{"id":105690,"date":"2022-11-23T21:36:50","date_gmt":"2022-11-23T19:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij"},"modified":"2022-11-23T21:36:50","modified_gmt":"2022-11-23T19:36:50","slug":"uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","title":{"rendered":"V\u00ebshtir\u00ebsi n\u00eb n\u00ebn-sistemin io_uring, duke \u00e7uar n\u00eb ngritje t\u00eb privilegjeve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb realizimin e nd\u00ebrfaqes s\u00eb hyrjes\/ daljeve asinkrone io_uring, e cila \u00ebsht\u00eb pjes\u00eb e b\u00ebrtham\u00ebs Linux q\u00eb nga versioni 5.1, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2022-3910), e cila lejon nj\u00eb p\u00ebrdorues t\u00eb pazhvilluar t\u00eb ekzekutoj\u00eb kod me privilegje b\u00ebrthamore. Problemi shfaqet n\u00eb versionet 5.18 dhe 5.19, dhe \u00ebsht\u00eb rregulluar n\u00eb deg\u00ebn 6.0. Debian, RHEL dhe SUSE p\u00ebrdorin versione t\u00eb b\u00ebrtham\u00ebs deri n\u00eb 5.18, nd\u00ebrsa Fedora, Gentoo dhe Arch tashm\u00eb ofrojn\u00eb b\u00ebrtham\u00ebn 6.0. N\u00eb Ubuntu 22.10 \u00ebsht\u00eb aktivizuar b\u00ebrthama e ndjeshme 5.19. <\/p>\n

Vulnerabiliteti shkaktohet nga qasja n\u00eb nj\u00eb bllok memorie t\u00eb liruar tashm\u00eb (use-after-free) n\u00eb n\u00ebn-sistemin io_uring, i lidhur me nj\u00eb azhurnim t\u00eb pap\u00ebrshtatsh\u00ebm t\u00eb numrit t\u00eb referencave \u2014 gjat\u00eb thirrjes io_msg_ring() me nj\u00eb skedar t\u00eb fixuar (q\u00eb gjithmon\u00eb ndodhet n\u00eb bufet ring), b\u00ebhet thirrje n\u00eb funksionin io_fput_file(), i cili gabimisht zvog\u00eblon numrin e referencave.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 io_uring, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0432 \u044f\u0434\u0440\u043e Linux \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 5.1, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-3910), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u044f\u0434\u0440\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 5.18 \u0438 5.19, \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0442\u043a\u0435 6.0. Debian, RHEL \u0438 SUSE \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u044f\u0434\u0440\u0430 \u0434\u043e 5.18, \u0432 Fedora, Gentoo \u0438 Arch \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u044f\u0434\u0440\u043e 6.0. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105690","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb n\u00ebsistemin io_uring, q\u00eb \u00e7on n\u00eb rritjen e privilegjeve | ProHoster","description":"N\u00eb realizimin e nd\u00ebrfaqes s\u00eb hyrjes\/ daljeve asinkrone io_uring, e cila \u00ebsht\u00eb pjes\u00eb e b\u00ebrtham\u00ebs Linux q\u00eb nga versioni 5.1, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2022-3910), e cila lejon nj\u00eb p\u00ebrdorues t\u00eb pazhvilluar t\u00eb ekzekutoj\u00eb kod me.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 io_uring, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 | ProHoster","og:description":"\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 io_uring, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0432 \u044f\u0434\u0440\u043e Linux \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 5.1, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-3910), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-podsisteme-io_uring-privodyashhaya-k-povysheniyu-privilegij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-11-23T19:36:50+00:00","article:modified_time":"2022-11-23T19:36:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105690"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105690\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105690"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105690"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}