Ukusuka kuzalisekiso lwekhonsoli yokubhaliweyo enikezelweyo njengenxalenye yeLinux kernel , enikezela ukukwazi ukuskrola okubhaliweyo ngasemva (CONFIG_VGACON_SOFT_SCROLLBACK). Ikhowudi yasuswa ngenxa yobukho beempazamo, okungekho mntu ukulungisa ngenxa yokungabikho komlondolozi ojongene nokuphuhliswa kwe-vgacon.
Ehlotyeni e-vgacon kwatyhilwa kwaye ukuba sesichengeni (CVE-2020-14331) okunokukhokelela ekuphuphumeni kwe-buffer ngenxa yokunqongophala kokuhlolwa okufanelekileyo kokufumaneka kwememori ekhoyo kwi-scroll buffer. Ukuba sesichengeni kutsale umdla wabaphuhlisi abaququzelela uvavanyo lwe-fuzz lwekhowudi ye-vgacon .
Iitshekhi ezongezelelweyo zibonakalise iingxaki ezininzi ezifanayo kwikhowudi yevgacon, kunye neengxaki ekuphunyezweni kwesoftware yokuskrola kumqhubi wefbcon. Ngelishwa, ikhowudi eyingxaki sele ihleli ixesha elide ingagcinwanga, mhlawumbi ngenxa yokuba abaphuhlisi batshintshela ekusebenziseni iiconsoles zegraphical kunye neeconsoles zeteksti zayeka ukusetyenziswa (abantu bayaqhubeka besebenzisa ivgacon kunye nefbcon consoles, kodwa bebengeyonto yojongano lwekernel kangangamashumi eminyaka. kunye nezinto eziphambili ezifana nokuskrola okwakhelwe kumqhubi (Shift+PageUp/PageDown) kuqikelelwa ukuba zikwimfuno encinci).
Ngokuphathelele kulo mba, uLinus Torvalds wagqiba kwelokuba angazami ukugcina ikhowudi engafunwanga, kodwa ayisuse ngokulula. Ukuba kukho abasebenzisi abafuna lo msebenzi, ikhowudi yokuxhasa ukuskrola kwi-console iya kubuyiselwa kwi-kernel ngokukhawuleza ukuba umlondolozi ufunyenwe olungele ukuthatha ukugcinwa kwayo.
umthombo: opennet.ru