Kernel Zero-Umunsi 'Dirty Frag' Ihindura Igicu Icyizere nka Acro Agents ya Google ivugurura E-ubucuruzi

Imiterere ya tekinoroji ihora ihindagurika, ariko impinduka zimwe ni tectonic. Muri iki cyumweru, turimo guhangana n'ibintu bibiri nk'ibi: intangiriro ya Linux ya zeru umunsi wa zeru, yiswe 'Dirty Frag,' ihungabanya cyane umutekano w’umutekano w’ibikorwa remezo bigezweho, hamwe n’icyifuzo cya Google 'Universal Cart Acro,' isezeranya kuvugurura imiterere y’ubucuruzi bwo kuri interineti binyuze muri AI. Byombi birasaba ko hakorwa igenzura ryihuse kuri buri nyubako ya injeniyeri no kurinda isi yacu ya digitale.

Agace kanduye: Intangiriro Zeru-Umunsi Kumena Byose

Ku ya 7 Gicurasi 2026, kumenyekanisha gukabije byohereje imvururu binyuze mu muryango w’umutekano wa Linux: ihuriro ry’intege nke zikomeye, CVE-2026-43284 na CVE-2026-43500, hamwe na hamwe bita 'Dirty Frag.' Ntabwo arikindi kintu cyihariye cyo kuzamura (LPE); ni inzira igena kuva umukoresha udafite uburenganzira kugera kumuzi, ukarenga agasanduku k'umusenyi-kontineri na microVMs-bigize uburiri bwumutekano-kavukire.

Ahantu hateye ubwoba: Kubangamira ibyigunge byo kwigunga

Ibikorwa remezo bigezweho bishingiye cyane ku bwigunge. Docker, Kubernetes, ndetse n'imashini zoroheje nka Firecracker na Kata Containers zisezeranya imipaka ikomeye hagati yimirimo. Umwanda Wanduye usenya iyi kwibeshya. Ikibazo cyibanze kiri mububiko bwa Linux bwibikoresho byo kwibuka, cyane cyane uburyo bukemura ibice byagabanijwe hamwe no kugabana.

Mugihe amakuru yihariye akoreshwa aracyagaragara, isesengura ryacu ryerekana ko 'Dirty Frag' ikoresha intege nke zo gukoresha-nyuma yubuntu (UAF) mu ntego ya SLUB yatanzwe na kernel, birashoboka ko byatewe nubwoko bwamoko burimo ibikorwa bya "mmap" cyangwa imikoranire igoye nubwoko bumwebumwe bwa sock (urugero: AF_PACKET cyangwa AF_UNIX). Moniker "Frag" yerekana ubushobozi bwigitero cyo gukoresha ibice byinturusu, bigashyiraho imiterere yibikoresho byateganijwe byemerera kongera kugabura amakuru yizewe kubakoresha mukibanza cyibikoresho byigenga.

Hano haribintu byemewe, murwego rwohejuru rwo gukoresha: 1 .. Imiterere yubwoko yemerera ikintu cyintoki kurekurwa mugihe icyerekezo gihari kikiriho. 2. D. Ibi birashobora kubamo kwangiza imiterere ya "seq_operations" cyangwa imbonerahamwe ya "dosiye_ibikorwa". 4.

. Intege nke zose hano zirashobora kurenga ibice byo kwigunga, gukora ingamba zokwirwanaho-byimbitse, ntabwo ari ubushake gusa.

Kwanduza agasanduku k'umusenyi: Ikibazo Cyisangiwe Kernel

Impamvu Dirty Frag isenya cyane kubintu na microVMs biroroshye: bose basangiye kimwe kode ya Linux. Mugihe imyirondoro yizina, cgroups, na seccomp imyirondoro itanga kwigunga gukomeye kubakoresha-umwanya, ntibashobora kurinda inenge ziri muri kernel ubwayo. Firecracker na Kata Containers, mugihe ukoresha VM yoroheje, uracyakoresha intangiriro ya Linux (nubwo yaba ari ntoya) ishobora kwibasirwa nizo ntege niba vector yibitero ibaho hejuru ya syscall igaragara.

