Uma exhashazwa, lawa maphutha angavumela abahlaseli ukuthi bathole ukufinyelela okungagunyaziwe kulwazi olubucayi noma ngokuvamile babangele izinkinga.
La Ukuphepha kwe-Linux kuthinteke kakhulu ezinsukwini zakamuva futhi ubhekene nenkinga yokusebenza engakaze ibonwe ngaphambili ngokutholakala kweFragnesia (CVE-2026-46300), okubikwa ukuthi kuyingozi kakhulu okwesine.
Yaziwa nangokuthi i-Copy Fail 3.0 yithimba locwaningo le-V12 elibhekele ukutholakala kwayo, lokhu Iphutha lokwenyuka kwamalungelo endawo lidalula i-vector yokuhlasela yendawo yonke futhi inembe kakhulu. Njengezandulela zayo, i-Fragnesia ivumela umsebenzisi ongenamalungelo ukuthola ukufinyelela okuphelele komlawuli ngokubhala ngaphezulu idatha ngqo ku-RAM page cache, ngaphandle kokushintsha amafayela angokoqobo ku-hard drive. Nakuba ihlanganyela i-attack vector efanayo ne- I-Dirty Frag ngaphakathi kwesistimu encane ye-xfrm-ESPUhlobo lwayo luvela ephutheni elinengqondo elihluke ngokuphelele eliye ladinga ukwakheka kwe-patch yokunciphisa ezimele nephuthumayo.
Okwenza i-Fragnesia ibe yingozi kakhulu ukuthi ikhono lokwenza i-byte engahleliwe ibhalela amafayela okufunda kuphela ngaphandle kokuthembela ezimweni zomjaho eziyinkimbinkimbiUbuthakathaka bubangelwa indlela yokufaka i-ESP-in-TCP protocol, okwembula ukuthi ama-patches akhishwe ngaphambilini ayenganele noma, ngokumangalisayo, adale izimo zokudala ngengozi lobu buthakathaka obusha kuma-kernel akhishwe kuze kube nguMeyi 13, 2026. Ngekhodi yokusebenza esebenza ngokugcwele, etholakala emphakathini. isiyatholakala manje, Abaphathi bezinhlelo babhekene nomncintiswano wokumelana nesikhathi ukuze baqalise ukuvalwa kwezwe okwesikhashana kuyilapho ukusatshalaliswa okukhulu kuthumela ukulungiswa kokugcina ezindaweni zabo zokugcina.
Ukukhohlwa Kwezingcezu kanye Nokufakwa Kwe-Cryptographic kwe-AES-GCM
El Umsuka we-Fragnesia usephutheni lokucabanga ngaphakathi kokuphathwa kwe-buffer yenethiwekhi ye-kernel. iphutha eliphakathi livela ngoba i-buffer (skb) ngokwezwi nezwi "uyakhohlwa" ukuthi ingxenye yenkumbulo Kusabelwana ngakho ngesikhathi senqubo yokuhlanganisa idatha. isokhethi le-TCP lenza ushintsho kumodi yezinga lomsebenzisi (ULP) espintcp ngemva kokuba idatha isivele idluliselwe kusuka kufayela kuya emgqeni wokwamukela, I-kernel yenza iphutha elibi kakhulu lokucubungula amakhasi efayela afakwe emgqeni njengokungathi ayi-ciphertext ye-ESP esemthethweni. Emzamweni wokwenza ngcono ukusebenza nokugwema isitoreji esingadingekile, uhlelo lusebenzisa i-algorithm ye-cryptographic ye-AES-GCM ngqo ku-cache yekhasi lusebenzisa umsebenzi we-XOR osendaweni. Ngokusebenzisa ngokucophelela i-initialization vector (IV), noma i-nonce, umhlaseli angaphoqa uhlelo ukuthi lukhiqize i-byte ethile kusuka ku-keystream, ngaleyo ndlela abhale phansi noma iyiphi i-target byte efayeleni ngenani elifanele.
Amathebula okubheka kanye nokuguqulwa kwama-binary avikelwe
El Ukuhlasela kuqala ngokuhlukanisa inqubo endaweni entsha yomsebenzisi kanye nesikhala senethiwekhi., lapho yena umhlaseli ufaka inhlangano yokuphepha ye-ESP yemodi yokuthutha enokhiye owaziwayo. Okulandelayo, Uhlelo lwakha ithebula lokubheka elinokufakwa okungu-256 okubala i-byte ngayinye engaba khona kokusakaza kokhiye we-cryptographic kanye nonce yayo efanele. Ukusebenzisa ukudluliselwa kwememori eqondile (i-splice), umhlaseli ilayisha ifayela elisebenzisekayo ku-cache yekhasi ukugxeka uhlelo ngesethi ye-suid bit, Ngokuvamile i-/usr/bin/su utility. Ukuphindaphinda ngokucophelela i-byte nge-byte bese kudala iphutha ngokuphindaphindiwe, Isofthiwe isusa amabhayithi okuqala angu-192 ensizakalo yokuqala ngekhodi encane esebenzisekayo. (stub) ngaphandle kwesikhundla. Lapho umyalo oshintshiwe ususetshenziswa ekugcineni, uhlelo lokusebenza alunaki ifayela elivikelekile ku-hard drive bese lusebenzisa inguqulo eyonakele kusukela ku-cache, ngokushesha lunikeza iseshini ye-superuser noma i-root shell.
Imikhawulo yemvelo kanye nezinqubo zokuhlanza ezibalulekile
Naphezu kokuba yinto esetshenziswayo, ukuphumelela kwayo kuncike esimweni esithile semvelo.: ikhono lokudala izikhala zamagama zomsebenzisi ezingenamalungelo. Ezinhlelweni ezinezilungiselelo ezizenzakalelayo ezikhawulelwe, njengo-Ubuntu ngamaphrofayili ayo asebenzayo e-AppArmor, Ukuhlasela kuvinjelwe esigabeni sako sokuqala ngaphandle kokuthi umphathi ushintshe amapharamitha ye-kernel ukuze kusebenze lo msebenzi.
Isici esibalulekile salokhu kuhlasela ukuqhubeka kwesikhashana kokutheleleka. Ngenxa yokuthi i-binary eshintshiwe ihlala ku-cache yekhasi, noma yikuphi ukwenziwa okusemthethweni okulandelayo komyalo othelelekile kusazovula amaseshini ezimpande angafuneki. Ngakho-ke, kubalulekile ukuthi amaqembu okuphepha ahlanze ngokushesha i-cache yesistimu esebenzisa amathuluzi ememori abonakalayo ngemva kwanoma yikuphi ukuhlaselwa kobufakazi bomqondo.
Ukuze kuncishiswe usongo kumaseva okukhiqiza kuze kufike ama-patches asemthethweni, isincomo sobuchwepheshe ukukhubaza ngokuphelele ukulayishwa kwamamojula e-esp4, esp6, kanye ne-rxrpc ekucushweni komhlaba wonke kwe-kernel.
Okokugcina, uma ungathanda ukwazi okwengeziwe ngakho, ungabheka imininingwane Kulesi sixhumanisi esilandelayo.