{"id":182837,"date":"2026-08-11T04:54:59","date_gmt":"2026-08-11T02:54:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera"},"modified":"2026-08-11T04:54:59","modified_gmt":"2026-08-11T02:54:59","slug":"sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","title":{"rendered":"SCTPhantom \u2014 Linuxi tuuma haavatavus, mis annab root-juurdep\u00e4\u00e4su ja v\u00f5imaluse konteinerist v\u00e4lja p\u00e4\u00e4seda","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Linuxi tuumori SCTP protokolli rakenduses tuvastati haavatavus (CVE-2026-64564), mis v\u00f5imaldab kohalikul kasutajal saada root-\u00f5igusi s\u00fcsteemis. Muuhulgas v\u00f5imaldab see haavatavus saada root-juurdep\u00e4\u00e4su p\u00f5hiss\u00fcsteemis, kui ekspluateerija t\u00f6\u00f6tleb seda eraldatud konteineris. On v\u00e4lja t\u00f6\u00f6tatud ekspluateerimise protot\u00fc\u00fcp, mille toimimist on demonstreeritud nimede Debian 13, Rocky Linux 9, RHEL 9 ja Ubuntu 24.04 tuumades 5.14, 6.6, 6.8 ja 6.12. <\/p>\n

Haavatavus tuleneb juba vabastatud m\u00e4lu kasutamisest SCTP (ASCONF) aadresside d\u00fcnaamilise \u00fcmberkonfigureerimise koodis. S\u00fcdamik vahem\u00e4lestab paketi m\u00e4\u00e4ratletud transporti (asconf->transport) osutava v\u00e4\u00e4rtuse, kuid sellele v\u00e4\u00e4rtusele seotud m\u00e4lu v\u00f5ib olla puhastatud, samas kui ise osutav v\u00e4\u00e4rtus juba vabastatud m\u00e4lule j\u00e4tkab teiste k\u00e4skude t\u00f6\u00f6tlemisel kasutamist. R\u00fcnnak toimub, saates kohalikku soketi m\u00e4\u00e4ratud j\u00e4rjestuse ASCONF-k\u00e4skudest aadressi \u00fcmberkonfigureerimiseks: alguses saadetakse DEL-IP pakett konkreetse IP jaoks transpordi eemaldamiseks, millele j\u00e4rgneb DEL-IP pakett, mille mask on 0.0.0.0, mille t\u00f6\u00f6tlemine toob kaasa allesj\u00e4\u00e4nud rippuva osutaja taaskasutamise. <\/p>\n

Haavatavus on p\u00f5hjustatud veast, mis tehti 18 aastat tagasi tuumas 2.6.25 (2008. aasta) ja parandati v\u00e4ljaannetes 6.6.148, 6.12.101, 6.18.42, 7.1.6 ja 7.2-rc5. Haavatavuste k\u00f5rvaldamise staatusi distributsioonides saab hinnata j\u00e4rgmiste lehtede p\u00f5hjal: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Gentoo, Arch, Fedora.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SCTP, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-64564), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u0440\u0430\u0431\u043e\u0442\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Debian 13, Rocky Linux 9, RHEL 9 \u0438 Ubuntu 24.04 \u0441 \u044f\u0434\u0440\u0430\u043c\u0438 5.14, 6.6, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182837","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SCTPhantom \u2014 Linuxi tuumoris esinev haavatavus, mis annab root-juurdep\u00e4\u00e4su ja v\u00e4ljumise konteinerist | ProHoster","description":"Linuxi tuumori SCTP protokolli rakenduses tuvastati haavatavus (CVE-2026-64564), mis v\u00f5imaldab kohalikul kasutajal saada root-\u00f5igusi s\u00fcsteemis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SCTPhantom \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 | ProHoster","og:description":"\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SCTP, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-64564), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T02:54:59+00:00","article:modified_time":"2026-08-11T02:54:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182837","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182837"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182837\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}