Kugabanya no Gukomera: Igikorwa ako kanya gisabwa

Igikorwa cyihuse, kitaganirwaho ni ** gutobora intoki zawe **. Abatanga ibicu hamwe nababikwirakwiza barimo kwihutira kurekura ibishya. Kurenga gutobora, ingamba zo kwirwanaho zinyuranye ni ngombwa.

`` bash

Urugero: Gukomera ibipimo bya sysctl kurwanya intungamubiri zisanzwe

Ibi nibyifuzo rusange kandi ntibishobora gukumira byimazeyo umwanda,

ariko bagabanya ubuso bwibitero rusange kandi bigakoreshwa nabi.

Hagarika umwanya wumukoresha utabifitiye uburenganzira (vector rusange ya LPE)

sudo sysctl -w intungamubiri.uburenganzira_abakoresha_clone = 0

Gabanya ptrace kugirango ugabanye amakuru asohoka no gukoresha manipulation

sudo sysctl -w kernel.yama.ptrace_scope = 1

Hindura ububiko bwa kernel (KASLR) - nibyingenzi mugukoresha mituweli

(Ibi mubisanzwe birashoboka kubisanzwe, menya ko bidahagaritswe)

Reba: injangwe / proc / sys / intangiriro / randomize_va_umwanya (ugomba kuba 2)

Hagarika BPF JIT (irashobora kuba imitekerereze yambere) niba idakenewe cyane

Icyitonderwa: Ibi birashobora guhindura imikorere kubikorwa bimwe.

sudo sysctl -w net.core.bpf_jit_enable = 0

Koresha izi mpinduka ubudasiba

echo "kernel.unprivileged_userns_clone = 0" | sudo tee -a /etc/sysctl.d/99-gukomera.conf echo "kernel.yama.ptrace_scope = 1" | sudo tee -a /etc/sysctl.d/99-gukomera.conf echo "net.core.bpf_jit_enable = 0" | sudo tee -a /etc/sysctl.d/99-gukomera.conf sudo sysctl - sisitemu `` `

Amashyirahamwe agomba kandi gutekereza kubuzima bwa kernel yamashanyarazi nka kexec cyangwa itangwa ryubucuruzi kugirango ugabanye igihe cyigihe mugihe cyo kuvugurura ibintu bikomeye. Kugenzura buri gihe imyirondoro ya "seccomp" no kwemeza syscall ntoya kumurimo wakazi wabitswe, mugihe atari ugukosora neza kuri Dirty Frag, iracyari imyitozo myiza yo kugabanya ubuso bwibitero rusange.

Google Ikarita Yisi Yose ya Acro: Igenzura rya Agentic rihindura E-ubucuruzi

Guhindura ibikoresho byugarije iterabwoba ku mahirwe yo guhindura, Google yatangije 'Universal Cart Acro' hirya no hino muri Search na Gemini muri Amerika. Ibi ntabwo ari ibintu byiyongera gusa; nuburyo bwibanze bwo kongera kugura kumurongo, kumenyekanisha 'cheque agentic' ikoreshwa na 'UCP Protocole' nshya, nkuko byatangajwe na [AI News Today] (https://aiweekly.co/ai-amakuru-yumunsi). Uku kwimuka kwerekana ubushake bwa Google bwo kwinjiza cyane abakozi ba AI mubucuruzi bwubucuruzi, bikarenga kuvumburwa bikarangira byigenga.

Shift ya Agentic: Kuva Kureba Kuri Kugura Kwigenga

Ubucuruzi bwa e-ubucuruzi gakondo nuburyo bukoreshwa nabakoresha: gushakisha, gushakisha, kugereranya, kongeramo igare, kugenzura. Acro ihindura iyi nyandiko. Hamwe na cheque ya agent, umukozi wa Google AI (urugero, muri Gemini cyangwa Shakisha) yumva intego yumukoresha ("Ngurira clavier nshya ya ergonomic ya code, munsi y $ 150, yatanzwe na vendredi"), yigenga avumbura ibicuruzwa mubacuruzi batandukanye, agereranya amahitamo, akora inzira zose zo kugenzura, kandi yemeza ko yaguze, byose hamwe nubushake buke bwabakoresha.

Ubu ni ugusimbuka gukomeye kurutonde rwibicuruzwa byoroshye cyangwa "Kugura kuri Google". Bisobanura gusobanukirwa neza ibyifuzo byabakoresha, kubara igihe-nyacyo no kugena ibiciro kumurongo munini wabacuruzi, hamwe nubushobozi bwo kuganira cyangwa guhitamo inzira nziza yo kugura.

