{"id":103053,"date":"2022-01-21T15:36:44","date_gmt":"2022-01-21T13:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b"},"modified":"2022-01-21T15:36:44","modified_gmt":"2022-01-21T13:36:44","slug":"%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b","title":{"rendered":"Kib\u0151v\u00edtett Linux VFS sebezhet\u0151s\u00e9g, amely lehet\u0151v\u00e9 teszi a jogosults\u00e1gok emel\u00e9s\u00e9t.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Filesystem Context API vulnerability has been discovered in the Linux kernel (CVE-2022-0185), allowing a local user to gain root privileges on the system. The researcher who identified the issue has published a demonstration of an exploit that enables code execution with root privileges in Ubuntu 20.04 in its default configuration. The exploit code is expected to be posted on GitHub within a week, after the distributions release an update with a fix for the vulnerability. <\/p>\n

A sebezhet\u0151s\u00e9g a VFS-ben tal\u00e1lhat\u00f3 legacy_parse_param() f\u00fcggv\u00e9nyben van, \u00e9s az API Filesystem Context-et nem t\u00e1mogat\u00f3 f\u00e1jlrendszerek \u00e1ltal megadott param\u00e9terek maxim\u00e1lis m\u00e9ret\u00e9nek megfelel\u0151 ellen\u0151rz\u00e9s hi\u00e1ny\u00e1b\u00f3l ered. Ha t\u00fal nagy param\u00e9tert adunk \u00e1t, akkor van lehet\u0151s\u00e9g eg\u00e9sz sz\u00e1m v\u00e1ltoz\u00f3 t\u00falcsordul\u00e1s\u00e1nak kiv\u00e1lt\u00e1s\u00e1ra, amelyet az \u00edrand\u00f3 adatok m\u00e9ret\u00e9nek kisz\u00e1m\u00edt\u00e1s\u00e1hoz haszn\u00e1lnak - a k\u00f3dban van egy hat\u00e1r\u00e9rt\u00e9k-ellen\u0151rz\u00e9s «if (len > PAGE_SIZE - 2 - size)», amely nem aktiv\u00e1l\u00f3dik, ha a size \u00e9rt\u00e9ke meghaladja a 4094-et, ami az als\u00f3 hat\u00e1ron val\u00f3 eg\u00e9sz sz\u00e1m t\u00falcsordul\u00e1s miatt (integer underflow, a 4096 - 2 - 4095 \u00e1talak\u00edt\u00e1sakor unsigned int-re 2147483648 j\u00f6n ki). <\/p>\n

This flaw allows a specially crafted filesystem image to trigger a buffer overflow and overwrite kernel data following the allocated memory area. Exploitation of the vulnerability requires possession of CAP_SYS_ADMIN rights, i.e., administrative privileges. The issue is that an unprivileged user can obtain such privileges within an isolated container if user namespace support is enabled in the system. For example, user namespaces are enabled by default in Ubuntu and Fedora but are not activated in Debian and RHEL (unless container isolation platforms are used). <\/p>\n

A probl\u00e9ma a Linux 5.1 kernel verzi\u00f3j\u00e1t\u00f3l kezdve jelentkezik, \u00e9s a tegnapi friss\u00edt\u00e9sekben (5.16.2, 5.15.16, 5.10.93, 5.4.173) megold\u00e1sra ker\u00fclt. A sebezhet\u0151s\u00e9get jav\u00edt\u00f3 csomagfriss\u00edt\u00e9sek m\u00e1r megjelentek RHEL, Debian, Fedora \u00e9s Ubuntu sz\u00e1m\u00e1ra. A jav\u00edt\u00e1s jelenleg nem \u00e9rhet\u0151 el Arch Linux, Gentoo, SUSE \u00e9s openSUSE rendszerekhez. A kont\u00e9neriz\u00e1lt izol\u00e1ci\u00f3t nem haszn\u00e1l\u00f3 rendszerek v\u00e9delm\u00e9re ideiglenes megold\u00e1sk\u00e9nt a sysctl «user.max_user_namespaces» \u00e9rt\u00e9k\u00e9t 0-ra \u00e1ll\u00edthatjuk: echo «user.max_user_namespaces=0» > \/etc\/sysctl.d\/userns.conf # sysctl -p \/etc\/sysctl.d\/userns.conf
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 API Filesystem Context, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u044f\u0434\u0440\u043e\u043c Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-0185), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0432 Ubuntu 20.04 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u041a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u043d\u0430 GitHub \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u044f\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103053","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00e9r\u00fcl\u00e9kenys\u00e9g a Linux kernel VFS-ben, amely lehet\u0151v\u00e9 teszi a jogosults\u00e1gok emel\u00e9s\u00e9t | ProHoster","description":"A Linux kernel \u00e1ltal biztos\u00edtott API Filesystem Context-ben egy s\u00e9r\u00fcl\u00e9kenys\u00e9get (CVE-2022-0185) fedeztek fel, amely lehet\u0151v\u00e9 teszi a helyi felhaszn\u00e1l\u00f3 sz\u00e1m\u00e1ra, hogy root jogosults\u00e1gokat szerezzen a rendszerben.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VFS \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 | ProHoster","og:description":"\u0412 API Filesystem Context, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u044f\u0434\u0440\u043e\u043c Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-0185), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-vfs-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d0%bf%d0%be%d0%b2%d1%8b","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-21T13:36:44+00:00","article:modified_time":"2022-01-21T13:36:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103053","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-21 13:38:17","updated":"2022-09-27 16:20:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/103053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=103053"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/103053\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=103053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=103053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=103053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}