Chiwopsezo mu vhost-net chomwe chimaloleza kudzipatula kumakina otengera QEMU-KVM

Zawululidwa zambiri za zofooka (CVE-2019-14835), zomwe zimakulolani kuti mupite kupyola kachitidwe ka alendo ku KVM (qemu-kvm) ndikuyendetsa kachidindo yanu kumbali ya malo osungiramo malo a Linux kernel. Chiwopsezocho chatchedwa V-gHost. Vutoli limalola dongosolo la alendo kuti lipange mikhalidwe yakusefukira kwa buffer mu vhost-net kernel module (network backend for virtio), kuphedwa kumbali ya malo omwe akukhalamo. Kuwukiraku kutha kuchitidwa ndi wowukira yemwe ali ndi mwayi wofikira pagulu la alendo panthawi yomwe makina amasamuka.

Kukonza Vuto kuphatikizidwa ikuphatikizidwa mu Linux 5.3 kernel. Monga njira zoletsera chiopsezo, mutha kuletsa kusamuka kwa alendo kapena kuletsa gawo la vhost-net (onjezani "blacklist vhost-net" ku /etc/modprobe.d/blacklist.conf). Vuto likuwoneka kuyambira ku Linux kernel 2.6.34. Chiwopsezo chakhazikika Ubuntu ΠΈ Fedora, koma akadali osakonzedwa mkati Debian, Arch Linux, SUSE ΠΈ RHEL.

Source: opennet.ru

Kuwonjezera ndemanga