Chiwopsezo mu Linux Netfilter kernel subsystem

Chiwopsezo chadziwika mu Linux kernel (CVE sinagawidwe) yomwe imalola wogwiritsa ntchito m'deralo kupeza ufulu wa mizu mudongosolo. Zalengezedwa kuti zakonzedwa zomwe zikuwonetsa kupeza mwayi mu Ubuntu 22.04. Chigamba chomwe chimakonza vutoli chaperekedwa kuti chiphatikizidwe mu kernel.

Chiwopsezochi chimayamba chifukwa chofikira malo okumbukira omwe adamasulidwa kale (kugwiritsa ntchito-pambuyo paulere) posintha mindandanda pogwiritsa ntchito lamulo la NFT_MSG_NEWSET mu gawo la nf_tables. Kuti muthe kuchita chiwembucho, kupeza ma nftables kumafunika, komwe kungapezeke m'malo osiyana siyana a netiweki ngati muli ndi CLONE_NEWUSER, CLONE_NEWNS kapena CLONE_NEWNET maufulu (mwachitsanzo, ngati mutha kuyendetsa chidebe chokha).

Source: opennet.ru

Kuwonjezera ndemanga