Ndị nyocha nchekwa sitere na Google achọpụtala adịghị ike na kernel Linux Enwere adịghị ike maka mmụba ikike (CVE-2025-38236). Tinyere ihe ndị ọzọ, adịghị ike ahụ na-enye ohere ịgafe usoro nkewa nke sandbox eji na Google Chrome ma nweta mmejuputa koodu ọkwa kernel mgbe a na-eme koodu n'ọnọdụ usoro ntụgharị sandbox nke Chrome (dịka ọmụmaatụ, site na iji adịghị ike ọzọ na Chrome). Nsogbu ahụ na-apụta ìhè site na kernel. Linux 6.9 ma edoziri ya na mmelite kernel Linux 6.1.143, 6.6.96, 6.12.36 na 6.15.5. Enwere ike ibudata ihe atụ nke ihe eji eme ihe.
Nsogbu a na-akpata site na njehie mmejuputa na ọkọlọtọ MSG_OOB, nke enwere ike ịtọ maka oghere AF_UNIX. Ọkọlọtọ MSG_OOB ("anaghị agba ọsọ") na-enye ohere itinye byte ọzọ na data a na-eziga, nke onye nnata nwere ike ịgụ tupu ọ nata data ndị ọzọ. E tinyere ọkọlọtọ a na kernel. Linux Oracle rịọrọ 5.15 ma a tụrụ aro ka a kwụsị ya n'afọ gara aga n'ihi na a naghị anabata ya nke ọma.
Mmejuputa igbe ájá Chrome kwere ka ịrụ ọrụ socket UNIX wee zipu()/recv() oku sistemu ebe anabatara ọkọlọtọ MSG_OOB yana nhọrọ ndị ọzọ na ewepụghị ya iche. Otu ahụhụ dị na mmejuputa MSG_OOB nyere ohere ohere iji mee ihe mgbe emechara otu usoro oku sistemụ: char dummy; sọks int[2]; socketpair (AF_UNIX, SOCK_STREAM, 0, sọks); zipu (sọks[1], "A", 1, MSG_OOB); recv(socks[0], &dummy, 1, MSG_OOB); zipu (sọks[1], "A", 1, MSG_OOB); recv(socks[0], &dummy, 1, MSG_OOB); zipu (sọks[1], "A", 1, MSG_OOB); recv (socks[0], & dummy, 1, 0); recv(socks[0], &dummy, 1, MSG_OOB);
isi: opennet.ru
