Kusagadzikana kwaonekwa mu Android platform (CVE-2022-20465), iyo inokutendera kuti uvhare kukiya chidzitiro nekugadzirisa zvakare SIM kadhi uye nekuisa iyo PUK kodhi. Iko kukwanisa kudzima kukiya kwakaratidzwa paGoogle Pixel zvishandiso, asi sezvo kugadzirisa kunobata iyo huru Android codebase, zvingangoita kuti dambudziko rinokanganisa firmware kubva kune vamwe vanogadzira. Nyaya inogadziriswa munaNovember Android security patch rollout. Muongorori uyo akatarisisa dambudziko akagamuchira mubairo we70 zviuru zvemadhora kubva kuGoogle.
Dambudziko rinokonzerwa nekutadza kuvhura kugadzirisa mushure mekupinda kodhi yePUK (Personal Unblocking Key), iyo inoshandiswa kutangazve kushanda kweSIM kadhi yakavharwa mushure mekudzokorora kupinda PIN kodhi zvisizvo. Kudzima kukiya chidzitiro, ingoisa SIM kadhi mufoni yako, ine PIN kodhi yekudzivirira. Mushure mekushandura SIM kadhi yakachengetedzwa nePIN kodhi, chikumbiro chePIN kodhi chinotanga kuratidzwa pachiratidziri. Kana iwe ukaisa PIN kodhi zvisizvo katatu, SIM kadhi ichavharwa, mushure mezvo iwe uchapihwa mukana wekupinda iyo PUK kodhi kuti uivhure. Zvakazoitika kuti kunyatsopinda PUK kodhi hakungovhuri SIM kadhi chete, asi kunotungamira kune shanduko kuenda kune huru interface, nekupfuura iyo skrini saver, pasina kuvimbisa kuwana uchishandisa main password kana pateni.
Kusagadzikana uku kunokonzerwa nekukanganisa kuri mumusoro wekutarisa maPUK makodhi muKeyguardSimPukViewController mubato, uyo ane basa rekuratidza iyo yekuwedzera yechokwadi skrini. Android inoshandisa akati wandei marudzi echokwadi masikirini (yePIN, PUK, password, patani, biometric authentication) uye zviratidziro izvi zvinodaidzwa kutevedzana kana macheki akawanda achifanirwa kuitwa, semuenzaniso, kana PIN uye pateni zvichidikanwa.
Kana iwe ukaisa iyo PIN kodhi nenzira kwayo, nhanho yechipiri yekusimbisa inotangwa, ichida kuti iwe uise iyo huru yekuvhura kodhi, asi kana iwe waisa iyo PUK kodhi, iyi nhanho inosvetuka uye kuwana kunopihwa pasina kukumbira iyo main password kana patani kiyi. . Iyo inotevera yekuvhura nhanho inoraswa nekuti pakufonera KeyguardSecurityContainerController#dismiss() hapana kuenzanisa pakati peinotarisirwa uye yakapfuura nzira dzekuongorora, i.e. iyo processor inotenda kuti nzira yekusimbisa haina kuchinja uye kupedzwa kwePUK kodhi yekuongorora kunoratidza kubudirira kusimbiswa kwechiremera.
Kusagadzikana kwakawanikwa netsaona - runhare rwemushandisi rwakanga rwafa uye mushure mekuchaja nekuibatidza, akakanganisa kakawanda paakaisa PIN kodhi, ndokuzoivhura nePUK kodhi uye akashamisika kuti system haina kubvunza. yepassword huru yakashandiswa kudhipfa data, mushure mezvo yakamira neshoko "Pixel iri kutanga ...". Mushandisi akazoita kunge ane hungwaru, akafunga kufunga kuti chii chaiitika ndokutanga kuyedza kuisa maPIN nePUK macode nenzira dzakasiyana, kusvika akanganwa netsaona kudzoreredza mudziyo mushure mekuchinja SIM kadhi uye kuwana nharaunda panzvimbo. chando.
Chinonyanya kufarira kuita kweGoogle kune chiziviso chekusagadzikana. Ruzivo nezve dambudziko rakatumirwa muna Chikumi, asi kusvika munaGunyana muongorori akange asati akwanisa kuwana mhinduro yakajeka. Akatenda kuti hunhu uhu hwakatsanangurwa nekuti aive asiri wekutanga kutaura chikanganiso ichi. Kufungira kuti chimwe chinhu chiri kutadza kumuka munaGunyana, apo dambudziko rakaramba risina kugadziriswa mushure mekuisa firmware update yakaburitswa mazuva makumi mapfumbamwe gare gare, apo nguva yekusaburitsa pachena yakanga yatopera.
Sezvo kuedza kwese kutsvaga mamiriro eiyo meseji yakatumirwa nezve dambudziko kwakangotungamira kune otomatiki uye template mhinduro, muongorori akaedza kubata vashandi veGoogle pachezvake kuti ajekese mamiriro acho nekugadzirira kwekugadzirisa uye akatoratidza kusagadzikana muhofisi yeGoogle muLondon. . Chete mushure meizvi zvakashanda kuti kubvisa kusagadzikana kuenderere mberi. Munguva yekuongorora, zvakazoitika kuti mumwe munhu akanga atotaura dambudziko kare, asi Google yakasarudza kusarura uye kubhadhara mubairo wekutaura dambudziko racho zvakare, sezvo chaingova nekuda kwekutsungirira kwemunyori waro kuti dambudziko rakaonekwa.
Source: opennet.ru