- Ubuthakathaka be-CopyFail buvumela abasebenzisi abangenamalungelo ukuthi bathuthuke bafinyelele ezimpandeni ngephutha elinengqondo ohlelweni olungaphansi lwe-cryptographic.
- Ubuthakathaka be-CVE-2026-31431 buthinte uhla olukhulu lwezinhlayiya kusukela ngo-2017 kuya ku-2026.
- Kunezinye izingozi ohlelweni lwefayela le-HFS ezingabangela ukuphahlazeka kwesistimu noma ukwenziwa kwekhodi.
Uma sicabanga nge-Linux, into yokuqala efika engqondweni ukuthi iyisistimu eqinile futhi eqinile kakhulu . Kuyiqiniso ukuthi iyinsika yengqalasizinda enkulu ye-inthanethi kanye namanye amaseva anamandla kakhulu emhlabeni, kodwa lokho akusho ukuthi iyisiphephelo esingangeneki. Eqinisweni, ubuthakathaka bamuva busikhumbuza ukuthi ngisho nesofthiwe ebukezwe kahle kakhulu ingaba nobuthakathaka obuyingozi, okusiphoqa ukuthi sifune izinyathelo zokuphepha ezithuthukisiwe ku-Linux ukuze sivikele izinhlelo zethu.
Esinye sezimo eziphawuleka kakhulu yi-CopyFail vulnerability, inkinga engeyona inkinga yokubhala elula kunoma yiluphi uhlelo lokusebenza, kodwa etholakala enhliziyweni ye-kernel . Lokhu kuyakhathaza ngoba kuvumela umuntu onokufinyelela okulinganiselwe kakhulu ukuthi athathe ukulawula uhlelo futhi athole ukulawula okuphelele kwekhompyutha.
Imfihlakalo ye-CopyFail: CVE-2026-31431
Lobu buthakathaka, obubizwa ngobuchwepheshe ngokuthi i-CVE-2026-31431, yilokho okwaziwa ngokuthi i- sequential flow logic flaw . Kulabo kithi abangakhulumi ulimi lwe-technical, lokhu kusho ukuthi akuxhomekile kumaphutha enkumbulo noma esikhathi, kodwa kunalokho kuxhomeke ephutheni endleleni ikhodi ebhalwe ngayo. Inkinga itholakala ikakhulukazi engxenyeni ethi `authencesn` ye-kernel , etholakala nge-interface ye-cryptographic socket ye-AF_ALG kanye nomsebenzi wesistimu ethi `splice()`.
Okushiya ochwepheshe bengenaso isiqiniseko ukuthi lobu buthakathaka bucashe buthule kusukela ngo-2017 kwaze kwaba yilapho butholakala ngo-2026. Cishe iminyaka eyishumi, ukuhlolwa okuvamile kokuphepha kwehlulekile ukubuthola, okuvumela iphutha ukuthi liqhubeke kumadivayisi ayizigidi. Ukuxhashazwa okuthuthukiswe abacwaningi beTheori kulula ngokumangazayo: iskripthi sePython sama -byte angu-732 kuphela esisebenzisa umtapo wolwazi ojwayelekile kuphela , okwenza kube yingozi kakhulu ngenxa yokuthi kulula ukuyisebenzisa.
Ngokungafani nezinye izenzo ezidinga umhlaseli ukuba abe nenhlanhla emangalisayo ngezimo zomjaho noma ukwazi ama-kernel offsets aqondile, i-CopyFail ingasetshenziswa kahle . Lokhu kusho ukuthi noma yimuphi umsebenzisi wendawo, kungaba nge-akhawunti evamile, isitsha esithintekile, noma inqubo ye-CI/CD, angenza ukubhala okungu-4-byte ku-kernel page cache ukuze andise amalungelo ukuze agxile ku-Linux ngaphandle kokuzikhandla.
