N\u00eb n\u00ebn-sistemin eBPF, i cili mund\u00ebson ekzekutimin e p\u00ebrpunuesve p\u00ebr gjurmim, analiz\u00eb t\u00eb funksionimit t\u00eb n\u00ebn-sistemeve dhe menaxhim trafiku brenda kernelit Linux n\u00eb nj\u00eb makin\u00eb virtuale t\u00eb posa\u00e7me me JIT, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2021-29154) q\u00eb i lejon nj\u00eb p\u00ebrdoruesi lokal t\u00eb arrij\u00eb ekzekutimin e kodit t\u00eb vet n\u00eb nivelin e kernelit. Problemi prek versionet deri te 5.11.12 (p\u00ebrfshir\u00eb) dhe ende nuk \u00ebsht\u00eb korrigjuar n\u00eb distribucione (Debian, Ubuntu, RHEL, Fedora, SUSE, Arch). Rregullimi \u00ebsht\u00eb i disponuesh\u00ebm n\u00eb form\u00ebn e nj\u00eb patch-i. <\/p>\n
Sipas studiuesve q\u00eb zbuluan dob\u00ebsin\u00eb, atyre u ka dal\u00eb t\u00eb zhvillojn\u00eb nj\u00eb prototip funksional exploit-i p\u00ebr sisteme x86 32-bit dhe 64-bit, i cili mund t\u00eb p\u00ebrdoret nga nj\u00eb p\u00ebrdorues pa privilegje. Nga ana tjet\u00ebr, Red Hat thekson se rrezikshm\u00ebria e problemit varet nga disponueshm\u00ebria e thirrjes s\u00eb sistemit eBPF p\u00ebr p\u00ebrdoruesin. P\u00ebr shembull, n\u00eb RHEL dhe n\u00eb shumic\u00ebn e distribucioneve t\u00eb tjera Linux, n\u00eb konfigurimin e parazgjedhur dob\u00ebsia mund t\u00eb shfryt\u00ebzohet n\u00ebse BPF JIT \u00ebsht\u00eb i aktivizuar dhe p\u00ebrdoruesi ka t\u00eb drejtat CAP_SYS_ADMIN. Si mas\u00eb mbrojt\u00ebse e p\u00ebrkohshme rekomandohet \u00e7aktivizimi i BPF JIT me komand\u00ebn: echo 0 > \/proc\/sys\/net\/core\/bpf_jit_enable <\/p>\n
Problemi shkaktohet nga nj\u00eb gabim n\u00eb llogaritjen e zhvendosjes p\u00ebr komandat e deg\u00ebzimit gjat\u00eb procesit t\u00eb gjenerimit t\u00eb kodit makinerik nga JIT-kompiluesi. Konkretisht, gjat\u00eb gjenerimit t\u00eb instruksioneve t\u00eb deg\u00ebzimit nuk merret parasysh se zhvendosja mund t\u00eb ndryshoj\u00eb pas kalimit t\u00eb faz\u00ebs s\u00eb optimizimit. Kjo mang\u00ebsi mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb formuar kod makinerik anormal dhe p\u00ebr ta ekzekutuar at\u00eb n\u00eb nivelin e kernelit. <\/p>\n
Vlen t\u00eb theksohet se kjo nuk \u00ebsht\u00eb dob\u00ebsia e vetme n\u00eb n\u00ebn-sistemin eBPF koh\u00ebt e fundit. N\u00eb fund t\u00eb marsit n\u00eb kernel u zbuluan edhe dy dob\u00ebsi t\u00eb tjera (CVE-2020-27170, CVE-2020-27171), t\u00eb cilat krijojn\u00eb mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb eBPF p\u00ebr t\u00eb anashkaluar mbrojtjen ndaj dob\u00ebsive t\u00eb klas\u00ebs Spectre, duke b\u00ebr\u00eb t\u00eb mundur p\u00ebrcaktimin e p\u00ebrmbajtjes s\u00eb memories s\u00eb kernelit si rezultat i krijimit t\u00eb kushteve p\u00ebr ekzekutim spekulativ t\u00eb disa operacioneve. P\u00ebr nj\u00eb sulm Spectre k\u00ebrkohet prania n\u00eb kodin e privilegjuar e nj\u00eb sekuence t\u00eb caktuar komandash q\u00eb \u00e7ojn\u00eb n\u00eb ekzekutim spekulativ t\u00eb instruksioneve. N\u00eb eBPF jan\u00eb gjetur disa m\u00ebnyra p\u00ebr gjenerimin e instruksioneve t\u00eb tilla p\u00ebrmes manipulimeve me programet BPF t\u00eb d\u00ebrguara p\u00ebr ekzekutim. <\/p>\n
Cenueshm\u00ebria CVE-2020-27170 shkaktohet nga manipulimet me pointer\u00eb n\u00eb verifikuesin BPF, t\u00eb cilat nxisin operacione spekulative t\u00eb qasjes n\u00eb nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb buffer-it. Cenueshm\u00ebria CVE-2020-27171 lidhet me nj\u00eb gabim n\u00eb aritmetik\u00ebn e numrave t\u00eb plot\u00eb (integer underflow) gjat\u00eb pun\u00ebs me pointer\u00eb, q\u00eb \u00e7on n\u00eb qasje spekulative te t\u00eb dh\u00ebnat jasht\u00eb buffer-it. K\u00ebto probleme tashm\u00eb jan\u00eb korrigjuar n\u00eb versionet e kernelit 5.11.8, 5.10.25, 5.4.107, 4.19.182 dhe 4.14.227, si edhe jan\u00eb p\u00ebrfshir\u00eb n\u00eb p\u00ebrdit\u00ebsimet e kernelit t\u00eb shumic\u00ebs s\u00eb shp\u00ebrndarjeve Linux. Studiuesit kan\u00eb p\u00ebrgatitur nj\u00eb prototip exploit q\u00eb i lejon nj\u00eb p\u00ebrdoruesi pa privilegje t\u00eb nxjerr\u00eb t\u00eb dh\u00ebna nga memoria e kernelit. \u0412 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 eBPF, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u044f\u0434\u0440\u0430 Linux \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0441 JIT, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-29154), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 5.11.12 (\u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e) \u0438 \u0435\u0449\u0451 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 (Debian, Ubuntu, RHEL, Fedora, SUSE, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99693","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cenueshm\u00ebri n\u00eb n\u00ebnsistemin eBPF t\u00eb kernelit Linux | ProHoster","description":"N\u00eb n\u00ebnsistemin eBPF, q\u00eb mund\u00ebson ekzekutimin e p\u00ebrpunuesve p\u00ebr gjurmim, analiz\u00eb t\u00eb funksionimit t\u00eb n\u00ebnsistemeve dhe menaxhim t\u00eb trafikut, t\u00eb cil\u00ebt ekzekutohen brenda kernelit Linux n\u00eb nj\u00eb makin\u00eb virtuale t\u00eb posa\u00e7me me JIT, \u00ebsht\u00eb zbuluar nj\u00eb cenueshm\u00ebri.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-podsisteme-ebpf-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 eBPF \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u0412 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 eBPF, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u043b\u044f \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u044f\u0434\u0440\u0430 Linux \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0441 JIT, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-podsisteme-ebpf-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-09T14:22:51+00:00","article:modified_time":"2021-04-09T14:22:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99693","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-09 14:30:13","updated":"2022-09-30 04:24:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=99693"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99693\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=99693"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=99693"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=99693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"