Ho na le ts'oaetso (CVE-2022-2590) ho kernel ea Linux, e lumellang mosebelisi ea se nang tokelo ho fetola lifaele tsa 'mapa oa mohopolo (mmap) le lifaele ho tmpfs ntle le ho ba le litokelo tsa ho ngola, le ho phahamisa litokelo tsa bona tsamaisong. . Bothata bo khethiloeng bo tšoana ka mofuta oa ts'oaetso ea Dirty COW, empa bo fapane ka hore bo lekanyelitsoe feela le tšusumetso ho data mohopolong o arolelanoang (shmem / tmpfs). Bothata bo ka boela ba sebelisoa ho fetola lifaele tse sebetsang tse sebelisang mohopolo o arolelanoang.
Bothata bo bakoa ke boemo ba morabe tsamaisong e nyenyane ea tsamaiso ea memori e hlahang ha ho sebetsana le mokhelo (phoso) e lahliloeng ha u leka ho ngola phihlello ea libaka tsa ho bala feela mohopolong o arolelanoang o bonts'itsoeng ka mokhoa oa COW (copy-on-write mapping). Bothata bo hlaha ho tloha ho kernel 5.16 ho litsamaiso tse nang le x86-64 le meralo ea aarch64 ha ho hahoa kernel ka khetho ea CONFIG_USERFAULTFD=y. Ho ba kotsing ho ile ha lokisoa tokollong ea 5.19. Mohlala oa ts'ebetso e reriloeng ho phatlalatsoa ka la 15 Phato.
Source: opennet.ru