{"id":182539,"date":"2026-07-08T10:54:16","date_gmt":"2026-07-08T08:54:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa"},"modified":"2026-07-08T10:54:16","modified_gmt":"2026-07-08T08:54:16","slug":"bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","title":{"rendered":"Bad Epoll: Linuxis ja Androidis leiti haavatavus root-juurdep\u00e4\u00e4su saamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/i><\/a>
1 <\/p>\n

Linuxi tuumas avastati haavatavus Halb Epoll<\/strong>, registreeritud kui CVE-2026-46242<\/a>. See v\u00f5imaldab tavalistel kohalikel kasutajatel, kellel ei ole erilisi \u00f5igusi, t\u00f5sta oma \u00f5igusi rootiks. Uuringu autori Jay Choni s\u00f5nul m\u00f5jutab probleem mitte ainult Linuxi t\u00f6\u00f6jaamu ja servereid, vaid ka osa Android-seadmetest, kus on uued tuumaversioonid \u2014 see on eraldi r\u00f5hutatud Halb Epolli kirjelduses<\/a>.<\/p>\n

<\/noindex> <\/p>\n

Viga asub alams\u00fcsteemis epoll<\/strong> \u2014 standardne Linuxi mehhanism paljude failide deskriptorite, v\u00f5rgu\u00fchenduste ja sisendi-v\u00e4ljundi s\u00fcndmuste j\u00e4lgimiseks. Selliseid mehhanisme kasutavad aktiivselt serverid, brauserid ja v\u00f5rgu teenused, seet\u00f5ttu ei saa epolli lihtsalt v\u00e4lja l\u00fclitada. Tehnilises anal\u00fc\u00fcsis on haavatavus kirjeldatud kui v\u00f5idujooks, mis toob kaasa<\/a> use-after-free : kui seonduvaid epoll-objekte samaaegselt suletakse, siis vabastab \u00fcks l\u00f5ng sisemised struktuurid, samas kui teine j\u00e4tkab nendele viitamist.<\/strong>T\u00e4psemalt \u00f6eldes ilmneb probleem olukorras, kus \u00fcks epoll-deskriptor j\u00e4lgib teist ja m\u00f5lemad deskriptorid suletakse paralleelselt. P\u00e4rast __ep_remove() v\u00e4ljakutset t\u00fchjendatakse ajutiselt field file->f_ep ja konkureeriv __fput() v\u00f5ib otsustada, et t\u00e4iendav puhastamine ei ole enam vajalik. Selle tulemusena vabastatakse struct eventpoll v\u00f5i sellega seotud struct file liiga varakult, kuid kood j\u00e4tkab t\u00f6\u00f6tegemist juba vabastatud m\u00e4lu n\u00e4idikutega. Just see annab r\u00fcndajale v\u00f5imaluse tuuma m\u00e4lu kahjustada.<\/p>\n

<\/noindex> <\/p>\n

R\u00fcnnakuks ei ole vaja t\u00e4iendavaid \u00f5igusi ega kasutajate nimesid \u2014 piisab CONFIG_EPOLL olemasolust, mis teeb probleemi tavaliste Linuxi s\u00fcsteemide jaoks eriti ebameeldivaks. Vastavalt<\/p>\n

<\/p>\n

uurija esialgsele raportile , t\u00f5rge viidi tuuma commitiga<\/a>58c9b016e128 2023. aastal, ja parandati commitiga<\/a> a6dc643c693 Vaatamata v\u00e4ga kitsale v\u00f5idujooksu aknale on uurija valmistanud t\u00f6\u00f6kindla ekspluateerimise Google'i kernelCTF jaoks. Ekspluiteerimise kirjelduses<\/a>.<\/p>\n

<\/noindex> <\/p>\n

n\u00e4hakse, kuidas viga muundatakse 8-baidi kirje vabastatud struktuuris, seej\u00e4rel tuuma m\u00e4lu lekke l\u00e4bi \/proc\/self\/fdinfo, failide edukama >f_op>poll ja ROP-ahelani root'i saamiseks. Sihtm\u00e4rgiks olev lts-6.12.67 on teatatud usaldusv\u00e4\u00e4rsuseks umbes 99%, COS-ile umbes 98%; Androidi eksploit, autori s\u00f5nul, on endiselt t\u00f6\u00f6s. Ohtu satuvad tuumad, mis p\u00f5hinevad harul<\/a> 6.4 ja uuemad<\/p>\n

<\/noindex> <\/p>\n

, kui nad ei ole parandust saanud. Vanad Android-seadmed 6.1 tuumadel, sealhulgas Pixel 8 ja sarnased mudelid, peab autor haavatamatuks<\/strong>, kui nendes ei ole muudatusi tehtud. Vanad Android-seadmed, millel on 6.1 tuum, sealhulgas Pixel 8 ja sarnased mudelid, autor peab haavatamatuteks<\/a>. Kasutajatele ja administraatoritele j\u00e4\u00e4b ainus normaalne kaitsevariant \u2014 paigaldada oma jaotuse v\u00f5i seadme m\u00fc\u00fcja tuumav\u00e4rskendus.<\/p>\n

<\/noindex><\/p>\n

Allikas: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Bad Epoll, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2026-46242. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e root. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0414\u0436\u044d\u0451\u043d\u0430 \u0427\u043e\u043d\u0430, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e Linux-\u0434\u0435\u0441\u043a\u0442\u043e\u043f\u044b \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0438 \u0447\u0430\u0441\u0442\u044c Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 \u2014 \u044d\u0442\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 Bad Epoll. \u041e\u0448\u0438\u0431\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182539","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Halb Epoll: Linuxis ja Androidis leiti turvaauk, millega saab omandada juur\u00fclevaate | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Bad Epoll: \u0432 Linux \u0438 Android \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/bad-epoll-v-linux-i-android-nashli-uyazvimost-dlya-polucheniya-root-dostupa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-08T08:54:16+00:00","article:modified_time":"2026-07-08T08:54:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182539","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:07","updated":"2026-08-05 12:22:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182539"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182539\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}