{"id":184020,"date":"2026-10-27T23:40:54","date_gmt":"2026-10-27T21:40:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/10-uyazvimostej-v-yadre-linux-i-4-vo-freebsd-pozvolyayushhie-poluchit-prava-root-v-sisteme"},"modified":"2026-10-27T23:40:59","modified_gmt":"2026-10-27T21:40:59","slug":"10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access","title":{"rendered":"10 vulnerabilit\u0103\u021bi \u00een nucleul Linux \u0219i 4 \u00een FreeBSD, care permit ob\u021binerea drepturilor de root \u00een sistem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A fost descoperit\u0103 o serie de vulnerabilit\u0103\u021bi \u00een nucleul Linux \u0219i FreeBSD. Vulnerabilit\u0103\u021bile din Linux permit executarea de cod de la distan\u021b\u0103, cre\u0219terea privilegiilor \u00een sistem, ie\u0219irea din containere sau ocolirea izol\u0103rii ma\u0219inilor virtuale. Vulnerabilit\u0103\u021bile din FreeBSD permit oprirea de la distan\u021b\u0103 a nucleului, cre\u0219terea privilegiilor \u00een sistem \u0219i ocolirea izol\u0103rii hypervisorului Bhyve.<\/p>\n<p>Vulnerabilit\u0103\u021bile din nucleul Linux:<\/p>\n<ul>\n<li class=\"l\"> 5 vulnerabilit\u0103\u021bi, dezv\u0103luite de proiectul Zero Day Initiative, \u00eenainte de publicarea corec\u021biilor din cauza unei trimiteri gre\u0219ite a informa\u021biilor c\u0103tre o list\u0103 de distribu\u021bie gre\u0219it\u0103:\n<ul>\n<li class=\"l\"> ZDI-CAN-33549 \u2014 vulnerabilitate \u00een modulul ksmbd cu implementarea de fi\u0219iere <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-los-angeles\/\"   title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a> bazat\u0103 pe protocolul SMB, care poate fi exploatat\u0103 pentru execu\u021bia de cod de la distan\u021b\u0103 la nivel de kernel. Problema este cauzat\u0103 de o suprascriere de numere \u00eentregi \u00een func\u021bia mbdirect_connection_rdma_xmit(), care apare dac\u0103 kernelul este compilat cu op\u021biunile \u201eCONFIG_SMB_SERVER_SMBDIRECT=y\u201d \u0219i \u201eCONFIG_RDMA_RXE=y\u201d. Pentru ca un atac s\u0103 fie de succes, atacatorul trebuie s\u0103 aib\u0103 capacitatea de a scrie \u00een stocarea comun\u0103 oferit\u0103 de sistemul atacat <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-prohoster\/\"   title=\"serverul\" data-wpil-keyword-link=\"linked\">serverul<\/a>, care trebuie s\u0103 utilizeze \u0219i tehnologiile RDMA \u0219i SMB Direct. Este disponibil un prototip de exploit care func\u021bioneaz\u0103 \u00een Debian 13.\n<li class=\"l\"> ZDI-CAN-33774 \u2014 stare de concuren\u021b\u0103 \u00een modulul kernel ksmbd, care duce la scrierea a 62 de octe\u021bi de date din headerul SMB2 \u00eentr-un buffer de 40 de octe\u021bi alocat pentru protocolul SMB1. Vulnerabilitatea poate duce la execu\u021bia de cod de la distan\u021b\u0103 \u00een prezen\u021ba accesului la stocarea SMB gestionat\u0103 prin ksmbd. Este disponibil un prototip de exploit, care func\u021bioneaz\u0103 pe Debian 13.\n<li class=\"l\"> ZDI-CAN-33367 \u2014 vulnerabilitate \u00een stiva de re\u021bea a kernelului, care permite unui utilizator local s\u0103 ob\u021bin\u0103 privilegii root \u00een sistem prin suprascrierea datelor procesului \u00een cache-ul de pagin\u0103, similar cu vulnerabilit\u0103\u021bile Dirty Frag \u0219i Fragnesia. De aceast\u0103 dat\u0103, problema este cauzat\u0103 de o eroare \u00een func\u021bia<br \/>\nskb_zerocopy(). A fost preg\u0103tit un prototip de exploit, care func\u021bioneaz\u0103 \u00een diverse versiuni de Ubuntu. Corec\u021bia este disponibil\u0103 sub form\u0103 de patch. P\u00e2n\u0103 acum, doar dezvoltatorii Alma Linux au realizat o actualizare neplanificat\u0103 a pachetelor cu nucleul \u00een care au corectat aceast\u0103 vulnerabilitate.<\/p>\n<li class=\"l\"> ZDI-CAN-34068 \u2014 suprascrierea bufferului \u00een driverul grafic VMWGFX, utilizat pentru accelerarea 3D \u00een medii VMware. Problema permite unui utilizator local s\u0103 ob\u021bin\u0103 privilegii root \u00een sistem, av\u00e2nd acces la GPU virtual prin dispozitivul \/dri\/card*. Este disponibil un prototip de exploit, care func\u021bioneaz\u0103 pe Ubuntu 26.04\n<li class=\"l\"> ZDI-CAN-34076 \u2014 vulnerabilitate \u00een driverul nvmet (NVMe Target), care duce la scurgeri de informa\u021bii despre con\u021binutul memoriei kernelului.