Porotokole ya UCP Yapakuruwe: Inkingi yubucuruzi bwabakozi

'UCP Protocole' (Universal Cart Protocol) ni linchpin ya tekinike ituma iyi mikorere izaza. Mugihe Google itarashyira ahagaragara ibisobanuro byuzuye, imyubakire yacu yerekana ko UCP ari urwego rusanzwe, rwizewe, kandi rwagutse rwa API rwagenewe itumanaho ridasubirwaho, imashini-imashini hagati yabakozi ba AI ba Google n'abacuruzi ba e-bucuruzi bitabiriye.

Turatekereza UCP nka protocole yibice byinshi ikubiyemo:

** Ibicuruzwa & Ibarura APIs: ** Abakozi babaza urutonde rwabacuruzi, urwego rwimigabane nyayo, nigiciro cyingirakamaro. Ibi birashoboka ko bikubiyemo amakuru yatanzwe (urugero, kuzamura Schema.org, kugaburira Google Merchant Centre) byongerewe igihe nyacyo cya API.
Ibi bisaba kudakora neza no gukemura amakosa. D.

`` yaml

Hypothetical UCP Protocol Abacuruzi Kwishyira hamwe (YAML yoroshye yo kugereranya)

Iki gice cyerekana uburyo umucuruzi ashobora kwerekana ibicuruzwa byo kuvumbura abakozi

no gusobanura iherezo rya cheque yatangijwe na agent.

Ibicuruzwa byabacuruzi Urutonde binyuze muri UCP

ibicuruzwa: id: "SKU-XYZ-789" izina: "Mwandikisho ya Ergonomic Mechanical" ibisobanuro: "Gutandukanya igishushanyo, guhinduranya tactile, USB-C, byiza kubateza imbere." igiciro: amafaranga: 129.99 ifaranga: "USD" kubara: imiterere: "in_stock" ingano: 50 iheruka_yanyuma: "2026-10-17T14: 30: 00Z" kohereza_ibikorwa: - uburyo: "bisanzwe" igiciro: 5.00 gutanga_ibigereranyo: "iminsi 3-5 y'akazi" - uburyo: "kwerekana" igiciro: 15.00 gutanga_ibigereranyo: "iminsi 1-2 y'akazi" umukozi_kugenzura_icyerekezo: "https://api.myretailer.com/ucp/v1/igenzura"

Metadata yinyongera yo kugereranya abakozi (urugero, guhinduranya ubwoko, kumurika inyuma)

ibiranga: guhindura_ubwoko: "umukara_tactile" itara ry'inyuma: "RGB" imiterere: "US_ANSI"

Gusaba Abakozi Gusaba Kugenzura (POST to agent_checkout_end point)

(Byoroheje kwishyurwa)

kugenzura_ibisabwa: agent_id: "google-gemini-acro-123" umukoresha_id_token: "jwt_user_identity_token"

Umutekano, ID ukoresha utamenyekanye

ibintu: - ibicuruzwa_id: "SKU-XYZ-789" ingano: 1 kohereza_adresse: # Encrypted / tokenized adresse ibisobanuro ikimenyetso: "kohereza_adresse_token_abc" uburyo bwo kwishyura: # Encrypted / tokenized uburyo bwo kwishyura ikimenyetso: "kwishura_uburyo_bivuze_xyz" guhitamo_uburyo_uburyo: "kwerekana" `` `

💡 ** Ibyingenzi byingenzi: ** Porotokole ya UCP yerekana imbaraga zingenzi zisanzwe, bisa nuburyo Open Banking APIs yahinduye serivisi yimari. Ku bacuruzi, ni umuyoboro mushya, ushobora kuba munini, wo kugurisha, ariko umwe usaba guhuza tekinike yimbitse hamwe nubushake bwo kugenzura bimwe mubikorwa byurugendo rwabakiriya kubakozi ba AI.

Ibikorwa byububiko & Ubucuruzi-kuri kuri E-ubucuruzi

Ihinduka rifite ingaruka zikomeye kubucuruzi bwa e-ubucuruzi, abamamaza ibicuruzwa bya digitale, hamwe nabatunganya ubwishyu.

