Уязвимость в ядре Linux открывает корневые файлы для непривилегированных пользователей

&NewLine;<figure class&equals;"wp-block-image size-large"><a href&equals;"https&colon;&sol;&sol;xodoki&period;net&sol;wp-content&sol;uploads&sol;2026&sol;05&sol;cf749291-178f-4d7b-a07d-21234e28e023-1&period;png"><img src&equals;"https&colon;&sol;&sol;xodoki&period;net&sol;wp-content&sol;uploads&sol;2026&sol;05&sol;cf749291-178f-4d7b-a07d-21234e28e023-1-1024x683&period;png" alt&equals;"" class&equals;"wp-image-10942"&sol;><&sol;a><&sol;figure>&NewLine;&NewLine;<p>&Vcy; &pcy;&ocy;&scy;&lcy;&iecy;&dcy;&ncy;&icy;&iecy; &dcy;&ncy;&icy; &scy;&ocy;&ocy;&bcy;&shchcy;&iecy;&scy;&tcy;&vcy;&ocy; Linux &scy;&tcy;&ocy;&lcy;&kcy;&ncy;&ucy;&lcy;&ocy;&scy;&softcy; &scy; &scy;&iecy;&rcy;&softcy;&iecy;&zcy;&ncy;&ocy;&jcy; &ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ocy;&scy;&tcy;&softcy;&yucy;&comma; &pcy;&ocy;&lcy;&ucy;&chcy;&icy;&vcy;&shcy;&iecy;&jcy; &icy;&ncy;&dcy;&iecy;&kcy;&scy; <strong>CVE-2023-4911<&sol;strong>&comma; &kcy;&ocy;&tcy;&ocy;&rcy;&acy;&yacy; &pcy;&ocy;&zcy;&vcy;&ocy;&lcy;&yacy;&iecy;&tcy; &ncy;&iecy;&pcy;&rcy;&icy;&vcy;&icy;&lcy;&iecy;&gcy;&icy;&rcy;&ocy;&vcy;&acy;&ncy;&ncy;&ycy;&mcy; &pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&tcy;&iecy;&lcy;&yacy;&mcy; &pcy;&ocy;&lcy;&ucy;&chcy;&acy;&tcy;&softcy; &dcy;&ocy;&scy;&tcy;&ucy;&pcy; &kcy; &fcy;&acy;&jcy;&lcy;&acy;&mcy;&comma; &zcy;&acy;&shchcy;&icy;&shchcy;&iecy;&ncy;&ncy;&ycy;&mcy; &pcy;&rcy;&acy;&vcy;&acy;&mcy;&icy; root&period; &Ecy;&tcy;&acy; &pcy;&rcy;&ocy;&bcy;&lcy;&iecy;&mcy;&acy; &zcy;&acy;&tcy;&rcy;&acy;&gcy;&icy;&vcy;&acy;&iecy;&tcy; &mcy;&icy;&lcy;&lcy;&icy;&ocy;&ncy;&ycy; &scy;&icy;&scy;&tcy;&iecy;&mcy; &pcy;&ocy; &vcy;&scy;&iecy;&mcy;&ucy; &mcy;&icy;&rcy;&ucy;&comma; &vcy;&kcy;&lcy;&yucy;&chcy;&acy;&yacy; &scy;&iecy;&rcy;&vcy;&iecy;&rcy;&ycy;&comma; &ncy;&acy;&scy;&tcy;&ocy;&lcy;&softcy;&ncy;&ycy;&iecy; &Pcy;&Kcy; &icy; &vcy;&scy;&tcy;&rcy;&acy;&icy;&vcy;&acy;&iecy;&mcy;&ycy;&iecy; &ucy;&scy;&tcy;&rcy;&ocy;&jcy;&scy;&tcy;&vcy;&acy;&period; &CHcy;&iecy;&mcy; &ocy;&pcy;&acy;&scy;&ncy;&acy; &ecy;&tcy;&acy; &ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ocy;&scy;&tcy;&softcy;&comma; &kcy;&acy;&kcy; &