Linux Kernel le Qualcomm Adreno GPU Zero-Day Vulnerations: A Deep Dive

Linux Kernel le Qualcomm Adreno GPU Zero-Day Kotsi: Ho qoela ka botebo

Linux kernel le Qualcomm Adreno GPU li sa tsoa angoa ke bofokoli bo matla ba matsatsi a zero, e leng Dirty Frag le liphoso tse tharo ho bakhanni ba Adreno GPU. Bofokoli bona bo baka likotsi tse kholo tsa ts'ireletso, kaha li ka sebelisoa hampe ho fumana phihlello ea metso ho liphaello tse ngata tsa Linux le ho senya lisebelisoa tsa Android.

Dirty Frag: Linux Kernel Zero-Day Vulnerability

Dirty Frag ke ts'oaetso ea kernel ea Linux e lumellang basebelisi ba se nang monyetla ho fumana phihlello ea metso ho tse ngata tsa Linux. Bofokoli bo bakoa ke bofokoli tseleng ea ho sebetsana le kernel ea lipakete tse arohaneng, tse ka sebelisoang hampe ho phethahatsa khoutu e nang le litokelo tse phahameng. Joalo ka ha tšenolo ea Hyunwoo Kim e hlalosa, ho ba kotsing ho ama mefuta ea Linux kernel 5.10 le hamorao. Bofokoli bona bo ama haholo hobane bo ka sebelisoa hampe ho fumana metso, e leng se ka lebisang phihlellong e sa lumelloeng ea data le litsamaiso tse hlokolosi.

💡 Nka ea bohlokoa: Dirty Frag ke tlokotsi e kholo e hlokang tlhokomelo ea hang-hang ho tsoa ho litsebi tsa theknoloji ho lokisa le ho sireletsa lisebelisoa tsa bona. Bofokoli bo ka sebelisoa hampe ho fumana phihlello ea metso, e ka lebisang phihlellong e sa lumelloeng ea data le litsamaiso tsa bohlokoa. Ho fokotsa tlokotsi ena, basebelisi ba Linux ba ka sebelisa patch e fanoeng ke sechaba sa Linux kernel, e lokisang phoso ea ho sebetsana le lipakete tse arohaneng tsa kernel le ho thibela tlhekefetso.

# Mohlala oa mokhoa oa ho sebelisa patch ea Dirty Frag u sebelisa Git
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
git cherry-khetha -x <patch_hash>

Ho feta moo, basebelisi ba ka hlophisa lits'ebetso tsa bona ho sebelisa li-container le microVM sandboxes, tse ka fanang ka tšireletso e eketsehileng khahlano le bofokoli ba kernel. Lebaka ke hobane li-sandbox tsa li-container le microVM li ka arola kernel ho tsoa tsamaisong eohle, ho thibela tšebeliso e mpe ea tlokotsi.

Liphoso tsa Qualcomm Adreno GPU Zero-Day

Qualcomm e sebetsane le likotsi tse tharo tsa bohlokoa tsa matsatsi a zero ho bakhanni ba eona ba Adreno GPU, tse ntseng li sebelisoa hampe litlhaselong tse lebisitsoeng khahlanong le lisebelisoa tsa Android. Bofokoli bo ama tsela eo mokhanni oa Adreno GPU a sebetsanang le kabo ea memori mme e ka sebelisoa hampe ho etsa khoutu e ikemetseng ka litokelo tse phahameng. Ho latela Bulletin ea ts'ireletso ea Qualcomm, bofokoli bo ama mefuta ea bakhanni ba Adreno GPU ea 540 le hamorao.

⚠️ Kotsi ea Mehaho: Liphoso tsa Qualcomm Adreno GPU tsa letsatsi le leng le le leng li totobatsa bohlokoa ba ho boloka likhanni tsa lisebelisoa li le nakong le ho itšireletsa khahlanong le lintho tse ka etsahalang. Ho hloleha ho etsa joalo ho ka lebisa phihlellong e sa lumelloeng ea data le litsamaiso tsa bohlokoa. Ho fokotsa bofokoli bona, basebelisi ba Android ba ka ntlafatsa lisebelisoa tsa bona ho mofuta oa morao-rao oa software, o kenyelletsang mokhanni oa Adreno GPU o patiloeng.

# Mohlala oa mokhoa oa ho lokisa boot e sireletsehileng sesebelisoa sa Android
sesebelisoa:
  secure_boot: 'nete
  verified_boot: 'nete

Papiso ea Maano a Phokotso

Tafole e latelang e bapisa maqheka a phokotso ea bofokoli ba Dirty Frag le Qualcomm Adreno GPU ea matsatsi a zero:

Phokotso le Thibelo

Ho thibela ts'ebeliso ea bofokoli bona, basebelisi ba tlameha ho sebelisa li-patches, ho lokisa mekhoa e sireletsehileng ea boot, le ho sebelisa li-container le microVM sandboxes. Ka ho nka mehato ena, basebelisi ba ka thibela tšebeliso ea bofokoli le ho sireletsa lits'ebetso le data ea bona. Ho bohlokoa hape ho boloka bakhanni ba lisebelisoa li ntse li le teng le ho sireletseha khahlano le ts'ebetso e ka bang teng.

##Mehloli

• Dirty Frag: a kernel zero-day vs. container and microVM sandboxes — Puisano mabapi le ho ba kotsing ya Dirty Frag le ditlamorao tsa yona.
• Qualcomm Security Bulletin — Lethathamo la litaba tsa tšireletso le likeletso bakeng sa lihlahisoa tsa Qualcomm, ho kenyeletsoa le mokhanni oa Adreno GPU.
• Linux Kernel Archives - Sebaka sa polokelo ea khoutu ea mohloli oa kernel ea Linux le lipache.
• Litlaleho tsa Ts'ireletso tsa Android — Lenane la litaba tsa tšireletso le likeletso bakeng sa lisebelisoa tsa Android.