I modulen ksmbd, som omfattar en inbyggd Linux-k\u00e4rnimplementering av en filserver baserad p\u00e5 SMB-protokollet, har en kritisk s\u00e5rbarhet uppt\u00e4ckts som m\u00f6jligg\u00f6r fj\u00e4rrk\u00f6rning av kod med k\u00e4rnbeh\u00f6righeter. Attacken kan genomf\u00f6ras utan autentisering, f\u00f6rutsatt att modulen ksmbd \u00e4r aktiverad p\u00e5 systemet. Problemet uppst\u00e5r fr\u00e5n k\u00e4rnan 5.15, som sl\u00e4pptes i november 2021, och \u00e5tg\u00e4rdades utan mycket uppm\u00e4rksamhet i uppdateringar 5.15.61, 5.18.18 och 5.19.2, som skapades i augusti 2022. Eftersom CVE-identifieraren f\u00f6r problemet \u00e4nnu inte har tilldelats, finns det ingen exakt information om \u00e5tg\u00e4rder i distributioner \u00e4n. <\/p>\n
Detaljer om utnyttjandet av s\u00e5rbarheten avsl\u00f6jas \u00e4nnu inte, det \u00e4r bara k\u00e4nt att s\u00e5rbarheten orsakas av en referens till ett redan frigjort minnesomr\u00e5de (Use-After-Free) p\u00e5 grund av bristen p\u00e5 kontroll av objektets existens innan operationer utf\u00f6rs med det. Problemet \u00e4r relaterat till att minnet som tilldelades strukturen ksmbd_tree_connect frigjordes i funktionen smb2_tree_disconnect(), men en pekare anv\u00e4ndes fortfarande vid behandling av vissa externa f\u00f6rfr\u00e5gningar som inneh\u00f6ll kommandon SMB2_TREE_DISCONNECT. <\/p>\n
F\u00f6rutom den n\u00e4mnda s\u00e5rbarheten i ksmbd har \u00e4ven 4 mindre allvarliga problem \u00e5tg\u00e4rdats: <\/p>\n
St\u00f6d f\u00f6r SMB-serverdrift med hj\u00e4lp av ksmbd-modulen finns i Samba-paketet, fr\u00e5n version 4.16.0. Till skillnad fr\u00e5n en SMB-server som k\u00f6rs i anv\u00e4ndarutrymme, \u00e4r ksmbd mer effektiv n\u00e4r det g\u00e4ller prestanda, minnesanv\u00e4ndning och integration med k\u00e4rnans avancerade funktioner. Ksmbd presenteras som ett h\u00f6gpresterande och implementeringsklart till\u00e4gg till Samba f\u00f6r inbyggda enheter, som kan integreras med verktyg och bibliotek fr\u00e5n Samba vid behov. Kodens f\u00f6rfattare \u00e4r Namjae Jeon fr\u00e5n Samsung och Hyunchul Lee fr\u00e5n LG, medan k\u00e4rnans underh\u00e5llning hanteras av Steve French fr\u00e5n Microsoft, som \u00e4r huvudansvarig f\u00f6r CIFS\/SMB2\/SMB3-subsystemet i Linux-k\u00e4rnan och en l\u00e5ngvarig medlem av Samba-utvecklingsteamet, som har gjort ett betydande bidrag till implementeringen av SMB\/CIFS-protokollst\u00f6d i Samba och Linux. \u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 5.15, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430, \u0438 \u0431\u0435\u0437 \u043b\u0438\u0448\u043d\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106241","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00e5rbarhet i ksmbd-modulen i Linux-k\u00e4rnan som m\u00f6jligg\u00f6r fj\u00e4rrutf\u00f6rande av egen kod | ProHoster","description":"I ksmbd-modulen, som inkluderar en inbyggd Linux-k\u00e4rnl\u00f6sning f\u00f6r en SMB-baserad filserver, har en kritisk s\u00e5rbarhet uppt\u00e4ckts, vilket m\u00f6jligg\u00f6r fj\u00e4rrk\u00f6rning av skrivskyddad kod med k\u00e4rnr\u00e4ttigheter.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/uyazvimost-v-module-ksmbd-yadra-linux-pozvolyayushhaya-udalyonno-vypolnit-svoj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432 \u044f\u0434\u0440\u043e Linux \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/uyazvimost-v-module-ksmbd-yadra-linux-pozvolyayushhaya-udalyonno-vypolnit-svoj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-23T07:36:47+00:00","article:modified_time":"2022-12-23T07:36:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/106241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=106241"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/106241\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=106241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=106241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=106241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"