Ailagbara ninu awakọ vhost-net lati ekuro Linux

Ninu awakọ vhost-net, eyiti o ṣe idaniloju iṣẹ ti virtio net lori ẹgbẹ agbegbe ogun, mọ ailagbara (CVE-2020-10942), gbigba olumulo agbegbe laaye lati pilẹṣẹ akopọ kernel kan nipa fifiranse ioctl ti a ṣe ni pataki (VHOST_NET_SET_BACKEND) si ẹrọ /dev/vhost-net. Iṣoro naa jẹ idi nipasẹ aini ijẹrisi to dara ti awọn akoonu ti aaye sk_family ni koodu iṣẹ get_raw_socket ().

Gẹgẹbi data alakoko, ailagbara naa le ṣee lo lati gbe ikọlu DoS agbegbe kan nipa jijẹ jamba ekuro (ko si alaye nipa lilo aponsedanu akopọ ti o fa nipasẹ ailagbara lati ṣeto ipaniyan koodu).
Ipalara imukuro ni Linux ekuro 5.5.8 imudojuiwọn. Fun awọn pinpin, o le tọpinpin itusilẹ ti awọn imudojuiwọn package lori awọn oju-iwe naa Debian, Ubuntu, RHEL, SUSE/ṣiiSUSE, Fedora, to dara.

orisun: opennet.ru

Fi ọrọìwòye kun