{"id":184020,"date":"2026-10-27T23:40:54","date_gmt":"2026-10-27T21:40:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/10-uyazvimostej-v-yadre-linux-i-4-vo-freebsd-pozvolyayushhie-poluchit-prava-root-v-sisteme"},"modified":"2026-10-27T23:40:59","modified_gmt":"2026-10-27T21:40:59","slug":"10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access","title":{"rendered":"10 ranjivosti u jezgru Linux-a i 4 u FreeBSD-u, koje omogu\u0107avaju sticanje root prava u sistemu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u044f\u0434\u0440\u0430, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043e\u0431\u0445\u043e\u0434\u0443 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Bhyve.<\/p>\n<p>\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux:<\/p>\n<ul>\n<li class=\"l\"> 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Zero Day Initiative \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0435 \u0432 \u0442\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438:\n<ul>\n<li class=\"l\"> ZDI-CAN-33549 \u2014 ranljivost v modulu ksmbd za implementacijo datotek <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sl\/server\/dts-los-angeles\/\"   title=\"stre\u017enika\" data-wpil-keyword-link=\"linked\">stre\u017enika<\/a> na osnovi protokola SMB, ki jo je mogo\u010de izkoristiti za oddaljeno izvajanje kode na ravni jedra. Te\u017eava je posledica prenapolnjenja celih \u0161tevil v funkciji mbdirect_connection_rdma_xmit(), ki se pojavi, \u010de je jedro sestavljeno z opcijami \u201eCONFIG_SMB_SERVER_SMBDIRECT=y\u201c in \u201eCONFIG_RDMA_RXE=y\u201c. Da bi uspe\u0161no izvedel napad, mora napadalec imeti dostop do skupnega shrambe, ki ga zagotavlja tar\u010da napada <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sl\/server\/dts-prohoster\/\"   title=\"serverom\" data-wpil-keyword-link=\"linked\">serverom<\/a>, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 RDMA \u0438 SMB Direct. \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0432 Debian 13.\n<li class=\"l\"> ZDI-CAN-33774 \u2014 stanje dirke v jedrnem modulu ksmbd, ki vodi do zapisa 62 bajtov podatkov v 40-bajtni pomnilni\u0161ki prostor, rezerviran za protokol SMB1 iz naslova SMB2. Ta ranljivost lahko povzro\u010di oddaljeno izvajanje kode, \u010de je dostop do SMB-shranjevanja, ki ga obravnava ksmbd, omogo\u010den. Na voljo je prototip izkori\u0161\u010danja, ki deluje v Debian 13.\n<li class=\"l\"> ZDI-CAN-33367 \u2014 ranljivost v omre\u017enem skladu jedra, ki omogo\u010da lokalnemu uporabniku pridobitev privilegijev root v sistemu s prepisovanjem podatkov procesa v predpomnilniku strani, podobno ranljivostim Dirty Frag in Fragnesia. Tokrat je te\u017eava povzro\u010dena z napako v funkciji<br \/>\nskb_zerocopy(). \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Ubuntu. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0432\u0438\u0434\u0435 \u043f\u0430\u0442\u0447\u0430. \u0418\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u043f\u043e\u043a\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Alma Linux \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u044f\u0434\u0440\u043e\u043c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.<\/p>\n<li class=\"l\"> ZDI-CAN-34068 \u2014 prenapolnitev pomnilnika v grafi\u010dnem gonilniku VMWGFX, ki se uporablja za izvajanje 3D-pospe\u0161evanja v okolju VMware. Te\u017eava omogo\u010da lokalnemu uporabniku, da pridobi privilegije root v sistemu, \u010de ima dostop do virtualnega GPU prek naprave \/dri\/card*. Na voljo je prototip izkori\u0161\u010danja, ki deluje v Ubuntu 26.04\n<li class=\"l\"> ZDI-CAN-34076 \u2014 ranljivost v gonilniku nvmet (NVMe Target), ki pove\u010duje mo\u017enost uhajanja informacij o vsebini pomnilnika jedra.