{"id":172665,"date":"2026-05-19T00:24:34","date_gmt":"2026-05-18T22:24:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux"},"modified":"2026-05-19T00:24:34","modified_gmt":"2026-05-18T22:24:34","slug":"dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","title":{"rendered":"DirtyDecrypt \u2014 nj\u00eb vulnerabilitet e klas\u00ebs Copy Fail, q\u00eb ofron t\u00eb drejta root n\u00eb Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb vulnerabilitet \u00ebsht\u00eb identifikuar n\u00eb b\u00ebrtham\u00ebn Linux, i ngjash\u00ebm me vulnerabilitetet Copy Fail, Dirty Frag dhe Fragnesia, q\u00eb lejon nj\u00eb p\u00ebrdorues jo privilegjuar t\u00eb fitoj\u00eb t\u00eb drejta root duke rishkruar t\u00eb dh\u00ebna n\u00eb \u043a\u0435\u0448-in e faqes. Vulnerabilitetet kan\u00eb marr\u00eb emrin kodues DirtyDecrypt (problemi po ashtu p\u00ebrmendet si DirtyCBC). Nj\u00eb prototip i eksploatimit \u00ebsht\u00eb n\u00eb dispozicion. <\/p>\n

Identifikuesi CVE n\u00eb sh\u00ebnimin e eksploatimit nuk p\u00ebrmendet, vet\u00ebm se hulumtuesit zbuluan problemin m\u00eb 9 maj, pas s\u00eb cil\u00ebs i raportuan zhvilluesve t\u00eb b\u00ebrtham\u00ebs, t\u00eb cil\u00ebt u p\u00ebrgjigj\u00ebn se zbulimi i tyre p\u00ebrs\u00ebrit nj\u00eb raport tjet\u00ebr p\u00ebr nj\u00eb vulnerabilitet q\u00eb ishte tashm\u00eb i rregulluar. Pasi patchesi me korrigjimin ishte p\u00ebrfshir\u00eb tashm\u00eb n\u00eb b\u00ebrtham\u00eb, hulumtuesit vendos\u00ebn t\u00eb publikojn\u00eb eksploatimin e zhvilluar prej tyre. Nga p\u00ebrshkrimi brenda eksploatimit, p\u00ebrdoret vulnerabiliteti CVE-2026-31635, nj\u00eb korigjim p\u00ebr t\u00eb cilin u miratua n\u00eb b\u00ebrtham\u00eb n\u00eb prill dhe u p\u00ebrfshi n\u00eb deg\u00ebn 7.0.0 dhe n\u00eb versionin e formuar m\u00eb 18 prill 6.18.23. Problemi manifeston vetveten duke filluar nga b\u00ebrthama 6.16. <\/p>\n

Si n\u00eb rastin e seris\u00eb s\u00eb dob\u00ebsive Dirty Frag, dob\u00ebsia e re ndodhet n\u00eb drejtorin RxRPC, i cili implementon familjen e socket-eve AF_RXRPC dhe protokollin RPC t\u00eb nj\u00ebjt\u00eb q\u00eb punon mbi UDP. Problemi shkaktohet nga nj\u00eb gabim n\u00eb verifikimin e madh\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave n\u00eb funksionin rxgk_verify_response() \u2014 n\u00eb vend t\u00eb kontrollit 'if (auth_len > len)' n\u00eb kod, ishte e specifikuar 'if (auth_len < len)', \u00e7ka \u00e7onte n\u00eb d\u00ebrgimin n\u00eb funksionin rxgk_decrypt_skb() t\u00eb t\u00eb dh\u00ebnave me madh\u00ebsi m\u00eb t\u00eb madhe se sa e lejuar. Gjat\u00eb ekzekutimit t\u00eb funksionit rxgk_decrypt_skb(), dekriptimi i t\u00eb dh\u00ebnave b\u00ebhej duke vendosur ndryshimet drejtp\u00ebrdrejt n\u00eb cachesin e faqeve p\u00ebr t\u00eb eliminuar mbushjen e tep\u00ebrt. P\u00ebr shkak t\u00eb kontrollit t\u00eb gabuar t\u00eb madh\u00ebsis\u00eb, ekzistonte mund\u00ebsia e rid\u00ebshmimit t\u00eb t\u00eb dh\u00ebnave n\u00eb cachesin e faqeve n\u00eb nj\u00eb offset t\u00eb zgjedhur. <\/p>\n

Shfrydhja e vulnerabilitetit p\u00ebrfshin leximin e skedarit t\u00eb programit me flag suid root (p\u00ebr ta ruajtur n\u00eb cache t\u00eb faqeve) dhe z\u00ebvend\u00ebsimin n\u00eb cache t\u00eb faqeve t\u00eb nj\u00eb pjese t\u00eb kodit t\u00eb programit me kodin p\u00ebr t\u00eb ekzekutuar \/usr\/bin\/sh. Ekzekutimi i m\u00ebvonsh\u00ebm i programit do t\u00eb \u00e7oj\u00eb n\u00eb ngarkimin n\u00eb memorie t\u00eb nj\u00eb kopjeje t\u00eb modifikuar nga cache i faqeve, n\u00eb vend t\u00eb skedarit origjinal ekzekutues nga ruajt\u00ebsi. Si programe suid, n\u00eb eksploit parashikohet mund\u00ebsia e p\u00ebrdorimit t\u00eb \"\/usr\/bin\/su\", \"\/bin\/su\", \"\/usr\/bin\/mount\", \"\/usr\/bin\/passwd\" dhe \"\/usr\/bin\/chsh\". <\/p>\n

