{"id":114603,"date":"2024-03-27T12:25:57","date_gmt":"2024-03-27T10:25:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-yadre-linux-pozvolyayushhie-podnyat-svoi-privilegii-cherez-nf_tables-i-ksmbd"},"modified":"2024-03-27T12:25:57","modified_gmt":"2024-03-27T10:25:58","slug":"uyazvimosti-v-yadre-linux-pozvolyayushhie-podnyat-svoi-privilegii-cherez-nf_tables-i-ksmbd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-yadre-linux-pozvolyayushhie-podnyat-svoi-privilegii-cherez-nf_tables-i-ksmbd","title":{"rendered":"Dobit\u00eb n\u00eb b\u00ebrtham\u00ebn e Linux-it q\u00eb lejojn\u00eb rritjen e privilegjeve p\u00ebrmes nf_tables dhe ksmbd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>N\u00eb Netfilter, n\u00ebn-sistemi i b\u00ebrtham\u00ebs Linux q\u00eb p\u00ebrdoret p\u00ebr filtrimin dhe modifikimin e paketave rrjet, \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE-2024-1086) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb ekzekutoj\u00eb kod n\u00eb nivelin e b\u00ebrtham\u00ebs dhe t\u00eb rris\u00eb privilegjet e tij n\u00eb sistem. Problemi \u00ebsht\u00eb shkaktuar nga \u00e7lirimi i dyfisht\u00eb i memories (double-free) n\u00eb modulin nf_tables, i cili mund\u00ebson funksionimin e filtrit t\u00eb paketave nftables. Krijuesi i vulnerabilitetit ka zhvilluar dhe publikuar nj\u00eb prototip funksional t\u00eb eksploitatit.             <\/p>\n<p>Funksionimi i eksploitatit \u00ebsht\u00eb demonstruar n\u00eb versionet aktuale t\u00eb Debian dhe Ubuntu me b\u00ebrthamat Linux 5.14 \u2014 6.6, si dhe n\u00eb nj\u00eb ambient me b\u00ebrtham\u00ebn KernelCTF (Capture the Flag), e cila p\u00ebrfshin patch-e shtes\u00eb p\u00ebr bllokimin e metodave standarde t\u00eb funksionimit t\u00eb eksploitateve dhe p\u00ebrdoret nga Google n\u00eb programin e shp\u00ebrblimeve p\u00ebr gjetjen e vulnerabiliteteve. Shkalla e suksesit t\u00eb eksploitatit \u00ebsht\u00eb vler\u00ebsuar n\u00eb 99.4%. N\u00eb artikullin shoq\u00ebrues, procesi i krijimit t\u00eb nj\u00eb eksploiti t\u00eb nd\u00ebrlikuar me shum\u00eb nivele dhe kalimi i mekanizmave t\u00eb mbrojtjes dhe parandalimit t\u00eb prezantuara n\u00eb b\u00ebrtham\u00eb \u00ebsht\u00eb shpjeguar n\u00eb detaje.    <center><img decoding=\"async\" alt=\"Dobit\u00eb n\u00eb b\u00ebrtham\u00ebn e Linux-it q\u00eb lejojn\u00eb rritjen e privilegjeve p\u00ebrmes nf_tables dhe ksmbd\" src=\"\/wp-content\/uploads\/2024\/03\/379f4d2d8bf2d248097698da70ae8dd1.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Problemi lidhet me nj\u00eb gabim n\u00eb funksionin nft_verdict_init(), i cili lejon p\u00ebrdorimin e vlerave pozitive si kod gabimi p\u00ebr hedhjen e paketave (DROP) n\u00eb hook-e, q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb thirrur n\u00eb funksionin nf_hook_slow() nj\u00eb operacion t\u00eb ri lirimi t\u00eb memories p\u00ebr tamponin, p\u00ebr t\u00eb cilin tashm\u00eb \u00ebsht\u00eb thirrur funksioni free(). Problemi ndodh kur operacioni NF_DROP formohet me gabim dhe b\u00ebrthama n\u00eb fillim interpreton NF_DROP, por m\u00eb pas e \u00e7liron tamponin dhe kthen statusin NF_ACCEPT. Kjo situat\u00eb rezulton n\u00eb m\u00ebnyr\u00eb q\u00eb, p\u00ebrkund\u00ebr \u00e7lirimit t\u00eb tamponit t\u00eb lidhur me paket\u00ebn, p\u00ebrpunimi i saj nuk ndalet, por i kalon nj\u00eb procesor tjet\u00ebr, i cili nga ana e tij th\u00ebrret p\u00ebr her\u00eb t\u00eb dyt\u00eb funksionin e lirimit t\u00eb memories.      <\/p>\n<p>Vulnera do t\u00eb shfaqet duke filluar nga versione e b\u00ebrtham\u00ebs Linux 3.15, por eksploit funksionon me b\u00ebrthamat duke filluar nga versioni 5.14. Rregullimi i vulnerabilitetit \u00ebsht\u00eb propozuar n\u00eb l\u00ebshimin e b\u00ebrtham\u00ebs Linux 6.8-rc1 dhe n\u00eb fund t\u00eb shkurtit \u00ebsht\u00eb transferuar n\u00eb deg\u00ebt stabile 5.15.149, 6.1.76 dhe 6.6.15. N\u00eb distribuitor\u00ebt, mund t\u00eb ndiqni rregullimin e vulnerabilitetit n\u00eb faqet: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Arch.         <\/p>\n<p>Nd\u00ebrkoh\u00eb, mund t\u00eb theksojm\u00eb nj\u00eb seri dob\u00ebsish n\u00eb modulon ksmbd, q\u00eb ofron nj\u00eb implementim t\u00eb nd\u00ebrtuar n\u00eb kernelin Linux p\u00ebr menaxhimin e skedar\u00ebve <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-los-angeles\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3674\">server<\/a> n\u00eb baz\u00eb t\u00eb protokollit SMB: Dob\u00ebsia CVE-2024-26592 lejon q\u00eb nj\u00eb kod t\u00eb ekzekutohet nga distanca pa autentifikim me privilegje t\u00eb kernelit n\u00eb sistemet me modulon ksmbd t\u00eb aktivizuar. Problemi shkaktohet nga nj\u00eb gjendje garuese n\u00eb kodin e p\u00ebrpunimit t\u00eb lidhjeve TCP, e cila ndodh p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb bllokimeve t\u00eb duhura kur punohet me objektin.    <\/p>\n<p>Dob\u00ebsia CVE-2023-52440 gjithashtu lejon q\u00eb kod t\u00eb ekzekutohet nga distanca me privilegje t\u00eb kernelit, por shkaktohet nga mbushja e tejskajshme gjat\u00eb p\u00ebrpunimit t\u00eb \u00e7el\u00ebsave t\u00eb sesionit t\u00eb pap\u00ebrshtatsh\u00ebm p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb verifikimit t\u00eb duhur t\u00eb madh\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb marra nga p\u00ebrdoruesi, para se t'u kopjohen ato n\u00eb nj\u00eb buffer me madh\u00ebsi fikse.    <\/p>\n<p>Vulnerabilitetet (1, 2, 3) CVE-2024-26594, CVE-2023-52442 dhe CVE-2023-52441 n\u00eb ksmbd ofrojn\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb p\u00ebrcaktuar p\u00ebrmbajtjen e memorjes s\u00eb b\u00ebrtham\u00ebs n\u00eb m\u00ebnyr\u00eb t\u00eb distancuar pa autentikim. Vulnerabiliteti CVE-2024-26594 \u00ebsht\u00eb shkaktuar nga kontrolli i pap\u00ebrshtatsh\u00ebm i t\u00eb dh\u00ebnave gjat\u00eb p\u00ebrpunimit t\u00eb tokeneve t\u00eb pranuara SMB2 Mech, duke \u00e7uar n\u00eb kthimin e t\u00eb dh\u00ebnave nga zona jasht\u00eb buffers. Vulnerabiliteti CVE-2023-52442 \u00ebsht\u00eb shkaktuar nga moskontrollimi i duhur i t\u00eb dh\u00ebnave hyr\u00ebse gjat\u00eb p\u00ebrpunimit t\u00eb k\u00ebrkesave t\u00eb lidhura n\u00eb zinxhir (chained). Vulnerabiliteti CVE-2023-52441 \u00ebsht\u00eb shkaktuar nga mungesa e kontrollit t\u00eb nevojsh\u00ebm t\u00eb t\u00eb dh\u00ebnave hyr\u00ebse gjat\u00eb p\u00ebrpunimit t\u00eb k\u00ebrkesave p\u00ebr miratimin e lidhjes SMB2.    <\/p>\n<p>Vulnerabilitetet CVE-2024-26594 dhe CVE-2024-26592 jan\u00eb rregulluar n\u00eb b\u00ebrtham\u00ebn 6.8 dhe n\u00eb p\u00ebrdit\u00ebsimet korrektuese t\u00eb deg\u00ebve t\u00eb q\u00ebndrueshme t\u00eb m\u00ebparshme 6.1.75, 6.6.14, 6.7.2. Vulnerabilitetet e tjera jan\u00eb rregulluar n\u00eb b\u00ebrtham\u00ebn 6.5 dhe n\u00eb p\u00ebrdit\u00ebsimet 5.15.145, 6.1.53, 6.4.16.      <\/p>\n<p>N\u00eb p\u00ebrfundim, mund t\u00eb p\u00ebrmendet aktivizimi i pun\u00ebs s\u00eb ekipit t\u00eb ri t\u00eb zhvilluesve t\u00eb kernelit Linux, i krijuar p\u00ebr t\u00eb analizuar pranin\u00eb e dob\u00ebsive dhe p\u00ebr t\u00eb vler\u00ebsuar lidhjen e ndryshimeve t\u00eb b\u00ebra n\u00eb kernel me problemet e siguris\u00eb. N\u00eb shkurt, zhvilluesit e kernelit krijuan nj\u00eb sh\u00ebrbim t\u00eb vetin CNA (CVE Numbering Authority), i cili mori kompetenca p\u00ebr t\u00eb dh\u00ebn\u00eb me vet\u00ebdije identifikuesit CVE p\u00ebr dob\u00ebsit\u00eb. Para k\u00ebsaj, dh\u00ebnia e CVE dhe analiza e lidhjeve t\u00eb rregullimeve me dob\u00ebsit\u00eb e mundshme binin mbi supet e zhvilluesve t\u00eb distribucioneve, dhe n\u00eb kernel, dob\u00ebsit\u00eb potenciale nuk shfaqeshin ve\u00e7mas dhe ishte si rregullime t\u00eb zakonshme. Rezultatet e pun\u00ebs s\u00eb k\u00ebtij sh\u00ebrbimi t\u00eb ri e kaluan t\u00eb gjitha pritshm\u00ebrit \u2014 \u00e7do dit\u00eb n\u00eb kernel, sh\u00ebnohen deri n\u00eb disa dhjet\u00ebra dob\u00ebsi t\u00eb reja, t\u00eb cilat m\u00eb par\u00eb nuk ishin sh\u00ebnuar si probleme t\u00eb siguris\u00eb. P\u00ebr shembull, m\u00eb 26 mars, u dhan\u00eb identifikues t\u00eb rinj CVE p\u00ebr 14 dob\u00ebsi q\u00eb m\u00eb par\u00eb nuk ishin shqyrtuar si probleme t\u00eb siguris\u00eb, dhe m\u00eb 25 mars \u2014 41 dob\u00ebsi.