15 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื•ืกื‘ ื“ืจื™ื•ื•ืขืจืก ืคึฟื•ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ

ืึทื ื“ืจื™ื™ ืงืึธื ืึธื•ื•ืึทืœืึธื•ื• ืคึฟื•ืŸ ื’ื•ื’ืœ ื“ื™ืกืงืึทื•ื•ืขืจื“ 15 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื•ืกื‘ ื“ืจื™ื•ื•ืขืจืก ื’ืขืคึฟื™ื ื˜ ืื™ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ. ื“ืึธืก ืื™ื– ื“ื™ ืฆื•ื•ื™ื™ื˜ืข ืคึผืขืงืœ ืคื•ืŸ ืคึผืจืึธื‘ืœืขืžืก ื’ืขืคึฟื•ื ืขืŸ ื‘ืขืฉืึทืก ืคืึทื–ื™ื ื’ ื˜ืขืกื˜ื™ื ื’ - ืื™ืŸ 2017, ื“ืขื ืคืึธืจืฉืขืจ ื’ืขืคื•ื ืขืŸ ืขืก ื–ืขื ืขืŸ 14 ืžืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ ื•ืกื‘ ืึธื ืœื™ื™ื’ืŸ. ืคึผืจืึธื‘ืœืขืžืก ืงืขื ืขืŸ ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื•ื•ืขืŸ ืกืคึผืขืฆื™ืขืœ ืฆื•ื’ืขื’ืจื™ื™ื˜ ื•ืกื‘ ื“ืขื•ื•ื™ืกืขืก ื–ืขื ืขืŸ ืงืึธื ื ืขืงื˜ืขื“ ืฆื• ื“ื™ ืงืึธืžืคึผื™ื•ื˜ืขืจ. ืึทืŸ ืึทื˜ืึทืง ืื™ื– ืžืขื’ืœืขืš ืื•ื™ื‘ ืขืก ืื™ื– ืคื™ื–ื™ืฉ ืึทืงืกืขืก ืฆื• ื“ื™ ื•ื™ืกืจื™ื›ื˜ ืื•ืŸ ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ื‘ื™ื™ึท ืžื™ื ื“ืกื˜ืขืจ ืึท ืงืขืจืŸ ืงืจืึทืš, ืึธื‘ืขืจ ืื ื“ืขืจืข ืžืึทื ืึทืคืขืกื˜ื™ื™ืฉืึทื ื– ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ืจื•ืœื“ ืื•ื™ืก (ืœืžืฉืœ, ืคึฟืึทืจ ืึท ืขื ืœืขืš ื‘ืึทืคืึทืœืŸ ื“ื™ืกืงืึทื•ื•ืขืจื“ ืื™ืŸ 2016 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ ื•ืกื‘ ืฉืึธืคืขืจ snd-usbmidi ืกืึทืงืกื™ื“ืึทื“ ืฆื•ื’ืจื™ื™ื˜ืŸ ืึท ืขืงืกืคึผืœื•ื™ื˜ ืฆื• ื•ื™ืกืคื™ืจืŸ ืงืึธื“ ืื•ื™ืฃ ื“ื™ ืงืขืจืŸ ืžื“ืจื’ื”).

ืคื•ืŸ ื“ื™ 15 ื™ืฉื•ื–, 13 ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืœื™ื ื•ืงืก ืงืขืจืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ, ืึธื‘ืขืจ ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– (CVE-2019-15290, CVE-2019-15291) ื‘ืœื™ื™ื‘ืŸ ืึทื ืคื™ืงืกื˜ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืžืขืœื“ื•ื ื’ 5.2.9. ื•ื ืคึผืึทื˜ื˜ืฉืขื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• NULL ื˜ื™ื™ึทื˜ืœ ื“ื™ืคืขืจืึทื ืกื™ื– ืื™ืŸ ื“ื™ ath6kl ืื•ืŸ b2c2 ื“ืจื™ื•ื•ืขืจืก ื•ื•ืขืŸ ืจื™ืกื™ื•ื•ื™ื ื’ ืคืึทืœืฉ ื“ืึทื˜ืŸ ืคื•ืŸ ื“ื™ ืžื™ื˜ืœ. ืื ื“ืขืจืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืึทืจื™ื™ึทื ื ืขืžืขืŸ:

  • ืึทืงืกืขืก ืฆื• ืฉื•ื™ืŸ ื‘ืืคืจื™ื™ื˜ ื–ื›ึผืจื•ืŸ ื’ืขื‘ื™ื˜ืŸ (ื ื•ืฆืŸ-ื ืึธืš-ืคืจื™ื™) ืื™ืŸ ื“ืจื™ื•ื•ืขืจืก v4l2-dev/radio-raremono, dvb-usb, sound/core, cpia2 ืื•ืŸ p54usb;
  • ื˜ืึธืคึผืœ-ืคืจื™ื™ ื–ื›ึผืจื•ืŸ ืื™ืŸ ื“ื™ rio500 ืฉืึธืคืขืจ;
  • NULL ื˜ื™ื™ึทื˜ืœ ื“ื™ืคืขืจืึทื ืกื™ื– ืื™ืŸ yurex, zr364xx, siano/smsusb, sisusbvga, line6/pcm, motu_microbookii ืื•ืŸ line6 ื“ืจื™ื•ื•ืขืจืก.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’