袙 褟写褉械 Linux 胁褘褟胁谢械薪褘 写胁械 褍褟蟹胁懈屑芯褋褌懈 (CVE-2023-1281, CVE-2023-1829), 锌芯蟹胁芯谢褟褞褖懈械 谢芯泻邪谢褜薪芯屑褍 锌芯谢褜蟹芯胁邪褌械谢褞 锌芯写薪褟褌褜 褋胁芯懈 锌褉懈胁懈谢械谐懈懈 胁 褋懈褋褌械屑械. 袛谢褟 锌褉芯胁械写械薪懈褟 邪褌邪泻懈 褌褉械斜褍褞褌褋褟 锌芯谢薪芯屑芯褔懈褟 薪邪 褋芯蟹写邪薪懈械 懈 懈蟹屑械薪械薪懈械 泻谢邪褋褋懈褎懈泻邪褌芯褉芯胁 褌褉邪褎懈泻邪, 写芯褋褌褍锌薪褘械 锌褉懈 薪邪谢懈褔懈懈 锌褉邪胁 CAP_NET_ADMIN, 泻芯褌芯褉褘械 屑芯卸薪芯 锌芯谢褍褔懈褌褜 锌褉懈 胁芯蟹屑芯卸薪芯褋褌懈 褋芯蟹写邪薪懈褟 锌褉芯褋褌褉邪薪褋褌胁 懈屑褢薪 懈写械薪褌懈褎懈泻邪褌芯褉芯胁 锌芯谢褜蟹芯胁邪褌械谢褟 (user namespace). 袩褉芯斜谢械屑褘 锌褉芯褟胁谢褟褞褌褋褟 薪邪褔懈薪邪褟 褋 褟写褉邪 4.14 懈 褍褋褌褉邪薪械薪褘 胁 胁械褌泻械 6.2.
校褟蟹胁懈屑芯褋褌懈 胁褘蟹胁邪薪褘 芯斜褉邪褖械薪懈械屑 泻 锌邪屑褟褌懈 锌芯褋谢械 械褢 芯褋胁芯斜芯卸写械薪懈褟 (use-after-free) 胁 泻芯写械 泻谢邪褋褋懈褎懈泻邪褌芯褉械 褌褉邪褎懈泻邪 tcindex, 胁褏芯写褟褖械谐芯 胁 褋芯褋褌邪胁 锌芯写褋懈褋褌械屑褘 QoS (Quality of service) 褟写褉邪 Linux. 袩械褉胁邪褟 褍褟蟹胁懈屑芯褋褌褜 锌褉芯褟胁谢褟械褌褋褟 懈蟹-蟹邪 褋芯褋褌芯褟薪懈褟 谐芯薪泻懈 锌褉懈 芯斜薪芯胁谢械薪懈懈 薪械芯锌褌懈屑邪谢褜薪褘褏 hash-褎懈谢褜褌褉芯胁, 邪 胁褌芯褉邪褟 褍褟蟹胁懈屑芯褋褌褜 锌褉懈 褍写邪谢械薪懈懈 芯锌褌懈屑邪谢褜薪芯谐芯 hash-褎懈谢褜褌褉邪. 袩褉芯褋谢械写懈褌褜 蟹邪 懈褋锌褉邪胁谢械薪懈械屑 胁 写懈褋褌褉懈斜褍褌懈胁邪褏 屑芯卸薪芯 薪邪 褋谢械写褍褞褖懈褏 褋褌褉邪薪懈褑邪褏: Debian, Ubuntu, Gentoo, RHEL, SUSE, Fedora, Gentoo, Arch. 袛谢褟 斜谢芯泻懈褉芯胁邪薪懈褟 褝泻褋锌谢褍邪褌邪褑懈懈 褍褟蟹胁懈屑芯褋褌懈 芯斜褏芯写薪褘屑 锌褍褌褢屑 屑芯卸薪芯 芯褌泻谢褞褔懈褌褜 胁芯蟹屑芯卸薪芯褋褌褜 褋芯蟹写邪薪懈褟 锌褉芯褋褌褉邪薪褋褌胁 懈屑褢薪 薪械锌褉懈胁懈谢械谐懈褉芯胁邪薪薪褘屑懈 锌芯谢褜蟹芯胁邪褌械谢褟屑懈 (芦sudo sysctl -w kernel.unprivileged_userns_clone=0禄).
诪拽讜专: opennet.ru