Greg Kroah-Hartman, ea ikarabellang bakeng sa ho boloka lekala le tsitsitseng la Linux kernel, o ile a etsa qeto ea ho thibela ho amoheloa ha liphetoho leha e le life tse tsoang Univesithing ea Minnesota ho ea Linux kernel, le ho khutlisetsa morao lipache tsohle tse neng li amoheloa pele le ho li hlahloba bocha. Lebaka la ho thibela e ne e le mesebetsi ea sehlopha sa lipatlisiso se ithutang monyetla oa ho khothalletsa bofokoli bo patiloeng ho khoutu ea merero e bulehileng. Sehlopha sena se ile sa fana ka lipache tse nang le mefuta e fapaneng ea litšitšili, sa bona maikutlo a sechaba, 'me sa ithuta mekhoa ea ho qhekella ha ho etsoa liphetoho. Ho ea ka Greg, ho etsa liteko tse joalo ho hlahisa liphetoho tse lonya ha ho amohelehe ebile ha hoa loka.
Lebaka la ho thibela e ne e le hore litho tsa sehlopha sena li rometse patch e kentseng cheke ea pointer ho felisa mohala o ka bang habeli oa mosebetsi oa "mahala". Ho latela moelelo oa tšebeliso ea sesupo, cheke e ne e se na thuso. Sepheo sa ho fana ka patch e ne e le ho bona hore na phetoho e fosahetseng e tla hlahlojoa ke baetsi ba kernel. Ntle le patch ena, liteko tse ling tsa bahlahisi ba tsoang Univesithing ea Minnesota li hlahile ho etsa liphetoho tse belaetsang kernel, ho kenyelletsa le tse amanang le tlatsetso ea bofokoli bo patiloeng.
Morupeluoa ea rometseng li-patches o ile a leka ho ikemela ka ho re o ntse a leka tlhahlobo e ncha ea static mme phetoho e lokiselitsoe ho latela liphello tsa tlhahlobo ho eona. Empa Greg o ile a hlokomelisa taba ea hore litokiso tse reriloeng ha li tloaelehe bakeng sa liphoso tse bonoang ke bahlahlobisisi ba static, mme lipache tsohle tse rometsoeng ha li lokise letho ho hang. Ka lebaka la hore sehlopha sa lipatlisiso se buuoang se lekile ho sutumelletsa liphahlo bakeng sa bofokoli bo patiloeng nakong e fetileng, ho hlakile hore ba tsoetse pele ka liteko tsa bona le sechaba sa ntlafatso ea kernel.
Hoa thahasellisa hore nakong e fetileng, moetapele oa sehlopha se neng se etsa liteko o ne a ameha ho ts'oara bofokoli ka molao, mohlala, ho tsebahatsa ho lutla ha tlhahisoleseling ho USB stack (CVE-2016-4482) le subsystem ea marang-rang (CVE-2016-4485) . Phuputsong e mabapi le phatlalatso ea ts'oaetso ea "stealth vulnerability", sehlopha se tsoang Univesithing ea Minnesota se fana ka mohlala oa CVE-2019-12819, tlokotsi e bakiloeng ke kernel patch e lokollotsoeng ka 2014. Tokiso e ekelitse mohala ho put_device sebakeng sa ho sebetsana le phoso ho mdio_bus, empa lilemo tse hlano hamorao ho ile ha hlaha hore ho qhekella ho joalo ho lebisa ho phihlello ea memori ka mor'a hore e lokolloe ("use-after-free").
Ka nako e ts'oanang, bangoli ba thuto ba bolela hore mosebetsing oa bona ba ile ba akaretsa lintlha tsa li-patches tsa 138 tse hlahisitseng liphoso 'me li ne li sa amane le barupeluoa ba thuto. Boiteko ba ho romella lipache tsa bona ka liphoso bo ne bo lekanyelitsoe mangolong a lengolo-tsoibila, 'me liphetoho tse joalo ha lia ka tsa kena Git (haeba, ka mor'a ho romela patch ka imeile, mohlokomeli o ne a nka patch e tloaelehileng, joale o ile a kōptjoa hore a se ke a kenyelletsa phetoho ho tloha moo. e ne e le phoso, ka mor'a moo ba romela patch e nepahetseng).
Keketso ea 1: Ho latela tšebetso ea sengoli sa patch e nyatsitsoeng, esale a romella li-patches ho li-subsystem tse fapaneng tsa kernel ka nako e telele. Mohlala, morao tjena bakhanni ba radeon le nouveau ba amohetse liphetoho ka mohala ho pm_runtime_put_autosuspend(dev->dev) sebakeng sa phoso, mohlomong se entseng hore buffer e sebelisoe kamora ho lokolla mohopolo o amanang le eona.
Sehlomathiso sa 2: Greg o khutlisitse boitlamo bo 190 bo amanang le "@umn.edu" mme o qalisitse tlhahlobo ea bona hape. Bothata ke hore litho tse nang le liaterese tsa "@umn.edu" ha lia leka feela ho sututsa likhechana tse belaetsang, empa li boetse li lokiselitse bofokoli ba 'nete, 'me liphetoho tse khutlelang morao li ka etsa hore mathata a ts'ireletso a neng a kile a lokisoa a khutle. Bahlokomeli ba bang ba se ba hlahlobile liphetoho tse khutlisitsoeng 'me ha ba fumane mathata, empa e mong oa bahlokomeli o bontšitse hore e' ngoe ea lipache tse rometsoeng ho eena e na le liphoso.
Source: opennet.ru