{"id":104123,"date":"2022-05-23T15:36:40","date_gmt":"2022-05-23T13:36:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-5-18"},"modified":"2022-05-23T15:36:40","modified_gmt":"2022-05-23T13:36:40","slug":"reliz-yadra-linux-5-18","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-5-18","title":{"rendered":"A Linux 5.18 kernel kiad\u00e1sa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>K\u00e9t h\u00f3napos fejleszt\u00e9s ut\u00e1n Linus Torvalds bemutatta a Linux 5.18 kernel kiad\u00e1s\u00e1t. Az egyik legszembet\u0171n\u0151bb v\u00e1ltoz\u00e1s: jelent\u0151s takar\u00edt\u00e1st v\u00e9geztek elavult funkci\u00f3kon, a Reiserfs f\u00e1jlrendszert elavultnak nyilv\u00e1n\u00edtott\u00e1k, felhaszn\u00e1l\u00f3i folyamatok nyomk\u00f6vet\u00e9si esem\u00e9nyei lettek bevezetve, t\u00e1mogat\u00e1st kaptak az Intel IBT exploitok m\u0171k\u00f6d\u00e9s\u00e9nek blokkol\u00e1s\u00e1ra, \u00fajra lehet\u0151s\u00e9g ny\u00edlt a buffer t\u00falcsordul\u00e1s\u00e1nak \u00e9szlel\u00e9s\u00e9re a memcpy() f\u00fcggv\u00e9ny haszn\u00e1lata sor\u00e1n, fprobe funkci\u00f3h\u00edv\u00e1sok nyomk\u00f6vet\u00e9si mechanizmus\u00e1t bevezett\u00e9k, a CPU AMD Zen \u00fctemez\u0151 teljes\u00edtm\u00e9nye javult, a vez\u00e9rl\u0151be integr\u00e1lva lett az Intel CPU (SDS) m\u0171k\u00f6d\u00e9s\u00e9\u00e9rt felel\u0151s illeszt\u0151program, valamint integr\u00e1ltak n\u00e9h\u00e1ny jav\u00edt\u00e1st a fejl\u00e9cf\u00e1jlok \u00e1tszervez\u00e9s\u00e9hez, j\u00f3v\u00e1hagyt\u00e1k a C11 szabv\u00e1ny alkalmaz\u00e1s\u00e1t.      <\/p>\n<p>Az \u00faj verzi\u00f3ban 16206 jav\u00edt\u00e1s tal\u00e1lhat\u00f3 2127 fejleszt\u0151t\u0151l (a kor\u00e1bbi kiad\u00e1sban 14203 jav\u00edt\u00e1s volt 1995 fejleszt\u0151t\u0151l), a folt m\u00e9rete 108 MB (a v\u00e1ltoz\u00e1sok 14235 f\u00e1jlt \u00e9rintettek, 1340982 k\u00f3dsor lett hozz\u00e1adva, 593836 k\u00f3dsor elt\u00e1vol\u00edtva). A 5.18 verzi\u00f3ban a bemutatott v\u00e1ltoz\u00e1sok k\u00f6r\u00fclbel\u00fcl 44%-a eszk\u00f6zmeghajt\u00f3kkal kapcsolatos, k\u00f6r\u00fclbel\u00fcl 16% a hardverarchitekt\u00far\u00e1kra specifikus k\u00f3d friss\u00edt\u00e9s\u00e9vel, 11% a h\u00e1l\u00f3zati veremmel, 3% a f\u00e1jlrendszerekkel \u00e9s 3% a kern bels\u0151 alrendszereivel foglalkozik.           <\/p>\n<p>Az 5.18 kernel f\u0151 \u00faj\u00edt\u00e1sai:    <\/p>\n<ul>\n<li class=\"l\"> <b>Lemezszubsziszt\u00e9ma, bemenet\/kipontoz\u00e1s \u00e9s f\u00e1jlrendszerek<\/b>\n<ul>\n<li class=\"l\"> A Btrfs f\u00e1jlrendszerben bevezett\u00e9k a t\u00f6m\u00f6r\u00edtett adatok \u00e1tkonvert\u00e1l\u00e1s\u00e1nak t\u00e1mogat\u00e1s\u00e1t a send \u00e9s receive m\u0171veletek sor\u00e1n. Kor\u00e1bban a send\/receive haszn\u00e1latakor az elk\u00fcld\u0151 f\u00e9l kicsomagolta a t\u00f6m\u00f6r\u00edtett form\u00e1ban t\u00e1rolt adatokat, m\u00edg a fogad\u00f3 f\u00e9l \u00fajra t\u00f6m\u00f6r\u00edtette az \u00edr\u00e1s el\u0151tt. Az 5.18 kernelben a felhaszn\u00e1l\u00f3i t\u00e9rben m\u0171k\u00f6d\u0151 alkalmaz\u00e1sok, amelyek send\/receive h\u00edv\u00e1sokat haszn\u00e1lnak, lehet\u0151s\u00e9get kaptak a t\u00f6m\u00f6r\u00edtett adatok \u00e1tkonvert\u00e1l\u00e1s n\u00e9lk\u00fcli tov\u00e1bb\u00edt\u00e1s\u00e1ra. E funkci\u00f3t az \u00faj ioctl m\u0171veletek, a BTRFS_IOC_ENCODED_READ \u00e9s BTRFS_IOC_ENCODED_WRITE r\u00e9v\u00e9n val\u00f3s\u00edtott\u00e1k meg, amelyek lehet\u0151v\u00e9 teszik az inform\u00e1ci\u00f3k k\u00f6zvetlen olvas\u00e1s\u00e1t \u00e9s \u00edr\u00e1s\u00e1t az extentsbe.\n<p>Tov\u00e1bb\u00e1 a Btrfs-ben jav\u00edtott\u00e1k az fsync teljes\u00edtm\u00e9ny\u00e9t. Bevezett\u00e9k a deduplik\u00e1l\u00e1s \u00e9s a reflink v\u00e9grehajt\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9t (f\u00e1jlmetadatok kl\u00f3noz\u00e1sa olyan referencia l\u00e9trehoz\u00e1s\u00e1val, amely m\u00e1r l\u00e9tez\u0151 adatokat haszn\u00e1l m\u00e1sol\u00e1s n\u00e9lk\u00fcl) az eg\u00e9sz t\u00e1rol\u00f3ra, nem korl\u00e1tozva a csatolt pontokra.         <\/p>\n<li class=\"l\"> A k\u00f6zvetlen bel\u00e9p\u00e9si\/m\u0171veleti (Direct I\/O) m\u00f3dban lehet\u0151s\u00e9g van a titkos\u00edtott f\u00e1jlok el\u00e9r\u00e9s\u00e9re az fscrypt inline titkos\u00edt\u00e1s\u00e1nak haszn\u00e1lat\u00e1val, amelyben a titkos\u00edt\u00e1si \u00e9s visszafejt\u00e9si m\u0171veleteket a t\u00e1rol\u00f3vez\u00e9rl\u0151 v\u00e9gzi, nem a kernel. A szok\u00e1sos kernel \u00e1ltali titkos\u00edt\u00e1s eset\u00e9n a Direct I\/O-n kereszt\u00fcli hozz\u00e1f\u00e9r\u00e9s a titkos\u00edtott f\u00e1jlokhoz, mint kor\u00e1bban, nem lehets\u00e9ges, mivel a f\u00e1jlokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s a kernel pufferez\u00e9si mechanizmus\u00e1t megker\u00fclve t\u00f6rt\u00e9nik.\n<li class=\"l\"> Az NFS-szerverben alap\u00e9rtelmez\u00e9s szerint enged\u00e9lyezve van az NFSv3 protokoll t\u00e1mogat\u00e1sa, amelyet most m\u00e1r nem sz\u00fcks\u00e9ges k\u00fcl\u00f6n aktiv\u00e1lni, \u00e9s az NFS \u00e1ltal\u00e1nos enged\u00e9lyez\u00e9s\u00e9vel \u00e9rhet\u0151 el. Az NFSv3 az alap\u00e9rtelmezett \u00e9s mindig t\u00e1mogatott NFS verzi\u00f3k\u00e9nt van sz\u00e1mon tartva, m\u00edg az NFSv2 t\u00e1mogat\u00e1s\u00e1t a j\u00f6v\u0151ben lehets\u00e9ges, hogy megsz\u00fcntetik. Jelent\u0151sen n\u00f6velt\u00e9k a k\u00f6nyvt\u00e1r tartalm\u00e1nak olvas\u00e1s\u00e1nak hat\u00e9konys\u00e1g\u00e1t.\n<li class=\"l\"> A ReiserFS f\u00e1jlrendszer lej\u00e1rt st\u00e1tuszra ker\u00fclt, \u00e9s 2025-re v\u00e1rhat\u00f3 a t\u00f6rl\u00e9se. A ReiserFS elavult st\u00e1tuszra val\u00f3 \u00e1t\u00e1ll\u00edt\u00e1sa cs\u00f6kkenti a k\u00fcl\u00f6nb\u00f6z\u0151 f\u00e1jlrendszerek k\u00f6z\u00f6tti k\u00f6z\u00f6s API t\u00e1mogat\u00e1ssal kapcsolatos karbantart\u00e1si munk\u00e1t, amely a mountol\u00e1s, iomap \u00e9s k\u00f6tetek t\u00e1mogat\u00e1s\u00e1val kapcsolatos.\n<li class=\"l\"> Az F2FS f\u00e1jlrendszerhez megval\u00f3s\u00edtott\u00e1k a felhaszn\u00e1l\u00f3i azonos\u00edt\u00f3k mappolt f\u00e1jlrendszereken t\u00f6rt\u00e9n\u0151 mappol\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9t, amely a meghat\u00e1rozott felhaszn\u00e1l\u00f3 f\u00e1jljainak p\u00e1ros\u00edt\u00e1s\u00e1ra szolg\u00e1l a csatolt idegen part\u00edci\u00f3n a jelenlegi rendszer m\u00e1s felhaszn\u00e1l\u00f3j\u00e1val.\n<li class=\"l\"> A Device-mapper kezel\u0151k statisztikai sz\u00e1m\u00edt\u00e1si k\u00f3dja \u00e1t lett dolgozva, ami lehet\u0151v\u00e9 tette a pontosabb elsz\u00e1mol\u00e1st az olyan kezel\u0151kben, mint a dm-crypt.\n<li class=\"l\"> NVMe eszk\u00f6z\u00f6k sz\u00e1m\u00e1ra 64 bites ellen\u0151rz\u0151\u00f6sszegek t\u00e1mogat\u00e1s\u00e1t val\u00f3s\u00edtott\u00e1k meg az integrit\u00e1s ellen\u0151rz\u00e9s\u00e9re.\n<li class=\"l\"> Az exfat f\u00e1jlrendszerhez \u00faj, \"keep_last_dots\" nev\u0171 csatlakoz\u00e1si lehet\u0151s\u00e9get javasoltak, amely megakad\u00e1lyozza a f\u00e1jln\u00e9v v\u00e9g\u00e9n l\u00e9v\u0151 pontok t\u00f6rl\u00e9s\u00e9t (Windows alatt a n\u00e9v v\u00e9g\u00e9n l\u00e9v\u0151 pontokat alap\u00e9rtelmez\u00e9s szerint t\u00f6rlik).\n<li class=\"l\"> Az EXT4-ben javult a fast_commit \u00fczemm\u00f3d teljes\u00edtm\u00e9nye \u00e9s n\u0151tt a sk\u00e1l\u00e1zhat\u00f3s\u00e1g. A \"mb_optimize_scan\" csatlakoz\u00e1si opci\u00f3, amely n\u00f6veli a teljes\u00edtm\u00e9nyt jelent\u0151s fragment\u00e1ci\u00f3s k\u00f6r\u00fclm\u00e9nyek k\u00f6z\u00f6tt, optimaliz\u00e1lva lett a b\u0151v\u00edtm\u00e9nyekkel rendelkez\u0151 f\u00e1jlokkal val\u00f3 m\u0171k\u00f6d\u00e9shez.\n<li class=\"l\"> A write stream support has been discontinued in the subsystem that facilitates the operation of block devices. This feature was proposed for SSDs but did not gain traction, and currently, there are no devices supporting this mode, making it unlikely that they will appear in the future.                      <\/ul>\n<li class=\"l\"> <b>Mem\u00f3ria \u00e9s rendszerszolg\u00e1ltat\u00e1sok<\/b>\n<ul>\n<li class=\"l\"> The integration of a patch set has begun, allowing for a significant reduction in kernel rebuild time through the restructuring of header file hierarchies and a decrease in the number of cross dependencies. The kernel 5.18 includes patches that optimize the structure of task scheduler header files (kernel\/sched). Compared to the previous release, CPU time consumption during the code compilation of kernel\/sched has decreased by 61%, with actual time reduced by 3.9% (from 2.95 to 2.84 seconds).\n<li class=\"l\"> A kernel k\u00f3dj\u00e1ban enged\u00e9lyez\u00e9sre ker\u00fclt a C11 szabv\u00e1ny haszn\u00e1lata, amelyet 2011-ben publik\u00e1ltak. Kor\u00e1bban a kernelbe hozz\u00e1adott k\u00f3dnak meg kellett felelnie az 1989-es ANSI C (C89) specifik\u00e1ci\u00f3nak. Az 5.18 kernel \u00e9p\u00edt\u00e9si skripjeiben a '--std=gnu89' opci\u00f3t a '--std=gnu11 -Wno-shift-negative-value' opci\u00f3ra cser\u00e9lt\u00e9k. Megfontolt\u00e1k a C17 szabv\u00e1ny alkalmaz\u00e1s\u00e1t, de ebben az esetben a minim\u00e1lisan t\u00e1mogatott GCC verzi\u00f3t kellene emelni, m\u00edg a C11 t\u00e1mogat\u00e1s\u00e1nak bevezet\u00e9se a jelenlegi GCC verzi\u00f3 k\u00f6vetelm\u00e9nyein bel\u00fcl marad (5.1).\n<li class=\"l\"> Task scheduling performance has been enhanced on AMD processors with Zen microarchitecture, where multiple last-level caches (LLC) are provided for each node with local memory channels. The new version has eliminated the LLC imbalance between NUMA nodes, which significantly improves performance under certain workloads.\n<li class=\"l\"> Enhanced tools for application tracing in user space have been introduced. In the new kernel version, custom processes can create user events and write data to the trace buffer, which can be viewed through standard kernel tracing utilities such as ftrace and perf. User space tracing events are isolated from kernel tracing events. The status of events can be viewed via the file \/sys\/kernel\/debug\/tracing\/user_events_status, while event registration and data writing can be done through the file \/sys\/kernel\/debug\/tracing\/user_events_data.\n<li class=\"l\"> Bevezet\u00e9sre ker\u00fclt a h\u00edv\u00e1sok nyomk\u00f6vet\u00e9s\u00e9re szolg\u00e1l\u00f3 mechanizmus \u2014 fprobe. Az fprobe API az ftrace-re \u00e9p\u00fcl, de csak a callback-kezel\u0151k funkci\u00f3ba val\u00f3 bel\u00e9p\u00e9s\u00e9nek \u00e9s a funkci\u00f3 befejez\u00e9s\u00e9nek pontjaira val\u00f3 csatlakoz\u00e1s lehet\u0151s\u00e9g\u00e9vel korl\u00e1toz\u00f3dik. A kprobes \u00e9s kretprobes verzi\u00f3kkal ellent\u00e9tben az \u00faj mechanizmus lehet\u0151v\u00e9 teszi, hogy egy kezel\u0151 azonnal t\u00f6bb funkci\u00f3hoz is kapcsol\u00f3djon.\n<li class=\"l\"> Megsz\u0171nt a r\u00e9gi ARM processzorok (ARMv4 \u00e9s ARMv5) t\u00e1mogat\u00e1sa, amelyek nem rendelkeznek mem\u00f3ria kezel\u0151 egys\u00e9ggel (MMU). Az ARMv7-M rendszerek MMU n\u00e9lk\u00fcli t\u00e1mogat\u00e1sa megmaradt.\n<li class=\"l\"> Megsz\u0171nt a RISC-alap\u00fa NDS32 architekt\u00fara t\u00e1mogat\u00e1sa, amelyet az Andes Technologies processzorai haszn\u00e1ltak. A k\u00f3d elt\u00e1vol\u00edt\u00e1sra ker\u00fclt, mert nem volt karbantartva, \u00e9s az NDS32 t\u00e1mogat\u00e1sa az alap Linux kernelben nem volt ig\u00e9nyelt (a megmaradt felhaszn\u00e1l\u00f3k a gy\u00e1rt\u00f3k \u00e1ltal biztos\u00edtott speci\u00e1lis kernel-gy\u0171jtem\u00e9nyeket haszn\u00e1lj\u00e1k).\n<li class=\"l\"> Alap\u00e9rtelmez\u00e9s szerint letiltott\u00e1k az a.out form\u00e1tum\u00fa v\u00e9grehajthat\u00f3 f\u00e1jlok kernel-gy\u0171jt\u00e9s\u00e9t az alpha \u00e9s m68k architekt\u00far\u00e1kon, ahol ez a form\u00e1tum tov\u00e1bbra is haszn\u00e1latban van. Val\u00f3sz\u00edn\u0171leg a r\u00e9gi a.out form\u00e1tum teljes elt\u00e1vol\u00edt\u00e1sa hamarosan meg fog val\u00f3sulni a kernel-b\u0151l. Az a.out form\u00e1tum elt\u00e1vol\u00edt\u00e1s\u00e1ra vonatkoz\u00f3 tervek 2019 \u00f3ta folyamatban vannak.\n<li class=\"l\"> A PA-RISC architekt\u00far\u00e1hoz minim\u00e1lis t\u00e1mogat\u00e1st ny\u00fajt a vDSO (virtu\u00e1lis dinamikusan megosztott objektumok) mechanizmus, amely korl\u00e1tozott sz\u00e1m\u00fa rendszerh\u00edv\u00e1st biztos\u00edt a felhaszn\u00e1l\u00f3i t\u00e9rben kontextusv\u00e1lt\u00e1s n\u00e9lk\u00fcl. A vDSO t\u00e1mogat\u00e1s lehet\u0151v\u00e9 tette a nem v\u00e9grehajthat\u00f3 veremr\u0151l val\u00f3 fut\u00e1st.\n<li class=\"l\"> Hozz\u00e1adva az Intel HFI (Hardware Feedback Interface) mechanizmus t\u00e1mogat\u00e1sa, amely lehet\u0151v\u00e9 teszi a hardver sz\u00e1m\u00e1ra, hogy inform\u00e1ci\u00f3t adjon a kernelnek az egyes CPU-k aktu\u00e1lis teljes\u00edtm\u00e9ny\u00e9r\u0151l \u00e9s energiahat\u00e9konys\u00e1g\u00e1r\u00f3l.