{"id":125748,"date":"2025-06-01T15:05:12","date_gmt":"2025-06-01T13:05:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka"},"modified":"2025-06-01T15:05:12","modified_gmt":"2025-06-01T13:05:12","slug":"inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka","title":{"rendered":"Incident s podvodom na commitoch v vetve jadra Linux od Kesa Kuka","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Linus Torvalds po\u017eiadal spr\u00e1vcu kernel.org, aby okam\u017eite zablokoval \u00fa\u010det Kesa Cuka, b\u00fdval\u00e9ho hlavn\u00e9ho syst\u00e9mov\u00e9ho administr\u00e1tora kernel.org a l\u00eddra Ubuntu Security Team, ktor\u00fd spravuje v jadre 14 podsystemov s\u00favisiacich s bezpe\u010dnos\u0165ou. Konstantin Ryabtsev, zodpovedn\u00fd za pr\u00e1cu infra\u0161trukt\u00fary kernel.org, zablokoval \u00fa\u010det. D\u00f4vodom na zablokovanie bol pull request na zaradenie zmien do vetvy jadra 6.16, odkazuj\u00faci na git repozit\u00e1r, v ktorom bola zmenen\u00e1 inform\u00e1cia o autorstve niektor\u00fdch commitov. <\/p>\n

V podporovanej gitovej repozit\u00e1ri Kesa sa vyskytovali fikt\u00edvne zmeny, v poli autora a komitenta ktor\u00fdch bol uveden\u00fd \u201eLinus Torvalds\u201c, no Linus ich nepridal. Napr\u00edklad, pod menom Linusa vo vetve Kesa sa nach\u00e1dzal commit, ktor\u00fd opakoval in\u00fd commit vo vetve Linusa, ale s in\u00fdm SHA1 hashom. Oba commity vyzeraj\u00fa rovnako, okrem inform\u00e1ci\u00ed o podpise. <\/p>\n

Zmeny sa nezdali by\u0165 n\u00e1hodnou chybou pri vykon\u00e1van\u00ed oper\u00e1cie \u201egit rebase\u201c, preto\u017ee obsahovali nespr\u00e1vne inform\u00e1cie o autorovi commit-u. Linus Torvalds pova\u017eoval toto za stopy potenci\u00e1lne \u0161kodlivej aktivity a inicioval blok\u00e1ciu prij\u00edmania ak\u00fdchko\u013evek zmien od Kesa, k\u00fdm sa neobjasnia pr\u00ed\u010diny t\u00fdchto manipul\u00e1ci\u00ed a nepotvrd\u00ed, \u017ee syst\u00e9m Kesa nebol kompromitovan\u00fd. <\/p>\n

Kes odpovedal, \u017ee nech\u00e1pe, ako sa to mohlo sta\u0165. Predt\u00fdm sa stretol s probl\u00e9mami pri pokuse o zl\u00fa\u010denie nieko\u013ek\u00fdch svojich gitov\u00fdch vetiev, po \u010dom sa pok\u00fasil ich vyrie\u0161i\u0165 oper\u00e1ciou \u201egit rebase\u201c, ale zd\u00e1 sa, \u017ee to nepomohlo. To v\u0161etko sa dialo na pozad\u00ed zlyhania SSD disku, ktor\u00fd hl\u00e1sil chyby po\u010das kop\u00edrovania. Kes si myslel, \u017ee po zlyhan\u00ed sa mu podarilo obnovi\u0165 stav svojich repozit\u00e1rov, no pod\u013ea v\u0161etk\u00e9ho to tak nie je. Na obnovenie integrity sa Kes pl\u00e1nuje znovu vytvori\u0165 svoje vetvy z jednotliv\u00fdch patchov. Ako najpravdepodobnej\u0161iu pr\u00ed\u010dinu vzniknutej v\u00fdmeny autora pova\u017euje ne\u00faspe\u0161n\u00fd pokus o obnovu repozit\u00e1ra po jeho po\u0161koden\u00ed. <\/p>\n

Linus nebol s t\u00fdmto vysvetlen\u00edm spokojn\u00fd, preto\u017ee, pod\u013ea jeho n\u00e1zoru, zmeny hist\u00f3rie commitov v repozit\u00e1ri Kesa sa ve\u013emi podobali na \u00famyseln\u00e9 \u010diny, a nie na n\u00e1hodn\u00fd zlyhanie. Preb\u00e1zovanie hist\u00f3rie zmien oper\u00e1ciou \u201egit rebase\u201c mohlo vysvetli\u0165 prep\u00edsanie komitenta, ale Linus nedok\u00e1\u017ee pochopi\u0165, ako by tak\u00e1to oper\u00e1cia \u201egit rebase\u201c mohla by\u0165 vykonan\u00e1 omylom. <\/p>\n

