Boma la US lapereka chenjezo kuti omwe akuukira akugwiritsa ntchito mwanzeru kusatetezeka kwa Dirty Pipe ku Linux. Kusatetezeka kumalola wogwiritsa ntchito wamba kupeza mwayi woyambira. Mabungwe aboma ku US adalangizidwa kuti akonze chiwopsezo cha machitidwe awo pasanafike Meyi 16.
Chiwopsezocho chimatchedwa Dirty Pipe chifukwa cha kugwirizana kosatetezeka pakati pa fayilo ya Linux, yomwe imasungidwa kwamuyaya pa hard drive, ndi chitoliro cha Linux, chomwe chiri mu-memory data buffer yomwe ingagwiritsidwe ntchito ngati fayilo. Ngati wogwiritsa ntchito ali ndi chitoliro choti alembe ndipo fayilo silingathe, kulembera ku buffer yokumbukira chitoliro kungasinthenso mosadziwa masamba osungidwa a magawo osiyanasiyana a fayilo ya disk.
Izi zimapangitsa kuti buffer ya cache ilembedwenso ku disk ndi kernel ndi zomwe zili mu fayilo yosungidwa zisinthidwe kwamuyaya, mosasamala kanthu za chilolezo cha fayilo. Wogwiritsa ntchito m'deralo akhoza kuwonjezera kiyi ya SSH ku akaunti ya mizu, kupanga chipolopolo cha mizu kapena kuwonjezera ntchito ya cron yomwe imayenda ngati backdoor ndikuwonjezera akaunti yatsopano yogwiritsira ntchito ndi ufulu wa mizu, komanso kusintha mafayilo kunja kwa sandbox ndizotheka.
Bungwe la Cybersecurity and Infrastructure Security Agency (CISA) la ku US Department of Homeland Security lili ndi mndandanda wa ziwopsezo zomwe zachitika ndikukhazikitsa nthawi yomwe mabungwe aboma akuyenera kukhazikitsa zosintha zomwe zakhudzidwa. Mndandanda, womwe umapereka chidziwitso pazovuta zomwe owukira angagwiritse ntchito, umakulitsidwa pafupipafupi ndi zovuta zomwe zangowukiridwa kumene.
Ndi zosintha zaposachedwa, ziwopsezo zisanu ndi ziwiri zomwe zawukiridwa kumene zawonjezeredwa pamndandanda. Kuphatikiza pa kutayikira kwa Dirty Pipe ku Linux, imakhudzanso zovuta zinayi mkati Windows zomwe zimalola woukira mdera lanu kuwonjezera ufulu wake. Microsoft idatulutsa zosintha za chimodzi mwazowopsa izi (CVE-2022-26904) masabata awiri apitawa. Malinga ndi Microsoft, chiwopsezocho chinali chisanawukidwe panthawi yomwe chigambacho chinatulutsidwa. Izi zasintha, malinga ndi CISA, zomwe zikuwonetsanso momwe owukira amapezerapo mwayi pazowopsa zomwe zawululidwa.