ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืื™ื ื˜ืขืจื ืขื˜ ื ื™ื™ึทืขืก > ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ XFS ืึทื– ืึทืœืึทื•ื– ืœื™ื™ืขื ืขืŸ ืจื•ื™ ื‘ืœืึธืง ืžื™ื˜ืœ ื“ืึทื˜ืŸ

ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ XFS ืึทื– ืึทืœืึทื•ื– ืœื™ื™ืขื ืขืŸ ืจื•ื™ ื‘ืœืึธืง ืžื™ื˜ืœ ื“ืึทื˜ืŸ

ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2021-4155) ืื™ื– ื“ื™ืกืงืึทื•ื•ืขืจื“ ืื™ืŸ ื“ื™ XFS ื˜ืขืงืข ืกื™ืกื˜ืขื ืงืึธื“ ื•ื•ืึธืก ืึทืœืึทื•ื– ืึท ื”ื™ื’ืข ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ื‘ืึทื ื™ืฆืขืจ ืฆื• ืœื™ื™ืขื ืขืŸ ืึทื ื™ื•ื–ื“ ื‘ืœืึธืง ื“ืึทื˜ืŸ ื’ืœื™ื™ึทืš ืคึฟื•ืŸ ืึท ื‘ืœืึธืง ืžื™ื˜ืœ. ืึทืœืข ื”ื•ื™ืคึผื˜ ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ืขืœื˜ืขืจ ื•ื•ื™ 5.16 ื•ื•ืึธืก ืึทื ื˜ื”ืึทืœื˜ืŸ ื“ืขื XFS ืฉืึธืคืขืจ ื–ืขื ืขืŸ ืึทืคืขืงื˜ืึทื“ ื“ื•ืจืš ื“ืขื ืึทืจื•ื™ืกื’ืขื‘ืŸ. ื“ืขืจ ืคืึทืจืจื™ื›ื˜ืŸ ืื™ื– ื™ื ืงืœื•ื“ืขื“ ืื™ืŸ ื•ื•ืขืจืกื™ืข 5.16, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืงืขืจืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ 5.15.14, 5.10.91, 5.4.171, 4.19.225, ืขื˜ืง. ื“ืขืจ ืกื˜ืึทื˜ื•ืก ืคื•ืŸ ื“ืขืจ ื“ื•ืจ ืคื•ืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืžื™ื˜ ื“ื™ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ืŸ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ืงืขื ืขืŸ ื–ื™ื™ืŸ ื˜ืจืึทืงื˜ ืื•ื™ืฃ ื“ื™ ื‘ืœืขื˜ืขืจ: Debian, RHEL, SUSE, Fedora, Ubuntu, Arch.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ื“ื™ ืคืึทืœืฉ ื ืึทื˜ื•ืจ ืคื•ืŸ ืฆื•ื•ื™ื™ XFS-ืกืคึผืขืฆื™ืคื™ืฉ ioctl (XFS_IOC_ALLOCSP) ืื•ืŸ ioctl (XFS_IOC_FREESP), ื•ื•ืึธืก ื–ืขื ืขืŸ ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœ ืึทื ืึทืœืึธื’ ืคื•ืŸ ื“ื™ ืคืึทืœืึธืงืึทื˜ืข () ืงืขืจืŸ-ื‘ืจื™ื™ื˜ ืกื™ืกื˜ืขื ืจื•ืคืŸ. ื•ื•ืขืŸ ื™ื ืงืจื™ืกื™ื ื’ ืึท ื˜ืขืงืข ื’ืจื™ื™ืก ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ื‘ืœืึธืง-ืึทืœื™ื™ื ื“, ื“ื™ XFS_IOC_ALLOCSP / XFS_IOC_FREESP ื™ืึธืงื˜ืœืก ื˜ืึธืŸ ื ื™ื˜ ื‘ืึทืฉื˜ืขื˜ื™ืง ื“ื™ ืขืง ื‘ื™ื˜ืขืก ื‘ื™ื– ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื‘ืœืึธืง ื’ืจืขื ืขืฅ. ืื–ื•ื™, ืื•ื™ืฃ ืึท XFS ืžื™ื˜ ืึท ื ืึธืจืžืึทืœ ื‘ืœืึธืง ื’ืจื™ื™ืก ืคื•ืŸ 4096 ื‘ื™ื˜ืขืก, ืึท ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ืœื™ื™ืขื ืขืŸ ืึทืจื•ื™ืฃ ืฆื• 4095 ื‘ื™ื˜ืขืก ืคื•ืŸ ืคืจื™ื™ึทืขืจื“ื™ืง ื’ืขืฉืจื™ื‘ืŸ ื“ืึทื˜ืŸ ืคื•ืŸ ื™ืขื“ืขืจ ื‘ืœืึธืง. ื“ื™ ื’ืขื‘ื™ื˜ืŸ ืงืขื ืขืŸ ืึทื ื˜ื”ืึทืœื˜ืŸ ื“ืึทื˜ืŸ ืคื•ืŸ ืื•ื™ืกื’ืขืžืขืงื˜ ื˜ืขืงืขืก, ื“ืขืคืจืึทื’ืžืขื ื˜ืขื“ ื˜ืขืงืขืก ืื•ืŸ ื˜ืขืงืขืก ืžื™ื˜ ื“ืขื“ื•ืคึผืœื™ืงื™ื™ื˜ื™ื“ ื‘ืœืึทืงืก.

