Rashin lahani a cikin tsarin kernel na Linux Netfilter

An gano wani rauni a cikin Linux kernel (CVE ba a sanya shi ba) wanda ke ba mai amfani da gida damar samun tushen haƙƙin tushen tsarin. An sanar da cewa an shirya wani amfani wanda ke nuna samun tushen gata a cikin Ubuntu 22.04. An gabatar da facin da zai gyara matsalar don haɗa cikin kwaya.

Rashin lahani yana faruwa ne ta hanyar samun dama ga yankin ƙwaƙwalwar ajiya da aka riga aka 'yanta (amfani bayan-kyauta) lokacin sarrafa lissafin saiti ta amfani da umarnin NFT_MSG_NEWSET a cikin nf_tables module. Don kai harin, ana buƙatar samun damar yin amfani da nftables, waɗanda za a iya samu a cikin keɓantattun wuraren sunaye na cibiyar sadarwa idan kuna da haƙƙin CLONE_NEWUSER, CLONE_NEWNS ko CLONE_NEWNET (misali, idan kuna iya gudanar da akwati keɓe).

source: budenet.ru

Add a comment