Likotsi tse peli li se li fumanoe ho Linux kernel (CVE-2023-1281, CVE-2023-1829) e lumellang mosebelisi oa lehae ho phahamisa litokelo tsa bona tsamaisong. Ho etsa tlhaselo, ho hlokahala tumello ea ho theha le ho fetola lihlopha tsa sephethephethe, tse fumanehang ka litokelo tsa CAP_NET_ADMIN, tse ka fumanoang ka bokhoni ba ho theha libaka tsa mabitso a basebelisi. Mathata a hlahile ho qala ho kernel 4.14 mme a lokisoa lekaleng la 6.2.
Bofokoli bo bakoa ke phihlello ea mohopolo ka mor'a hore e lokolloe (ho sebelisa-mora-mahala) khoutu ea tcindex traffic classifier, e leng karolo ea QoS (Boleng ba tšebeletso) subsystem ea Linux kernel. Kotsi ea pele e etsahala ka lebaka la maemo a morabe ha ho nchafatsoa li-filters tsa hash, 'me ts'oaetso ea bobeli e etsahala ha ho hlakoloa sefe e nepahetseng ea hash. U ka lekola litokiso ho phano ea maqephe a latelang: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Gentoo, Arch. Ho thibela tšebeliso e mpe ea tlokotsi ka ho sebelisa mokhoa oa ho sebetsa, o ka tima bokhoni ba ho theha libaka tsa mabitso ke basebelisi ba se nang monyetla ("sudo sysctl -w kernel.unprivileged_userns_clone=0").
Source: opennet.ru