Ezinsukwini ezimbalwa ezedlule, abacwaningi base-Secure Disclosure baveze iphutha elibalulekile ekwakhiweni kwama-Unisoc SoCs, okuvumela umhlaseli ukuthi alawule ngokuphelele uhlelo ngokushaya ucingo lwevidiyo olulula.
Lokhu kuba sengozini kwembula uchungechunge lokuxhaphaza olunezigaba ezimbili oluphetha ngokusetshenziswa kwekhodi yezinga le-kernel. Okushaqisa kakhulu ukuthi umenzi we-semiconductor, osebenzisa ama-chips avela kumikhiqizo efana ne-Motorola, i-Realme, ne-Xiaomi emazweni angaphezu kwe-140, akakakhiphi noma iyiphi i-patch noma impendulo esemthethweni, okushiya izigidi zamadivayisi zichayeke ekuhlaselweni kokwenyuka kwamalungelo endawo ngaphandle kokuxhumana komsebenzisi.
Ukuhlaziywa kochungechunge lokuxhashazwa
Ukuhlasela kuqala ngaphandle ngokulawula inethiwekhi yeselula yangasese ye-4G . Ukuze bakhe indawo yokuhlola, abacwaningi basebenzise inethiwekhi eyinhloko yomthombo ovulekile esekelwe ku-Open5GS kanye ne-Kamailio, exhunywe ngomsakazo ochazwe yisoftware (i-LimeSDR) kanye namakhadi e-SIM akhethekile.
Kusukela kule ngqalasizinda, umhlaseli uqala ikholi yevidiyo esebenzisa ubuthakathaka be- Remote Code Execution (RCE) ku-firmware yemodemu , eyatholakala ngoMashi 2026. Umhlaseli uthumela amaphakethe e-SIP angalungile. Lapho isisulu siphendula ucingo, ingxenye yokuqala yokuhlasela ithelela imodemu yedivayisi, isungula uhlaka oludingekayo lokuqalisa isigaba sesibili nesibhubhisa kakhulu sokungenelela.
Ubungozi (CWE-1189)
Inkinga yangempela yokuphepha ilele ephutheni elihlukaniswe njenge-CWE-1189, elichaza ukuhlukaniswa okunganele kwezinsiza ezabiwe . Kuma-chips e-Unisoc, iprosesa yemodemu kanye neprosesa yohlelo lokusebenza (lapho i-Android isebenza khona) babelana ngesikhala sememori esifanayo.
Ngenxa yokuthi akukho ukuhlukaniswa okuqinile kwehadiwe, ikhodi enonya esetshenziswa kumodemu ingashintsha amarejista e-coprocessor esakhiwo se-ARM. Esebenzisa imiyalelo ethile yolimi lomhlangano, umhlaseli ukhubaza ukuvikelwa kwesifunda sokuqala (ID 0) se-Memory Protection Unit (MPU). Lokhu kulungiswa kabusha kumepha yonke indawo yekheli elingokoqobo elingu-32-bit njengelifundekayo, elibhalwe phansi, nelisebenzisekayo, okuveza ngqo ikheli elingokoqobo lapho kuhlala khona i-kernel ye-Android.
Kodwa-ke, ukufaka ikhodi yokugcina akuyona into elula ngenxa yemikhawulo yephrothokholi yenethiwekhi. Umlayezo we-SIP osetshenziswa njenge-vector yokuhlasela uhlukanisa umthwalo okhokhelwayo ube amabhlogo enkumbulo asakazeke kuyo yonke inqwaba yemodemu, ahlukaniswe izikhala ezingenalutho. Ukuze banqobe lokhu, abahlaseli basebenzise indlela eyinkimbinkimbi ethi "Egg Hunter" ebhalwe ngolimi lokuhlanganisa.
Lolu hlelo oluncane luhlola imemori yemodemu ngendlela ehlelekile ukuthola isiginesha esithile se-hexadecimal esibonisa ukuqala kwengxenye ngayinye enonya. Uma isitholakala, i-"Egg Hunter" ikhipha futhi ihlanganise kabusha amabhlogo ngokulandelana ekhelini elithile lememori, ivule indlela yokubhala kabusha i-kernel.
Njengoba umthwalo wokulayisha usuhlanganiswe kabusha ngokugcwele futhi ukuvikelwa kwe-MPU kukhutshaziwe, i-exploit iyaqhubeka nokufaka ikhodi enonya, noma i-shellcode, ngqo kwimemori yesistimu yokusebenza. Ukujova kuhlukaniswe izingxenye ezimbili zamasu: eyokuqala ibhala ngaphezulu umsebenzi wokuhambisana nesistimu, kanti eyesibili ifaka "i-jump ramp" noma i-execution jump emsebenzini wokuvula amafayela obalulekile wesistimu.
Ukuze kuvinjelwe ukuphahlazeka kwedivayisi okuvela ekusebenzeni okuningi, ikhodi ifaka i-mutex, noma i-mutual exclusion lock, esigabeni sememori esingaqalwanga. Lapho i-Android kernel izama ukusebenza ngokujwayelekile, i-springboard iqondisa kabusha ukugeleza kokusebenza ku-shellcode efakiwe, iqinisekisa ukufinyelela okugcwele ngokufaka impumelelo ye-exploit ngqo kumarejista e-kernel.
Leli zinga lokufinyelela akulona isigameko esingavamile emlandweni we-Unisoc, njengoba ngoNovemba 2025, abacwaningi beKaspersky babhale isimo esifanayo kuma-processor asetshenziswa ezinhlelweni zokuzijabulisa ngezimoto , kwathi ngo-2022 i-Check Point Research yabika ubuthakathaka obufanayo.
Nakuba amaqembu okuhlola eqinisekisile ukusebenza kahle kwalolu chungechunge olusha lokuxhaphaza kumamodeli akamuva njenge-Motorola E13, i-Realme C33, kanye ne-Xiaomi Redmi A5 kanye nama-patches okuphepha avuselelwe kuze kube ngu-2026, ukuntuleka kwempendulo evela kumenzi kanye nokungabikho kwezixazululo ezincwadini ze-Android akubonisi isithombe esihle kubasebenzisi.
Kuze kube yilapho kusetshenziswa isibuyekezo se-firmware yemodemu esiqinisa izinqubomgomo ze-Memory Protection Unit, ingqalasizinda yeselula yezigidi zabasebenzisi izohlala isengozini yabahlaseli abanekhono lokulingisa amanethiwekhi eselula.
Uma unesithakazelo sokufunda okwengeziwe, ungathola imininingwane kusixhumanisi esilandelayo.