\n<\/ul>\n<li class=\"l\"> Razkrite informacije in objavljeni prototipi izkori\u0161\u010danj za 5 ranljivosti v jedru, ki omogo\u010dajo nepriviligiranemu uporabniku pridobitev pravic root v sistemu in obvoz izolacije kontejnerjev. Skupini ranljivosti je dodeljeno kodno ime \u201eInfinity Core\u201c. Te\u017eave so \u017ee odpravljene v aktualnih izdanjih jedra.\n<ul>\n<li class=\"l\"> CVE-2026-98260 \u2014 dostop do pomnilnika po njegovi osvoboditvi zaradi ponovne uporabe strukture POSIX-timerja, katere pomnilnik je bil osvobojen v glavnem niti po napaki pri izvr\u0161evanju klica exec(), vendar je bila reference v vrsti (timerqueue) v drugi niti. Na voljo je prototip izkori\u0161\u010danja, katerega delovanje je bilo prikazano v Ubuntu 26.04 in v Androidu na pametnem telefonu Samsung Galaxy S26 Ultra.\n<li class=\"l\"> CVE-2026-98256 \u2014 dostop do pomnilnika po njegovi sprostitvi zaradi stanja tekmovanja med klicem exec() v sekundarnem vlaku in \u010di\u0161\u010denjem signalne vrste (sigqueue), ki \u010dakajo na obdelavo. Med manipulacijo z vrsto lahko pride do situacije, kjer referenca na obdelovalec signala ostane v vrsti po sprostitvi povezanega pomnilnika in se nato uporabi med obdelavo signalov. Delovanje exploita je bilo prikazano v Ubuntu 26.04.\n<li class=\"l\"> CVE-2026-89754 \u2014 prelivanje pomnilnika v implementaciji sistemskega klica mincore(), ki izhaja iz stanja tekmovanja pri ponovnem pregledu tabel pomnilnika po izvedbi madvise(MADV_DONTNEED). Delovanje exploita je bilo prikazano v Ubuntu 26.04.\n<li class=\"l\"> CVE-2026-80775 \u2014 dostop do pomnilnika po njegovi sprostitvi v sistemskem klicu prctl(), ki izvira iz nepravilnega sledenja referen\u010dnim \u0161tevcem za he\u0161e fju\u010deksov pri nastanku.<br \/>\nstanja dirke med nalogami, ki skupaj uporabljajo eno strukturo mm_struct pri vgrajenem klicu vfork(). Exploit, ki uporablja ranljivost za prepisovanje \/usr\/bin\/passwd v predpomnilniku strani, je bil demonstriran v Ubuntu 26.04.<\/p>\n<li class=\"l\"> CVE-2026-98385 \u2014 dostop do pomnilnika po njegovi sprostitvi v obdelovalcu predpomnilnika na\u010drtovalnika nalog, ki nastane, ker na\u010drtovalnik posodablja statisti\u010dna polja v strukturi mm_struct za nalogo po sprostitvi povezanega pomnilnika v primeru, da pride do klica exec() na drugem jedru CPU. Ugotovitev ranljivosti se ka\u017ee v jedrih z omogo\u010deno mo\u017enostjo CONFIG_SCHED_CACHE. Delovanje exploita je bilo prikazano v.<br \/>\nArch Linux z jedrom 7.2.4.<\/p>\n<\/ul>\n<li class=\"l\"> Ranljivost Vghost (CVE-2026-74580) v podskladu jedra vhost, ki se uporablja za pospe\u0161evanje vhodno\/izhodnih operacij preko Virtio v sistemih virtualizacije. Ranljivost je povzro\u010dena z nepravilnim delu s predpomnilnikom tabel preusmerjanja vhodno\/izhodnih naslovov (IOTLB) in se lahko uporablja za pove\u010danje privilegijev v sistemu in za zaobid izolacije gostujo\u010dega sistema. Pri ponastavitvi naslovov ali velikosti vrstic (vring) preko klicev VHOST_SET_VRING_ADDR ali VHOST_SET_VRING_NUM predpomnilnik vq-&gt;meta_iotlb[] ni bil o\u010di\u0161\u010den, kar je pripeljalo do preusmerjanja novih naslovov z uporabo \u017ee neveljavnih zapisov o preslikovanju pomnilnika.\n<p>Objavljen je prototip izkori\u0161\u010devalca za pridobitev pravic root, testiran v distribucijah Ubuntu 26.04, RHEL 9.8, Amazon Linux 2023.12.20260817, Azure Linux 3.0 in Oracle Linux 10.2.<br \/>\nRanljivost se lahko uporabi za izvajanje kode na ravni jedra gostiteljske naprave preko manipulacij s klicem VIRTIO_F_RING_RESET v gostujo\u010dem sistemu v virtualiziranih okoljih z virtualnim IOMMU.