{"id":107877,"date":"2023-04-16T12:48:13","date_gmt":"2023-04-16T10:48:13","guid":{"rendered":"https:\/\/prohoster.info\/?p=107877"},"modified":"2023-04-17T17:50:38","modified_gmt":"2023-04-17T15:50:38","slug":"uyazvimost-v-yadre-linux-6-2-pozvolyayushhaya-obojti-zashhitu-ot-atak-spectre-v2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-yadre-linux-6-2-pozvolyayushhaya-obojti-zashhitu-ot-atak-spectre-v2","title":{"rendered":"Nj\u00eb vulnerabilitet n\u00eb b\u00ebrtham\u00ebn Linux 6.2 q\u00eb lejon kalimin e mbrojtjes nga sulmet Spectre v2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb vulnerabilitet \u00ebsht\u00eb zbuluar n\u00eb b\u00ebrtham\u00ebn Linux 6.2 (CVE-2023-1998), q\u00eb \u00e7on n\u00eb \u00e7aktivizimin e mbrojtjes nga sulmet e klas\u00ebs Spectre v2, duke lejuar aksesin n\u00eb memorjen e proceseve t\u00eb tjera q\u00eb ekzekutohen n\u00eb lidhje me thread-e t\u00eb ndryshme SMT ose Hyper Threading, por n\u00eb nj\u00eb b\u00ebrtham\u00eb fizike t\u00eb nj\u00eb procesori. Vulnerabiliteti, p\u00ebrve\u00e7 t\u00eb tjerave, mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb organizuar rrjedhje t\u00eb t\u00eb dh\u00ebnave midis makinave virtuale n\u00eb sistemet n\u00eb cloud. Problemi prek vet\u00ebm b\u00ebrtham\u00ebn Linux 6.2 dhe \u00ebsht\u00eb shkaktuar nga zbatimi i gabuar i optimizimeve t\u00eb destinuara p\u00ebr t\u00eb ulur kostot e konsiderueshme n\u00eb aplikimin e mbrojtjes nga Spectre v2. Vulnerabiliteti \u00ebsht\u00eb eliminuar n\u00eb deg\u00ebn eksperimentale t\u00eb b\u00ebrtham\u00ebs Linux 6.3. <\/p>\n

N\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, p\u00ebr mbrojtjen nga sulmet e klas\u00ebs Spectre, proceset mund t\u00eb \u00e7aktivizojn\u00eb p\u00ebrzgjedhsh\u00ebm ekzekutimin spekulativ t\u00eb instrukcioneve p\u00ebrmes prctl PR_SET_SPECULATION_CTRL ose t\u00eb p\u00ebrdorin filtrimin e thirrjeve sistemike mbi baz\u00ebn e mekanizmit seccomp. Sipas hulumtuesve q\u00eb zbuluan problemin, optimizimi i gabuar n\u00eb b\u00ebrtham\u00ebn 6.2 e la pa mbrojtje t\u00eb duhur. makinat virtuale<\/a> nj\u00eb ofrues t\u00eb madh cloud, pavar\u00ebsisht aktivizimit t\u00eb modalitetit t\u00eb bllokimit t\u00eb sulmeve spectre-BTI p\u00ebrmes prctl. Vulnerabiliteti gjithashtu shfaqet n\u00eb zakonsh\u00ebm server\u00eb<\/a> me nj\u00eb b\u00ebrtham\u00eb 6.2, kur ngarkohen duke p\u00ebrdorur cil\u00ebsimin «spectre_v2=ibrs. <\/p>\n

Thelbi i vulnerabilitetit \u00ebsht\u00eb se, kur zgjidhen modalitetet e mbrojtjes IBRS ose eIBRS, optimizimet e futur \u00e7aktivizojn\u00eb p\u00ebrdorimin e mekanizmit STIBP (Single Thread Indirect Branch Predictors), q\u00eb \u00ebsht\u00eb i nevojsh\u00ebm p\u00ebr t\u00eb bllokuar rrjedhjet gjat\u00eb p\u00ebrdorimit t\u00eb teknologjis\u00eb s\u00eb shum\u00ebfisht\u00eb (SMT ose Hyper-Threading). N\u00eb k\u00ebt\u00eb rast, mbrojtja nga rrjedhjet midis threads sigurohet vet\u00ebm nga modaliteti eIBRS, por jo nga modaliteti IBRS, pasi n\u00eb k\u00ebt\u00eb t\u00eb fundit bita IBRS, q\u00eb ofron mbrojtje nga rrjedhjet midis b\u00ebrthamave logjike, p\u00ebr arsye t\u00eb performanc\u00ebs, \u00e7lirohen kur kthehet kontrolli n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, duke e b\u00ebr\u00eb thread-et n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit t\u00eb pasigurt nga sulmet e klasit Spectre v2.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux 6.2 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-1998), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 Spectre v2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u0430\u0445 SMT \u0438\u043b\u0438 Hyper Threading, \u043d\u043e \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u044f\u0434\u0440\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107877","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsi n\u00eb b\u00ebrtham\u00ebn Linux 6.2 e cila lejon kalimin e mbrojtjes nga sulmet Spectre v2 | ProHoster","description":"N\u00eb kernelin e Linux 6.2 \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2023-1998) q\u00eb \u00e7on n\u00eb \u00e7aktivizimin e mbrojtjes nga sulmet e klas\u00ebs Spectre v2, duke lejuar aksesin n\u00eb memorien e proceseve t\u00eb tjera q\u00eb ekzekutohen n\u00eb threads t\u00eb ndrysh\u00ebm SMT ose Hyper Threading, por n\u00eb nj\u00eb b\u00ebrtham\u00eb fizike t\u00eb vetme t\u00eb procesorit. Dob\u00ebsia, nd\u00ebr t\u00eb tjera, mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb organizuar nj\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave midis makinave virtuale n\u00eb sistemet n\u00eb cloud. Problemi preku vet\u00ebm","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-yadre-linux-6-2-pozvolyayushhaya-obojti-zashhitu-ot-atak-spectre-v2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux 6.2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0430\u0442\u0430\u043a Spectre v2 | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux 6.2 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-1998), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 Spectre v2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u0430\u0445 SMT \u0438\u043b\u0438 Hyper Threading, \u043d\u043e \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u044f\u0434\u0440\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0434\u0443 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-yadre-linux-6-2-pozvolyayushhaya-obojti-zashhitu-ot-atak-spectre-v2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-16T10:48:13+00:00","article:modified_time":"2023-04-17T15:50:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107877","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=107877"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107877\/revisions"}],"predecessor-version":[{"id":164434,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/107877\/revisions\/164434"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=107877"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=107877"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=107877"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}