** Kubacuruzi: **
- ** Amahirwe: ** Kugera kubantu benshi bakoresha Google hamwe nubuvumbuzi bwa AI. Birashoboka kugabanya ibiciro byo kugura abakiriya niba abakozi batwaye kuyobora babishoboye.
- ** Ikibazo: ** Gutakaza umubano utaziguye wabakiriya aho bagurisha. Kongera kwishingikiriza kurubuga rwa Google. Ukeneye imbaraga za UCP API guhuza hamwe nigihe cyo kugaburira amakuru. Gukwirakwiza ibikoresho byavumbuwe (SEO kubakozi) biba ingenzi.
** Kubaguzi: **
- ** Inyungu: ** Ibyoroshye bitigeze bibaho, guhaha kugiti cyawe, kugabanya guterana amagambo.
- ** Impungenge: ** Amabanga yamakuru (angahe amateka yo kugura umukozi wa Google akusanya?), Kwizera ibyemezo byabakozi, ubushobozi bwo kubogama kwa algorithmic muguhitamo ibicuruzwa.
** Kubatunganya Kwishura: ** Ingingo nshya zo guhuza hamwe na Google ya UCP yo kwishyura. Wibande kumutekano muke no gutahura uburiganya mubidukikije.

Imikoranire n'inzira Imbere

Byombi Dirty Frag na Universal Cart Acro byerekana ibyingenzi, ariko bitandukanye, impinduka zisaba kwitabwaho na buri injeniyeri. Umwe arwanya ishingiro ryumutekano wibicu, mugihe undi asunika imipaka yimikorere ifatika ya AI, ihindura ubucuruzi buva mubikorwa bya mudasobwa na muntu bikajya mubikorwa byabunzi.

Ku bakora umwuga w'ikoranabuhanga, ntabwo aribyo bitekerezo bidafatika. Nibibazo byihuse, ibikorwa byamahirwe n'amahirwe.

Umwanzuro Ufatika Kumakipe Yubwubatsi

** Shyira imbere ibishishwa byanduye: ** Hita uhita umenya sisitemu zose zishingiye kuri Linux, cyane cyane izikoresha ibikoresho cyangwa microVMs. Korana nigicu cyawe cyangwa umucuruzi wo kugurisha kugirango ushireho intoki (CVE-2026-43284, CVE-2026-43500) mugihe ziboneka. Shyira mubikorwa ibisubizo byuzuye aho igihe cyo gutaha ari ngombwa.
Kugenzura no gushimangira ibyo byiciro. D. Sobanukirwa n'ibisabwa API, icyitegererezo cyamakuru, nibisobanuro byumutekano. Tangira gutegura igenamigambi rishobora kwishyira hamwe kugirango ukoreshe igenzura nkumuyoboro mushya wo kugurisha.
** Ingamba zubucuruzi bwabakozi: ** Kwamamaza ibicuruzwa hamwe nitsinda ryibicuruzwa bigomba gufatanya kumva uburyo abakozi ba AI bavumbura kandi bagasaba ibicuruzwa. Ibi bivuze guhitamo amakuru y'ibicuruzwa, ingamba zo kugena ibiciro, hamwe no gucunga ibarura ryo gukoresha imashini, ntabwo ari ugushakisha abantu gusa. 5 .. Gukorera mu mucyo muburyo abakozi bakora kandi bagakoresha amakuru yubuguzi byoroshye bizaba aribyingenzi kurerwa.

Amezi ari imbere azagerageza kwihanganira ibikorwa byingirakamaro bya kernel hamwe nubushobozi bwacu bwo guhangana nubucuruzi buterwa na AI. Ba injeniyeri basobanukiwe nimpinduka zimbitse za tekiniki nizo zizategura ejo hazaza.

Inkomoko

[Google Yashyize ahagaragara Acro Yisi Yose]
[Ifoto Yuzuye, Yashyizwe Kumurongo Wamakuru Yamakuru Yambere] -.
[Amakuru agezweho ya AI: LLM Isohora, Amakuru agezweho ya AI]

Kernel Zero-Umunsi 'Dirty Frag' Ihindura Cloud Icyizere nka Acro Agents ya Google ivugurura E-ubucuruzi