ืขืงืกืคึผืœืึธื™ื˜ืึทื‘ืœืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ POSIX ืงืคึผื• ื˜ื™ื™ึทืžืขืจ, cls_route ืื•ืŸ nf_tables ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ

ืขื˜ืœืขื›ืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ, ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึทืงืกืขืก ืฉื•ื™ืŸ ื‘ืืคืจื™ื™ื˜ ื–ื›ึผืจื•ืŸ ื’ืขื‘ื™ื˜ืŸ ืื•ืŸ ืึทืœืึทื•ื™ื ื’ ืึท ื”ื™ื’ืข ื‘ืึทื ื™ืฆืขืจ ืฆื• ืคืึทืจื’ืจืขืกืขืจืŸ ื–ื™ื™ืขืจ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื. ืคึฟืึทืจ ืึทืœืข ื“ื™ ืคึผืจืึธื‘ืœืขืžืก ืื•ื ื˜ืขืจ ื‘ืึทื˜ืจืึทื›ื˜ื•ื ื’, ืืจื‘ืขื˜ืŸ ืคึผืจืึธื•ื˜ืึทื˜ื™ื™ืคึผืก ืคื•ืŸ ืขืงืกืคึผืœื•ื™ืฅ ื–ืขื ืขืŸ ื‘ืืฉืืคืŸ, ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืืจื•ื™ืก ืึท ื•ื•ืึธืš ื ืึธืš ื“ื™ ื•ื™ืกื’ืึทื‘ืข ืคื•ืŸ โ€‹โ€‹ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ืคึผืึทื˜ืฉืึทื– ืฆื• ืคืึทืจืจื™ื›ื˜ืŸ ื“ื™ ืคึผืจืึธื‘ืœืขืžืก ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื’ืขืฉื™ืงื˜ ืฆื• ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก.

  • CVE-2022-2588 ืื™ื– ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ cls_route ืคื™ืœื˜ืขืจ ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ื˜ืขื•ืช ืจืขื›ื˜ ืฆื• ื•ื•ืึธืก, ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืึท ื ืึทืœ ืฉืขืคึผืŸ, ื“ืขืจ ืึทืœื˜ ืคื™ืœื˜ืขืจ ืื™ื– ื ื™ืฉื˜ ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ ืคื•ืŸ ื“ื™ ื”ืึทืฉ ื˜ื™ืฉ ืื™ื™ื“ืขืจ ื“ื™ ื–ื›ึผืจื•ืŸ ืื™ื– ืงืœื™ืจื“. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ื–ื™ื ื˜ ืžืขืœื“ื•ื ื’ 2.6.12-rc2. ื“ื™ ื‘ืึทืคืึทืœืŸ ืจื™ืงื•ื•ื™ื™ืขืจื– CAP_NET_ADMIN ืจืขื›ื˜, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื‘ืืงื•ืžืขืŸ ื“ื•ืจืš ืึทืงืกืขืก ืฆื• ืฉืึทืคึฟืŸ ื ืขืฅ ื ืึทืžืขืกืคึผืึทืกืขืก ืึธื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื ืึธืžืขืŸ ืกืคึผื™ื™ืกืึทื–. ื•ื•ื™ ืึท ื–ื™ื›ืขืจื”ื™ื™ื˜ ื•ื•ืึธืจืงืึทืจืึธื•ื ื“, ืื™ืจ ืงืขื ืขืŸ ื“ื™ืกื™ื™ื‘ืึทืœ ื“ื™ cls_route ืžืึธื“ื•ืœืข ื“ื•ืจืš ืึทื“ื™ื ื’ ื“ื™ ืฉื•ืจื” 'ื™ื ืกื˜ืึทืœื™ืจืŸ cls_route /bin/true' ืฆื• modprobe.conf.
  • CVE-2022-2586 ืื™ื– ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ื ืขื˜ืคื™ืœื˜ืขืจ ืกืึทื‘ืกื™ืกื˜ืึทื ืื™ืŸ ื“ื™ nf_tables ืžืึธื“ื•ืœืข, ื•ื•ืึธืก ื’ื™ื˜ ื“ื™ nftables ืคึผืึทืงืึทื˜ ืคื™ืœื˜ืขืจ. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ื“ื™ ืคืึทืงื˜ ืึทื– ื“ื™ nft ื›ื™ื™ืคืขืฅ ืงืขื ืขืŸ ื“ืขืจืžืึธื ืขืŸ ืึท ืกื›ื•ื ืจืฉื™ืžื” ืื™ืŸ ืืŸ ืื ื“ืขืจ ื˜ื™ืฉ, ื•ื•ืึธืก ืคื™ืจื˜ ืฆื• ืึทืงืกืขืก ืฆื• ื“ื™ ืคืจื™ื™ ื–ื™ืงืึธืจืŸ ื’ืขื’ื ื˜ ื ืึธืš ื“ื™ ื˜ื™ืฉ ืื™ื– ืื•ื™ืกื’ืขืžืขืงื˜. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ื–ื™ื ื˜ ืžืขืœื“ื•ื ื’ 3.16-rc1. ื“ื™ ื‘ืึทืคืึทืœืŸ ืจื™ืงื•ื•ื™ื™ืขืจื– CAP_NET_ADMIN ืจืขื›ื˜, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื‘ืืงื•ืžืขืŸ ื“ื•ืจืš ืึทืงืกืขืก ืฆื• ืฉืึทืคึฟืŸ ื ืขืฅ ื ืึทืžืขืกืคึผืึทืกืขืก ืึธื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื ืึธืžืขืŸ ืกืคึผื™ื™ืกืึทื–.
  • CVE-2022-2585 ืื™ื– ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ POSIX ืงืคึผื• ื˜ื™ื™ึทืžืขืจ ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ื“ื™ ืคืึทืงื˜ ืึทื– ื•ื•ืขืŸ ื’ืขืจื•ืคึฟืŸ ืคึฟื•ืŸ ืึท ื ื™ื˜-ืœื™ื“ื™ื ื’ ืคืึธื“ืขื, ื“ื™ ื˜ื™ื™ึทืžืขืจ ืกื˜ืจื•ืงื˜ื•ืจ ื‘ืœื™ื™ื‘ื˜ ืื™ืŸ ื“ืขืจ ืจืฉื™ืžื”, ื˜ืจืึธืฅ ืงืœื™ืจื™ื ื’ ื“ื™ ื–ื™ืงืึธืจืŸ ืึทืœืึทืงื™ื™ื˜ื™ื“ ืคึฟืึทืจ ืกื˜ืึธืจื™ื“ื–ืฉ. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ื–ื™ื ื˜ ืžืขืœื“ื•ื ื’ 3.16-rc1.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’