{"id":183167,"date":"2026-08-28T16:53:41","date_gmt":"2026-08-28T14:53:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimosti-v-linux-i-freebsd-pozvolyayushhie-poluchit-root-dostup-v-sisteme"},"modified":"2026-08-28T16:53:43","modified_gmt":"2026-08-28T14:53:43","slug":"linux-and-freebsd-vulnerabilities-allowing-root-access","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access","title":{"rendered":"Ranljivosti v Linuxu in FreeBSD, ki omogo\u010dajo pridobitev root-dostopa v sistemu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V FreeBSD je bilo odpravljenih 8 ranljivosti, ki omogo\u010dajo povi\u0161anje svojih privilegijev v sistemu. Ranljivosti so bile odpravljene v posodobitvah FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 in 14.4-RELEASE-p9.   <\/p>\n<ul>\n<li class=\"l\"> CVE-2026-58094 \u2014 stanje race u implementaciji ioctl operacije FIOSSHMLPGCNF, koja se koristi za pode\u0161avanje veli\u010dine stranice deljene memorije. Problem je uzrokovan nedostatkom zaklju\u010davanja prilikom izvr\u0161enja operacije provere promene veli\u010dine, \u0161to je omogu\u0107ilo slanjem dva paralelna zahteva s razli\u010ditim veli\u010dinama da se postave neispravni parametri objekta.\n<li class=\"l\"> CVE-2026-58093 \u2014 pristup memoriji nakon njenog osloba\u0111anja u implementaciji ioctl TIOCSCTTY, koja se koristi za upravljanje pseudoterminalom. Problem je uzrokovan nepravilnim radom sa zaklju\u010davanjima.\n<li class=\"l\"> CVE-2026-58095, CVE-2026-58096, CVE-2026-58097 \u2014 problemi u implementaciji PPP (Point-to-Point Protocol) protokola, uzrokovani nepravilnom proverom veli\u010dine obra\u0111enih parametara.\n<li class=\"l\"> CVE-2026-58092 \u2014 logi\u010dka gre\u0161ka u modulu mac_do, koji pru\u017ea funkcionalnost za izvr\u0161avanje komandi pod drugim korisnikom. Problem je uzrokovan promenom strukture \u010duvanja informacija o pravima korisnika \u2014 osnovni identifikator grupe korisnika je premesten u posebnu strukturu, ali u funkciji group_is_primary() ovo je zaboravljeno da se odrazi i ona je nastavila da dobija informacije po staroj offset veli\u010dini.\n<li class=\"l\"> CVE-2026-58091 \u2014 pristup memoriji nakon njenog osloba\u0111anja u implementaciji ioctl SNDCTL_DSP_SYNCSTART, koja se koristi za sinhrono pokretanje reprodukcije na vi\u0161e audio ure\u0111aja. Ranljivost je uzrokovana nepravilnim radom sa zaklju\u010davanjima i manifestuje se na sistemima s vi\u0161e zvu\u010dnih ure\u0111aja.\n<li class=\"l\"> CVE-2026-58090 \u2014 pristup memoriji nakon njenog osloba\u0111anja u implementaciji UNIX soketa, koji se javlja prilikom obrade SOCK_STREAM poruka.\n<li class=\"l\"> CVE-2026-58089 \u2014 logi\u010dka gre\u0161ka u hwpmc drajveru, koji je namenjen pra\u0107enju performansi, zbog koje prikupljanje statistike nije isklju\u010deno nakon pove\u0107anja privilegija prilikom izvr\u0161avanja suid root procesa. Problem omogu\u0107ava obi\u010dnom korisniku da prati aktivnost u privilegovanim procesima.\n<li class=\"l\"> CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076 \u2014 ranjivosti u openssl biblioteci, uzrokovane prelivanjem bafera, duplim osloba\u0111anjem memorije, problemima sa formatiranjem stringova i dereferenciranjem NULL pokaziva\u010da. Potencijalno, neki od problema ne isklju\u010duju organizaciju daljinskog izvr\u0161avanja koda.    <\/ul>\n<p>Ve\u010d nevarnih te\u017eav, ki omogo\u010dajo lokalnemu uporabniku pridobitev pravic root, je prav tako odkritih v jedru Linux:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2026-53361 \u2014 dostop do pomnilnika po njegovi sprostitvi v izvedbi AF_UNIX socketov. Na voljo je eksploit, ki omogo\u010da izhod iz izoliranega kontejnerja. Delovanje eksploitja je bilo demonstrirano v Ubuntu 24.04, RHEL 10 in Debian 13 z jedri Linux 6.8, 6.12, 6.14 in 6.17. Te\u017eava je odpravljena v posodobitvah jedra 7.1.0, 6.18.38, 6.12.95 in 6.6.144.\n<li class=\"l\"> CVE-2026-72137 \u2014 dvojno spro\u0161\u010danje pomnilnika v modulu nat_keepalive. Te\u017eava se pojavi od jedra 6.11 in je odpravljena v izdajah 7.2.0, 6.12.101, 6.18.40 in 7.1.5. Na voljo je delujo\u010d eksploit, ki omogo\u010da pridobitev pravic root v sistemu.\n<li class=\"l\"> Ranljivosti (CVE ni dodeljen) v datote\u010dnem sistemu eCryptfs, ki lahko potencialno privedejo do izvajanja kode na ravni jedra pri obdelavi posebej oblikovanih \u0161ifriranih datotek.\n<li class=\"l\"> Ranljivost (CVE ni dodeljen) v modulu ntfs3, ki omogo\u010da podmenjavo izvajalnih datotek s pravico suid root ob monta\u017ei posebej oblikovane slike datote\u010dnega sistema (prikazan je primer izkori\u0161\u010danja ranljivosti za pridobitev pravic root pri avtomatski monta\u017ei USB naprave).\n<li class=\"l\"> Skupaj je avgusta razkritih 1668 ranljivosti v jedru Linux.    <\/ul>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66158\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 \u0438 14.4-RELEASE-p9. CVE-2026-58094 &#8212; \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 ioctl-\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 FIOSSHMLPGCNF, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043c\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0434\u0432\u0443\u0445 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183167","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 \u0438 14.4-RELEASE-p9.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0438 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 \u0438 14.4-RELEASE-p9.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-28T14:53:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-28T14:53:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ranljivosti v Linux in FreeBSD, ki omogo\u010dajo pridobitev root dostopa v sistemu | ProHoster","description":"V FreeBSD je bilo odpravljenih 8 ranljivosti, ki omogo\u010dajo povi\u0161anje svojih privilegijev v sistemu. Ranljivosti so bile odpravljene v posodobitvah FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 in 14.4-RELEASE-p9.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0438 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.1-RELEASE-p3, FreeBSD 15.0-RELEASE-p13 \u0438 14.4-RELEASE-p9.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/linux-and-freebsd-vulnerabilities-allowing-root-access","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-28T14:53:41+00:00","article:modified_time":"2026-08-28T14:53:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"183167","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-31 11:53:09","updated":"2026-08-31 11:53:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/183167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=183167"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/183167\/revisions"}],"predecessor-version":[{"id":183168,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/183167\/revisions\/183168"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=183167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=183167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=183167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}