Kure kure kushandisika njodzi muLinux mutyairi weRealtek chips

Mune mutyairi akabatanidzwa muLinux kernel rtlwifi yeasina waya adapta paRealtek chips kuzivikanwa kusagadzikana (CVE-2019-17666), iyo inogona kushandiswa kurongedzera kuitiswa kwekodhi mukati meiyo kernel kana uchitumira akanyatso gadzirwa mafuremu.

Kusagadzikana kunokonzerwa nekufashukira kwebuffer mukodhi inoshandisa iyo P2P (Wifi-Direct) modhi. Paunenge uchiongorora mafuremu Kwete (Chiziviso cheKusavapo) hapana cheki yehukuru hweimwe yehukoshi, iyo inobvumira muswe we data kunyorwa kune imwe nzvimbo iri kunze kwemuganho webuffer uye ruzivo runyorwe patsva muzvimiro zve kernel zvichitevera buffer.

Kurwiswa kwacho kunogona kuitwa nekutumira akanyatso dhizainwa mafuremu kune system ine inoshanda network adapta yakavakirwa paRealtek chip inotsigira tekinoroji. Wi-Fi Direct, iyo inobvumira ma-adapters maviri asina waya kuti agadzirise kubatana zvakananga pasina nzvimbo yekuwana. Kushandisa dambudziko, anorwisa haafanire kubatana kune isina waya network, uye haidi chero chiito kune chikamu chemushandisi; zvakakwana kuti anorwisa ave mukati menzvimbo yekuvhara yechiratidzo chisina waya.

Iyo yekushanda prototype yekushandiswa ikozvino inongogumira kure kukonzeresa kuti kernel iparare, asi iyo inogona kuve munjodzi haisanganisi mukana wekuronga kodhi kuuraya (iyo fungidziro ichiri kungofungidzira, sezvo pasina prototype yekushandiswa kwekuita kodhi. zvakadaro, asi muongorori akaona dambudziko atove iri kushanda pakusikwa kwayo).

Dambudziko rinotanga kubva ku kernel 3.12 (maererano nemamwe masosi, dambudziko rinoratidzika kutanga kubva kukernel 3.10), yakabudiswa muna 2013. Iyo gadziriso iripo chete mune fomu chigamba. Mukugovera dambudziko rinoramba risina kugadziriswa.
Iwe unogona kutarisa kubviswa kwekusagadzikana mukugovera pamapeji aya: Debian, SUSE/openSUSE, RHEL, Ubuntu, Arch Linux, Fedora. Pamwe zvakare ari panjodzi zvinokanganisa uye Android platform.

Source: opennet.ru

Voeg