{"id":182595,"date":"2026-07-10T22:54:14","date_gmt":"2026-07-10T20:54:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup"},"modified":"2026-07-10T22:54:14","modified_gmt":"2026-07-10T20:54:14","slug":"v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","title":{"rendered":"N\u00eb Linux \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet GhostLock q\u00eb lejon aksesin root.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/i><\/a>
1 <\/p>\n

Nj\u00eb vulnerabilitet \u00ebsht\u00eb zbuluar n\u00eb b\u00ebrtham\u00ebn Linux CVE-2026-43499<\/a>, e cila qumri GhostLock. Problemi p\u00ebrfshin kodin rtmutex dhe mekanizmin futex me trash\u00ebgimin\u00eb e p\u00ebrpar\u00ebsis\u00eb, dhe shfryt\u00ebzimi i saj mund t\u00eb lejoj\u00eb nj\u00eb p\u00ebrdorues lokal jo t\u00eb privilegjuar t\u00eb rris\u00eb t\u00eb drejtat deri n\u00eb root. Sipas t\u00eb dh\u00ebnave AlmaLinux<\/a>, vulnerabiliteti gjithashtu mund t\u00eb p\u00ebrdoret nga nj\u00eb konteiner p\u00ebr t\u00eb kaluar n\u00eb host, n\u00ebse sistemi punon me nj\u00eb b\u00ebrtham\u00eb t\u00eb pap\u00ebrdit\u00ebsuar.<\/p>\n

<\/noindex> <\/p>\n

Thelbi i gabimit \u00ebsht\u00eb i lidhur me funksionin remove_waiter() n\u00eb kernel\/locking\/rtmutex.c. Si\u00e7 \u00ebsht\u00eb e sh\u00ebnuar n\u00eb p\u00ebrshkrimin e NVD<\/a>, gjat\u00eb rikthimit t\u00eb proxy-lock n\u00eb skenarin futex_requeue() funksioni punonte me detyr\u00ebn aktuale (current), edhe pse duhej t\u00eb pastronte gjendjen e asaj detyre q\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb priste bllokimin (waiter::task). Si rezultat, gjendja pi_blocked_on mund t\u00eb mos p\u00ebrdit\u00ebsohej sakt\u00eb, duke l\u00ebn\u00eb nj\u00eb tregues t\u00eb varur dhe duke krijuar premisat p\u00ebr use-after-free.<\/p>\n

<\/noindex> <\/p>\n

K\u00ebrkuesit nga Nebula Security p\u00ebrshkruan GhostLock<\/a> si nj\u00eb gabim q\u00eb ka qen\u00eb i pranish\u00ebm n\u00eb shp\u00ebrndarjet kryesore t\u00eb Linux q\u00eb nga viti 2011. Diskutimi publik mbi vulnerabilitetin ka p\u00ebrforcuar rrezikun p\u00ebr serverat dhe mjediset e konteiner\u00ebve: CloudLinux<\/a> paralelisht paralajm\u00ebron se p\u00ebr CVE-2026-43499 tashm\u00eb ekziston nj\u00eb prova e konceptit publike, prandaj administrator\u00ebt nuk duhet ta shtyjn\u00eb p\u00ebrdit\u00ebsimin e b\u00ebrtham\u00ebs.<\/p>\n

<\/noindex> <\/p>\n

Korrigjimi n\u00eb upstream q\u00ebndron n\u00eb faktin se remove_waiter() duhet t\u00eb p\u00ebrdor\u00eb waiter::task, jo current, n\u00eb t\u00eb gjitha operacionet p\u00ebrkat\u00ebse. K\u00ebt\u00eb tregon edhe GitHub Advisory Database<\/a>, ku jan\u00eb renditur pasojat e gabimit: heqja e gabuar nga rbtree pa bllokimin e nevojsh\u00ebm, gjendja e papastruar pi_blocked_on dhe funksionimi i rt_mutex_adjust_prio_chain() me detyr\u00ebn e gabuar.<\/p>\n

<\/noindex> <\/p>\n

P\u00ebrdoruesve t\u00eb shp\u00ebrndarjeve Linux i rekomandohet t\u00eb instalojn\u00eb p\u00ebrdit\u00ebsimet e reja t\u00eb kernelit nga depozitat zyrtare. Vulnerabiliteti ka karakter lokal, prandaj hyrja e distancuar vet\u00eb nuk ofron, por n\u00eb server\u00ebt multi-p\u00ebrdorues, infrastruktur\u00ebn CI, hostimet dhe sistemet me konteiner\u00eb, rreziku \u00ebsht\u00eb ndjesh\u00ebm m\u00eb i lart\u00eb: shfryt\u00ebzimi i suksessh\u00ebm kthen aksesin e fituar me privilegje t\u00eb ul\u00ebta n\u00eb kontroll t\u00eb plot\u00eb mbi sistemin.<\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-43499, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostLock. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 rtmutex \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c futex \u0441 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430, \u0430 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e root. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c AlmaLinux, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u043e\u043c \u044f\u0434\u0440\u0435. \u0421\u0443\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182595","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb Linux \u00ebsht\u00eb zbuluar vulnerabiliteti GhostLock, i cili lejon qasje n\u00eb root | ProHoster","description":"N\u00eb thelbin e Linux-it \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet CVE-2026-43499, i njohur jozyrtarisht si GhostLock. Problemi prek kodin rtmutex dhe mekanizmin futex me trash\u00ebgimin\u00eb e prioriteteve, dhe shfryt\u00ebzimi i tij mund t\u00eb lejoj\u00eb nj\u00eb p\u00ebrdorues lokal pa privilegje t\u00eb rris\u00eb t\u00eb drejtat deri n\u00eb root. Sipas t\u00eb dh\u00ebnave nga AlmaLinux, ky vulnerabilitet gjithashtu mund t\u00eb p\u00ebrdoret nga nj\u00eb kontejner p\u00ebr t\u00eb dal\u00eb n\u00eb host, n\u00ebse sistemi funksionon me nj\u00eb thelb t\u00eb pa-aktualizuar. Thelbi i gabimit","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c GhostLock, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f | ProHoster","og:description":"1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-43499, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostLock. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 rtmutex \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c futex \u0441 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430, \u0430 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e root. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c AlmaLinux, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u043e\u043c \u044f\u0434\u0440\u0435. \u0421\u0443\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-10T20:54:14+00:00","article:modified_time":"2026-07-10T20:54:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182595","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=182595"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182595\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=182595"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=182595"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=182595"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}