Kusagadzikana muLinux kernel iyo inogona kukonzera tsaona nekutumira UDP packet

MuLinux kernel kuzivikanwa kusagadzikana (CVE-2019-11683), iyo inokutendera kuti ukonzere kure kurambwa kwesevhisi nekutumira zvakanyatsogadzirwa UDP mapaketi (packet-yekufa). Dambudziko rinokonzerwa nekukanganisa mune udp_gro_receive_segment handler (net/ipv4/udp_offload.c) nekuitwa kweGRO (Generic Receive Offload) tekinoroji uye inogona kukonzeresa kukuvadza kune zviri mukati mekernel memory nzvimbo kana uchigadzira UDP mapaketi ane zero padding. (mubhadharo usina chinhu).

Dambudziko rinongobata kernel 5.0sezvo GRO rutsigiro rweUDP sockets yaive itwa munaNovember gore rapfuura uye yakangokwanisa kupinda mune yazvino yakagadzikana kernel kuburitswa. GRO tekinoroji inobvumidza iwe kukurumidzira kugadziridzwa kwenhamba yakakura yemapaketi anouya nekuunganidza akawanda mapaketi mumabhuru makuru asingade kuparadzaniswa kwepaketi yega yega.
Kune TCP, dambudziko hariitike, sezvo iyi protocol isingatsigire kuunganidzwa kwepaketi pasina mubhadharo.

Kusagadzikana kwacho kwakagadziriswa chete mufomu chigamba, iyo inogadzirisa inogadziridza haisati yaburitswa (nezuro gadziriso 5.0.11 gadzirisa isina kubatanidzwa) Kubva pakugovera kits, kernel 5.0 yakakwanisa kuverengerwa mukati Fedora 30, Ubuntu 19.04, Arch Linux, Gentoo uye zvimwe zvinoramba zvichivandudzwa kugovera. Debian, Ubuntu 18.10 uye yapfuura, RHEL/CentOS и SUSE/openSUSE dambudziko harina kukanganisa.

Dambudziko rakaonekwa semhedzisiro shandisa Otomatiki fuzzing yekuyedza system yakagadzirwa neGoogle syzbot uye analyzer KASAN (KernelAddressSanitizer), yakanangana nekuona zvikanganiso kana uchishanda nendangariro uye chokwadi chezvisina kunaka ndangariro kuwana, sekuwana yakasunungurwa nzvimbo dzendangariro uye nekuisa kodhi munzvimbo dzekurangarira dzisina kuitirwa manipulations akadaro.

Source: opennet.ru