U-Jason A. Donenfeld, umbhali we-VPN WireGuard, udonse ukunaka konjiniyela ekugegeleni okungcolile okukhona kukhodi ye-Linux kernel eshintsha ukuziphatha kwezinqubo igama lalo eliqala ngohlamvu "X". Uma uthi nhlá nje, ukulungisa okufana nalokhu kuvame ukusetshenziswa kuma-rootkits ukushiya imbobo efihliwe ekubopheni inqubo, kodwa ukuhlaziya kubonise ukuthi ushintsho lwengezwe ngo-2019 ukuze kulungiswe okwesikhashana ukwephulwa kokuhambisana kwendawo yomsebenzisi okwase kuvele, ngokuvumelana nesimiso sokuthi izinguquko ku-kernel akufanele zephule ukusebenzisana kohlelo lokusebenza.
Izinkinga ziphakame lapho kuzanywa ukusebenzisa indlela yokushintsha imodi yevidiyo ye-athomu kumshayeli we-DDX we-xf86-video-modesetting osetshenziswa kuseva ye-X.Org, okubangele ukubophezela ezinqubweni eziqala ngohlamvu oluthi “X” (kwacatshangwa ukuthi kusetshenziswe indlela yokusebenza. ku "xorg"). Cishe ngokushesha, inkinga ku-X.Org yalungiswa (ukusetshenziswa kwe-atomic API kukhutshazwe ngokuzenzakalela), kodwa ukulungiswa kwesikhashana kwalibaleka ukukhishwa ku-kernel, nomzamo wokuthumela i-ioctl ukushintsha imodi ye-athomu. zonke izinqubo eziqala ngohlamvu "X" zisaqhubeka nomphumela wokubuyisela iphutha. uma (okwamanje->comm[0] == 'X' && req->value == 1) {pr_info("indawo yomsebenzisi yemodethi ephukile ye-athomu itholiwe, ikhubaza i-athomu\n"); buyisela -EOPNOTSUPP; }
Source: opennet.ru