Izinhlelo ezithintekile kanye nobubanzi benkinga
Umthelela ungowohlelo futhi mkhulu kakhulu. Izinhlelo ezithintekile zitholakale ohlwini olude kakhulu lokusabalalisa okudumile. Lokhu kufaka phakathi i-Ubuntu 24.04 LTS, i-Amazon Linux 2023, i-RHEL 10.1, kanye ne-SUSE 16 , yize uhlu lufinyelela ku-Debian, i-Fedora, i-Arch, i-Rocky, kanye ne-Oracle Linux. Empeleni, noma yiluphi uhlelo olusebenzisa ama-kernel ahlanganiswe phakathi kuka-2017 no-Ephreli 2026 lusengozini, oluhlanganisa izinguqulo kusukela ku-4.14 kuya ku-6.18.22.
Kubalulekile ukugcizelela ukuthi i-vector yokuhlasela isendaweni. Lokhu kusho ukuthi umhlaseli kumele abe nokufinyelela okuthile ohlelweni, kodwa ezindaweni zamafu ezineziqashi eziningi noma izitsha ezabelana nge-kernel efanayo, ingozi iyanda. Ukulula kokusetshenziswa kwalokhu kubuthakathaka kwenza kube yinto eza kuqala kunoma yimuphi umphathi wesistimu.
Ezinye izinsongo: Icala lesistimu yamafayela ye-HFS
Kodwa akukhona konke nge-CopyFail. Kuphakanyiswe nesexwayiso mayelana ne -CVE-2025-0927 , ubuthakathaka obutholakala ohlelweni lwefayela le-HFS lwe-Linux kernel. Kulesi simo, inkinga ukuqinisekiswa okwanele kokufakwayo lapho uhlelo lucubungula izakhiwo ezonakele. Uma umhlaseli ekwazi ukuphoqa uhlelo ukuthi lufunde isithombe se-HFS esingalungile, kungabangela ukuthi inkumbulo ibhalwe kabusha.
Imiphumela yalokhu kusengozini kwesibili ingasukela ekuhlaselweni okulula kokuphika isevisi (i-DoS) okushiya uhlelo lungaphenduli, kuya kokuthile okungathi sína kakhulu njengokusetshenziswa kwekhodi engahleliwe enamalungelo aphezulu. Le nkinga ithinta kakhulu izinguqulo ze-kernel ezifika ku-6.12.0 kanye nokufakwa okuthile okufana ne- Ubuntu 22.04 ene-kernel 6.5.0-18-generic.
Ungazivikela kanjani futhi unciphise izingozi?
Isixazululo esiphelele, njengenjwayelo, ukugcina isofthiwe yakho isesikhathini. Ku-CopyFail, kubalulekile ukusebenzisa i-fix commit a664bf3d603d noma ubuyekeze i-kernel enguqulweni ehlanganisiwe enikezwe ukusatshalaliswa kwakho. Ezindaweni zamafu ezifana ne-AWS, i-Azure, noma i-GCP, kufanele ubeke phambili ukufaka ama-patches ngokushesha nje lapho umhlinzeki ewakhulula, ikakhulukazi kumaseva e-jump kanye nezindawo eziningi zokuqasha.
Uma ngesizathu esithile ungakwazi ukuqala kabusha uhlelo ngokushesha, kukhona icebo lokunciphisa ubuthakathakaUngakhubaza i-algif_aead module ngokudala ifayela ku- /etc/modprobe.d/blacklist-algif.conf ngomugqa install algif_aead /bin/falseUma imodyuli isivele isebenza, vele usebenzise rmmod algif_aead ukumkhipha empini nokuvala umnyango kumhlaseli ngaphandle kwesidingo sokuqala kabusha.
Ukutholakala kwe-CopyFail kuphinde kwagqamisa indima yoBuhlakaniphi Bokwenziwa. Kuyaziwa ukuthi amathuluzi okuhlaziya asekelwe ku-AI abe negalelo elikhulu ekwembuleni lobu buthakathaka, abantu ababebushalazele iminyaka eyisishiyagalolunye. Lokhu kusifundisa isifundo esimnandi nesibuhlungu: I-AI ingumngane omangalisayo wabavikeli, kodwa futhi ingaba yisikhali esiphelele sabahlaseli ukuthola ubuthakathaka obufanayo ngesikhathi esirekhodiwe.
