{"id":110873,"date":"2023-10-16T15:10:24","date_gmt":"2023-10-16T13:10:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux"},"modified":"2023-10-16T15:10:24","modified_gmt":"2023-10-16T13:10:24","slug":"udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux","title":{"rendered":"Verwijderbaar ge\u00ebxploiteerde kwetsbaarheid in de NVMe-oF\/TCP-stuurprogramma's van de Linux-kernel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In de Linux-subsieme nvmet-tcp (NVMe-oF\/TCP), die toegang biedt tot NVMe-opslagmedia via het netwerk (NVM Express over Fabrics) met behulp van het TCP-protocol, is er een kwetsbaarheid ontdekt (CVE-2023-5178) die potentieel de mogelijkheid biedt om op afstand code in de kernel uit te voeren of, bij lokale toegang, de privileges in het systeem te verhogen. Een oplossing is momenteel beschikbaar in de vorm van een patch. Het probleem doet zich voor sinds de allereerste versie van de NVMe-oF\/TCP-driver (het kwetsbaarheidsrapport vermeldt kernel Linux 5.15, maar ondersteuning voor NVMe-oF\/TCP werd toegevoegd in kernel 5.0). Systemen met ingeschakelde server<\/a> NVMe-oF\/TCP (NVME_TARGET_TCP), die standaard verbindingen aanneemt op netwerkpoort 4420. <\/p>\n

De kwetsbaarheid wordt veroorzaakt door een logische fout waardoor de functie nvmet_tcp_free_crypto tweemaal werd aangeroepen en twee keer enkele pointers vrijgaf, evenals vrijgegeven adressen derefereerde. Dit gedrag leidt tot het aanspreken van al vrijgegeven geheugen (use-after-free) en dubbele vrijgave van geheugen (double-free) bij het verwerken door de NVMe-oF\/TCP-server van speciaal opgemaakte berichten van een client, die zich zowel in het lokale als in het globale netwerk kan bevinden.
\n
Bron: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 Linux-\u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nvmet-tcp (NVMe-oF\/TCP), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043a NVMe-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f\u043c \u043f\u043e \u0441\u0435\u0442\u0438 (NVM Express over Fabrics), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b TCP, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-5178), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0432\u0438\u0434\u0435 \u043f\u0430\u0442\u0447\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0441\u0430\u043c\u043e\u0439 \u043f\u0435\u0440\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 NVMe-oF\/TCP (\u0432 \u043e\u0442\u0447\u0451\u0442\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110873","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Op afstand uitbuitbare kwetsbaarheid in de NVMe-oF\/TCP-driver van de Linux-kernel | ProHoster","description":"In de Linux-subsieme nvmet-tcp (NVMe-oF\/TCP), die toegang biedt tot NVMe-opslagmedia via het netwerk (NVM Express over Fabrics) met behulp van het TCP-protocol, is er een kwetsbaarheid ontdekt (CVE-2023-5178) die potentieel in staat is om op afstand.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 NVMe-oF\/TCP \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0412 Linux-\u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nvmet-tcp (NVMe-oF\/TCP), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043a NVMe-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f\u043c \u043f\u043e \u0441\u0435\u0442\u0438 (NVM Express over Fabrics), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b TCP, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-5178), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-drajvere-nvme-of-tcp-iz-sostava-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-16T13:10:24+00:00","article:modified_time":"2023-10-16T13:10:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110873","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:46:35","updated":"2026-02-09 21:46:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/110873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=110873"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/110873\/revisions"}],"predecessor-version":[{"id":160277,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/110873\/revisions\/160277"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=110873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=110873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=110873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}