Chiwopsezo mu Linux perf kernel subsystem yomwe imalola kukwera kwamwayi

Chiwopsezo (CVE-2022-1729) chadziwika mu kernel ya Linux, kulola wogwiritsa ntchito wamba kuti apeze mizu padongosolo. Chiwopsezocho chimayamba chifukwa chamtundu wamtundu wa perf subsystem, womwe ungagwiritsidwe ntchito kuyambitsa mwayi wogwiritsa ntchito pambuyo paulere kumalo omasulidwa kale a kernel memory. Vutoli lakhala likuwonekera kuyambira kutulutsidwa kwa kernel 4.0-rc1. Kuthekera kogwira ntchito kotsimikizika pakutulutsa 5.4.193+.

Kukonzekera kumangopezeka mu mawonekedwe a chigamba. Kuopsa kwa chiwopsezocho kumachepetsedwa chifukwa chakuti kugawa zambiri mwachisawawa kumaletsa mwayi wopezeka kwa ogwiritsa ntchito opanda mwayi. Monga njira yodzitetezera, mutha kukhazikitsa parameter ya sysctl kernel.perf_event_paranoid kukhala 3.

Source: opennet.ru

Kuwonjezera ndemanga