Linux Kernel ndi Qualcomm Adreno GPU Zero-Day Zowopsa: Kuzama Kwambiri
Linux kernel ndi Qualcomm Adreno GPU posachedwapa zakhudzidwa ndi zovuta zamasiku a zero, zomwe ndi Dirty Frag ndi zolakwika zitatu mu madalaivala a Adreno GPU. Zowopsa izi zimadzetsa ziwopsezo zazikulu zachitetezo, chifukwa zitha kugwiritsidwa ntchito kuti apeze mwayi wokhazikika pamagawidwe ambiri a Linux ndikusokoneza zida za Android.
Dirty Frag: Linux Kernel Zero-Day Vulnerability
Dirty Frag ndi chiwopsezo cha Linux kernel chomwe chimalola ogwiritsa ntchito opanda mwayi kupeza mizu yotsimikizika pamagawidwe ambiri a Linux. Chiwopsezochi chimayamba chifukwa cha kulephera kwa kernel pakusamalira mapaketi ogawika, omwe atha kugwiritsidwa ntchito kuti apereke ma code osagwirizana ndi mwayi wapamwamba. Monga Kuwulula kwa Hyunwoo Kim akufotokozera, kusatetezeka kumakhudza mitundu ya Linux kernel 5.10 ndi mtsogolo. Chiwopsezochi chimakhudza makamaka chifukwa chitha kugwiritsidwa ntchito kuti mupeze mizu, zomwe zingapangitse kuti anthu azitha kupeza zosavomerezeka za data ndi machitidwe.
💡 Key Takeaway: Dirty Frag ndichiwopsezo chachikulu chomwe chimafunikira chidwi chachangu kuchokera kwa akatswiri aukadaulo kuti amange ndikuteteza makina awo. Chiwopsezocho chingagwiritsidwe ntchito kuti mupeze mizu, zomwe zingayambitse mwayi wosaloleka wa deta ndi machitidwe. Kuti muchepetse chiopsezochi, ogwiritsa ntchito a Linux atha kuyika chigamba choperekedwa ndi gulu la Linux kernel, chomwe chimakonza zolakwika pamagwiridwe a kernel a mapaketi ogawika ndikuletsa kubedwa.
# Chitsanzo chamomwe mungagwiritsire ntchito chigamba cha Dirty Frag pogwiritsa ntchito Git
git tenga https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
git cherry-pick -x <patch_hash>
Kuphatikiza apo, ogwiritsa ntchito amatha kukonza makina awo kuti agwiritse ntchito chidebe ndi ma sandbox a microVM, omwe angapereke chitetezo chowonjezera ku chiwopsezo cha kernel. Izi ndichifukwa choti chidebe ndi ma sandbox a microVM amatha kulekanitsa kernel ku dongosolo lonselo, kuletsa kugwiritsa ntchito pachiwopsezo.
Qualcomm Adreno GPU Zero-Day Zolakwa
Qualcomm yathana ndi zovuta zitatu zamasiku a zero mu madalaivala ake a Adreno GPU, omwe akugwiritsidwa ntchito polimbana ndi zida za Android. Zofooka zimakhudza momwe dalaivala wa Adreno GPU amachitira pogawa kukumbukira ndipo atha kugwiritsidwa ntchito kuti apereke ma code osagwirizana ndi mwayi wapamwamba. Malinga ndi Chidziwitso chachitetezo cha Qualcomm, kusatetezeka kumakhudza mitundu yoyendetsa ya Adreno GPU ya 540 ndi mtsogolo.
| | Chiwopsezo | Kufotokozera | Mabaibulo Okhudzidwa | | | --- | --- | --- | | | CVE-2026-43285 | Kuwonongeka kwa kagawidwe ka kukumbukira | Adreno GPU dalaivala 540 ndipo kenako | | | CVE-2026-43286 | Kuwonongeka kwa kagawidwe ka kukumbukira | Adreno GPU dalaivala 540 ndipo kenako | | | CVE-2026-43287 | Kuwonongeka kwa kagawidwe ka kukumbukira | Adreno GPU dalaivala 540 ndipo kenako |
⚠️ Zowopsa Zazomangamanga: Zolakwika za Qualcomm Adreno GPU zatsiku ziro zikuwonetsa kufunikira kosunga madalaivala amasiku ano komanso kuteteza zomwe zingachitike. Kulephera kutero kungayambitse mwayi wosaloleka wa deta ndi machitidwe. Kuti muchepetse zovuta izi, ogwiritsa ntchito a Android amatha kusintha zida zawo kukhala pulogalamu yaposachedwa, yomwe imaphatikizapo dalaivala wa Adreno GPU.
# Chitsanzo cha momwe mungakhazikitsire boot yotetezeka pa chipangizo cha Android
chipangizo:
safe_boot: zoona
verified_boot: zoona
Kufananiza Njira Zochepetsera
Gome lotsatirali likufanizira njira zochepetsera zovuta za Dirty Frag ndi Qualcomm Adreno GPU zamasiku a ziro:
| | Njira Yochepetsera | Chiphuphu Chakuda | Qualcomm Adreno GPU | | | --- | --- | --- | | | Kusintha | Ikani Linux kernel patch | Sinthani dalaivala wa Adreno GPU | | | Chidebe ndi microVM sandboxes | Konzani chidebe ndi ma sandbox a microVM | Zosavomerezeka | | | Chitetezo cha boot | Zosavomerezeka | Konzani njira zotetezedwa za boot |
Kuchepetsa ndi Kupewa
Pofuna kupewa kugwiritsa ntchito zofooka izi, ogwiritsa ntchito ayenera kugwiritsa ntchito zigamba, kukonza njira zotetezeka zoyambira, ndikugwiritsa ntchito mabokosi a mchenga a microVM. Pochita izi, ogwiritsa ntchito amatha kuletsa kugwiritsa ntchito zofooka ndikuteteza machitidwe awo ndi deta. Ndikofunikiranso kusunga madalaivala amakono ndi otetezedwa ku zovuta zomwe zingatheke.
##Magwero
- Dirty Frag: a kernel zero-day vs. container and microVM sandboxes - Kukambitsirana za kusatetezeka kwa Dirty Frag ndi zotsatira zake.
- Qualcomm Security Bulletin - Mndandanda wa zidziwitso zachitetezo ndi upangiri wazinthu za Qualcomm, kuphatikiza dalaivala wa Adreno GPU.
- Linux Kernel Archives - Malo a Linux kernel source code ndi zigamba.
- Android Security Bulletins — Mndandanda wamakalata otetezedwa ndi upangiri pazida za Android.