Thandizo lopukuta malemba lachotsedwa pamtundu wa malemba mu Linux kernel

Kuchokera pakukhazikitsa kwa text console komwe kumaperekedwa ngati gawo la Linux kernel kodi yachotsedwa, zomwe zimapereka mwayi wosinthira mawu kumbuyo (CONFIG_VGACON_SOFT_SCROLLBACK). Khodiyo idachotsedwa chifukwa cha kukhalapo kwa zolakwika, zomwe palibe amene angakonze chifukwa chosowa wosamalira yemwe amayang'anira chitukuko cha vgacon.

M'chilimwe pa vgacon zinawululidwa ndi kuthetsedwa kusatetezeka (CVE-2020-14331) komwe kungayambitse kusefukira kwa buffer chifukwa chosowa macheke oyenera a kupezeka kwa kukumbukira komwe kulipo mu buffer scroll. Kusatetezekaku kudakopa chidwi cha opanga omwe adakonza kuyesa kwa fuzz kwa code ya vgacon syzbot.

Macheke owonjezera adavumbulutsa zovuta zina zofananira mu code ya vgacon, komanso zovuta pakukhazikitsa pulogalamu yopukutira mu driver wa fbcon. Tsoka ilo, khodi yovutayi idakhalabe yosasungidwa, mwina chifukwa choti opanga adasinthiratu kugwiritsa ntchito zojambula zojambulira ndi zolembera zolembera zidasiya kugwiritsidwa ntchito (anthu akupitiliza kugwiritsa ntchito vgacon ndi fbcon consoles, koma sanakhale mawonekedwe a kernel kwazaka zambiri. ndi zotsogola zotere monga kupukuta komangidwa mu dalaivala (Shift+PageUp/PageDown) mwina sizikufunika kwenikweni).

Pachifukwa ichi, Linus Torvalds adaganiza kuti asayese kusunga kachidindo kosadziwika, koma kungochotsa. Ngati pali ogwiritsa ntchito omwe amafunikira magwiridwe antchito awa, kachidindo kuti athandizire kupukusa mu kontrakitala adzabwezeredwa ku kernel akangopezeka wosamalira yemwe ali wokonzeka kuwongolera.

Source: opennet.ru