Rashin lahani a cikin vhost-net wanda ke ba da izinin keɓancewa a cikin tsarin da ya danganci QEMU-KVM

Ya bayyana bayani game da rauni (CVE-2019-14835), wanda ke ba ku damar wuce tsarin baƙo a cikin KVM (qemu-kvm) kuma ku gudanar da lambar ku a gefen mahallin mahalli a cikin mahallin Linux kernel. An sanya ma raunin suna V-gHost. Matsalar ta ba da damar tsarin baƙo don ƙirƙirar yanayi don buffer ambaliya a cikin vhost-net kernel module (matsalar cibiyar sadarwa don virtio), wanda aka kashe a gefen mahallin mahalli. Wani maharin zai iya kai harin tare da damar shiga tsarin baƙo yayin aikin ƙaura na inji.

Gyara Matsala hade An haɗa shi a cikin Linux 5.3 kernel. A matsayin wuraren aiki don toshe raunin, zaku iya musaki ƙaura kai tsaye na tsarin baƙo ko kashe tsarin vhost-net (ƙara "blacklist vhost-net" zuwa /etc/modprobe.d/blacklist.conf). Matsalar ta bayyana farawa daga Linux kernel 2.6.34. An daidaita raunin a ciki Ubuntu и Fedora, amma har yanzu ba a gyara ba a ciki Debian, Arch Linux, SUSE и RHEL.

source: budenet.ru

Add a comment