N\u00eb modulin ksmbd, q\u00eb p\u00ebrfshin nj\u00eb implementim t\u00eb integruar n\u00eb kernelin Linux t\u00eb serverit t\u00eb skedar\u00ebve mbi baz\u00ebn e protokollit SMB, \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet kritik, q\u00eb lejon ekzekutimin e kodit tuaj n\u00eb distanc\u00eb me t\u00eb drejtat e kernelit. Sulmi mund t\u00eb realizohet pa autentifikim, mjafton q\u00eb moduli ksmbd t\u00eb jet\u00eb aktivizuar n\u00eb sistem. Problemi shfaqet q\u00eb nga kernel 5.15, i l\u00ebshuar n\u00eb n\u00ebntor 2021, dhe \u00ebsht\u00eb zgjidhur pa buj\u00eb n\u00eb p\u00ebrdit\u00ebsimet 5.15.61, 5.18.18 dhe 5.19.2, t\u00eb formuara n\u00eb gusht 2022. Duke qen\u00eb se nj\u00eb identifikues CVE p\u00ebr problemin nuk \u00ebsht\u00eb akoma caktuar, informacioni i sakt\u00eb mbi zgjidhjen e problemit n\u00eb distribuimet nuk \u00ebsht\u00eb ende n\u00eb dispozicion. <\/p>\n
Detajet mbi shfryt\u00ebzimin e vulnerabilitetit ende nuk jan\u00eb zbuluar, e vetmja gj\u00eb q\u00eb dihet \u00ebsht\u00eb se vulnerabiliteti shkaktohet nga qasja n\u00eb nj\u00eb zon\u00eb memorje t\u00eb \u00e7liruar (Use-After-Free) p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb verifikimit t\u00eb ekzistenc\u00ebs s\u00eb objektit para se t\u00eb b\u00ebhen operacione me t\u00eb. Problemi \u00ebsht\u00eb i lidhur me faktin se n\u00eb funksionin smb2_tree_disconnect() u \u00e7lirua memorja e alokuar p\u00ebr struktur\u00ebn ksmbd_tree_connect, por pas k\u00ebsaj mbeti nj\u00eb tregues q\u00eb p\u00ebrdorej gjat\u00eb p\u00ebrpunimit t\u00eb k\u00ebrkesave t\u00eb caktuara ekstern, q\u00eb p\u00ebrmbanin komanda SMB2_TREE_DISCONNECT. <\/p>\n
P\u00ebrve\u00e7 vulnerabilitetit t\u00eb p\u00ebrmendur n\u00eb ksmbd, jan\u00eb rregulluar gjithashtu 4 probleme m\u00eb pak t\u00eb rrezikshme: <\/p>\n
Mb\u00ebshtetje p\u00ebr funksionimin e serverit SMB p\u00ebrmes modulit ksmbd \u00ebsht\u00eb e pranishme n\u00eb paket\u00ebn Samba, q\u00eb nga l\u00ebshimi 4.16.0. Ndryshe nga serveri SMB q\u00eb funksionon n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, ksmbd \u00ebsht\u00eb m\u00eb efikas n\u00eb terma t\u00eb performanc\u00ebs, konsumit t\u00eb memories dhe integrimit me mund\u00ebsit\u00eb e avancuara t\u00eb kernelit. Ksmbd paraqitet si nj\u00eb zgjatje me performanc\u00eb t\u00eb lart\u00eb dhe gati p\u00ebr p\u00ebrdorim n\u00eb pajisje t\u00eb integruara, e integruar n\u00ebse \u00ebsht\u00eb e nevojshme me mjetet dhe bibliotekat e Samba. Autor\u00ebt e kodit ksmbd jan\u00eb Namjae Jeon nga Samsung dhe Hyunchul Lee nga LG, nd\u00ebrsa mir\u00ebmbajtja e tij brenda kernelit realizohet nga Steve French nga Microsoft, mbik\u00ebqyr\u00ebsi i n\u00ebn-sistemit CIFS\/SMB2\/SMB3 n\u00eb kernelin Linux dhe nj\u00eb an\u00ebtar i gjat\u00eb i ekipit t\u00eb zhvilluesve t\u00eb Samba, q\u00eb ka kontribuar shum\u00eb n\u00eb implementimin e mb\u00ebshtetjes p\u00ebr protokollet SMB\/CIFS n\u00eb Samba dhe Linux. \u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 5.15, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430, \u0438 \u0431\u0435\u0437 \u043b\u0438\u0448\u043d\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106241","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet n\u00eb modulin ksmbd t\u00eb kernelit Linux, q\u00eb lejon ekzekutimin e kodit tuaj n\u00eb distanc\u00eb | ProHoster","description":"N\u00eb modulin ksmbd, q\u00eb p\u00ebrfshin nj\u00eb implementim t\u00eb integruar n\u00eb kernelin Linux t\u00eb serverit t\u00eb skedar\u00ebve mbi baz\u00ebn e protokollit SMB, \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet kritik, q\u00eb lejon ekzekutimin e kodit tuaj n\u00eb distanc\u00eb me t\u00eb drejtat e kernelit. Sulmi mund t\u00eb realizohet pa autentifikim, mjafton q\u00eb moduli ksmbd t\u00eb jet\u00eb aktivizuar n\u00eb sistem. Problemi shfaqet q\u00eb nga kernel 5.15, i l\u00ebshuar n\u00eb n\u00ebntor 2021, dhe pa shum\u00eb...","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-module-ksmbd-yadra-linux-pozvolyayushhaya-udalyonno-vypolnit-svoj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 5.15, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430, \u0438 \u0431\u0435\u0437 \u043b\u0438\u0448\u043d\u0435\u0439","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-module-ksmbd-yadra-linux-pozvolyayushhaya-udalyonno-vypolnit-svoj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-23T07:36:47+00:00","article:modified_time":"2022-12-23T07:36:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/106241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=106241"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/106241\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=106241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=106241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=106241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"