Kompania Anthropic publikoi informacion rreth nj\u00eb dob\u00ebsie kritike (CVE-2026-98432) n\u00eb stek\u00ebn TCP t\u00eb b\u00ebrtham\u00ebs Linux, e cila lejon ekzekutimin e kodit n\u00eb distanc\u00eb p\u00ebrmes d\u00ebrgimit t\u00eb paketave t\u00eb p\u00ebrpunuara n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb. \u00cbsht\u00eb deklaruar se nj\u00eb eksploit i pun\u00ebsuar \u00ebsht\u00eb krijuar, i cili lejon ekzekutimin e kodit n\u00eb nivelin e b\u00ebrtham\u00ebs dhe marrjen e t\u00eb drejtave root n\u00eb sistem n\u00eb m\u00ebnyr\u00eb t\u00eb distancuar. Eksploiti i p\u00ebrgatitur \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm p\u00ebr t\u00eb sulmuar sistemet me procese serverash q\u00eb pranojn\u00eb lidhje p\u00ebrmes sockeve rrjet\u00ebrore, t\u00eb cilat mb\u00ebshtesin p\u00ebrdorimin e protokollit MPTCP (Multipath TCP). Mb\u00ebshtetja p\u00ebr MPTCP mund t\u00eb aktivizohet n\u00eb lidhje me sockeve t\u00eb ve\u00e7ant\u00eb rrjetesh, e cila b\u00ebhet p\u00ebr defaut n\u00eb bibliotek\u00ebn standarde t\u00eb gjuh\u00ebs Go, duke filluar nga versioni Go 1.24 (shkurt 2025). <\/p>\n
Eksploiti i p\u00ebrgatitur mund t\u00eb aplikohet n\u00eb p\u00ebrdorimin e \u00e7do aplikacioni serveri n\u00eb gjuh\u00ebn Go, duke p\u00ebrfshir\u00eb serverin HTTP Caddy, n\u00ebse ka mund\u00ebsin\u00eb e d\u00ebrgimit t\u00eb paketave rrjet\u00ebrore n\u00eb soketin e d\u00ebgjuar t\u00eb krijuar nga ata. Duke qen\u00eb se dob\u00ebsia \u00ebsht\u00eb e pranishme direkt n\u00eb stek\u00ebn IPv4 dhe nuk \u00ebsht\u00eb specifike p\u00ebr MPTCP, nuk p\u00ebrjashtohet krijimi i eksploiteve q\u00eb funksionojn\u00eb pa u lidhur me MPTCP, por eksploite t\u00eb tilla nuk jan\u00eb demonstruar ende. P\u00ebr shembull, \u00ebsht\u00eb e mundur t\u00eb shfryt\u00ebzohet dob\u00ebsia gjat\u00eb p\u00ebrpunimit t\u00eb k\u00ebrkesave p\u00ebr migrimin e sockeve, e cila \u00ebsht\u00eb e disponueshme n\u00eb konfigurimet me parametrin net.ipv4.tcp_migrate_req=1 ose duke p\u00ebrdorur programe eBPF me opsionin BPF_SK_REUSEPORT_SELECT_OR_MIGRATE.<\/p>\n
Vulnerabiliteti shkaktohet nga nj\u00eb gjendje garash q\u00eb ndodh gjat\u00eb trajtimit t\u00eb p\u00ebrbashk\u00ebt t\u00eb k\u00ebrkesave SYN t\u00eb d\u00ebrguara p\u00ebr t\u00eb instaluar nj\u00eb lidhje TCP. Pasi funksioni tcp_v4_syn_recv_sock() kalon paramet\u00ebr nga struktura ireq->ireq_opt n\u00eb soketin f\u00ebmij\u00eb p\u00ebrmes referenc\u00ebs dhe jo p\u00ebrmes kopjimit, n\u00eb disa rrethana krijohet nj\u00eb situat\u00eb ku memoria p\u00ebr strukturat inet_opt dhe ireq_opt me parametrat e soketit \u00ebsht\u00eb already \u00e7liruar, por opsionet e lidhura me to vazhdojn\u00eb t\u00eb p\u00ebrdoren (p\u00ebrdorim pas lirimit). <\/p>\n
Eksplorimi i larg\u00ebt realizohet p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb serie k\u00ebrkesash rrjeti t\u00eb sinkronizuara me koh\u00ebn. Eksploiti i krijuar \u00ebsht\u00eb i aplikuesh\u00ebm gjithashtu p\u00ebr b\u00ebrthamat ku p\u00ebrdoret adres\u00eb randomizimi (KASLR), por t\u00eb r\u00ebnies n\u00eb dritaren e gjendjes s\u00eb gar\u00ebs k\u00ebrkon nj\u00eb koh\u00eb t\u00eb konsiderueshme dhe nj\u00eb num\u00ebr t\u00eb madh p\u00ebrpjekjesh. Leht\u00ebsimi i eksploitit \u00ebsht\u00eb se d\u00ebshtimi n\u00eb dritaren e gjendjes s\u00eb gar\u00ebs rezulton vet\u00ebm n\u00eb r\u00ebnien e seanc\u00ebs s\u00eb instalimit t\u00eb lidhjes (handshake) dhe jo n\u00eb crash-in e b\u00ebrtham\u00ebs, duke lejuar p\u00ebrpjekje t\u00eb pafundme. N\u00eb prototipin e krijuar t\u00eb eksploitit, nevojitej rreth nj\u00eb or\u00eb \u2014 48 minuta p\u00ebr t\u00eb p\u00ebrcaktuar ndarjen e memories dhe 5 minuta t\u00eb tjera p\u00ebr t\u00eb organizuar ekzekutimin e kodit. <\/p>\n
T\u00eb dh\u00ebnat q\u00eb bllokojn\u00eb garantuar p\u00ebr t\u00eb anashkaluar vulnerabilitetin ende nuk jan\u00eb paraqitur \u2014 si opsioni i vet\u00ebm i besuesh\u00ebm \u00ebsht\u00eb sugjeruar t\u00eb instalohet p\u00ebrdit\u00ebsimi i b\u00ebrtham\u00ebs. Problemi ndodhet q\u00eb nga b\u00ebrthama Linux 4.4 dhe \u00ebsht\u00eb eliminuar n\u00eb versionet 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10 dhe 7.3. Statusi i eliminimit t\u00eb vulnerabiliteteve n\u00eb distribucione mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Debian, Ubuntu, SUSE\/openSUSE, RHEL, Gentoo, Arch.
