{"id":182435,"date":"2026-07-02T10:53:32","date_gmt":"2026-07-02T08:53:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka"},"modified":"2026-07-02T10:53:32","modified_gmt":"2026-07-02T08:53:32","slug":"v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka","title":{"rendered":"Fedora 45-s plaanitakse rakendada kaitset, mis p\u00f5hineb varjatud virnal","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Fedora Linux 45 v\u00e4ljaandel, mis on kavandatud 2026. aasta s\u00fcgisel, plaanitakse x86_64 s\u00fcsteemides vaikimisi rakendada varjatud virna (shadow stack) kasutamist, et blokeerida eksploite, mis \u00fcritavad \u00fcle kirjutada funktsioonide tagasip\u00f6\u00f6rdumise aadresse virna \u00fclevoolu korral. Kaitset plaanitakse aktiveerida k\u00f5igil rakendustel ja raamatukogudel, mis on koostatud gcc (C, C++), clang (C, C++) ja rustc (Rust) kompilaatoritega. Plaan pole veel kinnitatud FESCo (Fedora Engineering Steering Committee) komitee poolt, mis vastutab Fedora Linuxi tehnilise arendamise eest. Varjatud virna rakendamise algataja on Arjun Shankar, kes t\u00f6\u00f6tab Red Hat'is ja haldab Fedora ja RHEL-i glibc pakette.<\/p>\n

Kaitse rakendatakse kasutades protsessorite riistvaralist v\u00f5imekust ning seisneb selles, et p\u00e4rast juhtimise \u00fcleandmist salvestatakse tagastusaadressid protsessori poolt mitte ainult tavap\u00e4rases kas j\u00e4tku, vaid ka eraldi \"varjatud\" j\u00e4tku, mida ei saa otse muuta. Funktsioonist v\u00e4ljumise eel t\u00f5mmatakse tagastusaadress varjatud j\u00e4tkust ja v\u00f5rreldakse p\u00f5hiregistrist saadud tagastusaadressiga. Aadresside mittesobivus toob kaasa erandi genereerimise, mis blokeerib olukordi, kus kuridarvitamisel \u00f5nnestub pearegistris aadressi \u00fcle kirjutada. Varjatud j\u00e4tku mehhanismi toetavad alates Intel'i 11. p\u00f5lvkonna protsessoritest (\"Tiger Lake\" ja \"Rocket Lake\") ning AMD protsessorite Zen3 mikroarhitektuurist.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Fedora Linux 45, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043e\u0441\u0435\u043d\u044c 2026 \u0433\u043e\u0434\u0430, \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 x86_64 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 (shadow stack) \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0430\u0434\u0440\u0435\u0441 \u0432\u043e\u0437\u0432\u0440\u0430\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435. \u0417\u0430\u0449\u0438\u0442\u0443 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u043e\u0432 gcc (C, C++), clang (C, C++) \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182435","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fedora 45-s plaanitakse rakendada kaitset, mis p\u00f5hineb varjatud virnal | ProHoster","description":"Fedora Linux 45 v\u00e4ljaandel, mis on kavandatud 2026. aasta s\u00fcgisel, plaanitakse x86_64 s\u00fcsteemides vaikimisi rakendada varjatud virna (shadow stack) kasutamist, et blokeerida eksploite, mis \u00fcritavad aadressi \u00fcle kirjutada.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora 45 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 | ProHoster","og:description":"\u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Fedora Linux 45, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043e\u0441\u0435\u043d\u044c 2026 \u0433\u043e\u0434\u0430, \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 x86_64 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 (shadow stack) \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0430\u0434\u0440\u0435\u0441.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-fedora-45-namereny-vklyuchit-zashhitu-na-osnove-tenevogo-steka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-02T08:53:32+00:00","article:modified_time":"2026-07-02T08:53:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182435","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:11","updated":"2026-08-05 12:22:11","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182435","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182435"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182435\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182435"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182435"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182435"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}