Direban floppy ya bar baya kula a cikin Linux kernel

Kunshe a cikin Linux 5.3 kernel karba canje-canje don ƙara ƙarin kariya don kiran ioctl masu alaƙa da direban floppy, kuma direban da kansa an yi masa alama a matsayin mara kula.
(" marayu"), wanda ke nuna ƙarshen gwajinsa.

Ana la'akari da direban ya tsufa, tun da yake yana da wuya a sami kayan aiki don gwada shi - duk na'urorin waje na yanzu, a matsayin mai mulkin, yi amfani da kebul na USB. A lokaci guda kuma, cire direban daga kernel yana samun cikas saboda gaskiyar cewa har yanzu ana yin koyi da masu sarrafa floppy disk a cikin tsarin haɓakawa. Saboda haka, har yanzu direban yana adana a cikin kwaya, amma ba a tabbatar da aikin sa daidai ba.

Hakanan, a cikin direban floppy shafe rauni (CVE-2019-14283), ƙyale, ta hanyar yin amfani da ioctl, mai amfani mara gata wanda ke da ikon shigar da nasa floppy faifai, don karanta bayanai daga wuraren ƙwaƙwalwar ajiya a waje da iyakokin kwafin buffer (misali, wuraren da ke kusa suna iya ƙunsar ragowar bayanai daga faifai. cache da shigar da buffer). A gefe guda, raunin ya kasance mai dacewa tunda ana ɗora wa direban floppy ta atomatik idan akwai mai sarrafa kwaikwayi daidai a cikin tsarin haɓakawa (alal misali, ana amfani da shi ta tsohuwa a cikin QEMU), amma a gefe guda, don cin gajiyar matsalar, wajibi ne a haɗa hoton floppy disk wanda maharin ya shirya.

source: budenet.ru

Add a comment