{"id":114696,"date":"2024-04-01T12:25:54","date_gmt":"2024-04-01T10:25:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-podsisteme-io_uring-pozvolyayushhaya-poluchit-privilegii-root"},"modified":"2024-04-01T12:25:54","modified_gmt":"2024-04-01T10:25:54","slug":"uyazvimost-v-podsisteme-io_uring-pozvolyayushhaya-poluchit-privilegii-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-podsisteme-io_uring-pozvolyayushhaya-poluchit-privilegii-root","title":{"rendered":"Vulnera n\u00eb n\u00ebn-sistem t\u00eb io_uring, q\u00eb lejon marrjen e privilegjeve root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb nd\u00ebrfaqen e hyrjes\/daljes asinkrone io_uring, e ofruar nga b\u00ebrthama Linux, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2024-0582) q\u00eb lejon nj\u00eb p\u00ebrdorues t\u00eb paprivilegjuar t\u00eb fitoj\u00eb t\u00eb drejtat root n\u00eb sistem. P\u00ebr t\u00eb shfryt\u00ebzuar k\u00ebt\u00eb dob\u00ebsi, mjafton t\u00eb ket\u00eb qasje lokale normale n\u00eb sistem, pa nevoj\u00ebn p\u00ebr manipulime me hap\u00ebsirat e emrave. Aktualisht, nj\u00eb shfryt\u00ebzim funksional \u00ebsht\u00eb n\u00eb dispozicion publik, si dhe nj\u00eb teknik\u00eb e dyt\u00eb shfryt\u00ebzimi e dob\u00ebsis\u00eb \u00ebsht\u00eb p\u00ebrshkruar n\u00eb detaje. <\/p>\n

Dob\u00ebsia shkaktohet nga referimi n\u00eb nj\u00eb bllok t\u00eb liruar tashm\u00eb t\u00eb memories (use-after-free) n\u00eb n\u00ebn-sistemin io_uring, q\u00eb ndodh gjat\u00eb regjistrimit dhe lirimit t\u00eb nj\u00eb unaz\u00eb buferi, e krijuar me flamurin IORING_REGISTER_PBUF_RING. N\u00eb situat\u00ebn e aplikimit t\u00eb operacionit mmap() n\u00eb bufer, ai mbetet i reflektuar n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit pas p\u00ebrfundimit t\u00eb operacionit t\u00eb lirimit t\u00eb tij (IORING_UNREGISTER_PBUF_RING). Duke p\u00ebrdorur k\u00ebt\u00eb karakteristik\u00eb, nj\u00eb sulmues mund t\u00eb lexoj\u00eb dhe shkruaj t\u00eb dh\u00ebna n\u00eb faqet e memories, t\u00eb cilat kthehen nga sistemi i shp\u00ebrndarjes s\u00eb memories s\u00eb b\u00ebrtham\u00ebs. <\/p>\n

Problemi shfaqet q\u00eb nga l\u00ebshimi i b\u00ebrtham\u00ebs Linux 6.4 dhe \u00ebsht\u00eb rregulluar n\u00eb l\u00ebshimet 6.7 dhe 6.6.5, si dhe n\u00eb paket\u00ebn e b\u00ebrtham\u00ebs 6.5.0-21, t\u00eb p\u00ebrgatitur p\u00ebr Ubuntu 22.04 dhe 23.10. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb se problemi n\u00eb b\u00ebrtham\u00ebn kryesore \u00ebsht\u00eb rregulluar n\u00eb dhjetor 2023, projekti Google Zero shp\u00ebrndau mesazhin p\u00ebr pranin\u00eb e dob\u00ebsis\u00eb m\u00eb 8 janar, dhe paketa me b\u00ebrtham\u00ebn e rregulluar 6.5 p\u00ebr Ubuntu u formua vet\u00ebm m\u00eb 22 shkurt 2024. N\u00eb shp\u00ebrndarje t\u00eb tjera, mund t\u00eb ndjekni rregullimin dhe ekspozueshm\u00ebrin\u00eb e dob\u00ebsis\u00eb n\u00eb faqet: Debian, Gentoo, RHEL, SUSE, Fedora, Arch. <\/p>\n

