Rashin lahani mai nisa a cikin direban Linux don kwakwalwan kwamfuta na Realtek

A cikin direban da aka haɗa a cikin Linux kernel rtlwifi don adaftar mara waya akan kwakwalwan Realtek gano rauni (CVE-2019-17666), wanda za a iya amfani da shi don tsara aiwatar da code a cikin mahallin kernel lokacin aika firam ɗin ƙira na musamman.

Rashin lahani yana faruwa ne ta hanyar buffer ambaliya a cikin lambar aiwatar da yanayin P2P (Wifi-Direct). Lokacin nazarin firam Ba (Sanarwar Rashin) babu bincike don girman ɗayan ƙimar, wanda ke ba da damar rubuta wutsiya na bayanai zuwa wani yanki da ya wuce iyakar buffer da sake rubuta bayanai a cikin tsarin kernel da ke biye da buffer.

Ana iya kai harin ta hanyar aika firam ɗin ƙira na musamman zuwa tsarin tare da adaftar cibiyar sadarwa mai aiki bisa guntu na Realtek da ke tallafawa fasahar. Wi-Fi Direct, wanda ke ba da damar adaftar waya guda biyu don kafa haɗin kai tsaye ba tare da wurin shiga ba. Don yin amfani da matsalar, maharin baya buƙatar haɗa shi zuwa cibiyar sadarwar mara waya, kuma ba a buƙatar yin wani aiki daga ɓangaren mai amfani; ya isa ga maharin ya kasance a cikin yankin da ke kewaye da mara waya. sigina.

Samfurin aikin da ake amfani da shi a halin yanzu yana iyakance ga haifar da kernel daga nesa, amma yuwuwar rashin lahani ba ya ware yuwuwar shirya aiwatar da lambar (zaton har yanzu yana kan ka'ida ne kawai, tunda babu wani samfuri na amfani don aiwatar da lambar. duk da haka, amma mai binciken da ya gano matsalar ya rigaya aiki akan halittarsa).

Matsalar tana farawa daga kwaya 3.12 (bisa ga wasu kafofin, matsalar tana bayyana farawa daga kwaya 3.10), wanda aka saki a shekarar 2013. Gyaran yana samuwa a cikin tsari kawai faci. A cikin rarraba matsalar ta kasance ba a gyara ba.
Kuna iya sa ido kan kawar da lahani a cikin rabawa akan waɗannan shafuka: Debian, SUSE/budeSUSE, RHEL, Ubuntu, Arch Linux, Fedora. Wataƙila kuma mai rauni yana tasiri da dandamalin Android.

source: budenet.ru

Add a comment