tuumafunktsioonide nimepidi kutsumiste interceptimist. N\u00e4iteks, et blokeerida Copy Fail haavatavust, piisab haldese failile k\u00e4su «engage af_alg_sendmsg -1» kirjutamisest, mis aktiveerib af_alg_sendmsg funktsiooni kutsumise interceptimise ning tagastab selle asemel vea koodi «-1». <\/p>\n

Nimede jaoks v\u00f5ivad kasutada k\u00f5iki m\u00e4rke, mida toetab kprobes alams\u00fcsteem. Paljudes hiljuti avastatud t\u00f5sistes tuuma haavatavustes on seotud subsystemid, mida kasutab suhteliselt v\u00e4ike hulk kasutajaid (n\u00e4iteks AF_ALG, ksmbd, nf_tables, vsock, ax25). Enamikule kasutajatest tekitab \u00fcksikute funktsioonide t\u00f6\u00f6katkestamine v\u00e4hem ebamugavust kui tuuma variante, kus teadaolevad parandamata haavatavused v\u00f5ivad edasi t\u00f6\u00f6tada enne patche rakendamist. Killswitchi mehhanism on t\u00e4nap\u00e4eva Dirty Frag haavatavuse kontekstis eriti oluline, mille eksploite on avaldatud varem, kui probleem tuumas lahendati.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0430\u0448\u0430 \u041b\u0435\u0432\u0438\u043d (Sasha Levin) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NVIDIA, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c LTS-\u0432\u0435\u0442\u043e\u043a \u044f\u0434\u0440\u0430 Linux \u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u043e\u0432\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 killswitch \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u044f\u0434\u0440\u0430. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e killswitch \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u0435\u043d \u0434\u043b\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u044f \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170538","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ehk pikem vajadus kehtivuse katkestamiseks Linuxi tuumas | ProHoster","description":"NVIDIA t\u00f6\u00f6taja Sasha Levin, kes tegeleb Linuxi tuuma LTS-haru haldamisega ning kuulub Linux Foundationi n\u00f5uandeorganisse, on valmistanud ette pat\u0161ide komplekti rakendamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d killswitch \u0434\u043b\u044f \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u0421\u0430\u0448\u0430 \u041b\u0435\u0432\u0438\u043d (Sasha Levin) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NVIDIA, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c LTS-\u0432\u0435\u0442\u043e\u043a \u044f\u0434\u0440\u0430 Linux \u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u043e\u0432\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-08T22:24:31+00:00","article:modified_time":"2026-05-08T22:24:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=170538"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170538\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=170538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=170538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=170538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}