ืฉื•ื•ืึทื›ืงื™ื™ื˜ ืื™ืŸ ื“ืขื ืกื•ื‘ืกื™ืกื˜ืขื Linux- USB ื’ืึทื“ื–ืฉืขื˜ ืงืขืจื ืขืœืก, ืžืขื’ืœืขืš ืขืจืœื•ื™ื‘ืŸ ืงืึธื“ ืื•ื™ืกืคื™ืจื•ื ื’

ืื™ืŸ USB ื’ืึทื“ื–ืฉืขื˜, ืึท ืงืขืจื ืขืœ ืกื•ื‘ืกื™ืกื˜ืขื Linuxื ืฉื•ื•ืื›ืงื™ื™ื˜ (CVE-2021-39685) ืื™ื– ืื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจื˜ ื’ืขื•ื•ืืจืŸ ืื™ืŸ ื“ื™ USB Gadget API, ื•ื•ืืก ื’ื™ื˜ ื ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืื™ื ื˜ืขืจืคื™ื™ืก ืคืืจืŸ ืฉืืคืŸ ืงืœื™ืขื ื˜ USB ื“ืขื•ื•ื™ื™ืกืขืก ืื•ืŸ ืกื™ืžื•ืœื™ืจืŸ USB ื“ืขื•ื•ื™ื™ืกืขืก. ื“ื™ ืฉื•ื•ืื›ืงื™ื™ื˜ ืงืขืŸ ืคื™ืจืŸ ืฆื• ืงืขืจื ืขืœ ืื™ื ืคืืจืžืืฆื™ืข ืœื™ืขืง, ืงืจืืš, ืื“ืขืจ ืืจื‘ื™ื˜ืจืืจืข ืงืื•ื“ ืื•ื™ืกืคื™ืจื•ื ื’ ืื•ื™ืฃ ื“ื™ ืงืขืจื ืขืœ ืœืขื•ื•ืขืœ. ื“ื™ ืื˜ืืงืข ื•ื•ืขืจื˜ ื“ื•ืจื›ื’ืขืคื™ืจื˜ ื“ื•ืจืš ืืŸ ืื•ืžืคืจื™ื•ื•ื™ืœืขื’ื™ืจื˜ืŸ ืœืืงืืœืŸ ื‘ืื ื™ืฆืขืจ ื“ื•ืจืš ืžืื ื™ืคื•ืœืืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืคืืจืฉื™ื“ืขื ืข ื“ืขื•ื•ื™ื™ืก ืงืœืืกืŸ ืื™ืžืคืœืขืžืขื ื˜ื™ืจื˜ ื ื™ืฆื ื“ื™ืง ื“ื™ USB Gadget API, ื•ื•ื™ rndis, hid, uac1, uac1_legacy, ืื•ืŸ uac2.

ื“ื™ ืคืจืื‘ืœืขื ืื™ื– ืคืืจืจืื›ื˜ืŸ ื’ืขื•ื•ืืจืŸ ืื™ืŸ ืงืขืจื ืขืœ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื•ื•ืึธืก ื–ืขื ืขืŸ ืœืขืฆื˜ื ืก ืืจื•ื™ืกื’ืขื’ืขื‘ืŸ ื’ืขื•ื•ืึธืจืŸ. Linux 5.15.8, 5.10.85, 5.4.165, 4.19.221, 4.14.258, 4.9.293 ืื•ืŸ 4.4.295. ื“ื™ ืคืจืื‘ืœืขื ื‘ืœื™ื™ื‘ื˜ ืื•ืžื’ืขืœื™ื™ื–ื˜ ืื™ืŸ ื“ื™ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– (Debian, Ubuntu, RHEL, SUSE, Fedora, Arch). ื ืคึผืจืึธื˜ืึธื˜ื™ืคึผ ืขืงืกืคึผืœื•ื™ื˜ ืื™ื– ืฆื•ื’ืขื’ืจื™ื™ื˜ ื’ืขื•ื•ืึธืจืŸ ืฆื• ื“ืขืžืึธื ืกื˜ืจื™ืจืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ื‘ืึทืคืขืจ ืึธื•ื•ื•ืขืจืคืœืึธื• ืื™ืŸ ื“ื™ ื“ืึทื˜ืŸ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ื‘ืขื˜ืŸ ื”ืึทื ื“ืœืขืจืก ืื™ืŸ ื“ื™ ื”ืึทืžืฆืึธืข ื“ืจื™ื•ื•ืขืจืก rndis, hid, uac1, uac1_legacy ืื•ืŸ uac2. ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื ื’ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืึท ืึทื ืคึผืจื™ื•ื•ื™ืœื™ื“ื–ืฉื“ ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ื‘ืึทืงื•ืžืขืŸ ืึทืงืกืขืก ืฆื• ืงืขืจืŸ ื–ื›ึผืจื•ืŸ ื“ื•ืจืš ืฉื™ืงืŸ ืึท ืกืคึผืขืฆื™ืขืœ ืงืึธื ื˜ืจืึธืœ ื‘ืขื˜ืŸ ืžื™ื˜ ืึท WLength ืคืขืœื“ ื•ื•ืขืจื˜ ื•ื•ืึธืก ื™ืงืกื™ื“ื– ื“ื™ ื’ืจื™ื™ืก ืคื•ืŸ ื“ื™ ืกื˜ืึทื˜ื™ืง ื‘ืึทืคืขืจ, ืคึฟืึทืจ ื•ื•ืึธืก 4096 ื‘ื™ื˜ืขืก ื–ืขื ืขืŸ ืฉื˜ืขื ื“ื™ืง ืึทืœืึทืงื™ื™ื˜ื™ื“ (USB_COMP_EP0_BUFSIZ). ื‘ืขืฉืึทืก ื“ื™ ื‘ืึทืคืึทืœืŸ, ืึท ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ืคึผืจืึธืฆืขืก ืื™ืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ ืงืขื ืขืŸ ืœื™ื™ืขื ืขืŸ ืึธื“ืขืจ ืฉืจื™ื™ึทื‘ืŸ ืึทืจื•ื™ืฃ ืฆื• 65 ืงื‘ ืคื•ืŸ ื“ืึทื˜ืŸ ืื™ืŸ ืงืขืจืŸ ื–ื›ึผืจื•ืŸ.

ืžืงื•ืจ: opennet.ru

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster