ืคืœืึธืคึผืคึผื™ ื“ืจื™ื™ื•ื•ืขืจ ืœื™ื ืงืก ืึทื ืžืึทื™ื ื˜ื™ื™ื ื“ ืื™ืŸ ืœื™ื ื•ืงืก ืงืขืจืŸ

ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ Linux 5.3 ืงืขืจืŸ ืื ื’ืขื ื•ืžืขืŸ ืขื ื“ืขืจื•ื ื’ืขืŸ ืฆื• ืœื™ื™ื’ืŸ ื ืึธืš ืฉื•ืฅ ืคึฟืึทืจ ioctl ืงืึทืœืœืก ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ื™ ืคืœืึทืคึผื™ ืฉืึธืคืขืจ, ืื•ืŸ ื“ืขืจ ืฉืึธืคืขืจ ื–ื™ืš ืื™ื– ืื ื’ืขืฆื™ื™ื›ื ื˜ ื•ื•ื™ ืึทื ืžื™ื™ื ื˜ื™ื™ื ื“
("ืึธืจืคืึทื ื“"), ื•ื•ืึธืก ื™ืžืคึผืœื™ื™ื– ื“ื™ ื˜ืขืจืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื–ื™ื™ึทืŸ ื˜ืขืกื˜ื™ื ื’.

ื“ืขืจ ืฉืึธืคืขืจ ืื™ื– ื’ืขื”ืืœื˜ืŸ ืึทื•ื˜ื“ื™ื™ื˜ื™ื“, ื•ื•ื™ื™ึทืœ ืขืก ืื™ื– ืฉื•ื•ืขืจ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ืืจื‘ืขื˜ืŸ ื•ื™ืกืจื™ื›ื˜ ืคึฟืึทืจ ื˜ืขืกื˜ื™ื ื’ ืขืก - ืึทืœืข ืงืจืึทื ื˜ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื“ืจื™ื™ื•ื•ื–, ื•ื•ื™ ืึท ื”ืขืจืฉืŸ, ื ื•ืฆืŸ ื“ื™ ื•ืกื‘ ืฆื•ื‘ื™ื ื“. ืื™ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืฆื™ื™ื˜, ื“ื™ ื‘ืึทื–ื™ื™ึทื˜ื™ืงื•ื ื’ ืคื•ืŸ ื“ื™ ืฉืึธืคืขืจ ืคื•ืŸ ื“ื™ ืงืขืจืŸ ืื™ื– ื›ืึทืžืคึผืขืจื“ ื“ื•ืจืš ื“ื™ ืคืึทืงื˜ ืึทื– ืคืœืึทืคึผื™ ื“ื™ืกืง ืงืึทื ื˜ืจืึธื•ืœืขืจื– ื–ืขื ืขืŸ ื ืึธืš ืขืžื™ืึทืœื™ื™ื˜ื™ื“ ืื™ืŸ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ืกื™ืกื˜ืขืžืขืŸ. ื“ืขืจื™ื‘ืขืจ, ื“ืขืจ ืฉืึธืคืขืจ ืื™ื– ื ืึธืš ืกื˜ืึธืจื“ ืื™ืŸ ื“ื™ ืงืขืจืŸ, ืึธื‘ืขืจ ื“ื™ ืจื™ื›ื˜ื™ืง ืึธืคึผืขืจืึทืฆื™ืข ืื™ื– ื ื™ืฉื˜ ื’ืขืจืึทื ื˜ื™ื“.

ืื•ื™ืš, ืื™ืŸ ื“ื™ ืคืœืึทืคึผื™ ืฉืึธืคืขืจ ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2019-14283), ืึทืœืึทื•ื™ื ื’, ื“ื•ืจืš ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ioctl, ืึทืŸ ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ื‘ืึทื ื™ืฆืขืจ ื•ื•ืึธืก ื”ืื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึทืจื™ื™ึทื ืœื™ื™ื’ืŸ ื–ื™ื™ืŸ ืื™ื™ื’ืขื ืข ืคืœืึทืคึผื™ ื“ื™ืกืง, ืฆื• ืœื™ื™ืขื ืขืŸ ื“ืึทื˜ืŸ ืคึฟื•ืŸ ื–ื›ึผืจื•ืŸ ื’ืขื‘ื™ื˜ืŸ ืึทืจื•ื™ืก ื“ื™ ื‘ืึทื•ื ื“ืจื™ื– ืคื•ืŸ ื“ื™ ืงืึธืคึผื™ืข ื‘ืึทืคืขืจ (ืœืžืฉืœ, ืฉื›ื™ื™ื ื™ืฉ ื’ืขื‘ื™ื˜ืŸ ืงืขื ืขืŸ ืึทื ื˜ื”ืึทืœื˜ืŸ ืจื™ื–ื™ื“ื–ืฉื•ืึทืœ ื“ืึทื˜ืŸ ืคื•ืŸ ื“ื™ ื“ื™ืกืง. ืงืึทืฉ ืื•ืŸ ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘ ื‘ืึทืคืขืจ). ืื•ื™ืฃ ื“ื™ ืื™ื™ืŸ ื”ืึทื ื˜, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื‘ืœื™ื™ื‘ื˜ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ื–ื™ื ื˜ ื“ื™ ืคืœืึธืคึผืคึผื™ ืฉืึธืคืขืจ ืื™ื– ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืœืึธื•ื“ื™ื“ ืื•ื™ื‘ ืขืก ืื™ื– ืึท ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืขืžื™ืึทืœื™ื™ื˜ื™ื“ ืงืึธื ื˜ืจืึธืœืœืขืจ ืื™ืŸ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ืกื™ืกื˜ืขืžืขืŸ (ืœืžืฉืœ, ืขืก ืื™ื– ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืื™ืŸ QEMU), ืึธื‘ืขืจ ืื•ื™ืฃ ื“ื™ ืื ื“ืขืจืข ื”ืึทื ื˜, ืฆื• ื’ื•ื•ื•ืจืข ื“ืขื ืคึผืจืึธื‘ืœืขื, ืขืก ืื™ื– ื ื™ื™ื˜ื™ืง ืึทื– ืึท ืคืœืึทืคึผื™ ื“ื™ืกืง ื‘ื™ืœื“ ืฆื•ื’ืขื’ืจื™ื™ื˜ ื“ื•ืจืš ืึท ืึทื˜ืึทืงืขืจ ืื™ื– ืงืึธื ื ืขืงื˜ืขื“.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’