{"id":170538,"date":"2026-05-09T00:24:31","date_gmt":"2026-05-08T22:24:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux"},"modified":"2026-05-09T00:24:31","modified_gmt":"2026-05-08T22:24:31","slug":"predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","title":{"rendered":"Foi proposto um killswitch para desativa\u00e7\u00e3o de funcionalidades vulner\u00e1veis no n\u00facleo do Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sasha Levin da NVIDIA, que cuida das branches LTS do n\u00facleo do Linux e \u00e9 membro do conselho consultivo da Linux Foundation, preparou um conjunto de patches para implementar o mecanismo killswitch no n\u00facleo do Linux. A funcionalidade proposta permite desativar instantaneamente o acesso a determinadas funcionalidades do n\u00facleo em execu\u00e7\u00e3o. Espera-se que o killswitch seja \u00fatil para bloquear temporariamente vulnerabilidades at\u00e9 que uma atualiza\u00e7\u00e3o do n\u00facleo com a corre\u00e7\u00e3o seja instalada. <\/p>\n

O gerenciamento do killswitch \u00e9 feito atrav\u00e9s do arquivo \"\\\/sys\\\/kernel\\\/security\\\/killswitch\\\/control\", que permite configurar a intercepta\u00e7\u00e3o de chamadas \u00e0s fun\u00e7\u00f5es do kernel pelo nome. Por exemplo, para bloquear a vulnerabilidade Copy Fail, basta gravar no arquivo de controle o comando \"engage af_alg_sendmsg -1\" para ativar a intercepta\u00e7\u00e3o da chamada da fun\u00e7\u00e3o af_alg_sendmsg e, em vez de sua execu\u00e7\u00e3o, retornar o c\u00f3digo de erro \"-1\". <\/p>\n

Qualquer caractere suportado pelo subsistema kprobes pode ser usado como nome. Muitas das vulnerabilidades s\u00e9rias recentemente encontradas no n\u00facleo est\u00e3o presentes em subsistemas utilizados por um n\u00famero relativamente pequeno de usu\u00e1rios (por exemplo, AF_ALG, ksmbd, nf_tables, vsock, ax25). Para a maioria dos usu\u00e1rios, o inconveniente causado pela interrup\u00e7\u00e3o de fun\u00e7\u00f5es espec\u00edficas n\u00e3o se compara ao risco de trabalhar com um n\u00facleo que possui uma vulnerabilidade conhecida n\u00e3o corrigida at\u00e9 que a corre\u00e7\u00e3o seja instalada. O mecanismo killswitch \u00e9 especialmente relevante no contexto da vulnerabilidade Dirty Frag, cujo exploit foi publicado antes que o problema fosse resolvido no n\u00facleo.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0430\u0448\u0430 \u041b\u0435\u0432\u0438\u043d (Sasha Levin) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NVIDIA, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c LTS-\u0432\u0435\u0442\u043e\u043a \u044f\u0434\u0440\u0430 Linux \u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u043e\u0432\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 killswitch \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u044f\u0434\u0440\u0430. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e killswitch \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u0435\u043d \u0434\u043b\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u044f \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170538","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Foi proposto um killswitch para desativa\u00e7\u00e3o de funcionalidades vulner\u00e1veis no n\u00facleo do Linux | ProHoster","description":"Sasha Levin da NVIDIA, que cuida das branches LTS do n\u00facleo do Linux e \u00e9 membro do conselho consultivo da Linux Foundation, preparou um conjunto de patches para implementar o mecanismo.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d killswitch \u0434\u043b\u044f \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u0421\u0430\u0448\u0430 \u041b\u0435\u0432\u0438\u043d (Sasha Levin) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NVIDIA, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c LTS-\u0432\u0435\u0442\u043e\u043a \u044f\u0434\u0440\u0430 Linux \u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0432 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u043e\u0432\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Linux Foundation, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/predlozhen-killswitch-dlya-ekstrennogo-otklyucheniya-uyazvimoj-funkczionalnosti-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-08T22:24:31+00:00","article:modified_time":"2026-05-08T22:24:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/170538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=170538"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/170538\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=170538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=170538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=170538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}