{"id":172753,"date":"2026-05-19T18:24:36","date_gmt":"2026-05-19T16:24:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pintheft-shestaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux"},"modified":"2026-05-19T18:24:36","modified_gmt":"2026-05-19T16:24:36","slug":"pintheft-shestaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/pintheft-shestaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","title":{"rendered":"PinTheft \u2014 vulnerabiliteti i gjasht\u00eb i klas\u00ebs Copy Fail, q\u00eb ofron t\u00eb drejta root n\u00eb Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Informacioni mbi nj\u00eb t\u00eb shtat\u00eb vulnerabilitet (1, 2-3, 4, 5) \u00ebsht\u00eb zbuluar, e cila i lejon nj\u00eb p\u00ebrdorues lokal t\u00eb paprivilegjuar t\u00eb fitoj\u00eb t\u00eb drejtat root duke rishkruar t\u00eb dh\u00ebna n\u00eb cache-n\u00eb e faqes. Vulnerabiliteti ka marr\u00eb emrin kodor PinTheft. Nj\u00eb prototip i exploit-it \u00ebsht\u00eb n\u00eb dispozicion. Identifikuesi CVE ende nuk \u00ebsht\u00eb caktuar. Nj\u00eb rregullim \u00ebsht\u00eb aktualisht n\u00eb dispozicion vet\u00ebm si nj\u00eb patch, i cili u publikua m\u00eb 5 Maj dhe u miratua m\u00eb 11 Maj n\u00eb deg\u00ebn netdev, por nuk \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb l\u00ebshimet p\u00ebrmir\u00ebsuese t\u00eb b\u00ebrtham\u00ebs. <\/p>\n

Vulnerabiliteti \u00ebsht\u00eb prezent n\u00eb zbatimin e protokollit t\u00eb rrjetit RDS (Reliable Datagram Sockets), i destinuar p\u00ebr shk\u00ebmbim t\u00eb shpejt\u00eb mesazhesh midis nyjeve n\u00eb klaster, me vones\u00eb minimale dhe dor\u00ebzim t\u00eb garantuar. Sulmi \u00ebsht\u00eb i mundur n\u00eb sisteme me n\u00ebn-sistemin io_uring t\u00eb ndar\u00eb (io_uring_disabled=0) dhe b\u00ebrtham\u00ebn e nd\u00ebrtuar me opsionet CONFIG_RDS, CONFIG_RDS_TCP dhe CONFIG_IO_URING. P\u00ebr t\u00eb funksionuar exploit-i, n\u00eb sistem duhet t\u00eb jet\u00eb nj\u00eb skedar ekzekutiv i lexuesh\u00ebm me flamurin SUID-root. <\/p>\n

P\u00ebr ngarkimin automatik t\u00eb modulit t\u00eb b\u00ebrtham\u00ebs rds_tcp, eksploiti k\u00ebrkon d\u00ebrgimin e t\u00eb dh\u00ebnave p\u00ebrmes RDS duke p\u00ebrdorur transportin SO_RDS_TRANSPORT=2. V\u00ebrehet se midis shp\u00ebrndarjeve t\u00eb testuara t\u00eb Linux, n\u00eb konfigurimin e tij t\u00eb paracaktuar, moduli i b\u00ebrtham\u00ebs rds ofrohet vet\u00ebm n\u00eb Arch Linux. P\u00ebr t\u00eb bllokuar vulnerabilitetin, mund t\u00eb bllokoni ngarkimin automatik t\u00eb moduleve t\u00eb b\u00ebrtham\u00ebs rds dhe rds_tcp: rmmod rds_tcp rds printf 'install rds \/bin\/false\ninstall rds_tcp \/bin\/false\n' > \/etc\/modprobe.d\/pintheft.conf <\/p>\n

Vulnerabiliteti shkaktohet nga nj\u00eb gabim n\u00eb implementimin e mekanizmit zerocopy n\u00eb funksionin rds_message_zcopy_from_user(), i cili kryen modifikime t\u00eb drejtp\u00ebrdrejta t\u00eb t\u00eb dh\u00ebnave n\u00eb memorie p\u00ebr t\u00eb shmangur tamponizimin e panevojsh\u00ebm. N\u00eb rastin e d\u00ebshtimit, nuk u pastrua fusha rm->data.op_nents, duke shkaktuar \u00e7lirimin e dyfisht\u00eb t\u00eb tamponit (double-free). Shfaqja e nj\u00eb vler\u00eb t\u00eb pap\u00ebrshtatshme n\u00eb num\u00ebruesin e referencave arriti t\u00eb eksploitohej p\u00ebr t\u00eb shkruar t\u00eb dh\u00ebna n\u00eb memory, fal\u00eb manipulimit me treguesin e nj\u00eb tamponi t\u00eb fiksuar io_uring. <\/p>\n

N\u00eb t\u00eb tjera, mekanizmi i eksploatimit \u00ebsht\u00eb tipik p\u00ebr t\u00eb gjitha vulnerabilitetet e k\u00ebtij lloji \u2014 sulmuesi arin t\u00eb vendos\u00eb nj\u00eb skedar programi me flamurin suid root n\u00eb memorie, dhe m\u00eb pas vendos n\u00eb headerin ELF kod p\u00ebr t\u00eb ekzekutuar \/usr\/bin\/sh. Pas k\u00ebsaj manipulimi, ekzekutimi i programit \u00e7on n\u00eb ngarkimin n\u00eb memorie jo t\u00eb skedarit origjinal nga disku, por t\u00eb nj\u00eb kopjeje t\u00eb modifikuar nga memoria. Ndryshe nga eksploitat e m\u00ebparshme, varianti i ri \u00ebsht\u00eb i adaptuar vet\u00ebm p\u00ebr sulmin ndaj utilitarit 'su', por gjithashtu mund t\u00eb p\u00ebrdoret n\u00ebse n\u00eb sistem gjenden programe t\u00eb tilla me suid si mount, passwd, chsh, newgrp, umount dhe pkexec.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (1, 2-3, 4, 5), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f PinTheft. \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0435\u0449\u0451 \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0438\u0434\u0435 \u043f\u0430\u0442\u0447\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d 5 \u043c\u0430\u044f \u0438 11 \u043c\u0430\u044f \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442\u0432 \u0432\u0435\u0442\u043a\u0443 netdev, \u043d\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-172753","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PinTheft \u2014 e pesta e met\u00eb e klas\u00ebs Copy Fail, q\u00eb ofron t\u00eb drejta root n\u00eb Linux | ProHoster","description":"Informacioni mbi t\u00eb pest\u00ebn t\u00eb met\u00eb (1, 2-3, 4, 5) \u00ebsht\u00eb zbuluar, i cili i mund\u00ebson nj\u00eb p\u00ebrdoruesi lokal pa privilegje t\u00eb marr\u00eb t\u00eb drejtat e root-it duke rishkruar t\u00eb dh\u00ebna n\u00eb cache-n\u00eb e faqes.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/pintheft-shestaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47PinTheft \u2014 \u0448\u0435\u0441\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 Copy Fail, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0430\u0432\u0430 root \u0432 Linux | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (1, 2-3, 4, 5), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u043c \u043a\u044d\u0448\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/pintheft-shestaya-uyazvimost-klassa-copy-fail-predostavlyayushhaya-prava-root-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-19T16:24:36+00:00","article:modified_time":"2026-05-19T16:24:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/172753","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=172753"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/172753\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=172753"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=172753"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=172753"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}