Rashin lahani a cikin direban vhost-net daga Linux kernel

A cikin direba na vhost-net, wanda ke tabbatar da aikin virtio net a gefen mahallin mahalli, gano rauni (CVE-2020-10942), ƙyale mai amfani na gida ya fara kwararowar kwaya ta hanyar aika wani tsari na musamman na ioctl(VHOST_NET_SET_BACKEND) zuwa na'urar /dev/vhost-net. Matsalar tana faruwa ne sakamakon rashin ingantaccen ingantaccen abubuwan da ke cikin filin sk_family a cikin lambar aikin get_raw_socket().

Dangane da bayanan farko, ana iya amfani da raunin don kai hari na gida na DoS ta hanyar haifar da haɗarin kwaya (babu wani bayani game da amfani da tulin ambaliya da ya haifar da raunin don tsara aiwatar da lambar).
Varfafawa shafe a cikin Linux kernel 5.5.8 update. Don rarrabawa, zaku iya bin diddigin sakin sabuntawar fakiti akan shafuka Debian, Ubuntu, RHEL, SUSE/budeSUSE, Fedora, Arch.

source: budenet.ru

Add a comment