Greg Kroah-Hartman, ndiani ane basa rekuchengetedza bazi rakagadzikana reLinux kernel akazivisa Ndave ndichinwa kwemazuva akati wandei sarudzo yekuramba chero shanduko kubva kuYunivhesiti yeMinnesota kuenda kuLinux kernel, uye dzosera ese akambogamuchirwa zvigamba uye oatarisazve.
Icho chikonzero chekuvharirwa yaive zviitiko zveboka rekutsvaga iyo inoongorora mukana wekusimudzira kusagadzikana kwakavanzika mukodhi yemapurojekiti akavhurika, nekuti iri boka rakatumira zvigamba zvinosanganisira kukanganisa kwemhando dzakasiyana.
Tichifunga nezve mamiriro ekushandisa pointer, hazvina musoro uye chinangwa chekutumira chigamba kwaive kuongorora kana shanduko isiriyo ingapfuure kuongorora kwevagadziri vekernel.
Pamusoro peichi chigamba, Pakave nekumwe kuedza kwevagadziri kuYunivhesiti yeMinnesota kuita shanduko dzinopokana kune kernel, kusanganisira izvo zvine chekuita nekuwedzera kusagadzikana kwakavanzika.
Mupiro akatumira zvigamba akaedza kuzvipembedza kuyedza nyowani static analyzer uye shanduko yakagadziriswa zvichienderana nemhedzisiro yekuyedza pairi.
Asi Greg akakwevera kune chokwadi chekuti izvo zvinongedzo zvekugadzirisa hazvisi zvakajairika yemakanganiso akawanikwa neakadzika akaongorora, uye zvigamba zvakatumirwa hazvigadzirise chero chinhu. Sezvo iro boka revatsvakurudzi vari mubvunzo vatove vamboedza munguva yakapfuura kuunza mhinduro nehunhu hwakavanzika, zviri pachena kuti vakaenderera mberi nekuedza kwavo munharaunda yenharaunda yekusimudzira.
Sezvineiwo, munguva yakapfuura, mutungamiri weboka rekuyedza akave nechekuita mukugadzirisa kwehutachiona hwepamutemo, senge ruzivo rwekudonhedza pane USB stack (CVE-2016-4482) uye network (CVE-2016-4485).
Mune ongororo yekupararira kwekushomeka kwekushomeka, timu yeYunivhesiti yeMinnesota inodudza muenzaniso wekushupika kweCVE-2019-12819, kwakakonzerwa nechigamba chakagamuchirwa mukernel muna 2014. Mhinduro yacho yakawedzera put_device kufona kune block yekukanganisa kubata mu mdio_bus, asi makore mashanu gare gare zvakaratidzwa kuti kumanikidza kwakadai kunoguma nekushandisa-mushure-mahara kuwana kune memory memory.
Panguva imwecheteyo, vanyori vekudzidza vanoti mune ravo basa vakapfupisa dhata pane 138 zvigamba zvinounza zvikanganiso, asi hazvina hukama nevatori vechidzidzo.
Kuedza kuendesa ako ega bug zvigamba kwaive kwakaganhurirwa kune tsamba tsamba uye shanduko dzakadaro hadzina kusvika paGit kuita nhanho mune chero kernel bazi (kana mushure mekutumira tsamba pachigadziko muchengeti akawana chigamba kuva chakajairika, ipapo wakakumbirwa kuti usasanganise shanduko nekuti paita chikanganiso, mushure meizvozvo chigamba chakakodzera chaive kutumirwa).
Zvakare, nekutonga nezvinoitwa nemunyori wezvakatsoropodzwa gadzirisa, anga achisimudzira zvigamba kune akasiyana kernel subsystems kwenguva yakareba. Semuenzaniso maRadeon uye madhiraivha evavekupedzisira vakatora shanduko kune pm_runtime_put_autosuspend (dev-> dev) block block, zvinogona kutungamira mukushandiswa kweye buffer mushure mekusunungura inoenderana memory.
Izvo zvinotaurwa zvakare kuti Greg akakungurutsa kumashure mazana zana nemakumi mashanu akabatana uye akatanga ongororo nyowani. Dambudziko nderekuti @ umn.edu vabatsiri havana kungoedza kusimudzira zvigamba zvisina mubvunzo, vakagadzirisa kusasimba chaiko, uye kudzosera kumashure shanduko dzinogona kutungamira kudzoka kweakambogadziriswa nyaya dzekuchengetedza. Vamwe vanochengetedza vakatotarisa shanduko dzisina kugadzirwa uye havana kuwana matambudziko, asi paivewo nemabhureki emabhureki.
Dhipatimendi reComputer Science paYunivhesiti yeMinnesota rakapa chirevo kuzivisa kumiswa kwekuferefetwa munzvimbo ino, kutanga kuvimbiswa kwenzira dzinoshandiswa nekuita ongororo yekuti ongororo iyi yakabvumidzwa sei. Mhedzisiro yemhedzisiro ichagovaniswa nharaunda.
Pakupedzisira Greg akataura kuti akacherekedza mhinduro kubva kunharaunda uye akafunga zvakare nzira yekutsvaga nzira dzekubiridzira maitiro ekudzokorora. Mune maonero aGreg, kuitisa kuyedza kwakadai kuunza shanduko dzinokuvadza hakugamuchirwe uye hakuna hunhu.
mabviro: https://lkml.org