<br \/>\nTe\u017eava se pojavi od jedra Linux 4.11 in je bila odpravljena v razli\u010dicah 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9 in 7.2. Kot obvod za\u0161\u010dite lahko omejite dostop do naprav \/dev\/vhost-net, \/dev\/vhost-vsock, \/dev\/vhost-scsi in \/dev\/vhost-vdpa-*.<\/p>\n<\/ul>\n<p>Ranljivosti v FreeBSD (odpravljene v posodobitvah 15.1-RELEASE-p5, 14.5-RELEASE-p2 in 14.4-RELEASE-p11):<\/p>\n<ul>\n<li class=\"l\"> CVE-2026-101308 \u2014 dostop do pomnilnika po njegovi sprostitvi v gonilniku zvoka, ki izhaja iz stanja tekmovanja med operacijo spreminjanja velikosti predpomnilnika in preslikovanjem pomnilnika preko mmap. Ranljivost potencialno omogo\u010da lokalnemu uporabniku, ki ima dostop do zvo\u010dne naprave, pridobitev pravic root.\n<li class=\"l\"> CVE-2026-101309, CVE-2026-101310, CVE-2026-101311 \u2014 ranljivosti v komponentah hipervizorja Bhyve, ki omogo\u010dajo izvajanje kode na strani gostiteljskega okolja s pomo\u010djo manipulacij v gostujo\u010dem sistemu. Te te\u017eave izhajajo iz prekora\u010ditve pomnilnika zaradi stanja dirke v modelu krmilnika xHCI (USB 3), pa tudi zaradi pomanjkanja preverjanja velikosti zapisov v modelih naprav HDA (Visoka lo\u010dljivost zvoka) in framebuffer.\n<li class=\"l\"> CVE-2026-101307 \u2014 prenasi\u010denje celo\u0161tevila v modulu tcp_rack z implementacijo algoritma za odkrivanje izgube paketov RACK (Nedavne priznave), ki privede do dodelitve pomnilnika, ki je premajhen, da bi sprejel vse prej\u0161nje podatke. Ta ranljivost omogo\u010da prepisovanje do 512 KB na obmo\u010dju prekora\u010ditve pomnilnika pri po\u0161iljanju velikega \u0161tevila ACK paketov v vzpostavljenem TCP povezavi. Opa\u017eeno je, da lahko izkori\u0161\u010danje te ranljivosti povzro\u010di zru\u0161itev jedra v stanje panic.\n<\/ul>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66542\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u044f\u0434\u0440\u0430, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Bhyve. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux: 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184020","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4710 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 4 \u0432\u043e FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-27T21:40:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-27T21:40:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4710 ranljivosti v jedru Linuxa in 4 v FreeBSD, ki omogo\u010dajo pridobitev pravic root v sistemu | ProHoster","description":"Odkril se je niz ranljivosti v jedru Linuxa in FreeBSD. Ranljivosti v Linuxu omogo\u010dajo oddaljeno izvajanje kode, dvigovanje lastnih privilegijev v sistemu, izhajanje iz kontejnerjev ali obhod izolacije virtualnih ma\u0161in.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4710 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 4 \u0432\u043e FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 FreeBSD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/10-linux-kernel-vulnerabilities-and-4-in-freebsd-that-allow-root-access","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-27T21:40:54+00:00","article:modified_time":"2026-10-27T21:40:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/184020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=184020"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/184020\/revisions"}],"predecessor-version":[{"id":184021,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/184020\/revisions\/184021"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=184020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=184020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=184020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}