Informacionet mbi nj\u00eb vulnerabilitet (CVE-2026-64561) n\u00eb hipervizorin KVM jan\u00eb zbuluar, duke lejuar akses me t\u00eb drejta root n\u00eb ambientin host kur ka akses me t\u00eb drejta root n\u00eb sistemin e mysafirit. Problemi gjithashtu mund t\u00eb aplikohet p\u00ebr rritjen lokale t\u00eb privilegjeve kur ka akses n\u00eb pajisjen \/dev\/kvm (p.sh., n\u00eb RHEL ky akses iu jepet t\u00eb gjith\u00eb p\u00ebrdoruesve). Nj\u00eb prototip i eksploitit \u00ebsht\u00eb i disponuesh\u00ebm p\u00ebr shkarkim. Problemi ka marr\u00eb emrin e koduar Zapscape. <\/p>\n
Vulnerabiliteti shkaktohet nga qasja n\u00eb memorie pas \u00e7lirimit t\u00eb saj (use-after-free) n\u00eb komponent\u00ebt e hipervizorit KVM, t\u00eb cilat funksionojn\u00eb n\u00eb an\u00ebn e makin\u00ebs virtuale p\u00ebr imitim t\u00eb bllokut t\u00eb menaxhimit t\u00eb memories (MMU) dhe p\u00ebrkthimin e adresave nd\u00ebrmjet hosts dhe sistemit t\u00eb mysafirit. Vulnerabiliteti shfaqet n\u00eb sisteme me procesor\u00eb Intel dhe AMD gjat\u00eb procesit t\u00eb fshirjes rekursive t\u00eb faqeve shadow t\u00eb memories, q\u00eb ndodh gjat\u00eb \u00e7lirimit t\u00eb memories MMU (KVM fshin n\u00eb m\u00ebnyr\u00eb rekursive faqen kryesore shadow, e cila vazhdon t\u00eb p\u00ebrdoret gjat\u00eb pastrimit t\u00eb MMU). <\/p>\n
Problemi \u00ebsht\u00eb shkaktuar nga nj\u00eb gabim i b\u00ebr\u00eb 6 vjet m\u00eb par\u00eb dhe q\u00eb u rregullua disa dit\u00eb m\u00eb par\u00eb n\u00eb p\u00ebrdit\u00ebsimet e b\u00ebrtham\u00ebs 7.1.6, 6.18.42 dhe 6.6.148. Statusi i rregullimit t\u00eb vulnerabiliteteve n\u00eb distribucione mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Gentoo, Arch, Fedora. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"