{"id":105690,"date":"2022-11-23T21:36:50","date_gmt":"2022-11-23T19:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij"},"modified":"2022-11-23T21:36:50","modified_gmt":"2022-11-23T19:36:50","slug":"uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","title":{"rendered":"Vulnerabilitate \u00een subsistemul io_uring, care duce la cre\u0219terea privilegiilor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cen implementarea interfe\u021bei de intrare\/ie\u0219ire asincron\u0103 io_uring, care face parte din nucleul Linux \u00eencep\u00e2nd cu versiunea 5.1, a fost identificat\u0103 o vulnerabilitate (CVE-2022-3910) care permite unui utilizator f\u0103r\u0103 privilegii s\u0103 execute cod cu privilegii de nucleu. Problema apare \u00een versiunile 5.18 \u0219i 5.19 \u0219i a fost remediat\u0103 \u00een ramura 6.0. Debian, RHEL \u0219i SUSE folosesc versiuni ale nucleului p\u00e2n\u0103 la 5.18, \u00een timp ce Fedora, Gentoo \u0219i Arch deja ofer\u0103 nucleul 6.0. Ubuntu 22.10 utilizeaz\u0103 nucleul vulnerabil 5.19. <\/p>\n
Vulnerabilitatea este cauzat\u0103 de accesarea unui bloc de memorie deja eliberat (use-after-free) \u00een subsistemul io_uring, legat\u0103 de actualizarea incorect\u0103 a contorului de referin\u021be \u2014 la apelul func\u021biei io_msg_ring() cu un fi\u0219ier fix (care se afl\u0103 permanent \u00een buffer-ul circular), se apeleaz\u0103 func\u021bia io_fput_file(), care reduce din gre\u0219eal\u0103 contorul de referin\u021be. \n Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"