Chiwopsezo chopezeka patali mu driver wa Linux wa tchipisi ta Realtek

Mu dalaivala wophatikizidwa mu Linux kernel rtlwifi kwa ma adapter opanda zingwe pa tchipisi cha Realtek kudziwika kusatetezeka (CVE-2019-17666), zomwe zitha kugwiritsidwa ntchito pokonzekera kukhazikitsidwa kwa ma code malinga ndi kernel potumiza mafelemu opangidwa mwapadera.

Chiwopsezocho chimayamba chifukwa cha kusefukira kwa buffer mu code yomwe ikukhazikitsa P2P (Wifi-Direct) mode. Posanthula mafelemu Ayi (Chidziwitso Chosowa) palibe cheke cha kukula kwa chimodzi mwazofunikira, zomwe zimalola kuti mchira wa deta ulembedwe kudera lodutsa malire a buffer ndi chidziwitso kuti chilembedwenso m'mapangidwe a kernel kutsatira buffer.

Kuwukirako kutha kuchitidwa potumiza mafelemu opangidwa mwapadera ku kachitidwe kokhala ndi adaputala yogwira ntchito yotengera chip cha Realtek chothandizira ukadaulo. Wi-Fi Mwachangu, yomwe imalola ma adapter awiri opanda zingwe kuti akhazikitse kulumikizana mwachindunji popanda malo olowera. Kuti agwiritse ntchito vutoli, wowukirayo safunikira kulumikizidwa ndi netiweki yopanda zingwe, komanso sikuyenera kuchita chilichonse kwa wogwiritsa ntchito; ndizokwanira kuti wowukirayo akhale mkati mwa malo otetezedwa opanda zingwe. chizindikiro.

Zomwe zimagwiritsidwa ntchito pakugwiritsa ntchito pakali pano zimangopangitsa kuti kernel iwonongeke, koma chiwopsezo chomwe chingakhalepo sichikupatula kuthekera kokonzekera kukhazikitsidwa kwa code (lingaliro likadali longopeka chabe, chifukwa palibe chitsanzo cha ntchito yogwiritsira ntchito code. komabe, koma wofufuza yemwe adazindikira vutoli ali kale amagwira ntchito pa chilengedwe chake).

Vuto limayambira pa kernel 3.12 (malinga ndi magwero ena, vuto likuwoneka kuyambira pa kernel 3.10), yotulutsidwa mu 2013. Kukonzekera kumangopezeka mu fomu chigamba. M'magawidwe vuto silinakonzedwe.
Mutha kuyang'anira kuchotsedwa kwa ziwopsezo pakugawira masamba awa: Debian, SUSE/OpenSUSE, RHEL, Ubuntu, Arch Linux, Fedora. Mwinanso osatetezeka zimakhudza ndi nsanja ya Android.

Source: opennet.ru

Kuwonjezera ndemanga