Ho ba kotsing ts'ebetsong ea socket ea AF_PACKET ea Linux kernel

Lilemo tse tharo ka mor'a leqhubu la bofokoli (1, 2, 3, 4, 5) ho AF_PACKET subsystem ea Linux kernel tsebahatsoa bothata bo bong hape (CVE-2020-14386), e lumellang mosebelisi ea se nang tokelo ea lehae hore a phethe khoutu joalo ka motso kapa a tsoe ka har'a lijana tse ka thoko haeba a na le phihlello ea metso.

Ho theha sokete ea AF_PACKET le ho sebelisa monyetla oa ho ba tlokotsing ho hloka litokelo tsa CAP_NET_RAW. Leha ho le joalo, tumello e boletsoeng e ka fumanoa ke mosebelisi ea se nang tokelo ka har'a linkho tse entsoeng ho litsamaiso tse nang le ts'ehetso ea libaka tsa mabitso tsa basebelisi tse lumelletsoeng. Mohlala, libaka tsa mabitso a basebelisi li nolofalloa ka ho sa feleng ho Ubuntu le Fedora, empa ha li sebelisoe ho Debian le RHEL. Ho Android, ts'ebetso ea mediaserver e na le tokelo ea ho theha li-sockets tsa AF_PACKET, tseo ho tsona ho ka sebelisoang hampe.

Kotsi e teng tšebetsong ea tpacket_rcv 'me e bakoa ke phoso ha ho baloa phapang ea netoff. Motho ea hlaselang a ka theha maemo ao ho ona ho feto-fetohang ha netoff ho ngolloang boleng bo ka tlase ho maclen variable, e tla baka ho phalla ha ho bala "macoff = netoff - maclen" 'me ka mor'a moo ho behoa pointer ka phoso ho buffer bakeng sa data e kenang. Ka lebaka leo, mohlaseli a ka qala ho ngola ho tloha ho li-byte tse 1 ho isa ho tse 10 ho ea sebakeng se ka nqane ho moeli oa buffer e fanoeng. Hoa hlokomeloa hore ts'ebetso e nts'etsopele e u lumellang ho fumana litokelo tsa metso tsamaisong.

Bothata bo bile teng ka har'a kernel ho tloha ka July 2008, i.e. e iponahatsa ka har'a li-nuclei tsohle tsa 'nete. Tokiso e fumaneha hajoale joalo ka patch. U ka latela ho fumaneha ha lintlafatso tsa sephutheloana likhatisong maqepheng a latelang: Botho, Fedora, sebelisa, Debian, RHEL, Arch.

Source: opennet.ru

Eketsa ka tlhaloso