{"id":104289,"date":"2022-06-06T09:36:38","date_gmt":"2022-06-06T07:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter"},"modified":"2022-06-06T09:36:38","modified_gmt":"2022-06-06T07:36:38","slug":"eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","title":{"rendered":"Egy \u00fajabb sebezhet\u0151s\u00e9g a Linux Netfilter kernel alrendszer\u00e9ben","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Netfilter kernel subsystem vulnerability has been identified (CVE-2022-1972), similar to the issue disclosed at the end of May. The new vulnerability also allows a local user to gain root privileges in the system through manipulation of nftables rules and requires access to nftables, which can be obtained in a separate namespace (network namespace or user namespace) when having CLONE_NEWUSER, CLONE_NEWNS, or CLONE_NEWNET rights (for example, when able to launch an isolated container). <\/p>\n

A probl\u00e9ma egy hib\u00e1b\u00f3l ered, amely a set-list\u00e1k kezel\u00e9s\u00e9re szolg\u00e1l\u00f3 k\u00f3dban van, ahol olyan mez\u0151k szerepelnek, amelyek t\u00f6bb tartom\u00e1nyt tartalmaznak, \u00e9s mem\u00f3ria ter\u00fclet\u00e9nek t\u00fall\u00e9p\u00e9s\u00e9hez vezet a speci\u00e1lisan form\u00e1zott listaparam\u00e9terek feldolgoz\u00e1sa k\u00f6zben. A kutat\u00f3knak siker\u00fclt egy m\u0171k\u00f6d\u0151 exploitot k\u00e9sz\u00edteni\u00fck, amely root jogosults\u00e1got ad az Ubuntu 21.10-en a 5.13.0-39-generic kernellel. A s\u00e9r\u00fcl\u00e9kenys\u00e9g a 5.6-os kernelt\u0151l kezdve jelentkezik. A jav\u00edt\u00e1st patch form\u00e1j\u00e1ban aj\u00e1nlj\u00e1k. A s\u00e9r\u00fcl\u00e9kenys\u00e9g kihaszn\u00e1l\u00e1sa ellen az \u00e1tlagos rendszerekben gondoskodni kell arr\u00f3l, hogy a nem privilegiz\u00e1lt felhaszn\u00e1l\u00f3k ne rendelkezzenek n\u00e9vterek l\u00e9trehoz\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9vel (\"sudo sysctl -w kernel.unprivileged_userns_clone=0\"). <\/p>\n

Additionally, information has been published about three vulnerabilities in the kernel related to the NFC subsystem. The vulnerabilities allow for a crash to be triggered through actions performed by an unprivileged user (more dangerous attack vectors have not yet been demonstrated): <\/p>\n