{"id":181668,"date":"2026-05-23T00:25:11","date_gmt":"2026-05-22T22:25:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/gro-frag-sedmaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux"},"modified":"2026-05-23T00:25:11","modified_gmt":"2026-05-22T22:25:11","slug":"gro-frag-sedmaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/gro-frag-sedmaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","title":{"rendered":"GRO Frag \u2014 seitsmes Copy Fail klassi haavatavus, mis annab Linuxis root \u00f5igused","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Avalikuks on pandud eksploite seitsmanda haavatavuse (1, 2-3, 4, 5, 6) kohta Linuxi tuumas, mis v\u00f5imaldab privileegideta kohalikul kasutajal saada root-\u00f5igused, kirjutades andmed lehek\u00fcljete vahem\u00e4llu. CVE-tuvastus veel ei ole m\u00e4\u00e4ratud, peale eksploidi koodi pole probleemi kohta veel teavet. Parandus on saadaval ainult pahvakuna, mis avaldati 20. mail ja 21. mail vastu v\u00f5etud Linuxi tuuma p\u00f5hiklassi (parandused tuumas pole veel saadaval). <\/p>\n

Haavatavus on presenteeritud GRO (Generic Receive Offload) tehnoloogia rakenduses, mis kiirendab segmentide paketide t\u00f6\u00f6tlemist. Haavatavus tuleneb veast zerocopy mehhanismi rakenduses funktsioonis skb_gro_receive(), mis muudab andmeid lehek\u00fclje vahem\u00e4lu otseselt, et v\u00e4ltida liigset vahem\u00e4lu. FLAGI SKBFL_MANAGED_FRAG_REFS seadmisel j\u00e4eti vahele viite s\u00e4ilitamine vabastatavates m\u00e4lulehtedes shinfo->frags v\u00e4ljas, seej\u00e4rel liideti see v\u00e4li teise skb-ga, muutes viidete loendurit, mis viis m\u00e4lule p\u00e4rast vabastamist (use-after-free) viitamiseni. Probleemi sai \u00e4ra kasutada lehek\u00fclje vahem\u00e4lu andmete \u00fcle kirjutamiseks, manipuleerides io_uring-puhvri n\u00e4itajaga. <\/p>\n

R\u00fcnnak on v\u00f5imalik s\u00fcsteemides, kus on aktiveeritud io_uring alams\u00fcsteem (io_uring_disabled=0). Eksplooti toimimiseks peab s\u00fcsteemis olema lugemiseks kergesti k\u00e4tte saadav SUID-rooti lipuga t\u00e4idetud t\u00e4itmisfail. Kasutamise mehhanism seisneb selles, et r\u00fcndaja saavutab kasutajate baasi paigaldamise lehek\u00fclje vahem\u00e4llu, seej\u00e4rel asendab ta vahem\u00e4lu rea 'hax::0:0::\/root:\/bin\/sh'. J\u00e4rgneb k\u00e4sk 'su hax', mis ei saa ketas olevat originaalset kasutajate baasi, vaid muudetud koopia vale sisselogimisega 'hax', millel on root \u00f5igused ja t\u00fchi parool. Eksplooti on testitud Ubuntu 24.04-s.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0441\u0435\u0434\u044c\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (1, 2-3, 4, 5, 6) \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435. CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0435\u0449\u0451 \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d, \u043a\u0440\u043e\u043c\u0435 \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0438\u0434\u0435 \u043f\u0430\u0442\u0447\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d 20 \u043c\u0430\u044f \u0438 21 \u043c\u0430\u044f \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181668","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GRO Frag \u2014 seitsmes Copy Fail klassi haavatavus, mis annab root-\u00f5igused Linuxis | ProHoster","description":"Avalikuks on pandud eksploite seitsmanda haavatavuse (1, 2-3, 4, 5, 6) kohta Linuxi tuumas, mis v\u00f5imaldab privileegideta kohalikul kasutajal saada root-\u00f5igused, kirjutades andmed lehek\u00fcljete vahem\u00e4llu.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/gro-frag-sedmaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GRO Frag \u2014 \u0441\u0435\u0434\u044c\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 Copy Fail, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0430\u0432\u0430 root \u0432 Linux | ProHoster","og:description":"\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0441\u0435\u0434\u044c\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (1, 2-3, 4, 5, 6) \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/gro-frag-sedmaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-22T22:25:11+00:00","article:modified_time":"2026-05-22T22:25:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=181668"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181668\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=181668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=181668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=181668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}