{"id":182332,"date":"2026-06-27T08:48:07","date_gmt":"2026-06-27T06:48:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pedit-cow-i-dirtyclone-uyazvimosti-v-yadre-linux-pozvolyayushhie-poluchit-root-cherez-izmenenie-stranichnogo-kesha"},"modified":"2026-06-27T08:48:07","modified_gmt":"2026-06-27T06:48:07","slug":"pedit-cow-i-dirtyclone-uyazvimosti-v-yadre-linux-pozvolyayushhie-poluchit-root-cherez-izmenenie-stranichnogo-kesha","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/pedit-cow-i-dirtyclone-uyazvimosti-v-yadre-linux-pozvolyayushhie-poluchit-root-cherez-izmenenie-stranichnogo-kesha","title":{"rendered":"PEdit-CoW dhe DirtyClone \u2014 vulnerabilitete n\u00eb b\u00ebrtham\u00ebn Linux, q\u00eb lejojn\u00eb marrjen e root-it p\u00ebrmes ndryshimit t\u00eb keshit t\u00eb faqeve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Informacionet mbi dy dob\u00ebsit\u00eb e reja n\u00eb b\u00ebrtham\u00ebn Linux, t\u00eb cilat lejojn\u00eb nj\u00eb p\u00ebrdorues t\u00eb pavler\u00ebsuar t\u00eb fitoj\u00eb t\u00eb drejtat root duke shkruar t\u00eb dh\u00ebna n\u00eb cache-n\u00eb e faqeve. Jan\u00eb p\u00ebrgatitur eksploit\u00eb funksional\u00eb p\u00ebr t\u00eb dy dob\u00ebsit\u00eb.<\/p>\n
\n
PEdit-CoW (CVE-2026-46331, eksploit 1, eksploit 2) \u2014 nj\u00eb gabim n\u00eb aplikimin e mekanizmit copy-on-write n\u00eb kodin e ndryshimit t\u00eb titujve t\u00eb paketave (act_pedit), i p\u00ebrdorur n\u00eb planifikuesin e paketave rrjetore (net\/sched), lejon shkruarjen e t\u00eb dh\u00ebnave jasht\u00eb bufferit t\u00eb alokuar, q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb rishkruar t\u00eb dh\u00ebna n\u00eb caches t\u00eb faqes n\u00eb nj\u00eb offset t\u00eb zgjedhur. Gabimi shkaktohet sepse kontrolli i zon\u00ebs s\u00eb lejuar p\u00ebr shkruarje t\u00eb dh\u00ebnash \u00ebsht\u00eb kryer pa marr\u00eb parasysh se offset n\u00eb fushat e redaktueshme mund t\u00eb ndryshoj\u00eb gjat\u00eb ekzekutimit t\u00eb operacionit.\n
Problemi manifestohet q\u00eb nga b\u00ebrthama Linux 5.18 dhe \u00ebsht\u00eb rregulluar n\u00eb versionet 7.1, 7.0.13, 6.18.36 dhe 6.12.94. \u00cbsht\u00eb raportuar mund\u00ebsia e shfryt\u00ebzimit t\u00eb problemit n\u00eb RHEL 8\/9\/10, Debian 11\/12, openSUSE Leap 15.6, SUSE Linux 15-SP7\/16.0 dhe Ubuntu 18.04-25.10 (n\u00eb versionin Ubuntu 26.4, krijimi i user namespace \u00ebsht\u00eb bllokuar si parazgjedhje). Si nj\u00eb zgjidhje mbrojt\u00ebse, rekomandohet q\u00eb t\u00eb bllokohet ngarkimi i modulit t\u00eb b\u00ebrtham\u00ebs act_pedit (rregullat e kufizimit t\u00eb trafikut dhe rishkrimi i titujve p\u00ebrmes \u00abtc pedit\u00bb do t\u00eb ndalohen).<\/p>\n