\n<\/ul>\n<li class=\"l\"> Informa\u021bii divulgate \u0219i prototipuri de exploatate publicate pentru 5 vulnerabilit\u0103\u021bi din kernel, care permit unui utilizator f\u0103r\u0103 privilegii s\u0103 ob\u021bin\u0103 privilegii root \u00een sistem \u0219i s\u0103 ocoleasc\u0103 izolarea containerelor. Setului de vulnerabilit\u0103\u021bi i s-a atribuit numele de cod \u201eInfinity Core\u201d. Problemele au fost deja remediate \u00een versiunile recente ale kernelului.\n<ul>\n<li class=\"l\"> CVE-2026-98260 \u2014 acces la memorie dup\u0103 eliberare din cauza reutiliz\u0103rii structurii POSIX-timer, memorie ce a fost eliberat\u0103 \u00een firul principal dup\u0103 e\u0219ecul unei apeluri exec(), dar referin\u021ba a r\u0103mas \u00een coada (timerqueue) \u00eentr-un alt fir. Este disponibil un prototip de exploit, a c\u0103rui func\u021bionare a fost demonstrat\u0103 pe Ubuntu 26.04 \u0219i \u00een Android pe smartphone-ul Samsung Galaxy S26 Ultra.\n<li class=\"l\"> CVE-2026-98256 \u2014 acces la memorie dup\u0103 eliberare din cauza unei condi\u021bii de curs\u0103 \u00eentre apelul exec() dintr-un fir secundar \u0219i cur\u0103\u021barea cozii de semnale (sigqueue), care a\u0219teapt\u0103 procesare. \u00cen manipularea cozii, se poate crea o situa\u021bie \u00een care referin\u021ba la handlerul semnalului r\u0103m\u00e2ne \u00een coad\u0103 dup\u0103 eliberarea memoriei asociate, iar ulterior este utilizat\u0103 \u00een procesarea semnalelor. Func\u021bionarea exploit-ului a fost demonstrat\u0103 \u00een Ubuntu 26.04.\n<li class=\"l\"> CVE-2026-89754 \u2014 suprascrierea bufferului \u00een implementarea apelului de sistem mincore(), care apare dintr-o condi\u021bie de curs\u0103 \u00een timpul parcurgerii repetate a tabelelor paginilor de memorie dup\u0103 execu\u021bia madvise(MADV_DONTNEED). Func\u021bionarea exploit-ului a fost demonstrat\u0103 \u00een Ubuntu 26.04.\n<li class=\"l\"> CVE-2026-80775 \u2014 acces la memorie dup\u0103 eliberare \u00een apelul de sistem prctl(), care apare dintr-o urm\u0103rire necorespunz\u0103toare a contorilor de referin\u021b\u0103 pentru hash-urile futex-urilor \u00een cazul apari\u021biei.<br \/>\nst\u0103ri de competi\u021bie \u00eentre sarcini care utilizeaz\u0103 o singur\u0103 structur\u0103 mm_struct \u00eentr-un apel \u00eennodat vfork(). Un exploat care folose\u0219te vulnerabilitatea pentru a rescrie \/usr\/bin\/passwd \u00een cache-ul paginilor a fost demonstrat \u00een Ubuntu 26.04.<\/p>\n<li class=\"l\"> CVE-2026-98385 \u2014 acces la memorie dup\u0103 eliberare \u00een handlerul cache-ului planificatorului de sarcini, care apare din faptul c\u0103 planificatorul actualizeaz\u0103 c\u00e2mpurile de statistic\u0103 \u00een structura mm_struct pentru sarcina respectiv\u0103 dup\u0103 eliberarea memoriei asociate, \u00een cazul execut\u0103rii apelului exec() pe un alt nucleu CPU. Vulnerabilitatea se manifest\u0103 \u00een nucleele cu op\u021biunea CONFIG_SCHED_CACHE activat\u0103. Func\u021bionarea exploit-ului a fost demonstrat\u0103 \u00een.<br \/>\nArch Linux cu nucleul 7.2.4.<\/p>\n<\/ul>\n<li class=\"l\"> Vulnerabilitatea Vghost (CVE-2026-74580) \u00een subsistemul kernelului vhost, utilizat\u0103 pentru accelerarea opera\u021biunilor de intrare\/ie\u0219ire prin Virtio \u00een sistemele de virtualizare. Vulnerabilitatea este cauzat\u0103 de o manipulare necorespunz\u0103toare a cache-ului tabelelor de traducere a adreselor de intrare-ie\u0219ire (IOTLB) \u0219i poate fi utilizat\u0103 pentru a ob\u021bine privilegii ridicate \u00een sistem \u0219i pentru a ocoli izola\u021bia sistemului gazd\u0103. La reproiectarea adreselor sau dimensiunilor coadelor (vring) prin apeluri VHOST_SET_VRING_ADDR sau VHOST_SET_VRING_NUM, cache-ul vq-&gt;meta_iotlb[] nu era cur\u0103\u021bat, ceea ce ducea la traducerea unor noi adrese folosind deja \u00eenregistr\u0103ri invalide despre maparea memoriei.\n<p>A fost publicat un prototip de exploit pentru ob\u021binerea drepturilor de root, testat pe distribu\u021biile Ubuntu 26.04, RHEL 9.8, Amazon Linux 2023.12.20260817, Azure Linux 3.0 \u0219i Oracle Linux 10.2.