ืืื ืงืขืจื Linux ืื ืคืื ืคืืข (1, 2, 3) ืงืจืืืืฉืข ืฉืืืืืงืืื ืืื ืื ืืขืฆืืข ืฆืืืื ืืืึธืื ืืื ืืืืขื ืืืคืืฆืืจื ืืขืืืึธืจื, ืืืึธืก ืขืจืืืืื ืึท ืืึทื ืืฆืขืจ ืฆื ืคึฟืึทืจืืจืขืกืขืจื ืืืืขืจืข ืคึผืจืืืืืืขืืืขืก ืืื ืกืืกืืขื. ืฆืืืื ืึทืจืืขืื ืืืงืข ืขืงืกืคึผืืืืืก ืืขื ืขื ืคืึทืจืขืคึฟื ืืืขืื ืืขืืืึธืจื: sshkeysign_pwn ืขืจืืืืื ืึทื ืึทื ืคึผืจืืืืืืขืืืจืื ืืึทื ืืฆืขืจ ืฆื ืืืืขื ืขื ืืขื ืืื ืืึทืื ืคึฟืื ืคึผืจืืืืึทืืข ืืึธืกื SSH ืฉืืืกืืขื /etc/ssh/ssh_host_*_key, ืืื chage_pwn ืขืจืืืืื ืึทื ืึทื ืคึผืจืืืืืืขืืืจืื ืืึทื ืืฆืขืจ ืฆื ืืืืขื ืขื ืืขื ืืื ืืึทืื ืคึฟืื ืืขืจ /etc/shadow ืืขืงืข ืืืึธืก ืึผืืื ืืึทื ืืฆืขืจ ืคึผืึทืจืึธื ืืขืฉืื.
ืื ืฉืืืึทืืงืืื ืืื ื ืืฉื ืืขืืืขื ืืืขื ืคึฟืึทืจ ืึทื ืืคึผืืขืงืื ื, ืึธืืขืจ ืึท ืืืืขืจืืืืืก-ืคืึธืจืฉืขืจ ืืื ืืขืืืขื ืืืืืืช ืฆื ืืืขื ืืืคืืฆืืจื ืื ืฉืืืึทืืงืืื, ืืึทืืืจื ืืืืฃ ืึท ืคึฟืึธืจืืขืืืืืื ืงืขืจื ืขื-ืคึผืึทืืฉ, ืืืึธืก ืืึธื ืืขืจืืขืืืขืื ืืึธืก ืืืืขื ืขื ืคึฟืื ืืขืงืขืก ืืืึธืก ืืขื ืขื ืฆืืืจืืืืขื ื ืึธืจ ืคึฟืึทืจื ืืืึธืจืฆื-ืืึทื ืืฆืขืจ, ืืื /etc/shadow. ืื ืงืขืจื ืขื-ืขื ืืขืจืื ื ืืึธื ืฆืืืขืคึผืึทืกื ืื ืืึธืืืง ืคึฟืึทืจ ื ืืฆื ืื get_dumpable() ืคึฟืื ืงืฆืืข ืืื ptrace ืืืขื ืืขื ืืึทืฉืืืื ืฆืืืจืื-ืืขืืืขืืก ืืื ืืขืจ ptrace_may_access() ืคึฟืื ืงืฆืืข.
ืื ืฉืืืึทืืงืืื ืืืขืจื ืืขืคึฟืืจื ืืืจื ืึท ืจืึทืกืข ืฆืืฉืืึทื ื ืืืึธืก ืขืจืืืืื ื ืืฉื-ืคึผืจืืืืืืขืืืจืื ืฆืืืจืื ืฆืื pidfd ืืขืงืข ืืขืกืงืจืืคึผืืึธืจ ื ืึธื ืฆืืืจืื ืฆื ืึท ืืขืงืข ืคึฟืื ืึท suid ืืืึธืจืฆื ืคึผืจืึธืฆืขืก. ืฆืืืืฉื ืขืคึฟืขื ืขื ืืขื ืืขืงืข ืืื ืฆืืจืืงืฉืืขืื ืคึผืจืืืืืืขืืืขืก ืืื ืืขื suid ืคึผืจืึธืืจืึทื (ืืืฉื, ืืืจื ืื setreuid ืคึฟืื ืงืฆืืข), ืขื ืืฉืืืื ืึท ืกืืืืึทืฆืืข ืืืื ืึทื ืึทืคึผืืืงืึทืฆืืข ืืืึธืก ืืืืคึฟื ืืขื suid ืืืึธืจืฆื ืคึผืจืึธืืจืึทื ืงืขื ืฆืืืจืืื ืึท ืืขืงืข ืืขืขืคึฟื ื ืืืจื ืืขื suid ืคึผืจืึธืืจืึทื ืืืจื ืืขื pidfd ืืขืกืงืจืืคึผืืึธืจ, ืืคืืื ืืืื ืื ืืขืงืข'ืก ืคึผืขืจืืืฉืึทื ื ืืขืจืืืืื ืขืก ื ืืฉื.