\n<li class=\"l\"> Hozz\u00e1adtak egy drivert az Intel SDSi (Software-Defined Silicon) mechanizmushoz, amely lehet\u0151v\u00e9 teszi a processzornak tov\u00e1bbi k\u00e9pess\u00e9gek bekapcsol\u00e1s\u00e1t (p\u00e9ld\u00e1ul speci\u00e1lis utas\u00edt\u00e1sok \u00e9s plusz cache mem\u00f3ria). Az elk\u00e9pzel\u00e9s az, hogy alacsonyabb \u00e1ron k\u00edn\u00e1ljanak olyan chippeket, amelyekhez lez\u00e1rt kiterjesztett funkci\u00f3k tartoznak, amelyeket k\u00e9s\u0151bb \"meg lehet v\u00e1s\u00e1rolni\" \u00e9s aktiv\u00e1lni az extra k\u00e9pess\u00e9geket hardvercsere n\u00e9lk\u00fcl.\n<li class=\"l\"> Hozz\u00e1adva az amd_hsmp illeszt\u0151program az AMD HSMP (Host System Management Port) interf\u00e9sz t\u00e1mogat\u00e1s\u00e1hoz, amely hozz\u00e1f\u00e9r\u00e9st biztos\u00edt a processzorvez\u00e9rl\u00e9si funkci\u00f3khoz a speci\u00e1lis regiszterek k\u00e9szlet\u00e9n kereszt\u00fcl, amelyek az AMD EPYC szerverprocesszorokban jelentek meg a Fam19h gener\u00e1ci\u00f3 \u00f3ta. P\u00e9ld\u00e1ul az HSMP-n kereszt\u00fcl lek\u00e9rhet\u0151k az energiafogyaszt\u00e1si \u00e9s h\u0151m\u00e9rs\u00e9kleti adatok, be\u00e1ll\u00edthat\u00f3k a frekvenciatartom\u00e1nyok, aktiv\u00e1lhat\u00f3k k\u00fcl\u00f6nb\u00f6z\u0151 teljes\u00edtm\u00e9nyfokoz\u00f3 m\u00f3dok, valamint vez\u00e9relhet\u0151k a mem\u00f3ria m\u0171k\u00f6d\u00e9si param\u00e9terei.\n<li class=\"l\"> Az io_uring aszinkron bemenet\/kimenet interf\u00e9sz\u00e9n megval\u00f3s\u00edtott\u00e1k az IORING_SETUP_SUBMIT_ALL opci\u00f3t, amely lehet\u0151v\u00e9 teszi f\u00e1jlle\u00edr\u00f3k k\u00e9szlet\u00e9nek regisztr\u00e1l\u00e1s\u00e1t a gy\u0171r\u0171s pufferen, valamint az IORING_OP_MSG_RING m\u0171veletet, amely lehet\u0151v\u00e9 teszi egy gy\u0171r\u0171s pufferr\u0151l a jelk\u00fcld\u00e9st egy m\u00e1sik gy\u0171r\u0171s pufferr\u0151l.\n<li class=\"l\"> A DAMOS (Data Access Monitoring-based Operation Schemes) mechanizmusban, amely lehet\u0151v\u00e9 teszi a mem\u00f3ria felszabad\u00edt\u00e1s\u00e1t a mem\u00f3riahozz\u00e1f\u00e9r\u00e9sek gyakoris\u00e1g\u00e1nak figyelembev\u00e9tel\u00e9vel, kib\u0151v\u00fclt a felhaszn\u00e1l\u00f3i t\u00e9rb\u0151l sz\u00e1rmaz\u00f3 mem\u00f3ria m\u0171veletek ellen\u0151rz\u00e9s\u00e9nek lehet\u0151s\u00e9geivel.\n<li class=\"l\"> Integr\u00e1lt\u00e1k a mem\u00f3riafoly\u00f3k (page folios) koncepci\u00f3j\u00e1nak megval\u00f3s\u00edt\u00e1s\u00e1t tartalmaz\u00f3 patch-ek harmadik sorozat\u00e1t, amelyek hasonl\u00edtanak a kombin\u00e1lt oldalakr\u00f3l (compound pages) k\u00e9sz\u00fclt oldalra, de jav\u00edtott szemantik\u00e1val \u00e9s \u00e9rthet\u0151bb m\u0171k\u00f6d\u00e9si szervezettel rendelkeznek. A foly\u00f3k haszn\u00e1lata felgyors\u00edtja a mem\u00f3ria kezel\u00e9s\u00e9t egyes kernel alrendszerekben. A javasolt patch-ek v\u00e9grehajtj\u00e1k a bels\u0151 mem\u00f3riair\u00e1ny\u00edt\u00f3 funkci\u00f3k foly\u00f3kra t\u00f6rt\u00e9n\u0151 \u00e1tvitel\u00e9t, bele\u00e9rtve a get_user_pages() funkci\u00f3 k\u00fcl\u00f6nb\u00f6z\u0151 fajt\u00e1it. T\u00e1mogatj\u00e1k a nagyobb foly\u00f3k l\u00e9trehoz\u00e1s\u00e1t az adatok el\u0151zetes olvas\u00e1sa sor\u00e1n.\n<li class=\"l\"> A build rendszerben megjelent az USERCFLAGS \u00e9s USERLDFLAGS k\u00f6rnyezeti v\u00e1ltoz\u00f3k t\u00e1mogat\u00e1sa, amelyek seg\u00edts\u00e9g\u00e9vel tov\u00e1bbi z\u00e1szl\u00f3kat lehet \u00e1tadni a ford\u00edt\u00f3nak \u00e9s a linkernek.\n<li class=\"l\"> Az eBPF alrendszerben a BTF (BPF Type Format) mechanizmusban, amely inform\u00e1ci\u00f3t ny\u00fajt a BPF \u00e1lk\u00f3d t\u00edpusellen\u0151rz\u00e9s\u00e9hez, megval\u00f3s\u00edtott\u00e1k a v\u00e1ltoz\u00f3khoz val\u00f3 annot\u00e1ci\u00f3k hozz\u00e1ad\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9t, amelyek a felhaszn\u00e1l\u00f3i t\u00e9r mem\u00f3riater\u00fcleteire hivatkoznak. Az annot\u00e1ci\u00f3k seg\u00edtik a BPF-k\u00f3d ellen\u0151rz\u00e9s\u00e9\u00e9rt felel\u0151s rendszert a mem\u00f3riahozz\u00e1f\u00e9r\u00e9sek pontosabb azonos\u00edt\u00e1s\u00e1ban \u00e9s ellen\u0151rz\u00e9s\u00e9ben.\n<li class=\"l\"> Javasolt egy \u00faj mem\u00f3riaallok\u00e1l\u00f3 kezel\u0151 a bet\u00f6lt\u00f6tt BPF programok t\u00e1rol\u00e1s\u00e1hoz, amely hat\u00e9konyabban haszn\u00e1lja fel a mem\u00f3ri\u00e1t nagysz\u00e1m\u00fa BPF program bet\u00f6lt\u00e9sekor.