{"id":183410,"date":"2026-09-20T10:54:15","date_gmt":"2026-09-20T08:54:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/opasnye-uyazvimosti-v-yadre-linux-kvm-exim-unbound-ghostscript-i-suricata"},"modified":"2026-09-20T10:54:15","modified_gmt":"2026-09-20T08:54:15","slug":"serious-vulnerabilities-in-the-linux-kernel-kvm-exim-unbound-ghostscript-and-suricata","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/serious-vulnerabilities-in-the-linux-kernel-kvm-exim-unbound-ghostscript-and-suricata","title":{"rendered":"Vulnerabilidades cr\u00edticas no n\u00facleo do Linux, KVM, Exim, Unbound, Ghostscript e Suricata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Diversas vulnerabilidades cr\u00edticas rec\u00e9m-identificadas que permitem acesso root ao sistema ou execu\u00e7\u00e3o remota de c\u00f3digo.  <\/p>\n<ul>\n<li class=\"l\"> Foram reveladas informa\u00e7\u00f5es sobre quatro vulnerabilidades no n\u00facleo do Linux que permitem que um usu\u00e1rio local sem privil\u00e9gios execute c\u00f3digo com direitos de root. Os problemas foram corrigidos nas atualiza\u00e7\u00f5es do n\u00facleo do Linux 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.109, 6.18.50 e 7.2.4. Para todas as vulnerabilidades, foram preparados exploits, cuja opera\u00e7\u00e3o foi demonstrada no Fedora 43\/44 e Ubuntu 24.04. Para explorar as tr\u00eas primeiras vulnerabilidades, \u00e9 necess\u00e1rio ter a capacidade de criar namespaces de identificadores de usu\u00e1rios (user namespace) ou possuir permiss\u00f5es CAP_NET_ADMIN, al\u00e9m de ativar o suporte a subsistemas que cont\u00eam as vulnerabilidades (AH6\/XFRM, TUN, PPPoE e SCTP).\n<ul>\n<li class=\"l\"> DirtyAH6 (CVE-2026-80844, exploit) \u2014 estouro de buffer no manipulador IPsec AH (Authentication Header), resultante da falta de verifica\u00e7\u00e3o dos valores especificados no cabe\u00e7alho. Al\u00e9m da execu\u00e7\u00e3o local do ataque, a vulnerabilidade, em condi\u00e7\u00f5es espec\u00edficas, pode teoricamente ser explorada remotamente.\n<li class=\"l\"> TUNderflow (CVE-2026-81000, exploit) \u2014 grava\u00e7\u00e3o al\u00e9m do buffer alocado na an\u00e1lise de um pacote TUN malformado.\n<li class=\"l\"> PPPoEject (CVE-2026-68121, exploit) \u2014 acesso \u00e0 mem\u00f3ria j\u00e1 liberada no driver PPPoE.\n<li class=\"l\"> DiagSpill (CVE-2026-74469, exploit) \u2014 estouro de buffer nas ferramentas de diagn\u00f3stico do protocolo SCTP. Al\u00e9m da execu\u00e7\u00e3o local do ataque, a vulnerabilidade, em condi\u00e7\u00f5es espec\u00edficas, pode teoricamente ser explorada remotamente.     <\/ul>\n<li class=\"l\"> Vulnerabilidade (CVE-2026-89775) no hipervisor <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/vps\/abuzoustojchivye-vps\/\" title=\"KVM\" data-wpil-keyword-link=\"linked\">KVM<\/a>, permitindo acesso ao ambiente de host a partir do sistema convidado. Se usu\u00e1rios n\u00e3o privilegiados tiverem acesso ao dispositivo \/dev\/kvm (por padr\u00e3o no RHEL), a vulnerabilidade tamb\u00e9m pode ser utilizada para elevar privil\u00e9gios no sistema. O problema se manifesta apenas em sistemas com arquitetura ARM64 com suporte a virtualiza\u00e7\u00e3o aninhada ativado. A vulnerabilidade \u00e9 causada pelo fato de que o procedimento de c\u00e1lculo do tamanho retornava \u201c0\u201d, implicando que o tamanho era desconhecido, e a fun\u00e7\u00e3o de libera\u00e7\u00e3o de p\u00e1ginas de mem\u00f3ria tratava \u201c0\u201d como um valor real e n\u00e3o limpava as p\u00e1ginas de mem\u00f3ria.\n<li class=\"l\"> Na vers\u00e3o do correio <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/server\/dts-los-angeles\/\" title=\"servidor\" data-wpil-keyword-link=\"linked\">servidor<\/a> Exim 4.100.1 foram corrigidas 4 vulnerabilidades: leitura de dados fora da \u00e1rea do buffer e uso de dados n\u00e3o inicializados na implementa\u00e7\u00e3o do protocolo Proxy; acesso \u00e0 mem\u00f3ria ap\u00f3s a libera\u00e7\u00e3o em TLS-on-connect ao usar GnuTLS; inje\u00e7\u00e3o de mensagens em outro fluxo (SMTP smuggling).