{"id":105690,"date":"2022-11-23T21:36:50","date_gmt":"2022-11-23T19:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij"},"modified":"2022-11-23T21:36:50","modified_gmt":"2022-11-23T19:36:50","slug":"uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","title":{"rendered":"Kib\u0151v\u00edtett privilegiz\u00e1ci\u00f3s s\u00e9r\u00fcl\u00e9kenys\u00e9g az io_uring alrendszerben.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A Linux kernel vulnerability (CVE-2022-3910) has been identified in the implementation of the io_uring asynchronous I\/O interface, which has been included since version 5.1. This vulnerability allows an unprivileged user to execute code with kernel privileges. The issue appears in versions 5.18 and 5.19, and has been resolved in the 6.0 branch. Debian, RHEL, and SUSE are using kernel releases prior to 5.18, while Fedora, Gentoo, and Arch already offer kernel 6.0. Ubuntu 22.10 is using the vulnerable kernel 5.19. <\/p>\n
A sebezhet\u0151s\u00e9g a m\u00e1r felszabad\u00edtott mem\u00f3ria blokkhoz (use-after-free) t\u00f6rt\u00e9n\u0151 hozz\u00e1f\u00e9r\u00e9sb\u0151l ered, amely az io_uring alrendszerrel kapcsolatos, \u00e9s a referencia sz\u00e1ml\u00e1l\u00f3 helytelen friss\u00edt\u00e9se miatt k\u00f6vetkezik be. Az io_msg_ring() h\u00edv\u00e1sakor, egy r\u00f6gz\u00edtett f\u00e1jl eset\u00e9n (amely folyamatosan a k\u00f6rk\u00f6r\u00f6s puffert haszn\u00e1lja), az io_fput_file() f\u00fcggv\u00e9ny hib\u00e1san cs\u00f6kkenti a referencia sz\u00e1ml\u00e1l\u00f3t. \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"