Chiwopsezo mu vhost-net driver kuchokera ku Linux kernel

Mu vhost-net driver, yomwe imatsimikizira kugwira ntchito kwa virtio net kumbali ya chilengedwe, kudziwika kusatetezeka (CVE-2020-10942), kulola wosuta wamba kuti ayambitse kusefukira kwa kernel potumiza ioctl(VHOST_NET_SET_BACKEND) yopangidwa mwapadera ku /dev/vhost-net chipangizo. Vutoli limayamba chifukwa chosowa kutsimikizira koyenera kwa zomwe zili mugawo la sk_family mu get_raw_socket() ntchito code.

Malinga ndi deta yoyambirira, chiwopsezocho chingagwiritsidwe ntchito kuwononga DoS yakomweko poyambitsa kuwonongeka kwa kernel (palibe chidziwitso chokhudza kugwiritsidwa ntchito kwa stack kusefukira komwe kumachitika chifukwa cha chiwopsezo chokonza ma code).
Chiwopsezo kuthetsedwa mu Linux kernel 5.5.8. Kwa magawo, mutha kutsata kutulutsidwa kwa zosintha zamaphukusi patsamba Debian, Ubuntu, RHEL, SUSE/OpenSUSE, Fedora, Chipilala.

Source: opennet.ru