N\u00eb modulin ksmbd, i cili p\u00ebrfshin implementimin e integruar n\u00eb kernelin Linux t\u00eb nj\u00eb serveri skedar\u00ebsh t\u00eb bazuar n\u00eb protokollin SMB, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi kritike q\u00eb lejon ekzekutimin n\u00eb distanc\u00eb t\u00eb kodit arbitrar me t\u00eb drejta t\u00eb kernelit. Sulmi mund t\u00eb kryhet pa autentikim; mjafton q\u00eb moduli ksmbd t\u00eb jet\u00eb i aktivizuar n\u00eb sistem. Problemi shfaqet q\u00eb nga kerneli 5.15, i publikuar n\u00eb n\u00ebntor 2021, dhe \u00ebsht\u00eb korrigjuar pa shum\u00eb publicitet n\u00eb p\u00ebrdit\u00ebsimet 5.15.61, 5.18.18 dhe 5.19.2, t\u00eb l\u00ebshuara n\u00eb gusht 2022. Meqen\u00ebse problemit ende nuk i \u00ebsht\u00eb caktuar nj\u00eb identifikues CVE, nuk ka ende informacion t\u00eb sakt\u00eb p\u00ebr zgjidhjen e tij n\u00eb distribucione. <\/p>\n
Detajet mbi shfryt\u00ebzimin e dob\u00ebsis\u00eb ende nuk jan\u00eb b\u00ebr\u00eb publike; dihet vet\u00ebm se dob\u00ebsia shkaktohet nga qasja n\u00eb nj\u00eb zon\u00eb memorieje tashm\u00eb t\u00eb liruar (Use-After-Free) p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb verifikimit t\u00eb ekzistenc\u00ebs s\u00eb objektit p\u00ebrpara kryerjes s\u00eb operacioneve mbi t\u00eb. Problemi lidhet me faktin se n\u00eb funksionin smb2_tree_disconnect() lirohej memoria e caktuar p\u00ebr struktur\u00ebn ksmbd_tree_connect, por pas k\u00ebsaj mbetej ende nj\u00eb tregues q\u00eb p\u00ebrdorej gjat\u00eb p\u00ebrpunimit t\u00eb disa k\u00ebrkesave t\u00eb jashtme q\u00eb p\u00ebrmbanin komandat SMB2_TREE_DISCONNECT. <\/p>\n
P\u00ebrve\u00e7 dob\u00ebsis\u00eb s\u00eb p\u00ebrmendur n\u00eb ksmbd, jan\u00eb korrigjuar edhe 4 probleme t\u00eb tjera m\u00eb pak t\u00eb rrezikshme: <\/p>\n
Mb\u00ebshtetja p\u00ebr funksionimin e serverit SMB me ndihm\u00ebn e modulit ksmbd \u00ebsht\u00eb e pranishme n\u00eb paket\u00ebn Samba q\u00eb nga versioni 4.16.0. Ndryshe nga serveri SMB q\u00eb punon n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, ksmbd \u00ebsht\u00eb m\u00eb efikas p\u00ebr sa i p\u00ebrket performanc\u00ebs, konsumit t\u00eb memories dhe integrimit me ve\u00e7orit\u00eb e avancuara t\u00eb kernelit. Ksmbd paraqitet si nj\u00eb zgjerim me performanc\u00eb t\u00eb lart\u00eb i Samba-s, i gatsh\u00ebm p\u00ebr p\u00ebrdorim n\u00eb pajisje t\u00eb integruara dhe, sipas nevoj\u00ebs, i integruesh\u00ebm me mjetet dhe bibliotekat e Samba-s. Autor\u00ebt e kodit t\u00eb ksmbd jan\u00eb Namjae Jeon nga Samsung dhe Hyunchul Lee nga LG, nd\u00ebrsa mir\u00ebmbajtja n\u00eb p\u00ebrb\u00ebrje t\u00eb kernelit kryhet nga Steve French i Microsoft, mir\u00ebmbajt\u00ebs i n\u00ebnsistemit CIFS\/SMB2\/SMB3 n\u00eb kernelin Linux dhe pjes\u00ebmarr\u00ebs prej koh\u00ebsh n\u00eb ekipin e zhvilluesve t\u00eb Samba-s, i cili ka dh\u00ebn\u00eb nj\u00eb kontribut t\u00eb r\u00ebnd\u00ebsish\u00ebm n\u00eb zbatimin e mb\u00ebshtetjes p\u00ebr protokollet SMB\/CIFS n\u00eb Samba dhe Linux. \u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 5.15, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430, \u0438 \u0431\u0435\u0437 \u043b\u0438\u0448\u043d\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106241","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsi n\u00eb modulin ksmbd t\u00eb kernelit Linux q\u00eb lejon ekzekutimin n\u00eb distanc\u00eb t\u00eb kodit arbitrar | ProHoster","description":"N\u00eb modulin ksmbd, i cili p\u00ebrfshin implementimin e integruar n\u00eb kernelin Linux t\u00eb nj\u00eb serveri skedar\u00ebsh t\u00eb bazuar n\u00eb protokollin SMB, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi kritike q\u00eb lejon ekzekutimin n\u00eb distanc\u00eb t\u00eb kodit arbitrar me privilegje t\u00eb kernelit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-module-ksmbd-yadra-linux-pozvolyayushhaya-udalyonno-vypolnit-svoj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-module-ksmbd-yadra-linux-pozvolyayushhaya-udalyonno-vypolnit-svoj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-23T07:36:47+00:00","article:modified_time":"2022-12-23T07:36:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/106241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=106241"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/106241\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=106241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=106241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=106241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"