Prep\u00edsanie jedn\u00e9ho alebo dvoch commitov by sa e\u0161te dalo prip\u00edsa\u0165 na chybu, ale v repozit\u00e1ri Kesa bolo prep\u00edsan\u00fdch viac ako \u0161es\u0165 tis\u00edc merge commitov, z ktor\u00fdch v 330 bolo autorom uveden\u00e9 Linus, pri\u010dom tieto commity neboli z\u00edskan\u00e9 z git stromu Linusa. Vykonan\u00e9 zmeny viac pripom\u00ednaj\u00fa pr\u00e1cu skriptu, ako v\u00fdsledok po\u0161kodenia inform\u00e1ci\u00ed na \u00falo\u017eisku, preto\u017ee si vy\u017eaduj\u00fa osobitn\u00e9 op\u00e4tovn\u00e9 vytvorenie k\u00f3pie ka\u017ed\u00e9ho commitu. <\/p>\n

Kesz uistil Linusa, \u017ee to neurobil \u00famyselne a \u017ee by nevykon\u00e1val podobn\u00e9 experimenty bez varovania (napr\u00edklad predch\u00e1dzaj\u00faci experiment s vyvolan\u00edm kol\u00edzi\u00ed commitov bol schv\u00e1len\u00fd Linusom). Tento t\u00fd\u017ede\u0148 vykon\u00e1val nieko\u013eko manu\u00e1lnych oper\u00e1ci\u00ed s repozit\u00e1rom a teraz sa pok\u00fasi zisti\u0165, \u010do sa pokazilo a reprodukova\u0165 probl\u00e9m. Napr\u00edklad Kesz vykon\u00e1val oper\u00e1ciu rebase pre git stromy for-next\/hardening a for-linus\/hardening, pri\u010dom na rozdiel od predch\u00e1dzaj\u00facich podobn\u00fdch transform\u00e1ci\u00ed pou\u017eil vetvu \u201emaster\u201c namiesto rc2. Po\u010das tejto oper\u00e1cie robil zmeny v skriptoch na kontrolu push po\u017eiadaviek. <\/p>\n

Doplnenie: Kesz Cook zverejnil \u010fal\u0161iu spr\u00e1vu, v ktorej uviedol, \u017ee pravdepodobne probl\u00e9m vznikol v d\u00f4sledku pou\u017eitia n\u00e1stroja \u201egit-filter-repo\u201c, ktor\u00fd vykon\u00e1va prepis hist\u00f3rie commitov v repozit\u00e1ri, v kombin\u00e1cii s pr\u00edkazom \u201eb4 trailers\u201c, ktor\u00fd je ur\u010den\u00fd na z\u00edskavanie a aplik\u00e1ciu trailerov na commity (napr\u00edklad \u201eSigned-off-by:\u201c).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 kernel.org \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u041a\u0435\u0441\u0430 \u041a\u0443\u043a\u0430, \u0431\u044b\u0432\u0448\u0435\u0433\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0433\u043e \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u0430 kernel.org \u0438 \u043b\u0438\u0434\u0435\u0440\u0430 Ubuntu Security Team, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u0432 \u044f\u0434\u0440\u0435 14 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e. \u041a\u043e\u043d\u0441\u0442\u0430\u043d\u0442\u0438\u043d \u0420\u044f\u0431\u0446\u0435\u0432, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b kernel.org, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443. \u041f\u043e\u0432\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b pull-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0442\u043a\u0443 \u044f\u0434\u0440\u0430 6.16 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0441\u0441\u044b\u043b\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u043d\u0430 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-125748","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Incident s n\u00e1hradou commitov v jadre Linux od Kesa Cooka | ProHoster","description":"Linus Torvalds po\u017eiadal administr\u00e1tora kernel.org, aby okam\u017eite zablokoval \u00fa\u010det Kesa Cooka, b\u00fdval\u00e9ho hlavn\u00e9ho administr\u00e1tora kernel.org a l\u00eddra Ubuntu Security Team, ktor\u00fd spravoval v jadre 14 subsyst\u00e9mov.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0432 \u0432\u0435\u0442\u043a\u0435 \u044f\u0434\u0440\u0430 Linux \u043e\u0442 \u041a\u0435\u0441\u0430 \u041a\u0443\u043a\u0430 | ProHoster","og:description":"\u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 kernel.org \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u041a\u0435\u0441\u0430 \u041a\u0443\u043a\u0430, \u0431\u044b\u0432\u0448\u0435\u0433\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0433\u043e \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u0430 kernel.org \u0438 \u043b\u0438\u0434\u0435\u0440\u0430 Ubuntu Security Team, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u0432 \u044f\u0434\u0440\u0435 14 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/inczident-s-podmenoj-kommitov-v-vetke-yadra-linux-ot-kesa-kuka","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-06-01T13:05:12+00:00","article:modified_time":"2025-06-01T13:05:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"125748","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 13:07:05","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:07:05","updated":"2026-01-23 13:07:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/125748","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=125748"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/125748\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=125748"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=125748"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=125748"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}