Chiwopsezo (CVE-2022-2590) chadziwika mu Linux kernel, chomwe chimalola wogwiritsa ntchito wopanda mwayi kusintha mafayilo amapu (mmap) ndi mafayilo mu tmpfs popanda kukhala ndi ufulu wolembera, ndikukweza mwayi wawo pamakina. . Vuto lomwe lazindikirika ndilofanana ndi mtundu wa Chiwopsezo cha Dirty COW, koma limasiyana chifukwa limangokhala ndi zomwe zimakhudzidwa pamakumbukiro omwe amagawana nawo (shmem / tmpfs). Vutoli lingagwiritsidwenso ntchito kusintha mafayilo omwe amatha kugwiritsidwa ntchito omwe amagwiritsa ntchito kukumbukira kwawo.
Vutoli limayamba chifukwa cha mtundu wamtundu wa kasamalidwe ka kukumbukira komwe kumachitika pogwira chosiyana (cholakwika) choponyedwa poyesa kulemba mwayi wofikira kumadera owerengera okha omwe amakumbukiridwa omwe amawonetsedwa mu COW (copy-on-write map) mode. Vuto likuwoneka kuyambira pa kernel 5.16 pamakina okhala ndi x86-64 ndi aarch64 zomangamanga pomanga kernel ndi CONFIG_USERFAULTFD=y. Chiwopsezocho chinakhazikitsidwa pakutulutsidwa kwa 5.19. Chitsanzo cha zomwe zachitikazi zikuyembekezeka kusindikizidwa pa Ogasiti 15.
Source: opennet.ru