{"id":182837,"date":"2026-08-11T04:54:59","date_gmt":"2026-08-11T02:54:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera"},"modified":"2026-08-11T04:54:59","modified_gmt":"2026-08-11T02:54:59","slug":"sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","title":{"rendered":"SCTPhantom — nj\u00eb cenueshm\u00ebri n\u00eb kernelin Linux q\u00eb mund\u00ebson qasje root dhe dalje nga kontejneri","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb realizimin e protokollit SCTP, t\u00eb propozuar n\u00eb b\u00ebrtham\u00ebn Linux, \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi (CVE-2026-64564) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb fitoj\u00eb privilegje root n\u00eb sistem. Nd\u00ebr t\u00eb tjera, dob\u00ebsia lejon qasje root n\u00eb sistemin kryesor duke ekzekutuar nj\u00eb eksploatues n\u00eb nj\u00eb kontejner t\u00eb izoluar. Nj\u00eb prototip i eksploatuesit \u00ebsht\u00eb p\u00ebrgatitur, puna e t\u00eb cilit \u00ebsht\u00eb demonstruar n\u00eb distribucioni Debian 13, Rocky Linux 9, RHEL 9 dhe Ubuntu 24.04 me b\u00ebrthama 5.14, 6.6, 6.8 dhe 6.12. <\/p>\n

Vulnerabiliteti shkaktohet nga qasja n\u00eb memorin\u00eb e liruar tashm\u00eb n\u00eb kodin e rinovimit dinamik t\u00eb adresave SCTP (ASCONF). Arka ruan nj\u00eb tregues p\u00ebr transportin (asconf->transport) t\u00eb dh\u00ebn\u00eb n\u00eb paket\u00eb, por memoria e lidhur me k\u00ebt\u00eb tregues mund t\u00eb jet\u00eb e pastruar, duke vazhduar q\u00eb treguesi vet\u00eb t\u00eb p\u00ebrdoret p\u00ebr p\u00ebrpunimin e komandave t\u00eb tjera. Sulmi realizohet p\u00ebrmes d\u00ebrgimit n\u00eb nj\u00eb soket lokal t\u00eb nj\u00eb sekuence t\u00eb caktuar komandash ASCONF p\u00ebr rinovimin e adres\u00ebs: fillimisht d\u00ebrgohet paketa DEL-IP p\u00ebr t\u00eb hequr transportin p\u00ebr nj\u00eb IP t\u00eb caktuar, dhe menj\u00ebher\u00eb pas saj d\u00ebrgohet paketa DEL-IP me nj\u00eb mask\u00eb 0.0.0.0, ku p\u00ebrpunimi i saj do t\u00eb \u00e7oj\u00eb n\u00eb ribashkimin e treguesit mbetur. <\/p>\n

Dob\u00ebsia shkaktohet nga nj\u00eb gabim i b\u00ebr\u00eb 18 vite m\u00eb par\u00eb n\u00eb b\u00ebrtham\u00ebn 2.6.25 (viti 2008) dhe e korrigjuar n\u00eb l\u00ebshimet 6.6.148, 6.12.101, 6.18.42, 7.1.6 dhe 7.2-rc5. Statusi i rregullimit t\u00eb dob\u00ebsive n\u00eb distribucionet mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Gentoo, Arch, Fedora.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SCTP, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-64564), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u0440\u0430\u0431\u043e\u0442\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Debian 13, Rocky Linux 9, RHEL 9 \u0438 Ubuntu 24.04 \u0441 \u044f\u0434\u0440\u0430\u043c\u0438 5.14, 6.6, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182837","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SCTPhantom \u2014 nj\u00eb dob\u00ebsi n\u00eb b\u00ebrtham\u00ebn Linux q\u00eb ofron akses root dhe daljen nga kontejneri | ProHoster","description":"N\u00eb realizimin e protokollit SCTP, t\u00eb propozuar n\u00eb b\u00ebrtham\u00ebn Linux, \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi (CVE-2026-64564) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal t\u00eb fitoj\u00eb privilegje root n\u00eb sistem.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SCTPhantom \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 | ProHoster","og:description":"\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SCTP, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-64564), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/sctphantom-uyazvimost-v-yadre-linux-predostavlyayushhaya-root-dostup-i-vyhod-iz-kontejnera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-11T02:54:59+00:00","article:modified_time":"2026-08-11T02:54:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182837","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-11 06:43:47","updated":"2026-08-11 06:43:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182837","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=182837"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182837\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=182837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=182837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=182837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}