P\u00ebr shfryt\u00ebzimin e dob\u00ebsis\u00eb, gjat\u00eb nd\u00ebrtimit t\u00eb b\u00ebrtham\u00ebs duhet t\u00eb jet\u00eb aktiv opsioni CONFIG_RXGK, dhe p\u00ebr ngarkim automatik duhet t\u00eb jet\u00eb i disponuesh\u00ebm moduli i b\u00ebrtham\u00ebs rxrpc.ko (n\u00eb disa sisteme ai nuk \u00ebsht\u00eb nd\u00ebrtuar). Statusi i rregullimit t\u00eb dob\u00ebsive n\u00eb shp\u00ebrndarje mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Arch, Fedora. Si nj\u00eb trajtim alternativ p\u00ebr mbrojtje, mund t\u00eb bllokohet ngarkimi i modulit t\u00eb b\u00ebrtham\u00ebs rxrpc: <\/p>\n

sh -c \"printf 'install rxrpc \/bin\/false\\n' > \/etc\/modprobe.d\/dirtydecrypt.conf; rmmod rxrpc 2>\/dev\/null; true\" <\/p>\n

Gjithashtu mund t\u00eb theksojm\u00eb publikimin n\u00eb list\u00ebn e d\u00ebrgimit t\u00eb zhvilluesve t\u00eb b\u00ebrtham\u00ebs Linux t\u00eb patch-eve q\u00eb \u00e7aktivizojn\u00eb plot\u00ebsisht optimizimet n\u00eb crypto API (AF_ALG), q\u00eb p\u00ebrdorin qasje t\u00eb drejtp\u00ebrdrejt\u00eb n\u00eb cache-in e faqeve gjat\u00eb dekripjtimit duke p\u00ebrdorur algoritmet \u00abskcipher\u00bb dhe \u00abaead\u00bb. Optimizimet p\u00ebrjashtojn\u00eb buferizimin e tepruar t\u00eb t\u00eb dh\u00ebnave, por krijojn\u00eb rreziqe p\u00ebr shfaqjen e vulnerabiliteteve serioze. Supozohet se \u00e7aktivizimi i tyre do t\u00eb \u00e7oj\u00eb vet\u00ebm n\u00eb nj\u00eb ulje t\u00eb vog\u00ebl t\u00eb performanc\u00ebs p\u00ebr shkak t\u00eb shfaqjes s\u00eb nj\u00eb operacioni shtes\u00eb kopjimi n\u00eb nj\u00eb bufer t\u00eb ve\u00e7ant\u00eb. Patch-et jan\u00eb pranuar nga mb\u00ebshtet\u00ebsi i n\u00ebn-sistemit crypto API dhe jan\u00eb p\u00ebrfshir\u00eb n\u00eb deg\u00ebn \u00abcryptodev\u00bb, n\u00eb t\u00eb cil\u00ebn zhvillohen mund\u00ebsit\u00eb p\u00ebr transferim n\u00eb p\u00ebrb\u00ebrjen e ardhshme t\u00eb l\u00ebshimeve t\u00eb b\u00ebrtham\u00ebs Linux.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Copy Fail, Dirty Frag \u0438 Fragnesia \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f DirtyDecrypt (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c DirtyCBC). \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0443 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u043b\u0438\u0448\u044c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 9 \u043c\u0430\u044f, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-172665","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DirtyDecrypt \u2014 nj\u00eb tjet\u00ebr dob\u00ebsi e klas\u00ebs Copy Fail, q\u00eb ofron t\u00eb drejtat root n\u00eb Linux | ProHoster","description":"Nj\u00eb dob\u00ebsi \u00ebsht\u00eb identifikuar n\u00eb kernelin Linux, e ngjashme me dob\u00ebsit\u00eb Copy Fail, Dirty Frag dhe Fragnesia, q\u00eb lejon nj\u00eb p\u00ebrdorues pa privilegje t\u00eb marr\u00eb t\u00eb drejtat root duke rip\u00ebrshtatur t\u00eb dh\u00ebnat n\u00eb cache-n e faqeve. Dob\u00ebsive i \u00ebsht\u00eb dh\u00ebn\u00eb emri koduar DirtyDecrypt (problemi p\u00ebrmendet gjithashtu si DirtyCBC). Nj\u00eb prototip i nj\u00eb eksploati \u00ebsht\u00eb i disponuesh\u00ebm. CVE-identifikuesi nuk p\u00ebrmendet n\u00eb sh\u00ebnimin e eksploatimit, vet\u00ebm se hulumtuesit e zbuluan problemin m\u00eb 9 maj.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DirtyDecrypt \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 Copy Fail, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0430\u0432\u0430 root \u0432 Linux | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Copy Fail, Dirty Frag \u0438 Fragnesia \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f DirtyDecrypt (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c DirtyCBC). \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0443 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u043b\u0438\u0448\u044c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 9 \u043c\u0430\u044f,","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dirtydecrypt-ocherednaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-18T22:24:34+00:00","article:modified_time":"2026-05-18T22:24:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/172665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=172665"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/172665\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=172665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=172665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=172665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}