{"id":182539,"date":"2026-07-08T10:54:16","date_gmt":"2026-07-08T08:54:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa"},"modified":"2026-07-08T10:54:16","modified_gmt":"2026-07-08T08:54:16","slug":"bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","title":{"rendered":"Bad Epoll: Linuxis ja Androidis leiti haavatavus root-k kasutamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/i><\/a>
1 <\/p>\n

Linuxi tuumas leiti turvan\u00f5rkus Halb Epoll<\/strong>, registreeritud kui CVE-2026-46242<\/a>. See v\u00f5imaldab tavalisel kohalikel kasutajatel ilma erikoolituseta t\u00f5sta privileege root-tasemele. Uuringu autori Jaeun Chongi andmetel m\u00f5jutab probleem mitte ainult Linuxi lauaarvuteid ja servereid, vaid ka osa uusimate tuumaversioonidega Android-seadmetest \u2014 see on eraldi v\u00e4lja toodud Bad Epolli kirjelduse<\/a>.<\/p>\n

<\/noindex> <\/p>\n

Viga on alams\u00fcsteemis epoll<\/strong> \u2014 Linuxi standardmehhanism, mis j\u00e4lgib suure hulga failide descriptorite, v\u00f5rgu\u00fchenduste ja sisendi-v\u00e4ljundi s\u00fcndmuste olekut. Selliseid mehhanisme kasutavad aktiivselt serverid, brauserid ja v\u00f5rgu teenused, seet\u00f5ttu pole lihtsalt v\u00f5imalik epolli v\u00e4lja l\u00fclitada. Tehnilises anal\u00fc\u00fcsis on turvan\u00f5rkus kirjeldatud kui v\u00f5idujooks, mis viib<\/a> use-after-free : samaaegse seotud epoll-objektide sulgemise korral vabastab \u00fcks l\u00f5ng sisemised struktuurid, samas kui teine j\u00e4tkab nendele juurdep\u00e4\u00e4su.<\/strong>: samaaegseid seotud epoll-objekte suletakse, vabastab \u00fcks thread sisemised struktuurid, samas kui teine j\u00e4tkab nende juurde p\u00f6\u00f6rdumist.<\/p>\n

<\/noindex> <\/p>\n

T\u00e4psemalt \u00f6eldes ilmneb probleem olukorras, kus \u00fcks epoll-deskriptor j\u00e4lgib teist, ja m\u00f5lemad deskriptorid suletakse paralleelselt. P\u00e4rast __ep_remove() kutsumist nullitakse ajutiselt v\u00e4li file->f_ep, ja konkureeriv __fput() v\u00f5ib otsustada, et t\u00e4iendav puhastus pole enam vajalik. Selle tulemusena vabastatakse struktuur eventpoll v\u00f5i sellega seotud struktuur file liiga vara, kuid kood j\u00e4tkab t\u00f6\u00f6tamist juba vabastatud m\u00e4lu pointeritega. Just see annab r\u00fcndajale primitiivi tuuma m\u00e4lu kahjustamiseks.<\/p>\n

<\/p>\n

R\u00fcnnakuks ei ole vaja t\u00e4iendavaid \u00f5igusi ja kasutajanimesid \u2014 piisab CONFIG_EPOLL olemasolust, mis muudab probleemi eriti ebamugavaks tavalistele Linuxi s\u00fcsteemidele. Vastavalt uurija esimesel raportil<\/a>, lisati vigane kood kerneli commitiga 58c9b016e128<\/a> aastal 2023, ja parandati commitiga a6dc643c693<\/a>.<\/p>\n

<\/noindex> <\/p>\n

Vaatamata v\u00e4ga kitsale v\u00f5iduaegade aknale, valmistas uurija v\u00e4lja t\u00f6\u00f6tava ekspluateerimise Google kernelCTF jaoks. Kirjelduses ekspluateerimisest kasutamise kirjeldus<\/a> n\u00e4idatakse, kuidas viga muutub 8-baidiseks kirje, vabastatud struktuuri, seej\u00e4rel tuuma m\u00e4lu lekkeks l\u00e4bi \/proc\/self\/fdinfo, failide f_op -> poll ja ROP-ahelate p\u00fc\u00fcdmiseks root'i saamiseks. Eesm\u00e4rgi lts-6.12.67 stabiilsus on hinnatud umbes 99%, COSi puhul umbes 98%; Androidi eksploit, autor v\u00e4idab, et on veel t\u00f6\u00f6s.<\/p>\n

<\/noindex> <\/p>\n

R\u00fcnnaku all on tuumad, mis p\u00f5hinevad harul 6.4 ja uuemad<\/strong>, kui neisse pole parandust viidud. Vanemad Android-seadmed, millel on tuumad 6.1, sealhulgas Pixel 8 ja sarnased mudelid, autor peab haavatamatuteks<\/a>. Kasutajatele ja administraatoritele j\u00e4\u00e4b ainus sobiv kaitseviis \u2014 installida oma jaotuse v\u00f5i seadme tootja tuuma uuendus.<\/p>\n

<\/noindex><\/p>\n

Allikas: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Bad Epoll, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2026-46242. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e root. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0414\u0436\u044d\u0451\u043d\u0430 \u0427\u043e\u043d\u0430, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e Linux-\u0434\u0435\u0441\u043a\u0442\u043e\u043f\u044b \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0438 \u0447\u0430\u0441\u0442\u044c Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 \u2014 \u044d\u0442\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 Bad Epoll. \u041e\u0448\u0438\u0431\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182539","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bad Epoll: Linuxis ja Androidis leiti root-juurdep\u00e4\u00e4su saamise haavatavus | ProHoster","description":"1 Linuxi tuumas on avastatud Bad Epoll haavatavus, registreeritud kui CVE-2026-46242. See v\u00f5imaldab tavalisel kohalikel kasutajatel ilma eriliste \u00f5igusteta \u00f5igusi t\u00f5sta root'i tasemele. Uuringu autori Jay Choni andmetel m\u00f5jutab probleem mitte ainult Linuxi lauaarvuteid ja servereid, vaid ka osa Android-seadmetest uute tuumaversioonidega \u2014 see on Bad Epolli kirjeldusega eraldi r\u00f5hutatud. Viga asub","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Bad Epoll: \u0432 Linux \u0438 Android \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 | ProHoster","og:description":"1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Bad Epoll, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2026-46242. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e root. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0414\u0436\u044d\u0451\u043d\u0430 \u0427\u043e\u043d\u0430, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e Linux-\u0434\u0435\u0441\u043a\u0442\u043e\u043f\u044b \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0438 \u0447\u0430\u0441\u0442\u044c Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 \u2014 \u044d\u0442\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 Bad Epoll. \u041e\u0448\u0438\u0431\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-08T08:54:16+00:00","article:modified_time":"2026-07-08T08:54:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182539"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182539\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}