{"id":181796,"date":"2026-05-29T14:48:11","date_gmt":"2026-05-29T12:48:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/cifswitch-uyazvimost-v-cifs-podsisteme-yadra-linux-pozvolyayushhaya-poluchit-prava-root"},"modified":"2026-05-29T14:48:11","modified_gmt":"2026-05-29T12:48:11","slug":"cifswitch-uyazvimost-v-cifs-podsisteme-yadra-linux-pozvolyayushhaya-poluchit-prava-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/cifswitch-uyazvimost-v-cifs-podsisteme-yadra-linux-pozvolyayushhaya-poluchit-prava-root","title":{"rendered":"CIFSwitch \u2014 nj\u00eb vulnerabilitet n\u00eb n\u00ebnstruktur\u00ebn CIFS t\u00eb kernelit Linux, q\u00eb lejon marrjen e t\u00eb drejtave root.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jan\u00eb zbuluar detajet dhe \u00ebsht\u00eb botuar nj\u00eb eksploit p\u00ebr vulnerabilitetin CIFSwitch (CVE ende nuk \u00ebsht\u00eb ekuivalencuar) n\u00eb modulin e b\u00ebrtham\u00ebs CIFS dhe grupin e mjeteve cifs-utils, q\u00eb i lejon nj\u00eb p\u00ebrdoruesi t\u00eb pa privilegjuar t\u00eb marr\u00eb t\u00eb drejtat root n\u00eb sistem. Rregullimi \u00ebsht\u00eb i disponuesh\u00ebm vet\u00ebm n\u00eb form\u00ebn e nj\u00eb patch, i cili \u00ebsht\u00eb publikuar m\u00eb 16 maj dhe m\u00eb 19 maj \u00ebsht\u00eb pranuar n\u00eb deg\u00ebn kryesore t\u00eb b\u00ebrtham\u00ebs Linux (versionet e rregulluara t\u00eb b\u00ebrtham\u00ebs akoma nuk jan\u00eb t\u00eb disponueshme). <\/p>\n

Vulnerabiliteti ndikon n\u00eb kodin q\u00eb siguron mb\u00ebshtetje p\u00ebr mekanizmin cifs.spnego p\u00ebr t\u00eb kryer autentifikimin p\u00ebrmes protokollit SPNEGO (Negocimi i Thjesht\u00eb dhe i Mbrojtur GSSAPI) gjat\u00eb lidhjes me serverat SMB. Kur p\u00ebrdoret cifs.spnego p\u00ebr t\u00eb p\u00ebrcaktuar \u00e7el\u00ebsat nga Kerberos\/SPNEGO, b\u00ebrthama th\u00ebrret procesorin cifs.upcall, i ofruar nga paketa cifs-utils dhe ekzekutuar n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit me t\u00eb drejta root. <\/p>\n

Nj\u00eb p\u00ebrdorues i pavlefsh\u00ebm mund t\u00eb nis\u00eb thirrjen e trajtuesit p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb k\u00ebrkese q\u00eb k\u00ebrkon marrjen e \u00e7el\u00ebsit «cifs.spnego», me nj\u00eb p\u00ebrshkrim t\u00eb falsifikuar «CIFS SPNEGO». N\u00eb trajtuesin cifs.upcall nuk kryhen kontrollime shtes\u00eb p\u00ebr sakt\u00ebsin\u00eb e parametrave t\u00eb dh\u00ebn\u00eb p\u00ebrmes b\u00ebrtham\u00ebs, p\u00ebrfshir\u00eb, nd\u00ebr t\u00eb tjera, ai percepcion q\u00eb vlerat e fushave pid, uid, creduid jan\u00eb t\u00eb besueshme dhe
\n Pas aktivizimit, procesori cifs.upcall kalon n\u00eb hap\u00ebsir\u00ebn e identifikimit t\u00eb procesit t\u00eb p\u00ebrdoruesit, p\u00ebrmes t\u00eb cilit \u00ebsht\u00eb d\u00ebrguar k\u00ebrkesa, dhe deri n\u00eb heqjen e privilegjeve kryen k\u00ebrkimin n\u00eb baz\u00ebn e sistemit NSS (Shk\u00ebmbimi i Sh\u00ebrbimeve t\u00eb Emrave).<\/p>\n

Nj\u00eb sulmues mund t\u00eb nis\u00eb procesin e tij n\u00eb nj\u00eb hap\u00ebsir\u00eb identifikimi t\u00eb montimeve t\u00eb ve\u00e7anta, gj\u00eb q\u00eb do t\u00eb rezultoj\u00eb n\u00eb kryerjen e thirrjes NSS n\u00eb kontekstin e tij. P\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetin mjafton q\u00eb brenda ambientit t\u00eb krijuar nga sulmuesi t\u00eb ket\u00eb skedarin e tij t\u00eb konfigurimit \/etc\/nsswitch.conf dhe nj\u00eb grup bibliotekash t\u00eb st\u00ebrvitura libnss_*.so.2. Ekzekutimi i k\u00ebrkes\u00ebs NSS nga procesori cifs.upcall do t\u00eb rezultoj\u00eb n\u00eb ngarkimin e biblioteka t\u00eb st\u00ebrvitura nga sulmuesi me t\u00eb drejta root.<\/p>\n

P\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetin, n\u00eb sistem duhet t\u00eb jet\u00eb e lejuar krijimi i hap\u00ebsirave t\u00eb identifikimit t\u00eb p\u00ebrdoruesve (user namespace) ose t\u00eb montimeve (mount namespace), dhe gjithashtu k\u00ebrkohet q\u00eb n\u00eb sistem t\u00eb jet\u00eb instaluar paketa cifs-utils. Distribucione ku \u00ebsht\u00eb e mundur shfryt\u00ebzimi i vulnerabilitetit n\u00eb konfigurimin e tij t\u00eb paracaktuar:<\/p>\n