\n<li class=\"l\"> A madvise() rendszerh\u00edv\u00e1sban, amely a folyamat mem\u00f3ria kezel\u00e9s\u00e9nek optimaliz\u00e1l\u00e1s\u00e1hoz sz\u00fcks\u00e9ges eszk\u00f6z\u00f6ket biztos\u00edt, hozz\u00e1adva a MADV_DONTNEED_LOCKED z\u00e1szl\u00f3t, amely kieg\u00e9sz\u00edti a m\u00e1r l\u00e9tez\u0151 MADV_DONTNEED z\u00e1szl\u00f3t. Ezen kereszt\u00fcl a kernel el\u0151zetesen \u00e9rtes\u00edtheti az eml\u00e9kezeti blokk felold\u00e1s\u00e1nak sz\u00e1nd\u00e9k\u00e1r\u00f3l, azaz hogy az adott blokk m\u00e1r nem sz\u00fcks\u00e9ges \u00e9s a kernel \u00e1ltal felhaszn\u00e1lhat\u00f3. A MADV_DONTNEED-t\u0151l elt\u00e9r\u0151en a MADV_DONTNEED_LOCKED z\u00e1szl\u00f3 alkalmaz\u00e1sa enged\u00e9lyezett a RAM-ban r\u00f6gz\u00edtett mem\u00f3riaoldalak sz\u00e1m\u00e1ra, amelyek a madvise h\u00edv\u00e1skor kihelyez\u0151dnek an\u00e9lk\u00fcl, hogy megv\u00e1ltoztatn\u00e1k r\u00f6gz\u00edtett st\u00e1tuszukat, \u00e9s a blokkhoz val\u00f3 k\u00e9s\u0151bbi hozz\u00e1f\u00e9r\u00e9s eset\u00e9n, ha 'page fault' keletkezik, meg\u0151rizz\u00e9k a k\u00f6t\u0151d\u00e9st. Tov\u00e1bb\u00e1 hozz\u00e1ad\u00e1sra ker\u00fclt egy m\u00f3dos\u00edt\u00e1s, amely lehet\u0151v\u00e9 teszi a MADV_DONTNEED z\u00e1szl\u00f3 haszn\u00e1lat\u00e1t a HugeTLB nagy mem\u00f3riaoldalakkal.              <\/ul>\n<li class=\"l\"> <b>Virtualiz\u00e1ci\u00f3 \u00e9s biztons\u00e1g<\/b>\n<ul>\n<li class=\"l\"> Az x86 architekt\u00far\u00e1hoz hozz\u00e1adt\u00e1k az Intel IBT (Indirect Branch Tracking) utas\u00edt\u00e1sv\u00e9grehajt\u00e1si v\u00e9delmi mechanizmus t\u00e1mogat\u00e1s\u00e1t, amely megakad\u00e1lyozza az exploitek \u00e9p\u00edt\u00e9s\u00e9nek technik\u00e1it visszah\u00edv\u00e1s-orient\u00e1lt programoz\u00e1ssal (ROP, Return-Oriented Programming). Ezekben az esetekben az exploit m\u00e1r a mem\u00f3ri\u00e1ban l\u00e9v\u0151 g\u00e9pi utas\u00edt\u00e1sokb\u00f3l \u00e1ll\u00f3 h\u00edv\u00e1si l\u00e1nc form\u00e1j\u00e1ban \u00e9p\u00fcl fel, \u00e9s az utols\u00f3 l\u00e9p\u00e9s \u00e1ltal\u00e1ban egy visszat\u00e9r\u00e9si utas\u00edt\u00e1s. A megval\u00f3s\u00edtott v\u00e9delmi m\u00f3dszer l\u00e9nyege, hogy blokkolja az indirekt ugr\u00e1sokat a f\u00fcggv\u00e9ny test\u00e9re, speci\u00e1lis ENDBR utas\u00edt\u00e1s hozz\u00e1ad\u00e1s\u00e1val a f\u00fcggv\u00e9ny elej\u00e9re, \u00e9s lehet\u0151v\u00e9 teszi az indirekt ugr\u00e1s v\u00e9grehajt\u00e1s\u00e1t csak akkor, ha az ENDBR utas\u00edt\u00e1sra ugrik (minden indirekt h\u00edv\u00e1s, mint a JMP \u00e9s CALL, mindig az ENDBR utas\u00edt\u00e1sra kell, hogy \u00e9rkezzen, amely a f\u00fcggv\u00e9ny elej\u00e9n tal\u00e1lhat\u00f3).\n<li class=\"l\"> Szigor\u00fabb hat\u00e1rellen\u0151rz\u00e9st vezettek be a memcpy(), memmove() \u00e9s memset() f\u00fcggv\u00e9nyekben, amelyet a ford\u00edt\u00e1si szakaszban hajtanak v\u00e9gre a CONFIG_FORTIFY_SOURCE m\u00f3d aktiv\u00e1l\u00e1sakor. A m\u00f3dos\u00edt\u00e1s c\u00e9lja a strukt\u00far\u00e1k elemeinek hat\u00e1rait t\u00fall\u00e9p\u0151 ellen\u0151rz\u00e9s, ahol az elemek m\u00e9rete ismert. Megjegyzend\u0151, hogy ez a megval\u00f3s\u00edtott k\u00e9pess\u00e9g lehet\u0151v\u00e9 tenn\u00e9 a kernelben a memcpy()-hez kapcsol\u00f3d\u00f3 \u00f6sszes puffer-t\u00falt\u00f6lt\u00e9s blokkol\u00e1s\u00e1t, amelyeket az elm\u00falt legal\u00e1bb h\u00e1rom \u00e9vben \u00e9szleltek.\n<li class=\"l\"> Hozz\u00e1adva a m\u00e1sodik r\u00e9sz a friss\u00edtett RDRAND \u00e1l-random sz\u00e1mgener\u00e1l\u00f3 k\u00f3dj\u00e1nak megval\u00f3s\u00edt\u00e1s\u00e1hoz, amely a \/dev\/random \u00e9s \/dev\/urandom eszk\u00f6z\u00f6k m\u0171k\u00f6d\u00e9s\u00e9\u00e9rt felel. Az \u00faj megval\u00f3s\u00edt\u00e1s figyelemrem\u00e9lt\u00f3, mivel egys\u00e9ges\u00edtette a \/dev\/random \u00e9s \/dev\/urandom m\u0171k\u00f6d\u00e9s\u00e9t, valamint v\u00e9delmet ny\u00fajt a v\u00e9letlen sz\u00e1mok \u00e1raml\u00e1s\u00e1ban a duplik\u00e1ci\u00f3k megjelen\u00e9se ellen a kezdeti fut\u00e1s sor\u00e1n. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/vps\/\"   title=\"virtu\u00e1lis g\u00e9pekhez\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2100\">virtu\u00e1lis g\u00e9pekhez<\/a> \u00e9s \u00e1tt\u00e9r a BLAKE2s hash-funkci\u00f3 haszn\u00e1lat\u00e1ra a z\u0171rzavaros kever\u00e9si m\u0171veletekhez a SHA1 helyett. A v\u00e1ltoz\u00e1s lehet\u0151v\u00e9 tette a \u00e1l-random sz\u00e1mgener\u00e1l\u00f3 biztons\u00e1g\u00e1nak n\u00f6vel\u00e9s\u00e9t, mivel megszabadult a probl\u00e9m\u00e1s SHA1 algoritmust\u00f3l \u00e9s kiz\u00e1rta a RNG inicializ\u00e1l\u00f3 vektor fel\u00fcl\u00edr\u00e1s\u00e1t. Mivel a BLAKE2s algoritmus teljes\u00edtm\u00e9nye meghaladja a SHA1-t, annak alkalmaz\u00e1sa a teljes\u00edtm\u00e9nyre is kedvez\u0151en hatott.\n<li class=\"l\"> Az ARM64 architekt\u00far\u00e1hoz hozz\u00e1adva a QARMA3 \u00faj mutat\u00f3 hiteles\u00edt\u00e9si algoritmus t\u00e1mogat\u00e1sa \u2014 amely gyorsabb a QARMA algoritmusn\u00e1l, mik\u00f6zben meg\u0151rzi a megfelel\u0151 v\u00e9delmi szintet. A technol\u00f3gia lehet\u0151v\u00e9 teszi az ARM64-specifikus utas\u00edt\u00e1sok haszn\u00e1lat\u00e1t a visszat\u00e9r\u00e9si c\u00edmek digit\u00e1lis al\u00e1\u00edr\u00e1sokkal t\u00f6rt\u00e9n\u0151 ellen\u0151rz\u00e9s\u00e9re, amelyek a mutat\u00f3 legfels\u0151 biteiben t\u00e1rol\u00f3dnak.\n<li class=\"l\"> Az ARM64 architekt\u00far\u00e1hoz megval\u00f3s\u00edtva a GCC 12 ford\u00edt\u00f3 t\u00e1mogat\u00e1s\u00e1nak, amely v\u00e9delmet ny\u00fajt a visszat\u00e9r\u00e9si c\u00edm fel\u00fcl\u00edr\u00e1sa ellen a verem t\u00falcsordul\u00e1sa eset\u00e9n. A v\u00e9delem l\u00e9nyege, hogy a funkci\u00f3nak val\u00f3 \u00e1tad\u00e1s ut\u00e1n a visszat\u00e9r\u00e9si c\u00edm a k\u00fcl\u00f6n '\u00e1rny\u00e9k' veremben ker\u00fcl t\u00e1rol\u00e1sra, \u00e9s a c\u00edm leh\u00faz\u00e1sa a funkci\u00f3b\u00f3l val\u00f3 kil\u00e9p\u00e9s el\u0151tt t\u00f6rt\u00e9nik.\n<li class=\"l\"> \u00daj kulcst\u00e1rol\u00f3 (keyring) ker\u00fclt hozz\u00e1ad\u00e1sra \u2014 'machine', amely a rendszer tulajdonos\u00e1nak kulcsait (MOK, Machine Owner Keys) tartalmazza, amelyeket a shim-b\u00f6t\u00f6lt\u0151 t\u00e1mogat. A megadott kulcsok digit\u00e1lis al\u00e1\u00edr\u00e1sokkal hiteles\u00edtett kernel komponensek igazol\u00e1s\u00e1hoz haszn\u00e1lhat\u00f3ak, amelyeket a kezdeti bet\u00f6lt\u00e9s ut\u00e1n t\u00f6ltenek be (p\u00e9ld\u00e1ul kernel modulok).\n<li class=\"l\"> Elt\u00e1vol\u00edtottuk a TPM-hez kapcsol\u00f3d\u00f3 aszimmetrikus z\u00e1rt kulcsok t\u00e1mogat\u00e1s\u00e1t, amelyeket a TPM elavult verzi\u00f3j\u00e1ban javasoltak, biztons\u00e1gi probl\u00e9m\u00e1ik vannak \u00e9s a gyakorlatban nem terjedtek el.\n<li class=\"l\"> Hozz\u00e1adva a size_t t\u00edpus\u00fa adatok v\u00e9delme az eg\u00e9sz sz\u00e1mok t\u00falt\u00f6lt\u00e9se ellen. A k\u00f3dban a size_mul(), size_add() \u00e9s size_sub() kezel\u0151ket haszn\u00e1lj\u00e1k, amelyek lehet\u0151v\u00e9 teszik a size_t t\u00edpus\u00fa m\u00e9retek biztons\u00e1gos szorz\u00e1s\u00e1t, \u00f6sszead\u00e1s\u00e1t \u00e9s kivon\u00e1s\u00e1t.\n<li class=\"l\"> A kernel \u00f6ssze\u00e1ll\u00edt\u00e1s\u00e1n\u00e1l enged\u00e9lyezve lett a '-Warray-bounds' \u00e9s '-Wzero-length-bounds' z\u00e1szl\u00f3k, amelyek figyelmeztet\u00e9seket gener\u00e1lnak, amikor az index a t\u00f6mb hat\u00e1rain t\u00falra l\u00e9p \u00e9s null\u00e1s hossz\u00fas\u00e1g\u00fa t\u00f6mb\u00f6ket haszn\u00e1lnak.\n<li class=\"l\"> The virtio-crypto device now supports encryption using the RSA algorithm.                                 <\/ul>\n<li class=\"l\"> <b>H\u00e1l\u00f3zati alrendszer<\/b>\n<ul>\n<li class=\"l\"> Support for port binding mode (locked mode) has been added to network bridge implementation, allowing users to send traffic through a port only with an allowed MAC address. Additionally, it is now possible to use multiple structures to assess the state of the STP (Spanning Tree Protocol). Previously, VLAN could only be directly tied to STP (1:1), where each VLAN was managed independently. The new version introduces the mst_enable parameter, which, when enabled, allows VLAN states to be monitored by the MST (Multiple Spanning Trees) module, facilitating an M:N binding model for VLANs.