Kusagadzikana (CVE-2022-1972) kwakaonekwa muNetfilter kernel subsystem, yakafanana nedambudziko rakaburitswa mukupera kwaMay. Kusagadzikana kutsva kunobvumirawo mushandisi wepanzvimbo kuwana kodzero dzemidzi muhurongwa kuburikidza nekunyengera kwemitemo munftables uye inoda kuwana nfttables kuita kurwiswa, iyo inogona kuwanikwa mune yakaparadzana namespace (network namespace kana mushandisi zita) neCLONE_NEWUSER, CLONE_NEWNS kana CLONE_NEWNET kodzero (semuenzaniso , kana zvichikwanisika kushandisa mudziyo uri wega).
Nyaya inokonzereswa nebug mukodhi yekubata seti rondedzero ine masimu anosanganisira akawanda marenji, uye inokonzeresa kunze-kwe-mabhondi kunyora paunenge uchigadzira zvakanyanya akafometwa rondedzero paramita. Vatsvagiri vakakwanisa kugadzirira basa rekushandisa kuti vawane kodzero dzemidzi muUbuntu 21.10 neiyo 5.13.0-39-generic kernel. Kusagadzikana kunoratidzika kutanga kubva ku kernel 5.6. Kugadzirisa kunopihwa sechigamba. Kuvhara kushandiswa kwekusagadzikana pamasisitimu akajairwa, iwe unofanirwa kuve nechokwadi chekudzima kugona kugadzira mazita evashandisi vasina rombo rakanaka ("sudo sysctl -w kernel.unprivileged_userns_clone=0").
Uye zvakare, ruzivo rwakaburitswa nezve matatu kernel kusagadzikana ane chekuita neNFC subsystem. Kusadzikama kunogona kukonzera kuparara kuburikidza nezviito zvinoitwa nemushandisi asina rombo rakanaka (zvakanyanya njodzi kurwisa mavector hazvisati zvaratidzwa):
- CVE-2022-1734 ndeyekushandisa-mushure-yemahara ndangariro kufona munfcmrvl mutyairi (madhiraivha/nfc/nfcmrvl), inoitika kana ichiteedzera mudziyo weNFC munzvimbo yemushandisi.
- CVE-2022-1974 - Iyo yakatosunungurwa ndangariro kufona inoitika mune netlink mabasa eNFC zvishandiso (/net/nfc/core.c), zvinoitika kana uchinyoresa mudziyo mutsva. Kufanana nekusagadzikana kwekare, dambudziko rinogona kushandiswa nekufananidza mudziyo weNFC munzvimbo yemushandisi.
- CVE-2022-1975 ibug mune firmware yekurodha kodhi yeNFC zvishandiso zvinogona kushandiswa kukonzera "kutya" mamiriro.
Source: opennet.ru