Chiwopsezo (CVE-2022-1972) chadziwika mu Netfilter kernel subsystem, yofanana ndi vuto lomwe lidawululidwa kumapeto kwa Meyi. Chiwopsezo chatsopanochi chimalolanso wogwiritsa ntchito m'deralo kuti apeze ufulu wa mizu mudongosolo pogwiritsa ntchito malamulo mu nftables ndipo amafuna kupeza nftables kuti achite chiwonongekocho, chomwe chingapezeke m'malo osiyana (malo ochezera a pa Intaneti kapena malo ogwiritsira ntchito) ndi CLONE_NEWUSER, CLONE_NEWNS kapena CLONE_NEWNET maufulu (mwachitsanzo , ngati ndi kotheka kuyendetsa chidebe chapayekha).
Nkhaniyi imayamba chifukwa cha cholakwika mu code yosamalira mindandanda yokhala ndi minda yomwe ili ndi magawo angapo, ndipo imapangitsa kuti pakhale kulembedwa kopitilira malire pokonza magawo osankhidwa mwapadera. Ofufuza adatha kukonzekera ntchito kuti apeze ufulu wa mizu mu Ubuntu 21.10 ndi 5.13.0-39-generic kernel. Chiwopsezo chikuwoneka kuyambira pa kernel 5.6. Kukonzekera kumaperekedwa ngati chigamba. Kuti mulepheretse kugwiritsa ntchito chiwopsezo pamakina okhazikika, muyenera kuwonetsetsa kuti mukuletsa kuthekera kopanga mayina a ogwiritsa ntchito opanda mwayi ("sudo sysctl -w kernel.unprivileged_userns_clone=0").
Kuphatikiza apo, zidziwitso zasindikizidwa zokhudzana ndi zovuta zitatu za kernel zokhudzana ndi kachitidwe kakang'ono ka NFC. Kusatetezeka kungayambitse kuwonongeka chifukwa cha zochita ndi wogwiritsa ntchito mwamwayi (zowopsa kwambiri sizinawonetsedwebe):
- CVE-2022-1734 ndi kuyimba kwa kukumbukira kosagwiritsa ntchito pambuyo pa dalaivala wa nfcmrvl (madalaivala/nfc/nfcmrvl), komwe kumachitika poyerekezera chipangizo cha NFC pamalo ogwiritsa ntchito.
- CVE-2022-1974 - Kuyimba komwe kwamasulidwa kale kumachitika mu ntchito za netlink pazida za NFC (/net/nfc/core.c), zomwe zimachitika polembetsa chipangizo chatsopano. Monga chiwopsezo cham'mbuyomu, vutoli litha kugwiritsidwa ntchito poyerekezera chipangizo cha NFC pamalo ogwiritsa ntchito.
- CVE-2022-1975 ndi cholakwika mu code firmware yotsitsa pazida za NFC zomwe zitha kugwiritsidwa ntchito kuti zibweretse "mantha".
Source: opennet.ru