{"id":125569,"date":"2025-05-25T15:05:07","date_gmt":"2025-05-25T13:05:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai"},"modified":"2025-05-25T15:05:07","modified_gmt":"2025-05-25T13:05:07","slug":"udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","title":{"rendered":"Zdalna luka w module ksmbd j\u0105dra Linux, zidentyfikowana przy u\u017cyciu AI","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

W module ksmbd, kt\u00f3ry oferuje wbudowan\u0105 w j\u0105dro Linux implementacj\u0119 serwera plik\u00f3w opartego na protokole SMB, zidentyfikowano luk\u0119 (CVE-2025-37899), potencjalnie pozwalaj\u0105c\u0105 na wykonanie w\u0142asnego kodu na poziomie j\u0105dra poprzez wysy\u0142anie specjalnie sformatowanych pakiet\u00f3w. Co ciekawe, problem zosta\u0142 zidentyfikowany podczas analizy kodu przez model AI OpenAI o3. Poniewa\u017c pe\u0142ny kod modu\u0142u ksmbd przekracza dopuszczalny dla modelu rozmiar kontekstu, weryfikacja by\u0142a przeprowadzona etapowo dla kodu realizuj\u0105cego poszczeg\u00f3lne komendy SMB, wykorzystuj\u0105c standardowe zapytania. <\/p>\n

Vulnerability is caused by accessing already freed memory (use-after-free) in the SMB command processing code for the 'logoff' command: the sess->user structure was used in another thread when a request to establish a session, tied to the released session, arrived from another connection. When processing such requests, the smb2_sess_setup function was executed, attempting to access the already freed sess->user structure. <\/p>\n

Luka zosta\u0142a usuni\u0119ta w aktualizacjach 6.15-rc5, 6.14.6, 6.12.28, 6.6.90, 6.1.138. W ga\u0142\u0119zi 5.15, do kt\u00f3rej zosta\u0142 przyj\u0119ty modu\u0142 ksmbd, problem si\u0119 nie pojawia. Mo\u017cna \u015bledzi\u0107 usuni\u0119cie luki w dystrybucjach na nast\u0119puj\u0105cych stronach: Debian, Ubuntu, Fedora, SUSE\/openSUSE, RHEL, Arch. <\/p>\n

Problem zidentyfikowa\u0142 Sean Heelan, tw\u00f3rca platformy profilowania kodu Prodfiler, specjalizuj\u0105cy si\u0119 w optymalizacji i audycie bezpiecze\u0144stwa kodu. Sean postanowi\u0142 oceni\u0107, na ile nowoczesne modele AI s\u0105 gotowe do przeprowadzania audyt\u00f3w bezpiecze\u0144stwa i doszed\u0142 do wniosku, \u017ce model o3 znacz\u0105co si\u0119 poprawi\u0142 w analizie i rozumieniu struktury, logiki i funkcjonalno\u015bci kodu. Zauwa\u017cono, \u017ce aby okre\u015bli\u0107 luk\u0119, model by\u0142 w stanie zbudowa\u0107 \u0142a\u0144cuch rozumowania, bior\u0105c pod uwag\u0119 mo\u017cliwo\u015b\u0107 r\u00f3wnoleg\u0142ych po\u0142\u0105cze\u0144 w serwera<\/a> i wykorzystanie struktur danych w r\u00f3\u017cnych sytuacjach. <\/p>\n

W rezultacie model zidentyfikowa\u0142 problemowe miejsce w kodzie, w kt\u00f3rym zwolniony obiekt pozostawa\u0142 dost\u0119pny w innym w\u0105tku. Jednocze\u015bnie model samodzielnie znalaz\u0142 problem jedynie na podstawie og\u00f3lnego zapytania, prosz\u0105cego o sprawdzenie wyst\u0119powania luk w kodzie, k\u0142ad\u0105c nacisk na poszukiwanie wisz\u0105cych wska\u017anik\u00f3w i dost\u0119pu do pami\u0119ci po jej zwolnieniu, wykluczaj\u0105c przy tym fa\u0142szywe alarmy i hipotetyczne problemy. <\/p>\n

Przed zbadaniem nowych luk, Sean przetestowa\u0142 r\u00f3\u017cne modele pod k\u0105tem wykrywania podatno\u015bci CVE-2025-37778 w ksmbd, wcze\u015bniej zidentyfikowanej przez niego podczas r\u0119cznego audytu i usuni\u0119tej w aktualizacji j\u0105dra 6.15-rc3. Model o3 poradzi\u0142 sobie z zadaniem i pokaza\u0142 wynik najbardziej zbli\u017cony do r\u0119cznego audytu, po czym Sean przeszed\u0142 do eksperyment\u00f3w dotycz\u0105cych wykrywania wcze\u015bniej nieznanych podatno\u015bci.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-37899), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0434\u0430 AI-\u043c\u043e\u0434\u0435\u043b\u044c\u044e OpenAI o3. \u0422\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0434\u0443\u043b\u044f ksmbd \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0439 \u0434\u043b\u044f \u043c\u043e\u0434\u0435\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-125569","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zdalna podatno\u015b\u0107 w module ksmbd j\u0105dra Linux, wykryta za pomoc\u0105 AI | ProHoster","description":"W module ksmbd, oferuj\u0105cym wbudowan\u0105 w j\u0105dro Linux implementacj\u0119 serwera plik\u00f3w opart\u0105 na protokole SMB, wykryto podatno\u015b\u0107 (CVE-2025-37899), kt\u00f3ra potencjalnie umo\u017cliwia wykonanie w\u0142asnego kodu na poziomie j\u0105dra.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI | ProHoster","og:description":"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-37899), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-25T13:05:07+00:00","article:modified_time":"2025-05-25T13:05:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"125569","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:10:05","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:00:19","updated":"2026-02-09 22:10:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/125569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=125569"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/125569\/revisions"}],"predecessor-version":[{"id":160231,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/125569\/revisions\/160231"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=125569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=125569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=125569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}