Hurumende yeUS yakapa yambiro yekuti vanorwisa vari kushingaira kushandisa Dirty Pipe kusagadzikana muLinux. Kusagadzikana kunobvumira mushandisi wepanzvimbo kuwana maropafadzo emidzi. Masangano ehurumende muUS akarairwa kuti agadzirise kusagadzikana mumasisitimu avo Chivabvu 16 asati asvika.
Kusagadzikana kunonzi Dirty Pipe nekuda kwekusachengeteka kwekudyidzana pakati peLinux faira, iyo inochengetwa zvachose pane hard drive, uye Linux pombi, inova mu-memory data buffer inogona kushandiswa sefaira. Kana mushandisi aine pombi yekunyorera uye faira haikwanise, kunyorera kune pombi yekuyeuka buffer kunogona kusandura nekusaziva mapeji akachengetwa ezvikamu zvakasiyana zvedhisiki faira.
Izvi zvinoita kuti iyo cache buffer inyorwe kudhisiki ne kernel uye zviri mukati mefaira rakachengetwa zvigadziriswe zvachose, zvisinei nemvumo yefaira. Mushandisi wepanzvimbo anogona kuwedzera kiyi yeSSH kune iyo midzi account, kugadzira midzi shell kana kuwedzera cron basa rinomhanya sebackdoor uye rinowedzera nyowani mushandisi account ine kodzero dzemidzi, asi zvakare kugadzirisa mafaera kunze kwebhokisi rejecha zvinogoneka.
Cybersecurity and Infrastructure Security Agency (CISA) yeUS Department of Homeland Security inochengetedza runyoro rwekurwiswa zvakanyanya uye yobva yaisa mazuva ekupedzisira apo masangano ehurumende anofanirwa kuisa iyo yekuvandudza nyaya yakakanganisika. Rondedzero, iyo inopa nzwisiso mukusagadzikana iyo vanorwisa vanogona kushandisa, inogara ichiwedzerwa nekusagadzikana kuchangorwiswa.
Nekuvandudzwa kwazvino, huwandu hunomwe huchangobva kurwiswa husina simba hwakawedzerwa kune iyo rondedzero. Pamusoro peiyo Dirty Pipe leak muLinux, zvakare ine chekuita nekusagadzikana ina mukati Windows izvo zvinobvumira munhu anorwisa munharaunda kuti awedzere kodzero dzake. Microsoft yakaburitsa gadziriso yeimwe yekusagadzikana uku (CVE-2022-26904) mavhiki maviri apfuura. Sekureva kweMicrosoft, kusagadzikana kwacho kwanga kusati kwarwiswa panguva yakaburitswa chigamba. Izvo zvabva zvachinja, maererano neCISA, iyo inoratidza zvakare kuti vanorwisa vanokurumidza sei kutora mukana wekusagadzikana kwakaratidzwa.