<br \/>\nVulnerabilitatea poate fi utilizat\u0103 pentru a executa cod la nivelul kernel-ului sistemului gazd\u0103 prin manipularea apelului VIRTIO_F_RING_RESET \u00een sistemul gazd\u0103 \u00een medii virtualizate cu IOMMU virtual.<br \/>\nProblema se manifest\u0103 \u00eencep\u00e2nd cu nucleul Linux 4.11 \u0219i a fost rezolvat\u0103 \u00een versiunile 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9 \u0219i 7.2. Ca o solu\u021bie temporar\u0103 de protec\u021bie, se poate restric\u021biona accesul la dispozitivele \/dev\/vhost-net, \/dev\/vhost-vsock, \/dev\/vhost-scsi \u0219i \/dev\/vhost-vdpa-*.<\/p>\n<\/ul>\n<p>Vulnerabilit\u0103\u021bi \u00een FreeBSD (rezolvate \u00een actualiz\u0103rile 15.1-RELEASE-p5, 14.5-RELEASE-p2 \u0219i 14.4-RELEASE-p11):<\/p>\n<ul>\n<li class=\"l\"> CVE-2026-101308 \u2014 acces la memorie dupa eliberare \u00een driverul sound, care apare dintr-o condi\u021bie de curs\u0103 \u00eentre opera\u021bia de schimbare a dimensiunii bufferului \u0219i maparea memoriei prin mmap. Vulnerabilitatea permite poten\u021bial unui utilizator local cu acces la dispozitivul sonor s\u0103 ob\u021bin\u0103 privilegii de root.\n<li class=\"l\"> CVE-2026-101309, CVE-2026-101310, CVE-2026-101311 \u2014 vulnerabilit\u0103\u021bi \u00een componentele hypervisorului Bhyve, care permit executarea de cod \u00een mediul gazd\u0103 prin manipul\u0103ri \u00een sistemul-gazd\u0103. Problemele sunt cauzate de dep\u0103\u0219iri ale limitei buffer-ului din cauza unei condi\u021bii de competi\u021bie \u00een modelul controlerului xHCI (USB 3), precum \u0219i de lipsa verific\u0103rilor dimensiunilor \u00een modelele de dispozitive HDA (High Definition Audio) \u0219i framebuffer.\n<li class=\"l\"> CVE-2026-101307 \u2014 defec\u021biune de tip overflow \u00een modulul tcp_rack cu implementarea algoritmului de detectare a pierderilor de pachete RACK (Recent ACKnowledgment), care duce la alocarea unui buffer prea mic pentru a \u00eencorpora toate datele primite. Vulnerabilitatea permite suprascrierea a p\u00e2n\u0103 la 512 KB \u00een zona din afara buffer-ului atunci c\u00e2nd se trimit un num\u0103r mare de pachete ACK \u00eentr-o conexiune TCP stabilit\u0103. Se observ\u0103 c\u0103 exploatarea poate duce la pr\u0103bu\u0219irea nucleului \u00eentr-o stare de panic\u0103.\n<\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66542\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u044f\u0434\u0440\u0430, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Bhyve. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux: 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184020","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4710 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 4 \u0432\u043e FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-27T21:40:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-27T21:40:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4710 vulnerabilit\u0103\u021bi \u00een nucleul Linux \u0219i 4 \u00een FreeBSD, care permit ob\u021binerea drepturilor de root \u00een sistem | ProHoster","description":"A fost identificat\u0103 o serie de vulnerabilit\u0103\u021bi \u00een nucleul Linux \u0219i FreeBSD. Vulnerabilit\u0103\u021bile din Linux permit executarea de cod de la distan\u021b\u0103, cre\u0219terea privilegiilor \u00een sistem, ie\u0219irea din containere sau ocolirea izol\u0103rii ma\u0219inilor virtuale.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4710 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 4 \u0432\u043e FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-27T21:40:54+00:00","article:modified_time":"2026-10-27T21:40:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=184020"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184020\/revisions"}],"predecessor-version":[{"id":184021,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184020\/revisions\/184021"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=184020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=184020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=184020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}