Ho ba kotsing ka har'a kernel ea Linux e ka bakang ho oa ka ho romella pakete ea UDP

Ka kernel ea Linux tsebahatsoa tlokotsi (CVE-2019-11683), e leng se u lumellang ho etsa hore motho a hane tšebeletso ka thōko ka ho romela lipakete tsa UDP tse entsoeng ka ho khetheha (pakete ea lefu). Bothata bo bakoa ke phoso ho udp_gro_receive_segment handler (net/ipv4/udp_offload.c) ka ts'ebetsong ea theknoloji ea GRO (Generic Receive Offload) 'me e ka lebisa tšenyo ho likahare tsa libaka tsa memori ea kernel ha ho sebetsa lipakete tsa UDP tse nang le zero padding. (moroalo o se nang letho).

Bothata bo ama kernel feela 5.0kaha tšehetso ea GRO bakeng sa li-sockets tsa UDP e ne e kenngwa tshebetsong ka Pulungoana selemong se fetileng mme o khonne ho kena tokollong ea morao-rao e tsitsitseng ea kernel. Theknoloji ea GRO e u lumella ho potlakisa ts'ebetso ea palo e kholo ea lipakete tse kenang ka ho kopanya lipakete tse ngata ho li-block tse kholo tse sa hlokeng ts'ebetso e arohaneng ea pakete ka 'ngoe.
Bakeng sa TCP, bothata ha bo hlahe, kaha protocol ena ha e tšehetse ho bokellana ha liphutheloana ntle le tefo.

Bofokoli ho fihlela joale bo lokisitsoe ka mokhoa feela patch, ntlafatso ea tokiso ha e so phatlalatsoe (ntlafatso ea maobane 5.0.11 fix ha e kenyelelitsoe). Ho tsoa ho lisebelisoa tsa kabo, kernel 5.0 e khonne ho kenyelletsoa ho Fedora 30, Ubuntu 19.04, Arch Linux, Gentoo le likhatiso tse ling tse ntseng li ntlafatsoa khafetsa. Debian, Ubuntu 18.10 le pejana, RHEL/CentOS и SUSE/openSUSE bothata ha bo ame.

Bothata bo ile ba fumanoa ka lebaka leo ho sebelisoa Sistimi e itirisang ea ho etsa liteko tsa bohlanya e entsoeng ke Google syzbot le analyzer KASANANE (KernelAddressSanitizer), e reretsoeng ho khetholla liphoso ha u sebetsa ka mohopolo le lintlha tsa phihlello e fosahetseng ea mohopolo, joalo ka ho fihlella libaka tsa memori tse lokolotsoeng le ho beha khoutu libakeng tsa memori tse sa rereloang ho qhekella joalo.

Source: opennet.ru

Eketsa ka tlhaloso