ืื™ืจ ืงืขื ืขืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ื™ืŸ ืกื™ืกื˜ืขื ืคึฟืึทืจ ืึท ืคึผืจืึธื‘ืœืขื ืžื™ื˜ ืึท ืคึผืฉื•ื˜ ืคึผืจืึธื•ื˜ืึทื˜ื™ื™ืคึผ. ืื•ื™ื‘, ื ืึธืš ืขืงืกืึทืงื™ื•ื˜ื™ื ื’ ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ืกื™ืงื•ื•ืึทื ืก ืคื•ืŸ ืงืึทืžืึทื ื“ื–, ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืœื™ื™ืขื ืขืŸ ืฉื™ื™ืงืกืคึผื™ืจ ืก ื˜ืขืงืกื˜, ื“ืขืจ FS ืฉืึธืคืขืจ ืื™ื– ืฉืคึผื™ืจืขื•ื•ื“ื™ืง. ื“ืขืจ ืขืจืฉื˜ ืžืึทื•ื ื˜ื™ื ื’ ืคื•ืŸ ื“ื™ XFS ืฆืขื˜ื™ื™ืœื•ื ื’ ืคึฟืึทืจ ื“ื™ ื“ืขืžืึทื ืกื˜ืจื™ื™ืฉืึทืŸ ืจื™ืงื•ื•ื™ื™ืขืจื– ืกื•ืคึผืขืจื•ืกืขืจ ืจืขื›ื˜.

ื–ื™ื ื˜ ioctl (XFS_IOC_ALLOCSP) ืื•ืŸ ioctl (XFS_IOC_FREESP) ื–ืขื ืขืŸ ื›ึผืžืขื˜ ื™ื™ื“ืขื ื™ืงืึทืœ ืื™ืŸ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืฆื• ื“ื™ ื ืึธืจืžืึทืœ ืคืึทืœืึธืงืึทื˜ืข (), ืื•ืŸ ื–ื™ื™ืขืจ ื‘ืœื•ื™ื– ื—ื™ืœื•ืง ืื™ื– ื“ืึทื˜ืŸ ืœื™ืงืึทื“ื–ืฉ, ื–ื™ื™ืขืจ ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืื™ื– ื•ื•ื™ ืึท ื‘ืึทืงื“ืึธืจ. ื˜ืจืึธืฅ ื“ื™ ืึทืœื’ืขืžื™ื™ื ืข ืคึผืึธืœื™ื˜ื™ืง ืคื•ืŸ ื ื™ืฉื˜ ืขื ื“ืขืจืŸ ื“ื™ ื™ื’ื–ื™ืกื˜ื™ื ื’ ื™ื ื˜ืขืจืคื™ื™ืกื™ื– ืื™ืŸ ื“ื™ ืงืขืจืŸ, ืœื•ื™ื˜ ื“ื™ ืคืึธืจืฉืœืึธื’ ืคื•ืŸ ืœื™ื ื•ืก, ื“ื™ ื‘ืึทืฉืœื•ืก ืื™ื– ื’ืขืžืื›ื˜ ืฆื• ื’ืึธืจ ื‘ืึทื–ื™ื™ึทื˜ื™ืงืŸ ื“ื™ ื™ืึธืงื˜ืึทืœ ืื™ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื•ื•ืขืจืกื™ืข.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’