Ukukhawulezisa i-AI entsha kunye nokunciphisa imingcipheko yoKhuseleko: Ukuntywila ngokunzulu kwi-WeVisOne-VL kunye ne-Dirty Frag Kernel Zero-Day Sesichengeni

Ukukhawulezisa i-AI entsha kunye nokunciphisa imingcipheko yoKhuseleko: Ukuntywila ngokunzulu kwi-WeVisOne-VL kunye ne-Dirty Frag Kernel Zero-Day Sesichengeni

*I-open-sourcing ye-WeVisOne-VL, i-Visual-Language Model edibeneyo (VLM), inamandla okuguqula intsimi yombono wekhompyutha, kodwa ukufunyanwa kutshanje kwe-Dirty Frag kernel ye-zero-day vulnerability ibeka isoyikiso esibalulekileyo kukhuseleko lwe-Linux-based systems. iziphumo kunye nezicwangciso-qhinga zokunciphisa ezinokubakho.

WeVisOne-VL: I-VLM eManyeneyo yoMbono weMisebenzi yeKhompyutha

I-WeVisOne-VL yinkqubela phambili ebalulekileyo kwinkalo yombono wekhompyutheni, njengoko idibanisa amandla okubona into, i-pixel-level segmentation, kunye ne-Optical Character Recognition (OCR) kwimodeli enye. Le ndlela idityanisiweyo yenza ukuba imodeli ibambe uluhlu olubanzi lweempawu ezibonakalayo kunye neelwimi, iyenze ifaneleke kwizicelo ezahlukeneyo, kubandakanywa uhlalutyo lwemifanekiso kunye nevidiyo, iinkqubo ezizimeleyo, kunye nokusebenzisana kwekhompyutha yomntu.

Uyilo lwe-WeVisOne-VL lusekelwe kwisakhelo sokufunda semisebenzi emininzi, evumela ukuba imodeli ifunde imisebenzi emininzi ngaxeshanye. Le ndlela ivumela imodeli ukuba isebenzise ulwazi ekwabelwana ngalo kuyo yonke imisebenzi, okukhokelela kuphuculo lokusebenza kunye nokusebenza kakuhle.

Njengoko kubonisiwe kwitheyibhile engentla, i-WeVisOne-VL igqwesa imodeli yesiseko kuyo yomithathu imisebenzi, ibonisa ukusebenza kwayo ekubambeni uluhlu olubanzi lweempawu ezibonakalayo kunye neelwimi.

I-Dirty Frag Kernel Zero-Day Sesichengeni: I-Critical Security Risk

I-Dirty Frag kernel ye-zero-day secheneral ngumba obalulekileyo wokhuseleko ochaphazela uninzi losasazo lweLinux, evumela abasebenzisi abangenalungelo ukuba bafumane ukufikelela kweengcambu. Obu buthathaka bubhekiselele ngakumbi, njengoko bunokuxhatshazwa ngabahlaseli ukufumana ulawulo kwiinkqubo ezisekwe kwiLinux, ezisetyenziswa ngokubanzi kwikhompyuter yelifu, iiseva, kunye nezinye iziseko ezingundoqo.

Ukuba sesichengeni kubangelwa sisiphene kwi-Linux kernel yokuphatha iipakethi eziqhekekileyo, ezinokuthi zisetyenziswe ngabahlaseli ukwenza ikhowudi engafanelekanga kunye namalungelo aphezulu. Ukunciphisa obu buthathaka, abasebenzisi beLinux banokufaka isiqwenga esibonelelwe luluntu lwe-Linux kernel okanye basebenzise iqonga lesikhongozeli esifana neDocker, esinika umaleko owongezelelweyo wokhuseleko.

