{"id":172665,"date":"2026-05-19T00:24:34","date_gmt":"2026-05-18T22:24:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux"},"modified":"2026-05-19T00:24:34","modified_gmt":"2026-05-18T22:24:34","slug":"dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","title":{"rendered":"DirtyDecrypt \u2014 j\u00e4rjekordne Copy Fail klassi haavatavus, mis annab Linuxis root \u00f5igused.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Linuxi tuumasAvastati haavatavus, mis sarnaneb Copy Fail, Dirty Frag ja Fragnesia haavatavustega, mis v\u00f5imaldab privileege mitteomaval kasutajal saada root \u00f5igused, kirjutades andmeid lehek\u00fclje vahem\u00e4lu. Haavatavusele on antud koodnimi DirtyDecrypt (probleem on tuntud ka nime all DirtyCBC). Eksploidile on saadaval protot\u00fc\u00fcp. <\/p>\n

CVE-Identifikaatorit eksploidile ei ole m\u00e4rgitud, vaid \u00f6eldud, et uurijad tuvastasid probleemi 9. mail, p\u00e4rast mida teavitasid nad tuuma arendajaid, kes vastasid, et nende leid dubleerib teise raporti juba parandatud haavatavusest. Kuna parandav plaastr on juba tuumas, otsustasid uurijad avaldada arendatud eksploid. Eksploidis sisalduva kirjelduse kohaselt kasutatakse seal CVE-2026-31635 haavatavust, mille parandamine v\u00f5eti tuuma vastu aprillis ja mis kuulub 7.0.0 versiooni koosseisu, mis vormiti 18. aprilli v\u00e4ljaandes 6.18.23. Probleem ilmneb alates tuumast 6.16. <\/p>\n

Nagu Dirty Frag haavatavuste seeria puhul, leidub uus haavatavus RxRPC draiveris, mis rakendab AF_RXRPC soklite perekonda ja sama nime kandev RPC-protokoll, mis t\u00f6\u00f6tab UDP kohal. Probleem tuleneb andme suuruse kontrollimise veast funktsioonis rxgk_verify_response() \u2014 kontrollimise asemel \u201eif (auth_len > len)\u201c oli koodis m\u00e4\u00e4ratud \u201eif (auth_len < len)\u201c, mis viis funktsioonile rxgk_decrypt_skb() andmete edastamisele, mille suurus \u00fcletab lubatud. Funktsiooni rxgk_decrypt_skb() t\u00e4itmisel dekodeeriti andmed otse lehek\u00fcljekaaside vahem\u00e4llu, v\u00e4ltides liigset puhverdamist. Vale suuruse kontrollimise t\u00f5ttu tekkis v\u00f5imalus \u00fcle kirjutada andmeid lehek\u00fcljekaasides valitud nihke kaudu. <\/p>\n

Haavatavuse \u00e4rakasutamine seisneb suid rootiga programmi faili lugemises (et see j\u00e4\u00e4ks lehek\u00fcljekaasidesse) ja programmi koodi osa asendamises lehek\u00fcljekaasides koodiga, mis k\u00e4ivitab \/usr\/bin\/sh. Programmi j\u00e4rgmisel k\u00e4ivitamisel laaditakse m\u00e4llu mitte originaalne t\u00e4idetav fail, vaid muudetud koopia lehek\u00fcljekaasidest. SUid-programmidena on eksploidis ette n\u00e4htud v\u00f5imalus kasutada \u201e\/usr\/bin\/su\u201c, \u201e\/bin\/su\u201c, \u201e\/usr\/bin\/mount\u201c, \u201e\/usr\/bin\/passwd\u201c ja \u201e\/usr\/bin\/chsh\u201c. <\/p>\n

Selle n\u00f5rkuse kasutamiseks peab tuumamoodulil olema lubatud CONFIG_RXGK valik ning k\u00e4rgsalvestuseks peab olema saadaval tuumamoodul rxrpc.ko (m\u00f5nes s\u00fcsteemis seda ei koostatakse). Haavatavuste k\u00f5rvaldamise staatust distributsioonides saab hinnata j\u00e4rgmiste lehtede p\u00f5hjal: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Arch, Fedora. Kaitseks v\u00f5ib kasutada meetodit, mille puhul blokeeritakse rxrpc tuumamooduli laadimine: <\/p>\n

sh -c 'printf 'install rxrpc \/bin\/false\n' > \/etc\/modprobe.d\/dirtydecrypt.conf; rmmod rxrpc 2>\/dev\/null; true' <\/p>\n

Lisaks v\u00f5ib m\u00e4rkida, et Linuxi tuuma arendajate postitusloendis on avaldatud plaastrid, mis t\u00e4ielikult keelavad crypto API-s (AF_ALG) optimeerimised, mis kasutavad otse lehek\u00fcljekaasi p\u00f6\u00f6rdumist dekodeerimisel, kasutades algoritme \u201eskcipher\u201c ja \u201eaead\u201c. Optimeerimised v\u00e4listavad liigse andme puhverdamise, kuid loovad t\u00f5siste haavatavuste tekkimise riske. Eeldatakse, et nende keelamine toob kaasa vaid minimaalset j\u00f5udluse v\u00e4henemist, kuna ilmneb t\u00e4iendav kopeerimise toiming eraldi vahem\u00e4llu. Plaastrid on vastu v\u00f5etud crypto API haldaja poolt ja on lisatud harusse \u201ecryptodev\u201c, kus arendatakse tulevaste Linuxi tuumav\u00e4ljaannete peamise koosseisu edastamise v\u00f5imalusi.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Copy Fail, Dirty Frag \u0438 Fragnesia \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f DirtyDecrypt (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c DirtyCBC). \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0443 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u043b\u0438\u0448\u044c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 9 \u043c\u0430\u044f, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-172665","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DirtyDecrypt \u2014 j\u00e4rgmine Copy Fail klassi haavatavus, mis annab Linuxis root \u00f5igused | ProHoster","description":"Linuxi tuumas on avastatud haavatavus, mis sarnaneb Copy Fail, Dirty Frag ja Fragnesia haavatustega, v\u00f5imaldades privileegita kasutajal saada root \u00f5igused, kirjutades andmed lehek\u00fcljete salvestusse.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DirtyDecrypt \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 Copy Fail, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0430\u0432\u0430 root \u0432 Linux | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Copy Fail, Dirty Frag \u0438 Fragnesia \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-18T22:24:34+00:00","article:modified_time":"2026-05-18T22:24:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/172665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=172665"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/172665\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=172665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=172665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=172665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}