\n<li class=\"l\"> Folytat\u00f3dik a mem\u00f3ria felszabad\u00edt\u00e1s\u00e1hoz kapcsol\u00f3d\u00f3 okok k\u00f6vet\u00e9s\u00e9re szolg\u00e1l\u00f3 eszk\u00f6z\u00f6k integr\u00e1l\u00e1sa a h\u00e1l\u00f3zati stackbe (reason k\u00f3dok). Az ok k\u00f3dja a csomaggal kapcsolatos mem\u00f3ria felszabad\u00edt\u00e1sa sor\u00e1n ker\u00fcl tov\u00e1bb\u00edt\u00e1sra, \u00e9s lehet\u0151v\u00e9 teszi olyan helyzetek figyelembev\u00e9tel\u00e9t, mint p\u00e9ld\u00e1ul a csomag eldob\u00e1sa a fejl\u00e9c mez\u0151k kit\u00f6lt\u00e9si hib\u00e1i miatt, a spoofing kisz\u0171r\u00e9se az rp_filter seg\u00edts\u00e9g\u00e9vel, a hib\u00e1s ellen\u0151rz\u0151 \u00f6sszeg, a mem\u00f3riahi\u00e1ny, az IPSec XFRM szab\u00e1lyainak aktiv\u00e1l\u00e1sa, a TCP sorozatsz\u00e1m hib\u00e1ja stb.\n<li class=\"l\"> The ability to transmit network packets from BPF programs running in user space in BPF_PROG_RUN mode has been provided, where BPF programs execute in the kernel but return results to user space. Packets are transmitted using the XDP (eXpress Data Path) subsystem. A live packet processing mode is supported, allowing the XDP handler to redirect network packets on-the-fly to the network stack or other devices. It is also possible to create software traffic generators or inject network frames into the network stack.\n<li class=\"l\"> For BPF programs attached to network cgroups, auxiliary functions have been proposed to explicitly set the return value from system calls, which enables the transmission of more comprehensive information about the reasons for system call blocking.\n<li class=\"l\"> Support for fragmented packets residing in multiple buffers has been added to the XDP (eXpress Data Path) subsystem, allowing XDP to process Jumbo frames and apply TSO\/GRO (TCP Segmentation Offload\/Generic Receive Offload) for XDP_REDIRECT.\n<li class=\"l\"> The process of deleting network namespaces has been significantly accelerated, which has been in demand in some large systems with high traffic volumes.                      <\/ul>\n<li class=\"l\"> <b>Hardver<\/b>\n<ul>\n<li class=\"l\"> Az amdgpu illeszt\u0151programban alap\u00e9rtelmez\u00e9s szerint enged\u00e9lyezve van a FreeSync adapt\u00edv szinkroniz\u00e1l\u00e1si technol\u00f3gia, amely lehet\u0151v\u00e9 teszi a k\u00e9perny\u0151 friss\u00edt\u00e9si gyakoris\u00e1g\u00e1nak megfelel\u0151 szab\u00e1lyoz\u00e1s\u00e1t, biztos\u00edtva a sima \u00e9s z\u00f6kken\u0151mentes k\u00e9pet j\u00e1t\u00e9kok \u00e9s vide\u00f3k lej\u00e1tsz\u00e1sa k\u00f6zben. Meger\u0151s\u00edtett\u00e9k a GPU Aldebaran stabil t\u00e1mogat\u00e1s\u00e1t.\n<li class=\"l\"> Az i915 illeszt\u0151programhoz hozz\u00e1adt\u00e1k az Intel Alderlake N chip \u00e9s az Intel DG2-G12 (Arc Alchemist) dedik\u00e1lt videok\u00e1rty\u00e1k t\u00e1mogat\u00e1s\u00e1t.\n<li class=\"l\"> A nouveau illeszt\u0151programban a DP\/eDP interf\u00e9szekhez magasabb bitr\u00e1t\u00e1k t\u00e1mogat\u00e1s\u00e1t \u00e9s a lttprs (Link-Training Tunable PHY Repeaters) k\u00e1belhosszabb\u00edt\u00f3k t\u00e1mogat\u00e1s\u00e1t biztos\u00edtott\u00e1k.\n<li class=\"l\"> A drm (Direct Rendering Manager) alrendszer\u00e9ben az armada, exynos, gma500, hyperv, imx, ingenic, mcde, mediatek, msm, omap, rcar-du, rockchip, sprd, sti, tegra, tilcdc, xen \u00e9s vc4 illeszt\u0151programokban hozz\u00e1adt\u00e1k a nomodeset param\u00e9ter t\u00e1mogat\u00e1s\u00e1t, amely lehet\u0151v\u00e9 teszi a videom\u00f3dok kernellel t\u00f6rt\u00e9n\u0151 v\u00e1lt\u00e1s\u00e1nak letilt\u00e1s\u00e1t \u00e9s a grafikus renderel\u00e9shez sz\u00fcks\u00e9ges hardveres gyors\u00edt\u00e1si eszk\u00f6z\u00f6k haszn\u00e1lat\u00e1t, meg\u0151rizve csup\u00e1n a rendszer keretbuffer\u00e9vel kapcsolatos funkci\u00f3kat.\n<li class=\"l\"> Hozz\u00e1adt\u00e1k az ARM SoC Qualcomm Snapdragon 625\/632 (amely az LG Nexus 5X \u00e9s Fairphone FP3 okostelefonokban tal\u00e1lhat\u00f3), Samsung Exynos 850, Samsung Exynos 7885 (a Samsung Galaxy A8-ban tal\u00e1lhat\u00f3), Airoha (Mediatek\/EcoNet) EN7523, Mediatek mt6582 (Prestigio PMT5008 3G t\u00e1blag\u00e9p), Microchip Lan966, Renesas RZ\/G2LC, RZ\/V2L, Tesla FSD, TI K3\/AM62 \u00e9s i.MXRTxxxx t\u00e1mogat\u00e1s\u00e1t.