\nFedora. <\/p>\n
Nga rekomandimet p\u00ebr t\u00eb kund\u00ebrshtuar metoda t\u00eb caktuara t\u00eb eksploatimit, t\u00eb cilat nuk bllokojn\u00eb vulnerabilitetin n\u00eb form\u00ebn e p\u00ebrgjithshme, mund t\u00eb theksojm\u00eb \u00e7aktivizimin e mb\u00ebshtetjes MPTCP dhe vendosjen e parametrave t\u00eb sysctl t\u00eb b\u00ebrtham\u00ebs net.ipv4.tcp_migrate_req n\u00eb vler\u00ebn 0:<\/p>\n
sysctl -w net.mptcp.enabled=0
\n sysctl -w net.ipv4.tcp_migrate_req=0<\/p>\n
P\u00ebr t\u00eb p\u00ebrcaktuar n\u00ebse n\u00eb sistem ka procese q\u00eb p\u00ebrdorin sokete me
\nMPTCP, mund t\u00eb p\u00ebrdoren komandat:<\/p>\n
ip mptcp endpoint show
\n ip mptcp limits show<\/p>\n
P\u00ebr t\u00eb \u00e7aktivizuar mb\u00ebshtetje MPTCP n\u00eb programet e gjuh\u00ebs Go, duhet t\u00eb p\u00ebrdoret flaga \"multipathtcp=0\", p\u00ebr vendosjen e s\u00eb cil\u00ebs mund t\u00eb vendoset variabla e mjedisit \"GODEBUG=multipathtcp=0\". P\u00ebr t\u00eb \u00e7aktivizuar mb\u00ebshtetje MPTCP n\u00eb faz\u00ebn e nd\u00ebrtimit, mund t\u00eb shtohet \"godebug multipathtcp=0\" n\u00eb skedarin e modulit go.mod. N\u00eb kodin e aplikacionit, mund t\u00eb \u00e7aktivizohet p\u00ebrdorimi i MPTCP-s\u00eb p\u00ebrmes funksioneve net.Dialer.SetMultipathTCP dhe net.ListenConfig.SetMultipathTCP.<\/p>\n
P\u00ebrve\u00e7 problemi t\u00eb discutuar, kompania Anthropic gjithashtu njoftoi nj\u00eb s\u00ebr\u00eb dob\u00ebsish t\u00eb p\u00ebrdorura lokalisht n\u00eb b\u00ebrtham\u00ebn Linux, OpenBSD dhe FreeBSD, t\u00eb cilat lejojn\u00eb p\u00ebrfitimin e t\u00eb drejtave root n\u00eb sistem dhe daljen jasht\u00eb konteiner\u00ebve t\u00eb izoluar; dob\u00ebsit\u00eb n\u00eb Chrome dhe Safari, q\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit n\u00eb sistem kur hapen faqe web-i t\u00eb dizajnuara posa\u00e7\u00ebrisht; nj\u00eb dob\u00ebsi n\u00eb b\u00ebrtham\u00ebn Windows, q\u00eb shkakton mbyllje t\u00eb papritur; nj\u00eb dob\u00ebsi n\u00eb platform\u00ebn Android, q\u00eb lejon anashkalimin e bllokimit t\u00eb ekranit dhe qasjen n\u00eb informacione personale dhe fotografi pa zhbllokimin e pajisjes (sulmi demonstrohet n\u00eb smartphone-in Google Pixel 9).<\/p>\n
P\u00ebr t\u00eb ndryshuar konfigurimin, nuk \u00ebsht\u00eb e nevojshme t\u00eb d\u00ebrgoni trupin e k\u00ebrkes\u00ebs n\u00eb formatin <\/p>\n