Linux Kernel iyo Qualcomm Adreno GPU Nuglaanta Zero-Maalin: quusi qoto dheer
Kernel-ka Linux iyo Qualcomm Adreno GPU waxaa dhawaan saameeyay dayacanka eber-maalin ee halista ah, kuwaas oo ah Dirty Frag iyo saddex cilladood oo ku jira darawallada Adreno GPU. Nuglaantaani waxay keenaysaa khataro amni oo weyn, maadaama looga faa'iidaysan karo si loo helo xidid go'aamineed inta badan qaybinta Linux iyo wax u dhimida aaladaha Android.
Wasakh: Linux Kernel Nuglaanta Zero-Maalinta
Dirty Frag waa nuglaanta kernel Linux taasoo u oggolaanaysa isticmaaleyaasha aan mudnaanta lahayn inay helaan xidid go'aamin kara qaybinta Linux inta badan. Nuglaanta waxaa sababa cilad ku jirta sida uu u maamulo kernel-ka ee baakadaha kala jajaban, kaas oo looga faa'iidaysan karo in lagu fuliyo kood aan sabab lahayn oo leh mudnaan sare. Sida muujinta Hyunwoo Kim u sharaxo, nuglaanta waxay saamaysaa noocyada kernel Linux 5.10 iyo wixii ka dambeeya. Nuglaantani waxay si gaar ah u khusaysaa sababtoo ah waxaa looga faa'iidaysan karaa in la helo xididka xididka, taas oo u horseedi karta helitaan aan la ogalayn xogta iyo nidaamyada xasaasiga ah.
💡 ** Qaadashada Furaha:** Dirty Frag waa baylahda halista ah oo u baahan in si degdeg ah looga fiirsado xirfadlayaasha teknolojiyadda si loo dhejiyo oo loo sugo nidaamkooda. Nuglaanta ayaa laga faa'iidaysan karaa si loo helo xididka xididka, taas oo u horseedi karta helitaanka aan la ogolayn ee xogta iyo nidaamyada xasaasiga ah. Si loo yareeyo nuglaantan, isticmaalayaasha Linux waxa ay adeegsan karaan balastar ay bixiso bulshada kernel-ka Linux, kaas oo hagaajiya ciladaha ku jira sida loo maamulo kernel-ka ee baakadaha jajaban kana hortagaya ka faa'iidaysiga.
`` Python
Tusaalaha sida loo codsado balastarka Dirty Frag adoo isticmaalaya Git
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master git cherry-pick -x <patch_hash> ``
Intaa waxaa dheer, isticmaalayaashu waxay habayn karaan nidaamkooda si ay u isticmaalaan weelka iyo sanduuqyada ciidda ee microVM, kuwaas oo bixin kara lakab dheeraad ah oo ammaan ah oo ka dhan ah dayacanka kernel-ka. Tani waa sababta oo ah weelka iyo sanduuqyada bacaadka ee microVM waxay ka saari karaan kernel-ka nidaamka intiisa kale, iyaga oo ka hortagaya ka faa'iidaysiga dayacanka.
Qualcomm Adreno GPU cilladaha maalinta Zero-day
Qualcomm waxay wax ka qabatay saddex bayleelood oo halis ah oo eber-maalin ah darawaladeeda Adreno GPU, kuwaas oo looga faa'iidaysto weerarrada lala beegsaday aaladaha Android. Nuglaanta waxay saamaysaa maaraynta darawalka Adreno GPU ee qoondaynta xusuusta waxaana looga faa'iidaysan karaa in lagu fuliyo kood aan sabab lahayn oo leh mudnaan sare. Marka loo eego Bulletin Security Qualcomm, dayacanka ayaa saameeya Adreno GPU nooca darawalka 540 iyo wixii ka dambeeya.
| Nuglaanta | Sharaxaada | Noocyada ay saameeyeen |
|---|---|---|
| CVE-2026-43285 | Cilad qoondaynta xusuusta | Adreno GPU darawalka 540 iyo ka dib |
| CVE-2026-43286 | Cilad qoondaynta xusuusta | Adreno GPU darawalka 540 iyo ka dib |
| CVE-2026-43287 | Cilad qoondaynta xusuusta | Adreno GPU darawalka 540 iyo ka dib |
⚠️ ** Khatarta Dhismaha:** Cilladaha eber-maalin ee Qualcomm Adreno GPU waxay muujinayaan muhiimadda ay leedahay in darawallada aaladaha la casriyeeyo lagana ilaaliyo faa'iidooyinka suurtagalka ah. Ku guuldareysiga in sidaas la sameeyo waxay u horseedi kartaa helitaanka aan la ogolayn ee xogta iyo nidaamyada xasaasiga ah. Si loo yareeyo dayacanka kuwan, isticmaalayaasha Android waxa ay u cusboonaysiin karaan qalabkooda noocii u dambeeyay ee software, kaas oo uu ku jiro darawalka Adreno GPU ee la balaadhay.
``yml
Tusaalaha sida loo habeeyo boot aamin ah aaladda Android
qalab: ammaan_boot: run verified_boot: run ``
Isbarbardhigga Xeeladaha Yaraynta
Jadwalka soo socda ayaa isbarbar dhigaya xeeladaha yaraynta ee Dirty Frag iyo Qualcomm Adreno GPU nuglaanshaha eber-maalin:
| Xeeladda Yaraynta | Wasakh Frag | Qualcomm Adreno GPU |
|---|---|---|
| Ku dhejinta | Codso patch Linux kernel | Cusbooneysii Adreno GPU darawalka |
| Weel iyo sanduuqyada ciidda ee microVM | Habee weelka iyo sanduuqyada ciidda ee microVM | Ma khuseyso |
| Kabo sugan | Ma khuseyso | Habee hababka kabaha ee sugan |
Yaraynta iyo Ka Hortagga
Si looga hortago ka faa'iidaysiga dayacanka kuwan, isticmaalayaashu waa in ay xidhaan balastar, habeeyaan hababka kabaha ee sugan, oo ay isticmaalaan weel iyo sanduuqyo ciid microVM ah. Qaadashada tillaabooyinkan, isticmaalayaashu waxay ka hortagi karaan ka faa'iidaysiga dayacanka waxayna ilaalin karaan nidaamkooda iyo xogtooda. Sidoo kale waa lama huraan in la casriyeeyo wadayaasha aaladaha lagana ilaaliyo faa'iidooyinka suurtagalka ah.
Ilaha
- Dirty Frag: a eber-day kernel vs. weel iyo microVM sandboxes - Dood ku saabsan nuglaanta wasakhda Frag iyo saamaynta ay leedahay.
- Qualcomm Security Bulletin - Liiska wargelinta amniga iyo la-talinta alaabada Qualcomm, oo uu ku jiro darawalka Adreno GPU.
- Linux Kernel Archives - Kaydka koodhka isha kernel ee Linux iyo balastar.
- Android Security Bulletins - Liiska wargelinta amniga iyo la-talinta aaladaha Android.