\n<li class=\"l\"> Hozz\u00e1adt\u00e1k az ARM-eszk\u00f6z\u00f6k \u00e9s a Broadcom (Raspberry Pi Zero 2 W), Qualcomm (Google Herobrine R1 Chromebook, SHIFT6mq, Samsung Galaxy Book2), Rockchip (Pine64 PineNote, Bananapi-R2-Pro, STM32 Emtrion emSBS, Samsung Galaxy Tab S, Prestigio PMT5008 3G t\u00e1blag\u00e9p), Allwinner (A20-Marsboard), Amlogic (Amediatek X96-AIR, CYX A95XF3-AIR, Haochuangy H96-Max, Amlogic AQ222 \u00e9s OSMC Vero 4K+), Aspeed (Quanta S6Q, ASRock ROMED8HM3), Marvell MVEBU\/Armada (Ctera C200 V1 \u00e9s V2 NAS), Mstar (DongShanPiOne, Miyoo Mini), NXP i.MX (Protonic PRT8MM, emCON-MX8M Mini, Toradex Verdin, Gateworks GW7903) t\u00e1mogat\u00e1s\u00e1t.\n<li class=\"l\"> Hozz\u00e1adt\u00e1k az AMD PDM, Atmel PDMC, Awinic AW8738, i.MX TLV320AIC31xx, Intel CS35L41, ESSX8336, Mediatek MT8181, nVidia Tegra234, Qualcomm SC7280, Renesas RZ\/V2L, Texas Instruments TAS585M hangrendszerek \u00e9s kodekek t\u00e1mogat\u00e1s\u00e1t. Hozz\u00e1adt\u00e1k az Intel AVS DSP-chiphez tartoz\u00f3 hangilleszt\u0151 program kezdeti megval\u00f3s\u00edt\u00e1s\u00e1t. Friss\u00edtett\u00e9k az Intel ADL \u00e9s Tegra234 illeszt\u0151programok t\u00e1mogat\u00e1s\u00e1t, valamint m\u00f3dos\u00edt\u00e1sokat hajtottak v\u00e9gre a hang t\u00e1mogat\u00e1s\u00e1nak jav\u00edt\u00e1sa \u00e9rdek\u00e9ben a Dell, HP, Lenovo, ASUS, Samsung \u00e9s Clevo eszk\u00f6z\u00f6k\u00f6n.    <\/ul>\n<p>A latin-amerikai Szabad Szoftver Alap\u00edtv\u00e1ny egy id\u0151ben elk\u00e9sz\u00edtette a 5.18-as teljesen szabad Linux-libre 5.18-gnu mag v\u00e1ltozat\u00e1t, amely mentes a gy\u00e1rt\u00f3 \u00e1ltal korl\u00e1tozott szabadalmakat vagy k\u00f3dra vonatkoz\u00f3 szakaszokat tartalmaz\u00f3 firmware-ekt\u0151l \u00e9s meghajt\u00f3kt\u00f3l. Az \u00faj kiad\u00e1sban megtiszt\u00edtott\u00e1k a meghajt\u00f3kat a MIPI DBI panelekhez, az Amphion VPU-hoz, a MediaTek MT7986 WMAC WiFi-hoz, a Mediatek MT7921U (USB) \u00e9s a Realtek 8852a\/8852c-hez, az Intel AVS \u00e9s Texas Instruments TAS5805M hangchipekhez. Tov\u00e1bb\u00e1 a DTS-f\u00e1jlok is megtiszt\u00edt\u00e1sra ker\u00fcltek a k\u00fcl\u00f6nb\u00f6z\u0151 Qualcomm SoC-khoz, amelyek AArch64 architekt\u00far\u00e1val rendelkez\u0151 processzorokat haszn\u00e1lnak. Friss\u00edtve lett a blobok megtiszt\u00edt\u00e1s\u00e1nak k\u00f3dja az AMD GPU, a MediaTek MT7915, a Silicon Labs WF200+ WiFi, a Mellanox Spectrum Ethernet, a Realtek rtw8852c, a Qualcomm Q6V5, a Wolfson ADSP \u00e9s a MediaTek HCI UART meghajt\u00f3iban \u00e9s alrendszereiben.                         <\/ul>\n<p>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57235\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0438\u0441\u0442\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0424\u0421 Reiserfs, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 Intel IBT, \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0440\u0435\u0436\u0438\u043c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u043e\u0432 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 memcpy(), \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 fprobe, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104123","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-5-18\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-5-18\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-05-23T13:36:40+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-05-23T13:36:40+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux 5.18 kernel kiad\u00e1s | ProHoster","description":"K\u00e9t h\u00f3napos fejleszt\u00e9st k\u00f6vet\u0151en Linus Torvalds bemutatta a Linux 5.18 kernel kiad\u00e1s\u00e1t.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-5-18","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-yadra-linux-5-18","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-23T13:36:40+00:00","article:modified_time":"2022-05-23T13:36:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104123","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 18:15:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-23 13:37:44","updated":"2026-02-09 18:15:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=104123"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104123\/revisions"}],"predecessor-version":[{"id":159344,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104123\/revisions\/159344"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=104123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=104123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=104123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}