{"id":172665,"date":"2026-05-19T00:24:34","date_gmt":"2026-05-18T22:24:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux"},"modified":"2026-05-19T00:24:34","modified_gmt":"2026-05-18T22:24:34","slug":"dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","title":{"rendered":"DirtyDecrypt \u2014 j\u00e4rgmine Copy Faili t\u00fc\u00fcpi haavatavus, mis annab root-\u00f5igused Linuxis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Linuxi tuumas leiti turvahaavatavus, mis sarnaneb Copy Fail, Dirty Frag ja Fragnesia haavatavustega, v\u00f5imaldades mittepriviligeeritud kasutajal saada root-\u00f5igusi, kirjutades andmeid lehek\u00fclje vahem\u00e4llu. Haavatavusele on antud koodinimi DirtyDecrypt (probleem on tuntud ka nime all DirtyCBC). Eksploidiks on saadaval protot\u00fc\u00fcp. <\/p>\n

CVE-identifikaatorit eksploidis ei mainita, \u00f6eldakse vaid, et teadlased avastasid probleemi 9. mail ning teatasid sellest tuuma arendajatele, kes vastasid, et nende leid dubleerib teise aruande juba parandatud haavatavuse kohta. Kuna parandamise patch on juba integreeritud tuuma, otsustasid teadlased avaldada nende loodud eksploid. Eksploidis oleva kirjelduse p\u00f5hjal kasutatakse seal haavatavust CVE-2026-31635, mille parandamine v\u00f5eti tuuma aprillis ja see kuulub 7.0.0 haru koosseisu ja 18. aprillil v\u00e4lja antud 6.18.23 versiooniga. Probleem ilmneb alates tuumast 6.16. <\/p>\n

Nagu ka Dirty Frag haavatavuste seeria puhul on uus haavatavus olemas RxRPC draiveris, mis implementeerib AF_RXRPC soklite perekonda ja selle kohast RPC-protokolli, mis t\u00f6\u00f6tab UDP peal. Probleem tuleneb veast andmete suuruse kontrollimisel funktsioonis rxgk_verify_response() \u2014 selle asemel, et kontrollida \u201eif (auth_len > len)\u201d, oli koodis kirjutatud \u201eif (auth_len < len)\u201d, mis viis andmete edastamiseni funktsiooni rxgk_decrypt_skb() suurusega, mis \u00fcletas lubatut. Funktsiooni rxgk_decrypt_skb() t\u00e4itmise korral toimus andmete dekr\u00fcpteerimine muudatuste otse lehe puhverdatud m\u00e4lu asendamisega, et v\u00e4ltida liigset puhverdamist. Vale suuruse kontrolli t\u00f5ttu tekkis v\u00f5imalus andmete \u00fclekirjutamiseks lehe puhverdatud m\u00e4lus valitud offsetiga. <\/p>\n

Turvalisuse n\u00f5rkus seisneb selles, et loetakse programmi faili, millel on suid root -lipp (et see j\u00e4\u00e4ks lehek\u00fcljete cache'i) ja asendatakse lehek\u00fcljete cache'is osa programmi koodist koodiga \/usr\/bin\/sh k\u00e4ivitamiseks. J\u00e4rgmine programmi k\u00e4ivitamine toob m\u00e4llu mitte originaali, vaid muudetud koopia lehek\u00fcljete cache'ist. Nagu suid-programmide puhul, on eksploidis ette n\u00e4htud v\u00f5imalus kasutada «\/usr\/bin\/su», «\/bin\/su», «\/usr\/bin\/mount», «\/usr\/bin\/passwd» ja «\/usr\/bin\/chsh». <\/p>\n

Haavatavuse kasutamiseks peab tuuma kogumise ajal olema aktiivne CONFIG_RXGK opsioon, samuti peab automaatlaadimiseks olema saadaval tuumamoodul rxrpc.ko (m\u00f5nes s\u00fcsteemis ei koosta seda). Haavatavuste parandamise staatust distributsioonides saab hinnata j\u00e4rgmiste lehtede j\u00e4rgi: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Arch, Fedora. Kaitseks juhuks v\u00f5ib blokeerida tuumamooduli rxrpc laadimise: <\/p>\n

sh -c «printf ‘install rxrpc \/bin\/false\n’ > \/etc\/modprobe.d\/dirtydecrypt.conf; rmmod rxrpc 2>\/dev\/null; true» <\/p>\n

Lisaks tasub m\u00e4rkida, et Linuxi tuuma arendajate uudiskirjas on avaldatud plaastrid, mis t\u00e4ielikult keelavad crypto API (AF_ALG) optimeerimised, mis kasutavad algoritmide «skcipher» ja «aead» puhul otse lehek\u00fcljekorra vahem\u00e4lu. Optimeerimised v\u00e4listavad liigse andmete puhversalvestuse, kuid toovad kaasa t\u00f5siste haavatavuste tekkimise riske. Eeldatakse, et nende keelamine toob kaasa vaid v\u00e4ikese j\u00f5udluse languse, kuna lisandub t\u00e4iendav kopeerimisoperatsioon eraldi puhversse. Plaastrid on aktsepteeritud crypto API alams\u00fcsteemi hooldaja poolt ja on kaasatud «cryptodev» haru, kus arendatakse v\u00f5imalusi edastamiseks tulevaste Linuxi tuumade v\u00e4ljaannete p\u00f5hikoosseisu.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Copy Fail, Dirty Frag \u0438 Fragnesia \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f DirtyDecrypt (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c DirtyCBC). \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0443 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u043b\u0438\u0448\u044c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 9 \u043c\u0430\u044f, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-172665","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DirtyDecrypt \u2014 veel \u00fcks Copy Faili klassi haavatavus, mis pakub Linuxis root-\u00f5igusi | ProHoster","description":"Linuxi tuumas tuvastati haavatavus, mis sarnaneb Copy Faili, Dirty Fragi ja Fragnesiaga ning v\u00f5imaldab madala \u00f5igusega kasutajal saada root-\u00f5igused, kirjutades andmeid lehek\u00fclje vahem\u00e4llu. Haavatavusele on antud koodinimi DirtyDecrypt (probleem on tuntud ka nime alt DirtyCBC). Eksplooitide protot\u00fc\u00fcp on saadaval. CVE-idenditifierit eksploiti m\u00e4rkustes ei mainita, vaid on lihtsalt \u00f6eldud, et teadlased tuvastasid probleemi 9. mail.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DirtyDecrypt \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 Copy Fail, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0430\u0432\u0430 root \u0432 Linux | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Copy Fail, Dirty Frag \u0438 Fragnesia \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f DirtyDecrypt (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c DirtyCBC). \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0443 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u043b\u0438\u0448\u044c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 9 \u043c\u0430\u044f,","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-18T22:24:34+00:00","article:modified_time":"2026-05-18T22:24:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/172665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=172665"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/172665\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=172665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=172665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=172665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}