ILinux Kernel kunye neQualcomm Adreno GPU Zero-Day Zero-Day: Dive Deep
I-Linux kernel kunye ne-Qualcomm Adreno GPU kutshanje zichatshazelwe ngobuthathaka obubalulekileyo beentsuku zero, ezizezi Dirty Frag kunye neziphene ezintathu kubaqhubi be-Adreno GPU. Obu buthathaka bubeka imingcipheko ebalulekileyo yokhuseleko, njengoko banokuxhatshazwa ukufumana ukufikelela kweengcambu eziqinisekileyo kwiindawo ezininzi zeLinux kunye nokuthomalalisa izixhobo ze-Android.
Iqhekeza elimdaka: ILinux Kernel Zero-Day Sesichengeni
I-Dirty Frag yi-Linux kernel esemngciphekweni evumela abasebenzisi abangenalungelo ukuba bafumane ukufikelela kweengcambu kwi-Linux ezininzi. Ukuba sesichengeni kubangelwa sisiphene ekuphatheni ikernel yeepakethi eziqhekekileyo, ezinokuthi zisetyenziswe ukwenza ikhowudi engafanelekanga kunye namalungelo aphezulu. Njengoko Ukubhengezwa kuka-Hyunwoo Kim icacisa, ukuba sesichengeni kuchaphazela iinguqulelo ze-Linux kernel 5.10 kunye nasemva koko. Obu buthathaka buphathelene ngakumbi kuba bunokuxhatshazwa ukufumana ukufikelela kweengcambu, okunokukhokelela ekufikeleleni okungagunyaziswanga kwiinkcukacha ezibuthathaka kunye neenkqubo.
💡 IsiNto esiNgqongileyo sokuThatha: Iqhekeza elimdaka ngumngcipheko obalulekileyo ofuna ingqwalasela ekhawulezileyo evela kwiingcali zobugcisa ukuze zipeyishe kwaye zikhusele iinkqubo zazo. Ubuthathaka bungasetyenziswa ukufumana ukufikelela kweengcambu, okunokukhokelela ekufikeleleni okungagunyaziswanga kwiinkcukacha ezibuthathaka kunye neenkqubo. Ukuthomalalisa obu buthathaka, abasebenzisi beLinux banokufaka ipatch enikezelwe luluntu lwe-Linux kernel, elungisa isiphene ekuphatheni kwekernel yeepakethi eziqhekekileyo kwaye inqande ukuxhaphaza.
# Umzekelo wendlela yokufaka iPatch yeFrag emdaka usebenzisa iGit
landa i-git https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
git cherry-pick -x <patch_hash>
Ukongeza, abasebenzisi banokumisela iinkqubo zabo ukuba basebenzise isikhongozeli kunye neebhokisi zesanti ze-microVM, ezinokubonelela ngoluhlu olongezelelweyo lokhuseleko ngokuchasene nokuba semngciphekweni kwekernel. Oku kungenxa yokuba isikhongozeli kunye neebhokisi zesanti ze-microVM ziyakwazi ukwahlula i-kernel kuyo yonke inkqubo, ukuthintela ukuxhatshazwa kokuba sesichengeni.
Qualcomm Adreno GPU Zero-Day iimpazamo
I-Qualcomm iye yajongana nokuba semngciphekweni okuthathu kosuku lwe-zero kubaqhubi bayo be-Adreno GPU, abaxhatshazwa kuhlaselo olujoliswe kuyo ngokuchasene nezixhobo ze-Android. Ubuthathaka buchaphazela ukuphathwa komqhubi we-Adreno GPU yokwabiwa kwememori kwaye kunokusetyenziswa ukwenza ikhowudi engafanelekanga ngamalungelo aphezulu. Ngokutsho kwibhulethini yokhuseleko ye-Qualcomm, ubuthathaka buchaphazela iinguqulelo zomqhubi we-Adreno GPU ezingama-540 nasemva koko.
| Ukuba sesichengeni | Inkcazelo | Iinguqulelo Ezichaphazelekayo |
|---|---|---|
| CVE-2026-43285 | Isiphene sokwabiwa kwenkumbulo | Adreno GPU umqhubi 540 kwaye kamva |
| CVE-2026-43286 | Isiphene sokwabiwa kwenkumbulo | Adreno GPU umqhubi 540 kwaye kamva |
| CVE-2026-43287 | Isiphene sokwabiwa kwenkumbulo | Adreno GPU umqhubi 540 kwaye kamva |
⚠️ Ingozi yoYilo: Iimpazamo ze-Qualcomm Adreno GPU zosuku luyiziro ziqaqambisa ukubaluleka kokugcina abaqhubi besixhobo bekwixesha langoku kunye nokhuseleko ngokuchasene nezinto ezinokubakho. Ukungaphumeleli ukwenza oko kunokukhokelela ekufikeleleni okungagunyaziswanga kwiinkcukacha ezibuthathaka kunye neenkqubo. Ukunciphisa obu buthathaka, abasebenzisi be-Android banokuhlaziya izixhobo zabo kwinguqulelo yesoftware yamva nje, ebandakanya umqhubi we-Adreno GPU ocinyiweyo.
# Umzekelo wendlela yokumisela i-boot ekhuselekileyo kwisixhobo se-Android
isixhobo:
safe_boot: yinyani
verified_boot: yinyani
Ukuthelekiswa koBuchule bokuNciphisa
Le theyibhile ilandelayo ithelekisa amacebo okunciphisa i-Dirty Frag kunye ne-Qualcomm Adreno GPU yokuba semngciphekweni kosuku lwe-zero:
| IQhinga lokuNciphisa | Iqhekeza elimdaka | Qualcomm Adreno GPU |
|---|---|---|
| Ukupapasha | Faka i-Linux kernel patch | Hlaziya umqhubi we-Adreno GPU |
| Isikhongozeli kunye neebhokisi zesanti ze-microVM | Qwalasela isikhongozeli kunye neebhokisi zesanti ze-microVM | Ayisebenzi |
| Khusela ukuqala | Ayisebenzi | Qwalasela iindlela ezikhuselekileyo zokumisela |
UkuNciphisa kunye noThintelo
Ukuthintela ukuxhatshazwa kobu bubuthathaka, abasebenzisi kufuneka basebenzise iipetshi, baqwalasele iindlela ezikhuselekileyo zokuqalisa, kwaye basebenzise isikhongozeli kunye neebhokisi zesanti ze-microVM. Ngokuthatha la manyathelo, abasebenzisi banokunqanda ukuxhaphazwa kobuthathaka kunye nokukhusela iinkqubo zabo kunye nedatha. Kukwabalulekile ukugcina abaqhubi besixhobo behlaziyiwe kwaye bekhuselekile ngokuchasene nezinto ezinokubakho.
Imithombo
- I-Dirty Frag: i-kernel zero-day vs. container and microVM sandboxes — Ingxoxo malunga nokuba sesichengeni kwe-Dirty Frag kunye neziphumo zayo.
- Ibhulethini yoKhuseleko lweQualcomm — Uluhlu lweebhulethi zokhuseleko kunye neengcebiso zeemveliso zeQualcomm, kubandakanya nomqhubi we-Adreno GPU.
- ILinux Kernel Archives - Indawo yokugcina yeLinux kernel ikhowudi yomthombo kunye neepetshi.
- Iibhulethi zoKhuseleko ze-Android - Uluhlu lweebhulethi zokhuseleko kunye neengcebiso kwizixhobo ze-Android.