# Umzekelo wekhowudi yokujonga ukuba semngciphekweni kweFrag emdaka
inkqubo engaphantsi komhlaba

def check_dirty_frag_vulnerability():
    # Qhuba umyalelo ukujonga ukuba sesichengeni
    imveliso = subprocess.check_output(["igama", "-r"])
    kernel_version = output.decode("utf-8").strip()

    # Jonga ukuba i-kernel version isengozini
    ukuba kernel_version < "5.15.0-25":
        print("Inkqubo isesichengeni kwiDirty Frag")
    enye into:
        print("Inkqubo ayikho sesichengeni kwiDirty Frag")

check_dirty_frag_vulnerability()

💡 IsiNto esiThathayo: IDirty Frag kernel zero-day sesichengeni ngumngcipheko wokhuseleko obalulekileyo ochaphazela uninzi losasazo lweLinux. Abasebenzisi beLinux kufuneka bafake isiziba esibonelelwe luluntu lwe-Linux kernel okanye basebenzise iqonga lesikhongozeli esifana neDocker ukuthomalalisa obu sesichengeni.

Ukunciphisa imingcipheko yoKhuseleko ngokuFakwa komgqomo kunye neebhokisi zeSand zeMicroVM

Amaqonga okufaka umgqomo afana ne-Docker kunye neebhokisi zesanti ze-microVM ezifana ne-gVisor zinokubonelela umaleko owongezelelweyo wokhuseleko ngokuchasene nokuba semngciphekweni kwe-kernel njenge-Dirty Frag. Ezi qonga zisebenzisa i-virtualization yenqanaba lenkqubo yokusebenza ukwahlula izicelo kunye neenkonzo, zibathintele ekufikeleleni kwimithombo yenkqubo ebuthathaka.

# Umzekelo wokucwangciswa kweDocker ukunciphisa ubungozi beFrag emdaka
inguqulelo: "3"
iinkonzo:
  inkonzo yam:
    umfanekiso: umfanekiso wam
    qala kwakhona: rhoqo
    ukhuseleko_ukhetho:
      - akukho-entsha-privs

⚠️ UMngcipheko woYilo: Ngelixa i-container kunye neebhokisi zesanti ze-microVM zinokunika umaleko owongezelelweyo wokhuseleko, azinabubhanxa kwaye zinokuba sesichengeni kolunye uhlobo lohlaselo. Ke ngoko, kubalulekile ukuphumeza isicwangciso esibanzi sokhuseleko esibandakanya uhlaziyo rhoqo, iipatches, kunye nokubeka iliso.

Iingcebiso zokusasazwa okuKhuselekileyo

Ukuqinisekisa ukuthunyelwa ngokukhuselekileyo kwe-WeVisOne-VL kunye nokunciphisa imingcipheko eyayanyaniswa nokuba sesichengeni seDirty Frag, sicebisa oku kulandelayo:

• Faka isiziba esibonelelwe luluntu lwe-Linux kernel ukulungisa ukuba sesichengeni kweDirty Frag
• Sebenzisa iqonga lokufaka isikhongozeli njengeDocker ukunika umaleko owongezelelweyo wokhuseleko
• Sebenzisa isicwangciso esibanzi sokhuseleko esibandakanya uhlaziyo rhoqo, amabala, kunye nokubeka iliso
• Sebenzisa iibhokisi zesanti ze-microVM njenge-gVisor ukwahlula usetyenziso kunye neenkonzo

Imithombo

• Tencent's WeVisOne-VL — Uvimba osemthethweni we-WeVisOne-VL, i-Visual-Language Model (VLM) emanyeneyo yemisebenzi yekhompyutha.
• I-Linux Kernel Archives - Uvimba osemthethweni wekhowudi yomthombo wekernel yeLinux kunye neepetshi.
• Ukhuseleko lweDocker - Amaxwebhu asemthethweni eempawu zokhuseleko zeDocker kunye nezenzo ezingcono.
• gVisor — Iwebhusayithi esemthethweni ye-gVisor, i-microVM sandbox yokukhusela usetyenziso kunye neenkonzo.
• I-Dirty Frag: i-kernel zero-day vs. container and microVM sandboxes — Ingxoxo ngeDirty Frag kernel ukuba sesichengeni kweentsuku zero kunye nokuncitshiswa kwayo kusetyenziswa isikhongozeli kunye neebhokisi zesanti ze-microVM.