Eksploit imponohet n\u00eb krijimin e nj\u00eb numri t\u00eb madh faqesh memorjeje t\u00eb kontrolluara nga sulmuesi p\u00ebr t\u00eb p\u00ebrcaktuar p\u00ebrb\u00ebrjen e memorjes n\u00eb b\u00ebrtham\u00eb dhe p\u00ebr t\u00eb aksesuar faqet fisike p\u00ebrkat\u00ebs, duke p\u00ebrdorur si sinjale p\u00ebrmbajtjen e strukturave t\u00eb mbushura n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb caktuar t\u00eb soket\u00ebve rrjet. P\u00ebr t\u00eb ekzekutuar kodin n\u00eb eksploit, p\u00ebrdoret nj\u00eb \"gadget\" (sekuenc\u00eb e instruksioneve ekzistuese n\u00eb b\u00ebrtham\u00eb), q\u00eb \u00e7on n\u00eb ekzekutimin e funksionit call_usermodehelper_exec, i destinuar p\u00ebr t\u00eb nisur procese n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit nga b\u00ebrthama. <\/p>\n

Eksploitimi i dyt\u00eb bazohet n\u00eb faktin se kur t\u00eb gjitha blloqet slab n\u00eb cache jan\u00eb shteruar (p.sh., kur nj\u00eb skedar hapet shum\u00eb her\u00eb) faqet e lira t\u00eb memories, t\u00eb cilat mbeten t\u00eb qasshme p\u00ebr sulmuesin, p\u00ebrdoren nga sistemi i shp\u00ebrndarjes s\u00eb memories p\u00ebr t\u00eb krijuar nj\u00eb bllok t\u00eb ri slab dhe t\u00eb gjitha strukturat e reja t\u00eb skedar\u00ebve fillojn\u00eb t\u00eb vendosjen n\u00eb k\u00ebt\u00eb bllok. Prandaj, disa struktura skedar\u00ebsh do t\u00eb bjer\u00eb n\u00eb faqet e memories q\u00eb sulmuesi mund t\u00eb lexoj\u00eb dhe shkruaj\u00eb. Shfryt\u00ebzimi p\u00ebrfshin organizimin e p\u00ebrfshirjes n\u00eb cache-n e skedar\u00ebve t\u00eb nevojsh\u00ebm dhe z\u00ebvend\u00ebsimin n\u00eb struktura t\u00eb lidhura t\u00eb skedar\u00ebve t\u00eb fush\u00ebs f_mode, q\u00eb p\u00ebrcakton t\u00eb drejtat e aksesit, duke lejuar aksesin p\u00ebr t\u00eb shkruar nj\u00eb skedar sistemor t\u00eb nevojsh\u00ebm, p\u00ebr shembull, \/etc\/passwd.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 io_uring, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u044f\u0434\u0440\u043e\u043c Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-0582), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043c\u0451\u043d. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u043c\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114696","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb n\u00ebn-sistemin io_uring, q\u00eb lejon fitimin e privilegjeve root | ProHoster","description":"N\u00eb nd\u00ebrfaqen e hyrjes\/daljes asinkrone io_uring, e ofruar nga b\u00ebrthama Linux, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2024-0582) q\u00eb lejon nj\u00eb p\u00ebrdorues t\u00eb paprivilegjuar t\u00eb fitoj\u00eb t\u00eb drejtat root n\u00eb sistem. P\u00ebr t\u00eb shfryt\u00ebzuar k\u00ebt\u00eb dob\u00ebsi, mjafton t\u00eb ket\u00eb qasje lokale normale n\u00eb sistem, pa nevoj\u00ebn p\u00ebr manipulime me hap\u00ebsirat e emrave. Aktualisht, nj\u00eb shfryt\u00ebzim funksional \u00ebsht\u00eb n\u00eb dispozicion publik, si dhe nj\u00eb teknik\u00eb e dyt\u00eb shfryt\u00ebzimi e dob\u00ebsis\u00eb \u00ebsht\u00eb p\u00ebrshkruar n\u00eb detaje. Dob\u00ebsia shkaktohet nga referimi n\u00eb nj\u00eb bllok t\u00eb liruar.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-podsisteme-io_uring-pozvolyayushhaya-poluchit-privilegii-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 io_uring, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 root | ProHoster","og:description":"\u0412 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 io_uring, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u044f\u0434\u0440\u043e\u043c Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-0582), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043c\u0451\u043d. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u043c\u0443","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-podsisteme-io_uring-pozvolyayushhaya-poluchit-privilegii-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-01T10:25:54+00:00","article:modified_time":"2024-04-01T10:25:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114696","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=114696"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114696\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=114696"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=114696"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=114696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}