{"id":182595,"date":"2026-07-10T22:54:14","date_gmt":"2026-07-10T20:54:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup"},"modified":"2026-07-10T22:54:14","modified_gmt":"2026-07-10T20:54:14","slug":"v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","title":{"rendered":"En s\u00e5rbarhet, GhostLock, har avsl\u00f6jats i Linux som m\u00f6jligg\u00f6r root\u00e5tkomst","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/i><\/a>
1 <\/p>\n

Det har uppt\u00e4ckts en s\u00e5rbarhet i Linux-k\u00e4rnan CVE-2026-43499<\/a>, som f\u00e5tt det inofficiella namnet GhostLock. Problemet p\u00e5verkar koden f\u00f6r rtmutex och mekanismen f\u00f6r futex med prioriterarv, och dess utnyttjande kan l\u00e5ta en lokal oprivilegierad anv\u00e4ndare h\u00f6ja sina r\u00e4ttigheter till root. Enligt AlmaLinux<\/a>, kan s\u00e5rbarheten \u00e4ven utnyttjas fr\u00e5n en container f\u00f6r att f\u00e5 tillg\u00e5ng till v\u00e4rden om systemet k\u00f6r en icke uppdaterad k\u00e4rna.<\/p>\n

<\/noindex> <\/p>\n

Felet \u00e4r relaterat till funktionen remove_waiter() i kernel\/locking\/rtmutex.c. Som anges i NVD-beskrivningen<\/a>, vid \u00e5terst\u00e4llning av proxy-lock i scenariot futex_requeue() arbetade funktionen med den aktuella uppgiften (current), trots att den skulle ha rensat tillst\u00e5ndet f\u00f6r den uppgift som faktiskt v\u00e4ntade p\u00e5 l\u00e5sningen (waiter::task). Detta resulterade i att tillst\u00e5ndet pi_blocked_on inte kunde rensas korrekt, vilket l\u00e4mnade en h\u00e4ngande pekare och skapade f\u00f6ruts\u00e4ttningar f\u00f6r use-after-free.<\/p>\n

<\/noindex> <\/p>\n

Forskare fr\u00e5n Nebula Security beskrev GhostLock<\/a> som ett fel som funnits i de huvudsakliga Linux-distributionerna sedan 2011. Den offentliga diskussionen om s\u00e5rbarheten har \u00f6kat risken f\u00f6r servrar och container-milj\u00f6er: CloudLinux<\/a> varnar s\u00e4rskilt f\u00f6r att det redan finns ett offentligt proof-of-concept f\u00f6r CVE-2026-43499, s\u00e5 administrat\u00f6rer b\u00f6r inte skjuta upp k\u00e4rnuppdateringen.<\/p>\n

<\/noindex> <\/p>\n

Fixen i upstream inneb\u00e4r att remove_waiter() ska anv\u00e4nda waiter::task ist\u00e4llet f\u00f6r current i alla relaterade operationer. Detta anges ocks\u00e5 av GitHub Advisory Database<\/a>, d\u00e4r konsekvenserna av felet listas: felaktig borttagning fr\u00e5n rbtree utan r\u00e4tt l\u00e5sning, ofriserat tillst\u00e5nd pi_blocked_on och att rt_mutex_adjust_prio_chain() inte arbetar med r\u00e4tt uppgift.<\/p>\n

<\/noindex> <\/p>\n

Anv\u00e4ndare av Linux-distributioner rekommenderas att installera de senaste k\u00e4rnuppdateringarna fr\u00e5n officiella repositoryn. S\u00e5rbarheten \u00e4r lokal till sin natur, och ger inte i sig m\u00f6jlighet till fj\u00e4rrinloggning, men p\u00e5 fleranv\u00e4ndarsservrar, CI-infrastruktur, hostingtj\u00e4nster och system med containrar \u00e4r risken betydligt h\u00f6gre: framg\u00e5ngsrik utnyttjande kan f\u00f6rvandla redan erh\u00e5llet l\u00e5gt privilegierat tillg\u00e5ng till full kontroll \u00f6ver systemet.<\/p>\n

K\u00e4lla: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-43499, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostLock. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 rtmutex \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c futex \u0441 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430, \u0430 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e root. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c AlmaLinux, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u043d\u0430 \u0445\u043e\u0441\u0442, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u043e\u043c \u044f\u0434\u0440\u0435. \u0421\u0443\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182595","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47En s\u00e5rbarhet i Linux, GhostLock, m\u00f6jligg\u00f6r root-\u00e5tkomst | ProHoster","description":"1 Det har uppt\u00e4ckts en s\u00e5rbarhet i Linux-k\u00e4rnan","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c GhostLock, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f | ProHoster","og:description":"1 \u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-linux-raskryta-uyazvimost-ghostlock-pozvolyayushhaya-poluchit-root-dostup","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-10T20:54:14+00:00","article:modified_time":"2026-07-10T20:54:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182595","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:05","updated":"2026-08-05 12:22:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/182595","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=182595"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/182595\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=182595"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=182595"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=182595"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}