{"id":104289,"date":"2022-06-06T09:36:38","date_gmt":"2022-06-06T07:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter"},"modified":"2022-06-06T09:36:38","modified_gmt":"2022-06-06T07:36:38","slug":"eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","title":{"rendered":"O alt\u0103 vulnerabilitate \u00een subsistemul kernelului Linux Netfilter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00cen subsistemul nucleului Netfilter a fost detectat\u0103 o vulnerabilitate (CVE-2022-1972), similar\u0103 cu problema dezv\u0103luit\u0103 la sf\u00e2r\u0219itul lunii mai. Noua vulnerabilitate permite de asemenea unui utilizator local s\u0103 ob\u021bin\u0103 drepturi de root \u00een sistem prin manipularea regulilor \u00een nftables \u0219i necesit\u0103 pentru a efectua un atac acces la nftables, care poate fi ob\u021binut \u00eentr-un spa\u021biu de nume separat (network namespace sau user namespace) \u00een prezen\u021ba drepturilor CLONE_NEWUSER, CLONE_NEWNS sau CLONE_NEWNET (de exemplu, \u00een cazul \u00een care se permite rularea unui container izolat).     <\/p>\n<p>Problema este cauzat\u0103 de o eroare \u00een codul de procesare a set-urilor cu c\u00e2mpuri care includ mai multe intervale \u0219i duce la scrierea \u00een afara zonei de memorie alocate atunci c\u00e2nd se proceseaz\u0103 parametrii de list\u0103 special formata\u021bi. Cercet\u0103torii au reu\u0219it s\u0103 preg\u0103teasc\u0103 un exploit func\u021bional pentru a ob\u021bine drepturi de root \u00een Ubuntu 21.10 cu kernel 5.13.0-39-generic. Vulnerabilitatea apare \u00eencep\u00e2nd cu kernel 5.6. O corectare a fost propus\u0103 sub form\u0103 de patch. Pentru a bloca exploatarea vulnerabilit\u0103\u021bii pe sistemele obi\u0219nuite, trebuie s\u0103 se asigure c\u0103 este dezactivat\u0103 capacitatea de creare a spa\u021biilor de nume de c\u0103tre utilizatorii neprivilegia\u021bi (\"sudo sysctl -w kernel.unprivileged_userns_clone=0\").    <\/p>\n<p>\u00cen plus, au fost publicate informa\u021bii despre trei vulnerabilit\u0103\u021bi \u00een nucleu, legate de subsistemul NFC. Vulnerabilit\u0103\u021bile permit o oprire nea\u0219teptat\u0103 a func\u021bion\u0103rii prin executarea unor ac\u021biuni de c\u0103tre un utilizator neprivilegiat (vectorii de atac mai periculo\u0219i nu au fost \u00eenc\u0103 demonstra\u021bi):  <\/p>\n<ul>\n<li class=\"l\"> CVE-2022-1734 \u2014 accesarea memoriei deja eliberate (use-after-free) \u00een driverul nfcmrvl (drivers\/nfc\/nfcmrvl), care se manifest\u0103 la simularea unui dispozitiv NFC \u00een spa\u021biul utilizatorului.\n<li class=\"l\"> CVE-2022-1974 \u2014 accesarea memoriei deja eliberate \u00een func\u021biile netlink pentru dispozitive NFC (\/net\/nfc\/core.c), care se manifest\u0103 la \u00eenregistrarea unui nou dispozitiv. La fel ca vulnerabilitatea anterioar\u0103, problema poate fi exploatat\u0103 prin simularea unui dispozitiv NFC \u00een spa\u021biul utilizatorului.\n<li class=\"l\"> CVE-2022-1975 \u2014 o eroare \u00een codul de \u00eenc\u0103rcare a firmware-urilor pentru dispozitive NFC, care poate fi utilizat\u0103 pentru a provoca o stare de \"panic\".    <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57305\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Netfilter \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1972), \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f. \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u0432 nftables \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a nftables, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0438\u043c\u0451\u043d (network namespace \u0438\u043b\u0438 user namespace) \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043f\u0440\u0430\u0432 CLONE_NEWUSER, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104289","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Netfilter \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1972), \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux Netfilter | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Netfilter \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1972), \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-06-06T07:36:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-06-06T07:36:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cenc\u0103 o vulnerabilitate \u00een subsistemul nucleului Linux Netfilter | ProHoster","description":"\u00cen subsistemul nucleului Netfilter a fost detectat\u0103 o vulnerabilitate (CVE-2022-1972), similar\u0103 cu problema dezv\u0103luit\u0103 la sf\u00e2r\u0219itul lunii mai.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux Netfilter | ProHoster","og:description":"\u0412 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Netfilter \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1972), \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/eshhyo-odna-uyazvimost-v-podsisteme-yadra-linux-netfilter","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-06T07:36:38+00:00","article:modified_time":"2022-06-06T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104289","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:33:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-06 07:37:01","updated":"2026-01-25 11:33:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=104289"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104289\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=104289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=104289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=104289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}