{"id":107877,"date":"2023-04-16T12:48:13","date_gmt":"2023-04-16T10:48:13","guid":{"rendered":"https:\/\/prohoster.info\/?p=107877"},"modified":"2023-04-17T17:50:38","modified_gmt":"2023-04-17T15:50:38","slug":"uyazvimost-v-yadre-linux-6-2-pozvolyayushhaya-obojti-zashhitu-ot-atak-spectre-v2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-yadre-linux-6-2-pozvolyayushhaya-obojti-zashhitu-ot-atak-spectre-v2","title":{"rendered":"Nj\u00eb dob\u00ebsi n\u00eb thelbin Linux 6.2, e cila lejon kalimin e mbrojtjes nga sulmet Spectre v2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb kernelin Linux 6.2 \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet (CVE-2023-1998) q\u00eb \u00e7on n\u00eb \u00e7aktivizimin e mbrojtjes nga sulme t\u00eb klas\u00ebs Spectre v2, q\u00eb lejojn\u00eb qasjen n\u00eb memorie t\u00eb proceseve t\u00eb tjera q\u00eb ekzekutohen n\u00eb tela t\u00eb ndrysh\u00ebm SMT ose Hyper Threading, por n\u00eb nj\u00eb b\u00ebrtham\u00eb fizike t\u00eb procesorit. Ky vulnerabilitet, p\u00ebrve\u00e7 t\u00eb tjerash, mund t\u00eb p\u00ebrdoret p\u00ebr organizimin e rrjedhjes s\u00eb t\u00eb dh\u00ebnave midis makinave virutale n\u00eb sistemet cloud. Problemi prek vet\u00ebm kernelin Linux 6.2 dhe shkaktohet nga nj\u00eb implementim i pap\u00ebrshtatsh\u00ebm i optimizimeve q\u00eb synojn\u00eb t\u00eb reduktojn\u00eb shpenzimet e konsiderueshme t\u00eb burimeve gjat\u00eb p\u00ebrdorimit t\u00eb mbrojtjes nga Spectre v2. Vulnerabiliteti \u00ebsht\u00eb eliminuar n\u00eb deg\u00ebn eksperimentale t\u00eb kernelit Linux 6.3. <\/p>\n

N\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit p\u00ebr mbrojtjen nga sulmet e klas\u00ebs Spectre, proceset mund t\u00eb \u00e7aktivizojn\u00eb p\u00ebrzgjedh\u00ebsit e ekzekutimit spekulator t\u00eb instruksioneve duke p\u00ebrdorur prctl PR_SET_SPECULATION_CTRL ose t\u00eb p\u00ebrdorin filtrimin e thirrjeve sistemike bazuar n\u00eb mekanizmin seccomp. Sipas hulumtuesve q\u00eb zbuluan problemin, optimizimi i pap\u00ebrshtatsh\u00ebm n\u00eb kernelin 6.2 e la pa mbrojtje makina virtuale<\/a> t\u00eb pakt\u00ebn nj\u00eb ofrues t\u00eb madh t\u00eb sh\u00ebrbimeve cloud, pavar\u00ebsisht aktivizimit t\u00eb modit t\u00eb bllokimit t\u00eb sulmeve spectre-BTI p\u00ebrmes prctl. Vulnerabiliteti gjithashtu shfaqet n\u00eb sistemet sistemet<\/a> me djeg 6.2, kur ngarkohen p\u00ebrdoret konfigurimi «spectre_v2=ibrs. <\/p>\n

Thelbi i vulnerabilitetit \u00ebsht\u00eb se n\u00eb zgjedhjen e modit t\u00eb mbrojtjes IBRS ose eIBRS, optimizimet e kryera \u00e7aktivizojn\u00eb p\u00ebrdorimin e mekanizmit STIBP (Single Thread Indirect Branch Predictors), i nevojsh\u00ebm p\u00ebr t\u00eb bllokuar rrjedhjet kur p\u00ebrdoret teknologjia e shum\u00ebfisht\u00eb t\u00eb ekzekutimit (SMT ose Hyper-Threading). N\u00eb k\u00ebt\u00eb rast, mbrojtjen nga rrjedhjet midis proceseve e ofron vet\u00ebm moda e eIBRS, por jo moda IBRS, pasi n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb bita IBRS, q\u00eb siguron mbrojtjen nga rrjedhjet midis b\u00ebrthamave logjike, me arsyetime t\u00eb performanc\u00ebs fshihen gjat\u00eb rikthimit n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, duke b\u00ebr\u00eb q\u00eb proceset n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit t\u00eb jen\u00eb t\u00eb pambrojtura nga sulmet e klas\u00ebs Spectre v2.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux 6.2 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-1998), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 Spectre v2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u0430\u0445 SMT \u0438\u043b\u0438 Hyper Threading, \u043d\u043e \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u044f\u0434\u0440\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107877","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti n\u00eb kernelin Linux 6.2 q\u00eb lejon anashkalimin e mbrojtjes nga sulmet Spectre v2 | ProHoster","description":"N\u00eb kernelin Linux 6.2 \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet (CVE-2023-1998) q\u00eb \u00e7on n\u00eb \u00e7aktivizimin e mbrojtjes nga sulmet e klas\u00ebs Spectre v2, q\u00eb lejojn\u00eb qasjen n\u00eb memorie t\u00eb proceseve t\u00eb tjera q\u00eb ekzekutohen n\u00eb tela t\u00eb ndrysh\u00ebm SMT ose Hyper.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-yadre-linux-6-2-pozvolyayushhaya-obojti-zashhitu-ot-atak-spectre-v2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux 6.2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0430\u0442\u0430\u043a Spectre v2 | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux 6.2 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-1998), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 Spectre v2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u0430\u0445 SMT \u0438\u043b\u0438 Hyper.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-yadre-linux-6-2-pozvolyayushhaya-obojti-zashhitu-ot-atak-spectre-v2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-16T10:48:13+00:00","article:modified_time":"2023-04-17T15:50:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107877","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=107877"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107877\/revisions"}],"predecessor-version":[{"id":164434,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107877\/revisions\/164434"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=107877"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=107877"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=107877"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}