Adịghị ike na kernel Linux nke nwere ike ibute okuku site na izipu ngwugwu UDP

Na Linux kernel mara adịghị ike (CVE-2019-11683), nke na-enye gị ohere ime ka ịgọnarị ọrụ site na izipu ngwugwu UDP ahaziri ahazi (packet-of-ath). A na-akpata nsogbu ahụ site na njehie na udp_gro_receive_segment handler (net/ipv4/udp_offload.c) na ntinye nke teknụzụ GRO (Generic Receive Offload) ma nwee ike ibute mmebi nke ọdịnaya nke ebe nchekwa kernel mgbe ị na-edozi ngwugwu UDP na efu efu. (ụgwọ efu efu).

Nsogbu a na-emetụta naanị kernel 5.0ebe ọ bụ na nkwado GRO maka oghere UDP bụ emejuputa atumatu na Nọvemba afọ gara aga ma jisiri ike banye na mwepụta kernel kachasị ọhụrụ. Nkà na ụzụ GRO na-enye gị ohere ịme ngwa ngwa nhazi nke ọnụ ọgụgụ buru ibu nke ngwugwu na-abata site n'ịchịkọta ọtụtụ ngwugwu n'ime nnukwu ngọngọ nke na-achọghị nhazi dị iche iche nke ngwugwu ọ bụla.
Maka TCP, nsogbu ahụ anaghị eme, ebe ọ bụ na usoro a anaghị akwado nchịkọta ngwugwu na-enweghị ụgwọ.

Edobere adịghị ike ahụ naanị n'ụdị kwachie, Ebipụtabeghị mmelite mmezi ahụ (mmelite ụnyaahụ 5.0.11 fix etinyeghị ya). Site na ngwa nkesa, kernel 5.0 jisiri ike tinye ya Fedora 30, Ubuntu 19.04, Arch Linux, Gentoo na nkesa ndị ọzọ na-aga n'ihu na-emelite. Debian, Ubuntu 18.10 na mbụ, RHEL/CentOS и SUSE/mepeeSUSE nsogbu anaghị emetụta.

Achọpụtara nsogbu ahụ n'ihi ya ike Sistemụ nnwale fuzzing akpaaka nke Google mepụtara syzbot na analyzer KASAN (KernelAddressSanitizer), ezubere iji chọpụta mperi mgbe ị na-arụ ọrụ na ebe nchekwa yana eziokwu nke ohere ebe nchekwa na-ezighi ezi, dị ka ịnweta mpaghara ebe nchekwa tọhapụrụ na itinye koodu na ebe nchekwa echereghị maka ụdị aghụghọ ahụ.

isi: opennet.ru