{"id":183167,"date":"2026-08-28T16:53:41","date_gmt":"2026-08-28T14:53:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimosti-v-linux-i-freebsd-pozvolyayushhie-poluchit-root-dostup-v-sisteme"},"modified":"2026-08-28T16:53:43","modified_gmt":"2026-08-28T14:53:43","slug":"linux-and-freebsd-vulnerabilities-allowing-root-access","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access","title":{"rendered":"Ranljivosti u Linuxu i FreeBSD-ju koje omogu\u0107uju dobivanje root pristupa u sustavu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>U FreeBSD je ispravljeno 8 ranjivosti koje omogu\u0107uju pove\u0107anje privilegija u sustavu. Ranjivosti su ispravljene u a\u017euriranjima FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 i 14.4-RELEASE-p9.   <\/p>\n<ul>\n<li class=\"l\"> CVE-2026-58094 \u2014 stanje trke u implementaciji ioctl operacije FIOSSHMLPGCNF, koja se koristi za postavljanje veli\u010dine stranice deljene memorije. Problem je uzrokovan izostankom postavljanja zaklju\u010davanja pri izvr\u0161avanju operacije provere promene veli\u010dine, \u0161to je omogu\u0107ilo da se slanjem dva simultana zahteva razli\u010ditih veli\u010dina dobiju neispravni parametri objekta.\n<li class=\"l\"> CVE-2026-58093 \u2014 pristup memoriji nakon njenog osloba\u0111anja u implementaciji ioctl TIOCSCTTY, koji se koristi za upravljanje pseudoterminalom. Problem je uzrokovan neispravnim radom sa zaklju\u010davanjima.\n<li class=\"l\"> CVE-2026-58095, CVE-2026-58096, CVE-2026-58097 \u2014 problemi u implementaciji PPP protokola (Point-to-Point Protocol), uzrokovani neispravnom proverom veli\u010dine obra\u0111enih parametara.\n<li class=\"l\"> CVE-2026-58092 \u2014 logi\u010dka gre\u0161ka u modulu mac_do, koji pru\u017ea funkcionalnost za izvr\u0161avanje komandi pod drugim korisnikom. Problem je uzrokovan promenom strukture \u010duvanja informacija o pravima korisnika \u2014 osnovni identifikator grupe korisnika je preba\u010den u posebnu strukturu, ali u funkciji group_is_primary() ovo istra\u017eivanje nije odra\u017eeno i nastavilo je pribavljati informacije prema starom pomeranju.\n<li class=\"l\"> CVE-2026-58091 \u2014 pristup memoriji nakon njenog osloba\u0111anja u implementaciji ioctl SNDCTL_DSP_SYNCSTART, koja se koristi za sinhrono pokretanje reprodukcije na vi\u0161e zvu\u010dnih ure\u0111aja. Ranljivost je uzrokovana neispravnim radom sa zaklju\u010davanjima i o\u010dituje se na sistemima sa vi\u0161e zvu\u010dnih ure\u0111aja.\n<li class=\"l\"> CVE-2026-58090 \u2014 pristup memoriji nakon njenog osloba\u0111anja u implementaciji UNIX soketa, koja se javlja prilikom obrade SOCK_STREAM poruka.\n<li class=\"l\"> CVE-2026-58089 \u2014 logi\u010dka gre\u0161ka u hwpmc drajveru, koji je namenjen pra\u0107enju performansi, zbog koje prikupljanje statistike nije isklju\u010deno nakon pove\u0107anja privilegija pri izvr\u0161avanju suid root procesa. Problem omogu\u0107ava obi\u010dnom korisniku pra\u0107enje aktivnosti u privilegovanim procesima.\n<li class=\"l\"> CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076 \u2014 ranjivosti u openssl biblioteci, uzrokovane prelivanjem baferima, duplim osloba\u0111anjem memorije, problemima sa formatiranjem stringa i dereferenciranjem NULL pokaziva\u010da. Potencijalno neki od problema ne isklju\u010duju mogu\u0107nost organizacije daljinskog izvr\u0161avanja koda.    <\/ul>\n<p>Otkrivene su i nekoliko opasnih problema u Linux jezgru koji omogu\u0107avaju lokalnom korisniku sticanje root prava:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2026-53361 \u2014 pristup memoriji nakon njezina osloba\u0111anja u implementaciji AF_UNIX soketa. Eksploit je objavljen javno, omogu\u0107avaju\u0107i izlazak iz izoliranog kontejnera. Rad eksploita je demonstriran na Ubuntu 24.04, RHEL 10 i Debian 13 s Linux kernelima 6.8, 6.12, 6.14 i 6.17. Problem je re\u0161en u a\u017euriranjima kernela 7.1.0, 6.18.38, 6.12.95 i 6.6.144.\n<li class=\"l\"> CVE-2026-72137 \u2014 dvostruko osloba\u0111anje memorije u modulu nat_keepalive. Problem se javlja po\u010dev\u0161i s kernelom 6.11 i re\u0161en je u izdanjima 7.2.0, 6.12.101, 6.18.40 i 7.1.5. Javna objava rada eksploita omogu\u0107ava sticanje root prava u sistemu.\n<li class=\"l\"> Ranljivosti (CVE nije dodeljen) u eCryptfs datote\u010dnom sistemu, potencijalno dovode\u0107i do izvr\u0161enja koda na nivou jezgra prilikom obrade posebno formiranih \u0161ifrovanih datoteka.\n<li class=\"l\"> Ranljivost (CVE nije dodeljen) u ntfs3 modulu, koja omogu\u0107uje zamenu izvr\u0161ne datoteke sa suid root bitom prilikom montiranja posebno oblikovane FS slike (prikazan je primer eksploatacije ranljivosti za sticanje root prava prilikom automontiranja USB flash diska).\n<li class=\"l\"> Ukupno je u avgustu otkriveno 1668 ranjivosti u Linux jezgru.    <\/ul>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66158\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 \u0438 14.4-RELEASE-p9. CVE-2026-58094 &#8212; \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 ioctl-\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 FIOSSHMLPGCNF, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043c\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0434\u0432\u0443\u0445 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183167","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 \u0438 14.4-RELEASE-p9.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0438 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 \u0438 14.4-RELEASE-p9.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-28T14:53:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-28T14:53:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ranljivosti u Linux-u i FreeBSD-u koje omogu\u0107avaju dobijanje root pristupa u sistemu | ProHoster","description":"U FreeBSD je ispravljeno 8 ranjivosti koje omogu\u0107uju pove\u0107anje privilegija u sustavu. Ranjivosti su ispravljene u a\u017euriranjima FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 i 14.4-RELEASE-p9.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0438 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 \u0438 14.4-RELEASE-p9.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-28T14:53:41+00:00","article:modified_time":"2026-08-28T14:53:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"183167","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-31 11:53:09","updated":"2026-08-31 11:53:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/183167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=183167"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/183167\/revisions"}],"predecessor-version":[{"id":183168,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/183167\/revisions\/183168"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=183167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=183167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=183167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}