Kusagadzikana mukuitwa kweMCTP protocol yeLinux, iyo inokutendera iwe kuti uwedzere ropafadzo dzako.

Kusagadzikana (CVE-2022-3977) kwaonekwa muLinux kernel, iyo inogona kushandiswa nemushandisi wepanzvimbo kuwedzera maropafadzo avo muhurongwa. Kusagadzikana kunoratidzika kutanga kubva ku kernel 5.18 uye kwakagadziriswa mubazi 6.1. Kuonekwa kwekugadzirisa mukugovera kunogona kuteverwa pamapeji: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch.

Kusagadzikana kuripo mukuitwa kweMCTP (Management Component Transport Protocol) protocol, inoshandiswa pakudyidzana pakati pevatongi vemanejimendi nemidziyo yakabatana. Kusagadzikana kunokonzerwa nemamiriro emujaho mumctp_sk_unhash() basa, izvo zvinotungamira kune kushandiswa-kumashure-yemahara ndangariro kuwana paunenge uchitumira DROPTAG ioctl chikumbiro panguva imwe chete nekuvhara socket.

Source: opennet.ru

Voeg