{"id":105690,"date":"2022-11-23T21:36:50","date_gmt":"2022-11-23T19:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij"},"modified":"2022-11-23T21:36:50","modified_gmt":"2022-11-23T19:36:50","slug":"uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","title":{"rendered":"Zranite\u013enos\u0165 v pod syst\u00e9me io_uring, ved\u00faca k zv\u00fd\u0161eniu opr\u00e1vnen\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
V implement\u00e1cii rozhrania asynchr\u00f3nneho vstupu\/v\u00fdstupu io_uring, ktor\u00e9 je s\u00fa\u010das\u0165ou jadra Linux od verzie 5.1, bola zisten\u00e1 zranite\u013enos\u0165 (CVE-2022-3910), ktor\u00e1 umo\u017e\u0148uje neprivilegovan\u00e9mu pou\u017e\u00edvate\u013eovi vykona\u0165 k\u00f3d s privil\u00e9giami jadra. Probl\u00e9m sa vyskytuje vo verzi\u00e1ch 5.18 a 5.19 a bol odstr\u00e1nen\u00fd vo vetve 6.0. Debian, RHEL a SUSE pou\u017e\u00edvaj\u00fa verzie jadra do 5.18, zatia\u013e \u010do Fedora, Gentoo a Arch u\u017e pon\u00fakaj\u00fa jadro 6.0. V Ubuntu 22.10 je pou\u017eit\u00e9 zranite\u013en\u00e9 jadro 5.19. <\/p>\n
Zranite\u013enos\u0165 je sp\u00f4soben\u00e1 pr\u00edstupom k u\u017e uvo\u013enen\u00e9mu bloku pam\u00e4te (use-after-free) v subsyst\u00e9me io_uring, spojen\u00fdm s nespr\u00e1vnou aktualiz\u00e1ciou po\u010d\u00edta\u010da odkazov \u2014 pri volan\u00ed io_msg_ring() s pevn\u00fdm s\u00faborom (trvale nach\u00e1dzaj\u00facim sa v kruhovom buffri) sa chybne vol\u00e1 funkcia io_fput_file(), ktor\u00e1 zni\u017euje po\u010d\u00edta\u010d odkazov. \n Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"