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60860\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 Netfilter, \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-1086), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (double-free) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 nf_tables, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables. \u0412\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0420\u0430\u0431\u043e\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":114604,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114603","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 Netfilter, \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-1086), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (double-free) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 nf_tables, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables. \u0412\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0420\u0430\u0431\u043e\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-yadre-linux-pozvolyayushhie-podnyat-svoi-privilegii-cherez-nf_tables-i-ksmbd\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 nf_tables \u0438 ksmbd | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 Netfilter, \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-1086), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (double-free) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 nf_tables, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables. \u0412\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0420\u0430\u0431\u043e\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-yadre-linux-pozvolyayushhie-podnyat-svoi-privilegii-cherez-nf_tables-i-ksmbd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-03-27T10:25:58+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-03-27T10:25:58+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rreziqet n\u00eb b\u00ebrtham\u00ebn Linux q\u00eb lejojn\u00eb ngritjen e privilegjeve p\u00ebrmes nf_tables dhe ksmbd | ProHoster","description":"N\u00eb Netfilter, n\u00ebnsiestemi i b\u00ebrtham\u00ebs Linux q\u00eb p\u00ebrdoret p\u00ebr filtrimin dhe modifikimin e paketave rrjet, \u00ebsht\u00eb identifikuar nj\u00eb vulnerabilitet (CVE-2024-1086) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb ekzekutoj\u00eb kod n\u00eb nivelin e b\u00ebrtham\u00ebs dhe t\u00eb rris\u00eb privilegjet e tij n\u00eb sistem. Problemi \u00ebsht\u00eb shkaktuar nga \u00e7lirimi i dyfisht\u00eb t\u00eb memories n\u00eb modulin nf_tables, q\u00eb siguron funksionimin e filtrit t\u00eb paketave nftables. Hulumtuesi q\u00eb zbuloj\u00eb vulnerabilitetin ka zhvilluar dhe publikuar nj\u00eb prototip funksional t\u00eb eksploitit. Funksionimi i eksploitit","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-yadre-linux-pozvolyayushhie-podnyat-svoi-privilegii-cherez-nf_tables-i-ksmbd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 nf_tables \u0438 ksmbd | ProHoster","og:description":"\u0412 Netfilter, \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-1086), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (double-free) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 nf_tables, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 nftables. \u0412\u044b\u044f\u0432\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0420\u0430\u0431\u043e\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-yadre-linux-pozvolyayushhie-podnyat-svoi-privilegii-cherez-nf_tables-i-ksmbd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-27T10:25:58+00:00","article:modified_time":"2024-03-27T10:25:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114603","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-22 15:29:46","updated":"2026-02-22 15:29:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=114603"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114603\/revisions"}],"predecessor-version":[{"id":162202,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114603\/revisions\/162202"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/114604"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=114603"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=114603"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=114603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}