Futhi I-Linux ibhekene nenselele entsha ngokuvela kwe-"Dirty Frag"futhi kunezinhlobo eziningi zobuthakathaka eyaziwa ngokuthi i-Copy Fail 2. Lolu sethi lwamaphutha amakhulu, ahlonzwe ngokusemthethweni ngaphansi kwe-CVE-2026-43284 kanye ne-CVE-2026-43500 yokubhalisa, luvumela umsebenzisi wendawo ongenamalungelo ukuthola ukufinyelela okugcwele komlawuli ngokubhala ngaphezulu idatha ngqo ku-cache yekhasi lesistimu yokusebenza.
Kushiwo lokho Usongo luye lwabonakala luguquguqukayo kakhulu futhi luyingozingoba umcwaningi ukwazile ukuthuthukisa umsebenzi wokusebenzisaikwazi ukwehlisa cishe konke ukusatshalaliswa kwamanje, okuphoqa abaphathi bezinhlelo ukuthi bathathe isinyathelo ngokushesha lapho bebhekene nenkinga evele ngokushesha kunokulindelekile ngenxa yokuvuza kolwazi ngengozi.
I-Dirty Frag akuyona inkinga engavamile, kodwa kunalokho Kuhlanganisa ubuthakathaka obubili obuhlukile obuhlala ezinhlelweni ezizimele ye-Linux kernel:
- Imojula ye-xfrm-ESP: inesibopho sokusheshisa imisebenzi yokubethela ye-IPsec kusetshenziswa iphrothokholi ye-Encapsulated Security Payload,
- Isilawuli se-RxRPC: sinomthwalo wokuphatha izingcingo zenqubo ekude ngokuxhumeka kwe-UDP.
Nakuba zisebenza ezindaweni ezahlukene futhi zethulwa eminyakeni ehlukene, Zombili izithiyo zinohlelo olufanayo lokuhlasela oluvela ekuqaleni ngenxa yokulungiswa okungalungile ekuphathweni kwememori. Kuye ngokucushwa kokuphepha kanye namamojula alayishiwe ekusakazweni ngakunye, Umhlaseli angasebenzisa enye noma enye indlela ukuze andise amalungelo akhe futhi athathe izintambo ngokuphelele kweseva ethintekile.
Ukulungiswa okungalungile kanye nokuphathwa kwememori
Indlela yangaphakathi yokusebenza kwalokhu buthakathaka Ifana ngendlela emangalisayo ne ukwehluleka kwesakhiwo kwamuva nje Ukuhluleka KokukopishaInkinga eyinhloko iqala ngesikhathi senqubo yokuqaqa idatha endaweni efanayo yememori, eyaziwa ngokuthi imisebenzi "esendaweni", ngokusebenzisa umsebenzi othile wokudlulisa amafayela.
Ngokuhambisa idatha phakathi kwezincazelo namapayipi ngaphandle kokuyikopisha ngokoqobo ukuze kulondolozwe izinsiza, uhlelo ludlulisela izinkomba eziqondile ezintweni ezigcinwe kunqolobane yekhasi. Iphutha elibalulekile Lokhu kwenzeka ngenxa yokushintshashintsha kokubhala Phakathi nale nqubo, kwenziwa izibalo ngaphandle kokusebenzisa ukuhlolwa kokuphepha okufanele kulolu hlobo lwereferensi eqondile, okuvumela isicelo esinonya esenziwe ngokucophelela ukuthi sibhale ngaphezulu amabhayithi amane ngqo kunqolobane yanoma yiliphi ifayela elilayishwe ohlelweni.
Ingozi Kulele endleleni izinhlelo zokusebenza zesimanje ezilawula ngayo ukusebenza kahle kokufunda amafayelaNjengoba noma yisiphi isicelo sokufunda siqala ngokuthola ulwazi oluvela ku-RAM page cache ukuze kusheshiswe ukusebenza, Ushintsho kulesi sikhala esiguquguqukayo lubangela ukuthi i-kernel ilethe idatha mbumbulu esikhundleni sokuqukethwe kwangempela. igcinwe ngokuphephile ku-hard drive.
Indlela yokusebenzisa isebenzisa lobu buchwepheshe ukuguqula inguqulo egciniwe yefayela elibalulekile elisebenzisekayo elinamalungelo amakhulu omsebenzisi, ifaka ikhodi enonya ngqo kwimemori. Uma leli thuluzi elithintekile selisetshenziswa, uhlelo lucubungula ikhodi efakiwe ngamalungelo aphelele, lunikeze ukufinyelela okusheshayo kwempande ngaphandle kokushintsha ifayela langempela elingokoqobo.
Ukuxhashazwa nokuvuza kwe-patch yokuphepha
Ukuze kufezwe ngempumelelo lokhu kuhlasela, Umenzi wobubi udinga ukugwema izindlela ezithile zokuzivikela kuye ngokuthi iyiphi imojuli eqondiweUbuthakathaka obukhona ohlelweni olungaphansi I-xfrm-ESP idinga ukuthi umsebenzisi abe nezimvume zokudala izikhala zamagamaLesi isenzo esiqinisa ukusatshalaliswa njengo-Ubuntu ngokuzenzakalelayo sisebenzisa imithetho eqinile ye-AppArmor. Kodwa-ke, ukuze balwe nalezi zihlangu, abacwaningi bathuthukise i-exploit ehlangene ehlasela ne-module ye-RxRPC, evame ukulayishwa ngokuzenzakalelayo ezinhlotsheni eziningi zezinhlelo. Lokhu kuguquguquka kubavumele ukuqinisekisa ukusebenza kahle kokuhlasela kokukhushulwa kwezinguqulo zakamuva ezizinzile zokusatshalaliswa kwe-Linux.
Ukuphathwa kwale nkinga kubhekane nokuphazamiseka okukhulu kokusebenza lapho Imininingwane ebalulekile yobuchwepheshe iputshukile ngaphambi kosuku lokukhishwa oluhleliweEkupheleni kuka-Ephreli, Kuthunyelwe amapheshana amaningana okulungisa ohlwini lweposi lomphakathi ukuthuthukiswa kwenethiwekhi ngaphandle kwesixwayiso mayelana nobudlelwano bayo obuqondile nobuthakathaka obukhulu bokwanda kwamalungelo.
Un Umcwaningi wezokuphepha ozimele uhlaziye lezi zinguquko. endaweni yokugcina impahla, Waqaphela ukufana kobuthakathaka bokuqala be-Copy Fail futhi wakwazi ukuthuthukisa nokushicilela i-exploit esebenzayo.Wayengazi nhlobo ukuthi kukhona ukuvimbela ubumfihlo. Ngenhlanhla, Izinguqulo ze-kernel zokulungisa seziqalile ukusatshalaliswa ngobuningi Ukuze kuxazululwe izikhala, kanye nalezo zinhlelo ezingakakwazi ukusebenzisa izibuyekezo zokugcina, kunconywa kakhulu ukuthi kuvinjwe ukulayishwa ngesandla kwamamojula e-esp4, esp6, kanye ne-rxrpc njengesinyathelo sokunciphisa isimo esiphuthumayo.
Okokugcina, uma unesithakazelo sokufunda okwengeziwe ngalokhu, ungaxhumana ne- imininingwane kusixhumanisi esilandelayo.