Muongorori wezvekuchengetedza uye mudzidzi wePhD paNorthwestern University, Zhenpeng Lin, akawana kusagadzikana kwakakura kunokanganisa kernel mu. androidzvishandiso zvakaita sePixel 6 dzakatevedzana kana Galaxy S22. Iwo chaiwo ruzivo rwekuti kusazvibata uku kunoshanda sei hakusati kwaburitswa nekuda kwezvikonzero zvekuchengetedza, asi muongorori anoti inogona kubvumira kuverenga nekunyora zvisina tsarukano, kukwira kweropafadzo, uye kudzima kuchengetedzwa kweLinux's SELinux kuchengetedza.
Photogallery
Zhenpeng Lin akaisa vhidhiyo pa Twitter achinongedza kuratidza kuti kusadzivirirwa paPixel 6 Pro kwakakwanisa sei kuwana midzi nekudzima SELinux. Nezvishandiso zvakadaro, hacker inogona kukuvadza zvakanyanya kune yakakanganiswa mudziyo.
Iyo yazvino Google Pixel 6 yakapfava ne0day mukernel! Kuwana zvekupokana kuverenga / kunyora kuti uwedzere rombo uye kudzima SELinux pasina kubira kudzora kuyerera. Iyo bug inobatawo Pixel 6 Pro, mamwe maPixels haana kukanganiswa 🙂 pic.twitter.com/UsOI3ZbN3L
Zhenpeng Lin (@Markak_) July 5, 2022
Zvinoenderana nezvakati wandei zvakaratidzwa muvhidhiyo, kurwiswa uku kunogona kushandisa imwe mhando yekukanganisa ndangariro kuita chiitiko chine hutsinye, chingangoita senge ichangobva kuwanikwa Yakasviba Pipe njodzi iyo yakanganisa. Galaxy S22, Pixel 6 nevamwe androidova zvishandiso zvakatangwa neLinux kernel vhezheni 5.8 pa Androidu 12. Lin akataurawo kuti kusagadzikana kutsva kunobata mafoni ese ari kushandisa Linux kernel version 5.10, iyo inosanganisira ikozvino Samsung flagship series yakataurwa.
Unogona kufarira
Gore rapfuura, Google yakabhadhara $8,7 miriyoni (inenge CZK 211,7 miriyoni) mubairo wekutsvaga tsikidzi muhurongwa hwayo, uye parizvino inopa mari inosvika zviuru mazana maviri nemakumi mashanu emadhora (inenge CZK 250 miriyoni) yekutsvaga kusasimba pachikamu chekernel, zviri pachena kuti ndizvo zvazviri. . Kana Google kana Samsung haisati yataura nezvenyaya iyi, saka hazvizivikanwe panguva ino apo iyo itsva Linux kernel exploit inogona kubatwa. Nekudaro, nekuda kwemashandiro eGoogle zvigamba zvekuchengetedza, zvinogoneka kuti chigamba chakakodzera hachisvike kusvika Gunyana. Saka hatina chimwe chatingaita kunze kwekumirira.