ืื ืืืืกื ืืฆืืืจืข ืคืขื ืฆืืขืจ ืขื ืืฉืืืื ืืืืื ืื "__ptrace_may_access()" ืคืื ืงืฆืืข ืืืื ืืืืก ืงืื ืืจืืืืจื ืคืืจ ืคืืื ืฆืืืจืื ืืืื ืืืก task->mm ืคืขืื ืืื ืืขืฉืืขืื ืฆื NULL ื ืื exit_mm() ืืืขืจ ืคืืจ exit_files() ืืืขืจื ืืขืจืืคื. ืืืฆื, ื ืขืื ืืขืจ pidfd_getfd ืกืืกืืขื ืจืืฃ ืื ืื ืืขืจ ืจืืคึฟื ืืืงืขืจ ืคึผืจืึธืฆืขืก'ืก ืืึทื ืืฆืขืจ ID (uid) ืคึผืึทืกื ืฆื ืืขืจ ืืึทื ืืฆืขืจ ID ืืืึธืก ืืื ืืืจืขืืืืื ืฆื ืฆืืืจืืื ืื ืคืืื. ืขืก ืืื ืืืขืจื ืฆื ืืึทืืขืจืงื ืึทื ืืึธืก ืคึผืจืึธืืืขื ืืื ืคืจืืขืจ ืึทืืจืขืกืืจื ืืขืืืึธืจื ืืื 2020, ืึธืืขืจ ืขืก ืืืืืื ื ืืฉื ืคืึทืจืจืืื.
ืืื ืืขื ืขืงืกืคึผืืืื ืืืึธืก ืืึทืงืืื ืืขื ืืื ืืึทืื ืคึฟืื /etc/shadow, ืืึทืฉืืืื ืื ืึทืืึทืงืข ืคึฟืื ืืืืขืจืืืจื ืืึธื ืืฉืื ื ืื /usr/bin/chage ืึทืคึผืืืงืึทืฆืืข ืืืจื fork+execl ืืืื suid root ืคึฟืึธื, ืืืึธืก ืืืืขื ื ืืขื ืืื ืืึทืื ืคึฟืื /etc/shadow. ื ืึธืืืขื ืืื ืืขืจ ืคึผืจืึธืฆืขืก ืคึฟืึธืจืงื ืืื, ืืืขืจื ืืขืจ pidfd_open ืกืืกืืขื ืจืืฃ ืขืงืกืขืงืืืืจื, ืืื ืึท ืฉืืืืฃ ืคึฟืื ืคึฟืึทืจืึทื pidfd ืืขืกืงืจืืคึผืืึธืจื ืืืขืจื ืืืจืืืขืคึฟืืจื ืืืจื ืืขื pidfd_getfd ืกืืกืืขื ืจืืฃ ืืื ืืืืขืจ ืืืขืจืืคึฟืืงืึทืฆืืข ืืืจื /proc/self/fd. ืืื ืืขื sshkeysign_pwn ืขืงืกืคึผืืืื, ืืืขืจื ืขื ืืขืืข ืืึทื ืืคึผืืืึทืฆืืขืก ืืืจืืืขืคึฟืืจื ืืืื suid root ssh-keysign ืคึผืจืึธืืจืึทื.
ืื ืคืจืืืืขื ืืื ื ืืื ืืฉื ืฆืืืขืืืืื ืืขืืืืจื ืงืืื CVE ืืืืขื ืืืคืืฆืืจืขืจ, ืืื ืงืขืจื ืขื ืืื ืคืขืงื ืืคืืขืืืก ืืขื ืขื ื ืืฉื ืืจืืืกืืขืืขืื ืืขืืืืจื ืืื ืืืกืืจืืืืืฉืึทื ื. ืื ืฉืืืืืงืืื ืืืืืื ื ืืฉื ืืขืคืขืืฉื ืืื ืงืขืจื ืขืืก 7.0.7, 6.18.30, ืืื 6.12.88, ืืจืืืกืืขืืขืื ืืื ื ืคืืจ ืฉืขื ืฆืืจืืง. ืืื ืืขืจ ืฆืืื ืคืื ืฉืจืืืื, ืงืขื ื ืืจ ืืขืจ ืคืขืืฉ ืืขื ืืฆื ืืืขืจื. ืืขืืืขืืข ืืจืืืืืื ืืืขืจื ืืืกืงืืืืจื, ืืื ืืืฉื ืฉืืขืื sysctl kernel.yama.ptrace_scope=3 ืืืขืจ ืืจืืคื ืขืืขื ืืขื suid root ืคืื ืคืื ืขืงืกืขืงืืืืขืืืก ืืื ืกืืกืืขื (ืืคืืืช ืคืื ืื ssh-keysign ืืื change ืืืืืืืืืก ืืขื ืืฆื ืืื ืขืงืกืคืืืืืก).
ืืขืจืืืึทื ืืืงืื ื: ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ืฆืืืขืืืืื ืืขืืืึธืจื ืืืื ืืืืขื ืืืคืืฆืืจืขืจ CVE-2026-46333. ืงืขืจื ืขื ืืขืจืืืึทื ืืืงืื ืืขื ืืขื ืขื ืืขื ืขืจืืจื ืืขืืืึธืจื. Linux 7.0.8, 6.18.31, 6.12.89, 6.6.139, 6.1.173, 5.15.207, ืืื 5.10.256 ืืื ืืืึทืื ืขืจืึทืืืืืื ืคืืงืกืื. ืืขืจ ืืืึทืื ืขืจืึทืืืืืื ืคืืงืกืื ืกืืึทืืืก ืคึฟืึทืจ ืื ืืืกืืจืืืืืฉืึทื ื ืงืขื ืืืื ืึทืกืกืขืกืกืขื ืืืืฃ ืื ืืืขืืขืจ: Debian, Ubuntu, SUSE/openSUSE, RHEL, ืืืฉืขื ืื, ืึทืจืืฉ, ืคืขืืึธืจืึท.
ืืงืืจ: opennet.ru
