{"id":104680,"date":"2022-07-21T09:36:51","date_gmt":"2022-07-21T07:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-yadre-linux-pozvolyayushhaya-obojti-ogranicheniya-rezhima-lockdown"},"modified":"2022-07-21T09:36:51","modified_gmt":"2022-07-21T07:36:51","slug":"uyazvimost-v-yadre-linux-pozvolyayushhaya-obojti-ogranicheniya-rezhima-lockdown","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-yadre-linux-pozvolyayushhaya-obojti-ogranicheniya-rezhima-lockdown","title":{"rendered":"A Linux kernelben felfedezett sebezhet\u0151s\u00e9g, amely megker\u00fcli a Lockdown m\u00f3d korl\u00e1toz\u00e1sait","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A Linux kernel vulnerability (CVE-2022-21505) has been identified, allowing easy bypassing of the Lockdown security mechanism that restricts root user access to the kernel and blocks UEFI Secure Boot bypass paths. The suggested method for bypassing involves using the IMA (Integrity Measurement Architecture) kernel subsystem, which is designed to verify the integrity of operating system components through digital signatures and hashes. <\/p>\n
In lockdown mode, access to \/dev\/mem, \/dev\/kmem, \/dev\/port, \/proc\/kcore, debugfs, the kprobes debug mode, mmiotrace, tracefs, BPF, PCMCIA CIS (Card Information Structure), certain ACPI interfaces, and CPU MSR registers is restricted. Calls to kexec_file and kexec_load are blocked, sleep mode transitions are prohibited, DMA usage for PCI devices is limited, importing ACPI code from EFI variables is forbidden, and manipulation of input\/output ports is not allowed, including changing the interrupt number and input\/output port for the serial port. <\/p>\n
A s\u00e9r\u00fcl\u00e9kenys\u00e9g l\u00e9nyege, hogy az <ima_appraise=log> ind\u00edt\u00f3param\u00e9ter haszn\u00e1lata eset\u00e9n kexec seg\u00edts\u00e9g\u00e9vel lehet\u0151s\u00e9g van egy \u00faj kernel p\u00e9ld\u00e1ny bet\u00f6lt\u00e9s\u00e9re, ha a rendszerben nem akt\u00edv a Secure Boot, \u00e9s a Lockdown m\u00f3d f\u00fcggetlen\u00fcl haszn\u00e1lj\u00e1k. Az IMA nem engedi az <ima_appraise> m\u00f3d aktiv\u00e1l\u00e1s\u00e1t, ha a Secure Boot akt\u00edv, de nem veszi figyelembe a Lockdown k\u00fcl\u00f6n haszn\u00e1lat\u00e1t a Secure Boot-t\u00f3l. \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"