Linux Kernel na Qualcomm Adreno GPU Intege nke Zero-Umunsi: Kwibira cyane

Intangiriro ya Linux na Qualcomm Adreno GPU iherutse kwibasirwa n’intege nke zumunsi zeru, arizo Dirty Frag ninenge eshatu mubashoferi ba Adreno GPU. Izi ntege nke ziteza umutekano muke, kuko zishobora gukoreshwa kugirango umuntu agere ku mizi ya détinistinistique kuri Linux nyinshi no kubangamira ibikoresho bya Android.

Igicucu cyanduye: Linux Kernel Zero-Umunsi Vulnerability

Dirty Frag nintege nke za Linux zemerera abakoresha badafite uburenganzira kubona imizi ya détinistinistique kuri Linux nyinshi. Intege nke ziterwa ninenge yo gutunganya intoki zipakiye ibice, zishobora gukoreshwa mugukora code uko bishakiye hamwe nuburenganzira buhanitse. Nkuko [Hyunwoo Kim yabitangaje] (https://news.ycombinator.com/item?id=48304227) abisobanura, intege nke zigira ingaruka kuri Linux ya kernel 5.10 na nyuma yaho. Iyi ntege nke ireba cyane cyane kuko irashobora gukoreshwa kugirango igere ku mizi, ishobora kuganisha ku buryo butemewe bwo kubona amakuru na sisitemu.

. Intege nke zirashobora gukoreshwa kugirango ubone imizi, zishobora kuganisha ku buryo butemewe bwo kubona amakuru na sisitemu. Kugira ngo iyi ntege igabanuke, abakoresha Linux barashobora gukoresha patch yatanzwe numuryango wa kernel ya Linux, ikosora inenge mumikorere yimikorere yimitwe yacitsemo ibice kandi ikabuza gukoreshwa.

`` python

Urugero rwuburyo bwo gushira Dirty Frag patch ukoresheje Git

kuzana git https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git shobuja git Cherry-hit -x <patch_hash> `` `

Byongeye kandi, abakoresha barashobora gushiraho sisitemu zabo kugirango bakoreshe kontineri na microVM sandbox, zishobora gutanga urwego rwumutekano mukurwanya intege nke za kernel. Ni ukubera ko kontineri na microVM sandbox zishobora gutandukanya intungamubiri zisigaye muri sisitemu, bikarinda gukoreshwa nabi.

Qualcomm Adreno GPU Zeru-Umunsi

Qualcomm yakemuye ibibazo bitatu by’umunsi wa zeru mu bashoferi bayo ba Adreno GPU, ikoreshwa mu bitero byibasiye ibikoresho bya Android. Intege nke zigira ingaruka kubushoferi bwa Adreno GPU mugukoresha ibikoresho byo kwibuka kandi birashobora gukoreshwa mugukora code uko bishakiye hamwe nuburenganzira buhanitse. Dukurikije [itangazo ry’umutekano wa Qualcomm] (https://www.qualcomm.com/products/security/bulletins), izo ntege nke zigira ingaruka ku modoka ya Adreno GPU verisiyo 540 na nyuma yaho.

. Kutabikora birashobora gutuma umuntu atabona uburenganzira bwo kubona amakuru na sisitemu. Kugira ngo izo ntege zigabanuke, abakoresha Android barashobora kuvugurura ibikoresho byabo kuri verisiyo iheruka ya software, irimo umushoferi wa Adreno GPU wapanze.

`` yml

Urugero rwuburyo bwo gushiraho boot itekanye kubikoresho bya Android

igikoresho: umutekano_boot: ukuri kugenzura_ibikoresho: nibyo `` `

Kugereranya Ingamba zo Kugabanya

Imbonerahamwe ikurikira iragereranya ingamba zo kugabanya ubukana bwa Dirty Frag na Qualcomm Adreno GPU intege nke zumunsi:

Kugabanya no gukumira

Kugirango wirinde gukoresha izo ntege nke, abakoresha bagomba gukoresha ibishishwa, kugena uburyo bwogutangiza umutekano, no gukoresha kontineri na sandbox ya microVM. Ufashe izi ntambwe, abakoresha barashobora gukumira ikoreshwa ryintege nke no kurinda sisitemu namakuru. Ni ngombwa kandi kugumisha abashoferi ibikoresho bigezweho kandi birinda umutekano ushobora gukoreshwa.

Inkomoko

-. -.

• [Ububiko bwa Linux Kernel]
• [Amatangazo yumutekano ya Android] (https://source.android.com/security/bulletin) - Urutonde rwamakuru yumutekano hamwe ninama kubikoresho bya Android.