F\u00f6retaget ARM har avsl\u00f6jat information om tre s\u00e5rbarheter i drivrutiner f\u00f6r sina GPU:er som anv\u00e4nds i Android, ChromeOS och Linux-distributioner. S\u00e5rbarheterna till\u00e5ter en icke-privilegierad lokal anv\u00e4ndare att k\u00f6ra sin kod med k\u00e4rnr\u00e4ttigheter. I oktober m\u00e5nads s\u00e4kerhetsrapport f\u00f6r Android-plattformen n\u00e4mns att en av s\u00e5rbarheterna (CVE-2023-4211) redan har utnyttjats av angripare i aktiva exploateringar f\u00f6r att utf\u00f6ra riktade attacker (0-day) innan en l\u00f6sning publicerades. Till exempel kan s\u00e5rbarheten anv\u00e4ndas i skadliga applikationer som sprids via tvivelaktiga k\u00e4llor f\u00f6r att f\u00e5 full tillg\u00e5ng till systemet och installera komponenter som spionerar p\u00e5 anv\u00e4ndaren. <\/p>\n
Identifierade s\u00e5rbarheter: <\/p>\n
En l\u00f6sning erbjuds ocks\u00e5 i septemberuppdateringarna av Chrome OS-versionerna 114\/115\/116 och oktoberuppdateringen av Android. De s\u00e5rbara GPU-modellerna anv\u00e4nds i smartphones som Google Pixel 7, Samsung S20 och S21, Motorola Edge 40, OnePlus Nord 2, Asus ROG Phone 6, Redmi Note 11 och 12, Honor 70 Pro, RealMe GT, Xiaomi 12 Pro, Oppo Find X5 Pro, Reno 8 Pro och vissa enheter med Mediatek-chips. <\/p>\n
I den oktobers rapporten om s\u00e5rbarheter i Android n\u00e4mns totalt 53 s\u00e5rbarheter, varav 5 har tilldelats kritisk fara och resten h\u00f6g fara. Kritiska problem m\u00f6jligg\u00f6r fj\u00e4rrattacker f\u00f6r att k\u00f6ra kod i systemet. Problem m\u00e4rkta som farliga m\u00f6jligg\u00f6r kodexekvering genom manipulerade lokala applikationer i kontexten av privilegierade processer. Tre kritiska problem (CVE-2023-24855, CVE-2023-28540 och CVE-2023-33028) har uppt\u00e4ckts i propriet\u00e4ra komponenter fr\u00e5n Qualcomm och tv\u00e5 (CVE-2023-40129, CVE-2023-4863) i systemet (i libwebp och Bluetooth-stacken). Totalt har 5 s\u00e5rbarheter uppt\u00e4ckts i ARM-komponenter, MediaTek \u2014 3, Unisoc \u2014 1 och Qualcomm \u2014 17 (rapport fr\u00e5n Qualcomm). Tv\u00e5 s\u00e5rbarheter (en i ARM GPU och en i libwebp) har markerats som redan anv\u00e4nda av angripare i sina exploiter (0-day). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ARM \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 GPU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 Android, ChromeOS \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-4211) \u0443\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110410","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00e5rbarheter i ARM GPU-drivrutinen, som redan anv\u00e4nds f\u00f6r attacker | ProHoster","description":"F\u00f6retaget ARM har avsl\u00f6jat uppgifter om tre s\u00e5rbarheter i drivrutiner f\u00f6r sina GPU:er som anv\u00e4nds i Android, ChromeOS och Linux-distributioner.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/uyazvimosti-v-drajvere-k-gpu-arm-uzhe-primenyaemye-dlya-soversheniya-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u043a GPU ARM, \u0443\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ARM \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 GPU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 Android, ChromeOS \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/uyazvimosti-v-drajvere-k-gpu-arm-uzhe-primenyaemye-dlya-soversheniya-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-04T06:10:47+00:00","article:modified_time":"2023-10-04T06:10:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/110410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=110410"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/110410\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=110410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=110410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=110410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"