Woyendetsa Floppy Wasiyidwa Wosasungidwa mu Linux Kernel

Kuphatikizidwa mu Linux 5.3 kernel kuvomereza kusintha kuwonjezera chitetezo chowonjezera cha mafoni a ioctl okhudzana ndi floppy driver, ndipo dalaivala mwiniwakeyo amalembedwa ngati wosasungidwa
("amasiye"), zomwe zikutanthauza kutha kwa kuyesa kwake.

Dalaivala amaonedwa kuti ndi yachikale, chifukwa n'zovuta kupeza zida zogwirira ntchito zoyesera - ma drive onse akunja omwe alipo, monga lamulo, amagwiritsa ntchito mawonekedwe a USB. Panthawi imodzimodziyo, kuchotsedwa kwa dalaivala ku kernel kumalephereka chifukwa chakuti olamulira a floppy disk amatsatiridwabe mu machitidwe a virtualization. Choncho, dalaivala amasungidwabe mu kernel, koma ntchito yake yolondola sikutsimikiziridwa.

Komanso, mu floppy driver kuthetsedwa kusatetezeka (CVE-2019-14283), kulola, kupyolera mukusintha kwa ioctl, wogwiritsa ntchito wopanda mwayi yemwe amatha kuyika floppy disk yake, kuti awerenge deta kuchokera kumalo okumbukira kunja kwa malire a buffer (mwachitsanzo, madera oyandikana nawo angakhale ndi deta yotsalira kuchokera ku disk. cache ndi chosungira cholowetsa). Kumbali imodzi, chiwopsezocho chimakhalabe chofunikira chifukwa dalaivala wa floppy amangonyamulidwa ngati pali wowongolera wofananira pamakina a virtualization (mwachitsanzo, amagwiritsidwa ntchito mwachisawawa mu QEMU), koma kumbali ina, kugwiritsa ntchito vutolo, ndikofunikira kuti chithunzi cha floppy disk chokonzedwa ndi wowukira chilumikizidwe.

Source: opennet.ru

Kuwonjezera ndemanga