{"id":125569,"date":"2025-05-25T15:05:07","date_gmt":"2025-05-25T13:05:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai"},"modified":"2025-05-25T15:05:07","modified_gmt":"2025-05-25T13:05:07","slug":"udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","title":{"rendered":"Vzdialen\u00e1 zranite\u013enos\u0165 v module ksmbd jadra Linux, identifikovan\u00e1 pomocou AI","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V modulu ksmbd, ktor\u00fd pon\u00faka zabudovan\u00fa implement\u00e1ciu s\u00faborov\u00e9ho servera v jadre Linux na z\u00e1klade protokolu SMB, bola zisten\u00e1 zranite\u013enos\u0165 (CVE-2025-37899), potenci\u00e1lne umo\u017e\u0148uj\u00faca vykonanie vlastn\u00e9ho k\u00f3du na \u00farovni jadra prostredn\u00edctvom zasielania \u0161peci\u00e1lne pripraven\u00fdch paketov. Zauj\u00edmav\u00e9 je, \u017ee probl\u00e9m bol identifikovan\u00fd po\u010das anal\u00fdzy k\u00f3du AI modelom OpenAI o3. Ke\u010f\u017ee cel\u00fd k\u00f3d modulu ksmbd presahuje pr\u00edpustn\u00fa ve\u013ekos\u0165 kontextu pre model, kontrola bola vykonan\u00e1 postupne pre k\u00f3d implement\u00e1cie jednotliv\u00fdch pr\u00edkazov SMB, pri\u010dom sa pou\u017e\u00edvali typov\u00e9 po\u017eiadavky. <\/p>\n

Zranite\u013enos\u0165 vznik\u00e1 pr\u00edstupom k u\u017e uvo\u013enenej pam\u00e4ti (use-after-free) v k\u00f3de spracovania SMB pr\u00edkazu «logoff»: \u0161trukt\u00fara sess->user sa pou\u017e\u00edvala v inom vl\u00e1kne, ak v r\u00e1mci in\u00e9ho pripojenia pri\u0161iel dopyt na vytvorenie rel\u00e1cie viazanej na uvo\u013enen\u00fa rel\u00e1ciu. Pri spracovan\u00ed tak\u00fdchto dopytov sa spustila funkcia smb2_sess_setup, ktor\u00e1 sa odvol\u00e1vala na u\u017e uvo\u013enen\u00fa \u0161trukt\u00faru sess->user. <\/p>\n

Zranite\u013enos\u0165 bola odstr\u00e1nen\u00e1 v aktualiz\u00e1ci\u00e1ch 6.15-rc5, 6.14.6, 6.12.28, 6.6.90, 6.1.138. V vetve 5.15, do ktorej bol prijat\u00fd modul ksmbd, sa probl\u00e9m nevyskytuje. Sledova\u0165 odstr\u00e1nenie zranite\u013enosti v distrib\u00faci\u00e1ch mo\u017eno na nasleduj\u00facich str\u00e1nkach: Debian, Ubuntu, Fedora, SUSE\/openSUSE, RHEL, Arch. <\/p>\n

Probl\u00e9m zistil Sean Heelan, tvorca platformy na profilovanie k\u00f3du Prodfiler, \u0161pecializuj\u00faci sa na optimaliz\u00e1ciu a audit bezpe\u010dnosti k\u00f3du. Sean sa rozhodol zhodnoti\u0165, do akej miery s\u00fa modern\u00e9 AI modely pripraven\u00e9 na vykonanie auditu bezpe\u010dnosti a dospel k z\u00e1veru, \u017ee model o3 sa v\u00fdznamne posunul v anal\u00fdze a porozumen\u00ed \u0161trukt\u00fary, logiky a funk\u010dnosti k\u00f3du. Uv\u00e1dza sa, \u017ee na identifik\u00e1ciu zranite\u013enosti dok\u00e1zal model zostavi\u0165 re\u0165azec \u00favah, ktor\u00fd zoh\u013eadnil mo\u017enos\u0165 paraleln\u00fdch pripojen\u00ed k serveru<\/a> a pou\u017e\u00edvanie d\u00e1tov\u00fdch \u0161trukt\u00far v r\u00f4znych situ\u00e1ci\u00e1ch. <\/p>\n

V d\u00f4sledku toho model identifikoval probl\u00e9mov\u00e9 miesto v k\u00f3de, v ktorom osloboden\u00fd objekt zostal pr\u00edstupn\u00fd v inom vl\u00e1kne. Model pritom na\u0161iel probl\u00e9m s\u00e1m len na z\u00e1klade v\u0161eobecnej po\u017eiadavky, ktor\u00e1 \u017eiadala skontrolova\u0165 pr\u00edtomnos\u0165 zranite\u013enost\u00ed v k\u00f3de, pri\u010dom sa zameral na kontrolu visiacich ukazovate\u013eov a pr\u00edstupov k pam\u00e4ti po jej osloboden\u00ed, pri\u010dom vyl\u00fa\u010dil falo\u0161n\u00e9 alarmy a hypotetick\u00e9 probl\u00e9my. <\/p>\n

Predt\u00fdm, ako sa pustil do h\u013eadania nov\u00fdch zranite\u013enost\u00ed, \u0160on otestoval r\u00f4zne modely na identifik\u00e1ciu zranite\u013enosti CVE-2025-37778 v ksmbd, ktor\u00fa predt\u00fdm odhalil po\u010das manu\u00e1lneho auditu a ktor\u00e1 bola odstr\u00e1nen\u00e1 v aktualiz\u00e1cii jadra 6.15-rc3. Model o3 \u00faspe\u0161ne splnil \u00falohu a dosiahol v\u00fdsledok najbli\u017e\u0161\u00ed manu\u00e1lnemu auditu, po \u010dom sa \u0160on presunul na experimenty pri h\u013eadan\u00ed predt\u00fdm nezn\u00e1mych zranite\u013enost\u00ed.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-37899), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u0434\u0430 AI-\u043c\u043e\u0434\u0435\u043b\u044c\u044e OpenAI o3. \u0422\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0434\u0443\u043b\u044f ksmbd \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0439 \u0434\u043b\u044f \u043c\u043e\u0434\u0435\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-125569","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dia\u013ekov\u00e1 zranite\u013enos\u0165 v module ksmbd jadra Linux, odhalen\u00e1 pomocou AI | ProHoster","description":"V module ksmbd, ktor\u00fd pon\u00faka integrovan\u00fa implement\u00e1ciu s\u00faborov\u00e9ho servera na b\u00e1ze protokolu SMB v jadre Linux, bola zisten\u00e1 zranite\u013enos\u0165 (CVE-2025-37899), potenci\u00e1lne umo\u017e\u0148uj\u00faca vykon\u00e1vanie vlastn\u00e9ho k\u00f3du na \u00farovni jadra.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 AI | ProHoster","og:description":"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-37899), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/udalyonnaya-uyazvimost-v-module-ksmbd-yadra-linux-vyyavlennaya-pri-pomoshhi-ai","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-25T13:05:07+00:00","article:modified_time":"2025-05-25T13:05:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"125569","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:10:05","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:00:19","updated":"2026-02-09 22:10:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/125569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=125569"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/125569\/revisions"}],"predecessor-version":[{"id":160231,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/125569\/revisions\/160231"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=125569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=125569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=125569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}