DirtyClone (CVE-2026-43503, eksploit) \u2014 nj\u00eb an\u00eb tjet\u00ebr p\u00ebr t\u00eb shfryt\u00ebzuar nj\u00eb dob\u00ebsi t\u00eb Dirty Frag n\u00eb modul xfrm-ESP, i p\u00ebrdorur p\u00ebr t\u00eb p\u00ebrshpejtuar operacionet e enkriptimit n\u00eb IPsec duke p\u00ebrdorur protokollin ESP (Encapsulating Security Payload). P\u00ebr klonimin e struktur\u00ebs skb n\u00eb eksploitin e ri, p\u00ebrdoret manipulimi me zgjerimin TEE n\u00eb netfilter (moduli xt_TEE), q\u00eb kryen operacionin e klonimit t\u00eb paketave rrjetore.\n
Dob\u00ebsia \u00ebsht\u00eb riparuar n\u00eb l\u00ebshimet e b\u00ebrtham\u00ebs Linux 7.1, 7.0.10, 5.10.257, 5.15.208, 6.1.174, 6.6.141, 6.12.91 dhe 6.18.33. Problemi shfaqet n\u00eb Debian, Ubuntu, Fedora, \nRHEL dhe SUSE. Si nj\u00eb rrug\u00eb alternative p\u00ebr bllokimin e dob\u00ebsis\u00eb mund t\u00eb ndalohet ngarkesa e moduleve t\u00eb b\u00ebrtham\u00ebs esp4 dhe esp6.<\/p>\n<\/ul>\n
P\u00ebr shfryt\u00ebzimin e t\u00eb dy dob\u00ebsive k\u00ebrkohen t\u00eb drejtat e aksesit CAP_NET_ADMIN, t\u00eb cilat nj\u00eb p\u00ebrdorues i pap\u00ebrshtatsh\u00ebm mund t\u00eb fitoj\u00eb p\u00ebrmes krijimit t\u00eb hap\u00ebsirave t\u00eb identifikuesve t\u00eb p\u00ebrdoruesve (user namespace). N\u00eb Ubuntu, nj\u00eb operacion i till\u00eb \u00ebsht\u00eb i bllokuar si parazgjedhje, por mund t\u00eb lejohet n\u00ebp\u00ebrmjet sysctl \u00abkernel.apparmor_restrict_unprivileged_userns=0\u00bb ose profileve t\u00eb AppArmor. N\u00eb shp\u00ebrndarjet e tjera, disponueshm\u00ebria e \u00abuser namespace\u00bb p\u00ebr p\u00ebrdoruesit e pap\u00ebrshtatsh\u00ebm varet nga vendosja e sysctl \u00abkernel.unprivileged_userns_clone\u00bb (n\u00ebse \u00ebsht\u00eb 0, at\u00ebher\u00eb ndalohet). <\/p>\n
Shfryt\u00ebzimi i dob\u00ebsive p\u00ebrfshin leximin e skedarit t\u00eb programit \/bin\/su me flagun suid root, p\u00ebr ta b\u00ebr\u00eb at\u00eb t\u00eb residuoj\u00eb n\u00eb cache t\u00eb faqeve, dhe z\u00ebvend\u00ebsimin n\u00eb cache t\u00eb faqeve t\u00eb nj\u00eb pjese t\u00eb kodit t\u00eb programit me kodin p\u00ebr t\u00eb ekzekutuar \/bin\/sh. Ekzekutimi i m\u00ebpassh\u00ebm i programit do t\u00eb b\u00ebj\u00eb q\u00eb n\u00eb kujtes\u00eb t\u00eb ngarkohet jo skedari origjinal ekzekutues nga ruajt\u00ebsi, por nj\u00eb kopje e modifikuar nga cache i faqeve. <\/p>\n
Gjithashtu, mund t\u00eb p\u00ebrmendet krijimi i nj\u00eb eksploiti p\u00ebr dob\u00ebsin\u00eb CVE-2026-23111 n\u00eb n\u00ebn-sistemin nf_tables, q\u00eb \u00ebsht\u00eb eliminuar n\u00eb azhurnimet e muajit shkurt t\u00eb b\u00ebrtham\u00ebs Linux. Dob\u00ebsia shkaktohet nga adresimi i memories pas \u00e7lirimit t\u00eb saj (use-after-free) dhe lejon nj\u00eb p\u00ebrdorues t\u00eb pavolitsh\u00ebm t\u00eb fitoj\u00eb privilegje root n\u00eb sistem. P\u00ebr t\u00eb sulmuar, p\u00ebrdoruesit gjithashtu duhet t\u00eb ken\u00eb mund\u00ebsin\u00eb e krijimit t\u00eb hap\u00ebsirave t\u00eb identifikuesve t\u00eb p\u00ebrdoruesve (user namespace). Funksionimi i eksploiti \u00ebsht\u00eb demonstruar n\u00eb \nDebian 12\/13 dhe Ubuntu 22.04\/24.04. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"