Chiwopsezo (CVE-2022-3977) chadziwika mu Linux kernel, chomwe chitha kugwiritsidwa ntchito ndi wogwiritsa ntchito wakomweko kuti awonjezere mwayi wawo pamakina. Chiwopsezochi chikuwoneka kuyambira pa kernel 5.18 ndipo chinakhazikitsidwa munthambi 6.1. Mawonekedwe a kukonza pakugawa amatha kutsatiridwa pamasamba: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch.
Chiwopsezochi chilipo pakukhazikitsa protocol ya MCTP (Management Component Transport Protocol), yomwe imagwiritsidwa ntchito polumikizana pakati pa oyang'anira oyang'anira ndi zida zogwirizana nazo. Kusatetezekaku kumadza chifukwa cha mpikisano mu mctp_sk_unhash() ntchito, zomwe zimatsogolera kuti muzitha kugwiritsa ntchito pokumbukira potumiza DROPTAG pempho la ioctl nthawi imodzi ndikutseka socket.
Source: opennet.ru