\n<li class=\"l\"> No pacote Ghostscript 10.08.0, uma vulnerabilidade (CVE-2026-39919) foi corrigida, causada por um estouro de buffer no c\u00f3digo para an\u00e1lise do formato JPEG 2000 ao especificar valores incorretos de subsampling. O problema pode levar \u00e0 execu\u00e7\u00e3o de c\u00f3digo ao processar arquivos PDF formatados especificamente com imagens incorporadas no formato JPEG 2000. O perigo da vulnerabilidade \u00e9 agravado pelo fato de que o Ghostscript \u00e9 chamado durante a cria\u00e7\u00e3o de miniaturas na \u00e1rea de trabalho, na indexa\u00e7\u00e3o de dados em segundo plano e na convers\u00e3o de imagens. Para um ataque bem-sucedido, em muitos casos, basta simplesmente carregar um arquivo com um exploit ou visualizar o diret\u00f3rio com ele no Nautilus. As vulnerabilidades no Ghostscript tamb\u00e9m podem ser exploradas atrav\u00e9s de manipuladores de imagens baseados em pacotes como ImageMagick e GraphicsMagick, passando um arquivo JPEG ou PNG que cont\u00e9m c\u00f3digo PostScript em vez de uma imagem (esse arquivo ser\u00e1 processado no Ghostscript, uma vez que o tipo MIME \u00e9 reconhecido pelo conte\u00fado e n\u00e3o se baseia na extens\u00e3o). O problema foi corrigido no Ghostscript 10.08.0.\n<li class=\"l\"> No servidor DNS Unbound 1.26.1, 9 vulnerabilidades foram corrigidas, entre elas a CVE-2026-81642, que leva a um estouro de buffer ao processar certos DNSKEY. A vulnerabilidade pode ser usada para execu\u00e7\u00e3o remota de c\u00f3digo em <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/server\/dts-dronten\/\" title=\"servidor\" data-wpil-keyword-link=\"linked\">servidor<\/a>. Tamb\u00e9m foram corrigidos: estouro de buffer no c\u00f3digo de trabalho com DNSSEC, corrup\u00e7\u00e3o de dados na mem\u00f3ria no manipulador de CNAME, e acesso a mem\u00f3ria j\u00e1 liberada no c\u00f3digo DoQ e DoH.\n<li class=\"l\"> No sistema de detec\u00e7\u00e3o e preven\u00e7\u00e3o de intrus\u00f5es Suricata 8.0.7, 67 vulnerabilidades foram corrigidas, das quais duas s\u00e3o classificadas como cr\u00edticas. Detalhes sobre os problemas ainda n\u00e3o foram divulgados, mas com base no n\u00edvel de gravidade, as vulnerabilidades permitem execu\u00e7\u00e3o remota de c\u00f3digo ao processar tr\u00e1fego especificamente formatado.  <\/ul>\n<p>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66310\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0434\u0430\u044e\u0449\u0438\u0445 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 Linux 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.109, 6.18.50 \u0438 7.2.4. \u0414\u043b\u044f \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b, \u0440\u0430\u0431\u043e\u0442\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183410","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/serious-vulnerabilities-in-the-linux-kernel-kvm-exim-unbound-ghostscript-and-suricata\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, KVM, Exim, Unbound, Ghostscript \u0438 Suricata | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/serious-vulnerabilities-in-the-linux-kernel-kvm-exim-unbound-ghostscript-and-suricata\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-09-20T08:54:15+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-20T08:54:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidades cr\u00edticas no kernel Linux, KVM, Exim, Unbound, Ghostscript e Suricata | ProHoster","description":"Diversas vulnerabilidades cr\u00edticas rec\u00e9m-identificadas que permitem acesso root ao sistema ou execu\u00e7\u00e3o remota de c\u00f3digo.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/serious-vulnerabilities-in-the-linux-kernel-kvm-exim-unbound-ghostscript-and-suricata","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, KVM, Exim, Unbound, Ghostscript \u0438 Suricata | ProHoster","og:description":"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/serious-vulnerabilities-in-the-linux-kernel-kvm-exim-unbound-ghostscript-and-suricata","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-09-20T08:54:15+00:00","article:modified_time":"2026-09-20T08:54:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"183410","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-09-22 16:20:59","updated":"2026-09-22 16:20:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=183410"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183410\/revisions"}],"predecessor-version":[{"id":183425,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183410\/revisions\/183425"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=183410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=183410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=183410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}