ocy;&ncy;&acy; &rcy;&acy;&bcy;&ocy;&tcy;&acy;&iecy;&tcy; &icy; &chcy;&tcy;&ocy; &ncy;&ucy;&zhcy;&ncy;&ocy; &scy;&dcy;&iecy;&lcy;&acy;&tcy;&softcy; &dcy;&lcy;&yacy; &zcy;&acy;&shchcy;&icy;&tcy;&ycy; &scy;&vcy;&ocy;&icy;&khcy; &dcy;&acy;&ncy;&ncy;&ycy;&khcy;&quest;<&sol;p>&NewLine;<p>&&num;8212&semi;<&sol;p>&NewLine;<h3><strong>&CHcy;&tcy;&ocy; &tcy;&acy;&kcy;&ocy;&iecy; CVE-2023-4911 &icy; &pcy;&ocy;&chcy;&iecy;&mcy;&ucy; &ecy;&tcy;&ocy; &kcy;&rcy;&icy;&tcy;&icy;&chcy;&ncy;&ocy;&quest;<&sol;strong><&sol;h3>&NewLine;<p>&Ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ocy;&scy;&tcy;&softcy; <strong>CVE-2023-4911<&sol;strong> &lpar;&ocy;&tscy;&iecy;&ncy;&kcy;&acy; &ocy;&pcy;&acy;&scy;&ncy;&ocy;&scy;&tcy;&icy; <strong>7&comma;8 &pcy;&ocy; &shcy;&kcy;&acy;&lcy;&iecy; CVSS<&sol;strong>&rpar; &vcy;&ocy;&zcy;&ncy;&icy;&kcy;&acy;&iecy;&tcy; &icy;&zcy;-&zcy;&acy; &ocy;&shcy;&icy;&bcy;&kcy;&icy; &vcy; &scy;&icy;&scy;&tcy;&iecy;&mcy;&ncy;&ocy;&mcy; &vcy;&ycy;&zcy;&ocy;&vcy;&iecy; &grave;glibc&grave;&comma; &kcy;&ocy;&tcy;&ocy;&rcy;&ycy;&jcy; &icy;&scy;&pcy;&ocy;&lcy;&softcy;&zcy;&ucy;&iecy;&tcy;&scy;&yacy; &dcy;&lcy;&yacy; &ocy;&bcy;&rcy;&acy;&bcy;&ocy;&tcy;&kcy;&icy; &dcy;&icy;&ncy;&acy;&mcy;&icy;&chcy;&iecy;&scy;&kcy;&icy;&khcy; &bcy;&icy;&bcy;&lcy;&icy;&ocy;&tcy;&iecy;&kcy; &vcy; Linux&period; &Zcy;&lcy;&ocy;&ucy;&mcy;&ycy;&shcy;&lcy;&iecy;&ncy;&ncy;&icy;&kcy; &mcy;&ocy;&zhcy;&iecy;&tcy; &ecy;&kcy;&scy;&pcy;&lcy;&ucy;&acy;&tcy;&icy;&rcy;&ocy;&vcy;&acy;&tcy;&softcy; &ecy;&tcy;&ucy; &ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ocy;&scy;&tcy;&softcy;&comma; &chcy;&tcy;&ocy;&bcy;&ycy; &ocy;&bcy;&ocy;&jcy;&tcy;&icy; &mcy;&iecy;&khcy;&acy;&ncy;&icy;&zcy;&mcy;&ycy; &zcy;&acy;&shchcy;&icy;&tcy;&ycy; &icy; &pcy;&ocy;&lcy;&ucy;&chcy;&icy;&tcy;&softcy; &dcy;&ocy;&scy;&tcy;&ucy;&pcy; &kcy; &fcy;&acy;&jcy;&lcy;&acy;&mcy;&comma; &dcy;&ocy;&scy;&tcy;&ucy;&pcy;&ncy;&ycy;&mcy; &tcy;&ocy;&lcy;&softcy;&kcy;&ocy; &pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&tcy;&iecy;&lcy;&yucy; root&period;<&sol;p>&NewLine;<p>&num;&num;&num;&num; <strong>&Kcy;&acy;&kcy; &rcy;&acy;&bcy;&ocy;&tcy;&acy;&iecy;&tcy; &acy;&tcy;&acy;&kcy;&acy;&quest;<&sol;strong><br &sol;>1&period; <strong>&Ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ycy;&jcy; &kcy;&ocy;&mcy;&pcy;&ocy;&ncy;&iecy;&ncy;&tcy;<&sol;strong>&colon; &Pcy;&rcy;&ocy;&bcy;&lcy;&iecy;&mcy;&acy; &kcy;&rcy;&ocy;&iecy;&tcy;&scy;&yacy; &vcy; &fcy;&ucy;&ncy;&kcy;&tscy;&icy;&icy; &grave;dlmopen&lpar;&rpar;&grave; &icy;&zcy; &bcy;&icy;&bcy;&lcy;&icy;&ocy;&tcy;&iecy;&kcy;&icy; &grave;glibc&grave;&comma; &kcy;&ocy;&tcy;&ocy;&rcy;&acy;&yacy; &ocy;&tcy;&vcy;&iecy;&chcy;&acy;&iecy;&tcy; &zcy;&acy; &zcy;&acy;&gcy;&rcy;&ucy;&zcy;&kcy;&ucy; &dcy;&icy;&ncy;&acy;&mcy;&icy;&chcy;&iecy;&scy;&kcy;&icy;&khcy; &bcy;&icy;&bcy;&lcy;&icy;&ocy;&tcy;&iecy;&kcy;&period; &Ocy;&shcy;&icy;&bcy;&kcy;&acy; &pcy;&ocy;&zcy;&vcy;&ocy;&lcy;&yacy;&iecy;&tcy; &pcy;&iecy;&rcy;&iecy;&zcy;&acy;&pcy;&icy;&scy;&ycy;&vcy;&acy;&tcy;&softcy; &kcy;&rcy;&icy;&tcy;&icy;&chcy;&iecy;&scy;&kcy;&icy; &vcy;&acy;&zhcy;&ncy;&ycy;&iecy; &scy;&tcy;&rcy;&ucy;&kcy;&tcy;&ucy;&rcy;&ycy; &pcy;&acy;&mcy;&yacy;&tcy;&icy;&period;<br &sol;>2&period; <strong>&Ecy;&kcy;&scy;&pcy;&lcy;&ucy;&acy;&tcy;&acy;&tscy;&icy;&yacy;<&sol;strong>&colon; &Zcy;&lcy;&ocy;&ucy;&mcy;&ycy;&shcy;&lcy;&iecy;&ncy;&ncy;&icy;&kcy; &mcy;&ocy;&zhcy;&iecy;&tcy; &scy;&ocy;&zcy;&dcy;&acy;&tcy;&softcy; &scy;&pcy;&iecy;&tscy;&icy;&acy;&lcy;&softcy;&ncy;&ocy; crafted-&fcy;&acy;&jcy;&lcy;&comma; &kcy;&ocy;&tcy;&ocy;&rcy;&ycy;&jcy; &pcy;&rcy;&icy; &zcy;&acy;&gcy;&rcy;&ucy;&zcy;&kcy;&iecy; &vcy; &pcy;&acy;&mcy;&yacy;&tcy;&softcy; &pcy;&iecy;&rcy;&iecy;&ocy;&pcy;&rcy;&iecy;&dcy;&iecy;&lcy;&icy;&tcy; &ucy;&kcy;&acy;&zcy;&acy;&tcy;&iecy;&lcy;&icy; &ncy;&acy; &fcy;&ucy;&ncy;&kcy;&tscy;&icy;&icy;&comma; &scy;&vcy;&yacy;&zcy;&acy;&ncy;&ncy;&ycy;&iecy; &scy; &pcy;&rcy;&ocy;&vcy;&iecy;&rcy;&kcy;&ocy;&jcy; &pcy;&rcy;&acy;&vcy; &dcy;&ocy;&scy;&tcy;&ucy;&pcy;&acy;&period;<br &sol;>3&period; <strong>&Pcy;&ocy;&lcy;&ucy;&chcy;&iecy;&ncy;&icy;&iecy; &dcy;&ocy;&scy;&tcy;&ucy;&pcy;&acy;<&sol;strong>&colon; &Pcy;&ocy;&scy;&lcy;&iecy; &mcy;&acy;&ncy;&icy;&pcy;&ucy;&lcy;&yacy;&tscy;&icy;&icy; &pcy;&acy;&mcy;&yacy;&tcy;&softcy;&yucy; &acy;&tcy;&acy;&kcy;&ucy;&yucy;&shchcy;&icy;&jcy; &pcy;&ocy;&lcy;&ucy;&chcy;&acy;&iecy;&tcy; &vcy;&ocy;&zcy;&mcy;&ocy;&zhcy;&ncy;&ocy;&scy;&tcy;&softcy; &chcy;&icy;&tcy;&acy;&tcy;&softcy; &icy; &mcy;&ocy;&dcy;&icy;&fcy;&icy;&tscy;&icy;&rcy;&ocy;&vcy;&acy;&tcy;&softcy; &fcy;&acy;&jcy;&lcy;&ycy; &ocy;&tcy; &icy;&mcy;&iecy;&ncy;&icy; root&comma; &dcy;&acy;&zhcy;&iecy; &iecy;&scy;&lcy;&icy; &ucy; &ncy;&iecy;&gcy;&ocy; &ncy;&iecy;&tcy; &scy;&ocy;&ocy;&tcy;&vcy;&iecy;&tcy;&scy;&tcy;&vcy;&ucy;&yucy;&shchcy;&icy;&khcy; &pcy;&rcy;&icy;&vcy;&icy;&lcy;&iecy;&gcy;&icy;&jcy;&period;<&sol;p>&NewLine;<p>&Ecy;&tcy;&acy; &ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ocy;&scy;&tcy;&softcy; &ocy;&scy;&ocy;&bcy;&iecy;&ncy;&ncy;&ocy; &ocy;&pcy;&acy;&scy;&ncy;&acy; &tcy;&iecy;&mcy;&comma; &chcy;&tcy;&ocy; &ncy;&iecy; &tcy;&rcy;&iecy;&bcy;&ucy;&iecy;&tcy; &scy;&lcy;&ocy;&zhcy;&ncy;&ycy;&khcy; &ucy;&scy;&lcy;&ocy;&vcy;&icy;&jcy; &dcy;&lcy;&yacy; &ecy;&kcy;&scy;&pcy;&lcy;&ucy;&acy;&tcy;&acy;&tscy;&icy;&icy; — &dcy;&ocy;&scy;&tcy;&acy;&tcy;&ocy;&chcy;&ncy;&ocy; &zcy;&acy;&pcy;&ucy;&scy;&tcy;&icy;&tcy;&softcy; &vcy;&rcy;&iecy;&dcy;&ocy;&ncy;&ocy;&scy;&ncy;&ycy;&jcy; &kcy;&ocy;&dcy; &vcy; &kcy;&ocy;&ncy;&tcy;&iecy;&jcy;&ncy;&iecy;&rcy;&iecy; &icy;&lcy;&icy; &ncy;&acy; &scy;&icy;&scy;&tcy;&iecy;&mcy;&iecy; &scy; &ucy;&scy;&tcy;&acy;&rcy;&iecy;&vcy;&shcy;&iecy;&jcy; &vcy;&iecy;&rcy;&scy;&icy;&iecy;&jcy; &grave;glibc&grave;&period;<&sol;p>&NewLine;<p>&&num;8212&semi;<&sol;p>&NewLine;<h3><strong>&Kcy;&acy;&kcy;&icy;&iecy; &scy;&icy;&scy;&tcy;&iecy;&mcy;&ycy; &ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ycy;&quest;<&sol;strong><&sol;h3>&NewLine;<p>&Scy;&ocy;&gcy;&lcy;&acy;&scy;&ncy;&ocy; &ocy;&tcy;&chcy;&iecy;&tcy;&acy;&mcy; &bcy;&iecy;&zcy;&ocy;&pcy;&acy;&scy;&ncy;&ocy;&scy;&tcy;&icy;&comma; &pcy;&rcy;&ocy;&bcy;&lcy;&iecy;&mcy;&acy; &zcy;&acy;&tcy;&rcy;&acy;&gcy;&icy;&vcy;&acy;&iecy;&tcy;&colon;<br &sol;>&&num;8212&semi; <strong>&Vcy;&scy;&iecy; &dcy;&icy;&scy;&tcy;&rcy;&icy;&bcy;&ucy;&tcy;&icy;&vcy;&ycy; Linux<&sol;strong>&comma; &icy;&scy;&pcy;&ocy;&lcy;&softcy;&zcy;&ucy;&yucy;&shchcy;&icy;&iecy; &grave;glibc&grave; &vcy;&iecy;&rcy;&scy;&icy;&icy; <strong>2&period;34 &icy; &vcy;&ycy;&shcy;&iecy;<&sol;strong> &lpar;&vcy;&kcy;&lcy;&yucy;&chcy;&acy;&yacy; Ubuntu 22&period;04 LTS&comma; Debian 12&comma; Fedora 37&plus;&rpar;&period;<br &sol;>&&num;8212&semi; <strong>&Kcy;&ocy;&ncy;&tcy;&iecy;&jcy;&ncy;&iecy;&rcy;&ycy; &icy; &vcy;&icy;&rcy;&tcy;&ucy;&acy;&lcy;&softcy;&ncy;&ycy;&iecy; &mcy;&acy;&shcy;&icy;&ncy;&ycy;<&sol;strong>&comma; &gcy;&dcy;&iecy; &rcy;&acy;&zcy;&dcy;&iecy;&lcy;&yacy;&yucy;&tcy;&scy;&yacy; &fcy;&acy;&jcy;&lcy;&ycy; &bcy;&icy;&bcy;&lcy;&icy;&ocy;&tcy;&iecy;&kcy;&period;<br &sol;>&&num;8212&semi; <strong>&Ocy;&bcy;&lcy;&acy;&chcy;&ncy;&ycy;&iecy; &scy;&rcy;&iecy;&dcy;&ycy;<&sol;strong>&comma; &gcy;&dcy;&iecy; &ncy;&iecy;&scy;&kcy;&ocy;&lcy;&softcy;&kcy;&ocy; &pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&tcy;&iecy;&lcy;&iecy;&jcy; &mcy;&ocy;&gcy;&ucy;&tcy; &zcy;&acy;&pcy;&ucy;&scy;&kcy;&acy;&tcy;&softcy; &scy;&vcy;&ocy;&icy; &pcy;&rcy;&ocy;&tscy;&iecy;&scy;&scy;&ycy;&period;<&sol;p>&NewLine;<p>&Ncy;&acy;&icy;&bcy;&ocy;&lcy;&iecy;&iecy; &ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ycy;&colon;<br &sol;>&&num;8212&semi; &Scy;&iecy;&rcy;&vcy;&iecy;&rcy;&ycy; &scy; &rcy;&acy;&zcy;&dcy;&iecy;&lcy;&iecy;&ncy;&icy;&iecy;&mcy; &pcy;&rcy;&acy;&vcy; &pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&tcy;&iecy;&lcy;&iecy;&jcy;&period;<br &sol;>&&num;8212&semi; &Kcy;&ocy;&ncy;&tcy;&iecy;&jcy;&ncy;&iecy;&rcy;&ycy; Docker &icy; Kubernetes&comma; &iecy;&scy;&lcy;&icy; &ncy;&iecy; &ocy;&bcy;&ncy;&ocy;&vcy;&lcy;&iecy;&ncy;&ycy;&period;<br &sol;>&&num;8212&semi; &Vcy;&scy;&tcy;&rcy;&acy;&icy;&vcy;&acy;&iecy;&mcy;&ycy;&iecy; &scy;&icy;&scy;&tcy;&iecy;&mcy;&ycy; &lpar;IoT-&ucy;&scy;&tcy;&rcy;&ocy;&jcy;&scy;&tcy;&vcy;&acy;&comma; &mcy;&acy;&rcy;&shcy;&rcy;&ucy;&tcy;&icy;&zcy;&acy;&tcy;&ocy;&rcy;&ycy;&rpar;&period;<&sol;p>&NewLine;<p>&&num;8212&semi;<&sol;p>&NewLine;<h3><strong>&Kcy;&acy;&kcy; &pcy;&rcy;&ocy;&vcy;&iecy;&rcy;&icy;&tcy;&softcy;&comma; &pcy;&ocy;&dcy;&vcy;&iecy;&rcy;&zhcy;&iecy;&ncy;&acy; &lcy;&icy; &vcy;&acy;&shcy;&acy; &scy;&icy;&scy;&tcy;&iecy;&mcy;&acy;&quest;<&sol;strong><&sol;h3>&NewLine;<p>1&period; <strong>&Pcy;&rcy;&ocy;&vcy;&iecy;&rcy;&kcy;&acy; &vcy;&iecy;&rcy;&scy;&icy;&icy; glibc<&sol;strong>&colon;<br &sol;>&&num;171&semi;&grave;bash<br &sol;>ldd &&num;8212&semi;version<br &sol;>&&num;171&semi;&grave;<br &sol;>&IEcy;&scy;&lcy;&icy; &vcy;&iecy;&rcy;&scy;&icy;&yacy; <strong>2&period;34 &icy;&lcy;&icy; &vcy;&ycy;&shcy;&iecy;<&sol;strong>&comma; &scy;&icy;&scy;&tcy;&iecy;&mcy;&acy; &ucy;&yacy;&zcy;&vcy;&icy;&mcy;&acy;&period;<&sol;p>&NewLine;<p>2&period; <strong>&Pcy;&ocy;&icy;&scy;&kcy; &dcy;&ocy;&kcy;&acy;&zcy;&acy;&tcy;&iecy;&lcy;&softcy;&scy;&tcy;&vcy; &ecy;&kcy;&scy;&pcy;&lcy;&ucy;&acy;&tcy;&acy;&tscy;&icy;&icy;<&sol;strong>&colon;<br &sol;>&&num;8212&semi; &Ncy;&iecy;&ocy;&bcy;&ycy;&chcy;&ncy;&ycy;&iecy; &pcy;&rcy;&ocy;&tscy;&iecy;&scy;&scy;&ycy;&comma; &rcy;&acy;&bcy;&ocy;&tcy;&acy;&yucy;&shchcy;&icy;&iecy; &ocy;&tcy; &icy;&mcy;&iecy;&ncy;&icy; root&period;<br &sol;>&&num;8212&semi; &Fcy;&acy;&jcy;&lcy;&ycy; &scy; &icy;&zcy;&mcy;&iecy;&ncy;&iecy;&ncy;&ncy;&ycy;&mcy;&icy; &pcy;&rcy;&acy;&vcy;&acy;&mcy;&icy; &dcy;&ocy;&scy;&tcy;&ucy;&pcy;&acy;&period;<br &sol;>&&num;8212&semi; &ZHcy;&ucy;&rcy;&ncy;&acy;&lcy;&ycy; &bcy;&iecy;&zcy;&ocy;&pcy;&acy;&scy;&ncy;&ocy;&scy;&tcy;&icy; &scy; &pcy;&ocy;&dcy;&ocy;&zcy;&rcy;&icy;&tcy;&iecy;&lcy;&softcy;&ncy;&ocy;&jcy; &acy;&kcy;&tcy;&icy;&vcy;&ncy;&ocy;&scy;&tcy;&softcy;&yucy;&period;<&sol;p>&NewLine;<p>3&period; <strong>&Icy;&scy;&pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&ncy;&icy;&iecy; &scy;&kcy;&acy;&ncy;&iecy;&rcy;&ocy;&vcy; &bcy;&iecy;&zcy;&ocy;&pcy;&acy;&scy;&ncy;&ocy;&scy;&tcy;&icy;<&sol;strong> &lpar;&ncy;&acy;&pcy;&rcy;&icy;&mcy;&iecy;&rcy;&comma; <strong>OpenVAS<&sol;strong> &icy;&lcy;&icy; <strong>Nessus<&sol;strong>&rpar;&period;<&sol;p>&NewLine;<p>&&num;8212&semi;<&sol;p>&NewLine;<h3><strong>&Mcy;&iecy;&rcy;&ycy; &zcy;&acy;&shchcy;&icy;&tcy;&ycy; &icy; &icy;&scy;&pcy;&rcy;&acy;&vcy;&lcy;&iecy;&ncy;&icy;&yacy;<&sol;strong><&sol;h3>&NewLine;<p>&num;&num;&num;&num; <strong>1&period; &Ocy;&bcy;&ncy;&ocy;&vcy;&lcy;&iecy;&ncy;&icy;&iecy; glibc<&sol;strong><br &sol;>&Pcy;&ocy;&scy;&tcy;&acy;&vcy;&shchcy;&icy;&kcy;&icy; Linux &ucy;&zhcy;&iecy; &vcy;&ycy;&pcy;&ucy;&scy;&tcy;&icy;&lcy;&icy; &pcy;&acy;&tcy;&chcy;&icy;&colon;<br &sol;>&&num;8212&semi; <strong>Ubuntu<&sol;strong>&colon; &grave;sudo apt update &amp&semi;&amp&semi; sudo apt upgrade glibc&grave;<br &sol;>&&num;8212&semi; <strong>Debian<&sol;strong>&colon; &grave;sudo apt-get update &amp&semi;&amp&semi; sudo apt-get upgrade libc6&grave;<br &sol;>&&num;8212&semi; <strong>Fedora<&sol;strong>&colon; &grave;sudo dnf upgrade glibc&grave;<br &sol;>&&num;8212&semi; <strong>RHEL&sol;CentOS<&sol;strong>&colon; &grave;sudo yum update glibc&grave;<&sol;p>&NewLine;<p>&num;&num;&num;&num; <strong>2&period; &Vcy;&rcy;&iecy;&mcy;&iecy;&ncy;&ncy;&ycy;&iecy; &mcy;&iecy;&rcy;&ycy; &zcy;&acy;&shchcy;&icy;&tcy;&ycy;<&sol;strong><br &sol;>&&num;8212&semi; <strong>&Ocy;&gcy;&rcy;&acy;&ncy;&icy;&chcy;&iecy;&ncy;&icy;&iecy; &dcy;&ocy;&scy;&tcy;&ucy;&pcy;&acy; &kcy; &kcy;&ocy;&ncy;&tcy;&iecy;&jcy;&ncy;&iecy;&rcy;&acy;&mcy;<&sol;strong>&colon; &Zcy;&acy;&pcy;&ucy;&scy;&kcy; &kcy;&ocy;&ncy;&tcy;&iecy;&jcy;&ncy;&iecy;&rcy;&ocy;&vcy; &vcy; &icy;&zcy;&ocy;&lcy;&icy;&rcy;&ocy;&vcy;&acy;&ncy;&ncy;&ocy;&mcy; &rcy;&iecy;&zhcy;&icy;&mcy;&iecy; &lpar;&grave;&&num;8212&semi;read-only&grave;&comma; &grave;&&num;8212&semi;no-new-privileges&grave;&rpar;&period;<br &sol;>&&num;8212&semi; <strong>&Mcy;&ocy;&ncy;&icy;&tcy;&ocy;&rcy;&icy;&ncy;&gcy; &acy;&kcy;&tcy;&icy;&vcy;&ncy;&ocy;&scy;&tcy;&icy;<&sol;strong>&colon; &Icy;&scy;&pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&ncy;&icy;&iecy; <strong>SELinux<&sol;strong> &icy;&lcy;&icy; <strong>AppArmor<&sol;strong> &dcy;&lcy;&yacy; &ocy;&gcy;&rcy;&acy;&ncy;&icy;&chcy;&iecy;&ncy;&icy;&yacy; &pcy;&rcy;&acy;&vcy; &pcy;&rcy;&ocy;&tscy;&iecy;&scy;&scy;&ocy;&vcy;&period;<br &sol;>&&num;8212&semi; <strong>&Ocy;&tcy;&kcy;&lcy;&yucy;&chcy;&iecy;&ncy;&icy;&iecy; &ncy;&iecy;&ncy;&ucy;&zhcy;&ncy;&ycy;&khcy; &scy;&iecy;&rcy;&vcy;&icy;&scy;&ocy;&vcy;<&sol;strong>&colon; &Ucy;&mcy;&iecy;&ncy;&softcy;&shcy;&iecy;&ncy;&icy;&iecy; &pcy;&ocy;&vcy;&iecy;&rcy;&khcy;&ncy;&ocy;&scy;&tcy;&icy; &acy;&tcy;&acy;&kcy;&icy;&period;<&sol;p>&NewLine;<p>&num;&num;&num;&num; <strong>3&period; &Dcy;&ocy;&lcy;&gcy;&ocy;&scy;&rcy;&ocy;&chcy;&ncy;&ycy;&iecy; &rcy;&iecy;&shcy;&iecy;&ncy;&icy;&yacy;<&sol;strong><br &sol;>&&num;8212&semi; <strong>&Pcy;&iecy;&rcy;&iecy;&khcy;&ocy;&dcy; &ncy;&acy; &bcy;&ocy;&lcy;&iecy;&iecy; &ncy;&ocy;&vcy;&ycy;&iecy; &vcy;&iecy;&rcy;&scy;&icy;&icy; &yacy;&dcy;&rcy;&acy;<&sol;strong> &lpar;5&period;15&plus;&rpar;&period;<br &sol;>&&num;8212&semi; <strong>&Icy;&scy;&pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&ncy;&icy;&iecy; &zcy;&acy;&shchcy;&icy;&shchcy;&iecy;&ncy;&ncy;&ycy;&khcy; &kcy;&ocy;&ncy;&tcy;&iecy;&jcy;&ncy;&iecy;&rcy;&ocy;&vcy;<&sol;strong> &lpar;&ncy;&acy;&pcy;&rcy;&icy;&mcy;&iecy;&rcy;&comma; <strong>gVisor<&sol;strong> &icy;&lcy;&icy; <strong>Kata Containers<&sol;strong>&rpar;&period;<br &sol;>&&num;8212&semi; <strong>&Rcy;&iecy;&gcy;&ucy;&lcy;&yacy;&rcy;&ncy;&ycy;&jcy; &acy;&ucy;&dcy;&icy;&tcy; &bcy;&iecy;&zcy;&ocy;&pcy;&acy;&scy;&ncy;&ocy;&scy;&tcy;&icy;<&sol;strong> &scy; &pcy;&ocy;&mcy;&ocy;&shchcy;&softcy;&yucy; &icy;&ncy;&scy;&tcy;&rcy;&ucy;&mcy;&iecy;&ncy;&tcy;&ocy;&vcy; &vcy;&rcy;&ocy;&dcy;&iecy; <strong>Lynis<&sol;strong>&period;<&sol;p>&NewLine;<p>&&num;8212&semi;<&sol;p>&NewLine;<h3><strong>&CHcy;&tcy;&ocy; &zhcy;&dcy;&iecy;&tcy; Linux-&scy;&ocy;&ocy;&bcy;&shchcy;&iecy;&scy;&tcy;&vcy;&ocy;&quest;<&sol;strong><&sol;h3>&NewLine;<p>&Ucy;&yacy;&zcy;&vcy;&icy;&mcy;&ocy;&scy;&tcy;&softcy; <strong>CVE-2023-4911<&sol;strong> &scy;&tcy;&acy;&lcy;&acy; &ocy;&chcy;&iecy;&rcy;&iecy;&dcy;&ncy;&ycy;&mcy; &ncy;&acy;&pcy;&ocy;&mcy;&icy;&ncy;&acy;&ncy;&icy;&iecy;&mcy; &ocy; &tcy;&ocy;&mcy;&comma; &chcy;&tcy;&ocy; &dcy;&acy;&zhcy;&iecy; &khcy;&ocy;&rcy;&ocy;&shcy;&ocy; &zcy;&acy;&shchcy;&icy;&shchcy;&iecy;&ncy;&ncy;&ycy;&iecy; &scy;&icy;&scy;&tcy;&iecy;&mcy;&ycy; &mcy;&ocy;&gcy;&ucy;&tcy; &scy;&ocy;&dcy;&iecy;&rcy;&zhcy;&acy;&tcy;&softcy; &kcy;&rcy;&icy;&tcy;&icy;&chcy;&iecy;&scy;&kcy;&icy;&iecy; &ocy;&shcy;&icy;&bcy;&kcy;&icy;&period; &Kcy; &scy;&chcy;&acy;&scy;&tcy;&softcy;&yucy;&comma; &pcy;&rcy;&ocy;&icy;&zcy;&vcy;&ocy;&dcy;&icy;&tcy;&iecy;&lcy;&icy; &ocy;&pcy;&iecy;&rcy;&acy;&tscy;&icy;&ocy;&ncy;&ncy;&ycy;&khcy; &scy;&icy;&scy;&tcy;&iecy;&mcy; &bcy;&ycy;&scy;&tcy;&rcy;&ocy; &ocy;&tcy;&rcy;&iecy;&acy;&gcy;&icy;&rcy;&ocy;&vcy;&acy;&lcy;&icy;&comma; &vcy;&ycy;&pcy;&ucy;&scy;&tcy;&icy;&vcy; &pcy;&acy;&tcy;&chcy;&icy;&period; &Ocy;&dcy;&ncy;&acy;&kcy;&ocy; &pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&tcy;&iecy;&lcy;&icy; &dcy;&ocy;&lcy;&zhcy;&ncy;&ycy; &ocy;&pcy;&iecy;&rcy;&acy;&tcy;&icy;&vcy;&ncy;&ocy; &ocy;&bcy;&ncy;&ocy;&vcy;&lcy;&yacy;&tcy;&softcy; &scy;&vcy;&ocy;&icy; &scy;&icy;&scy;&tcy;&iecy;&mcy;&ycy;&comma; &chcy;&tcy;&ocy;&bcy;&ycy; &icy;&zcy;&bcy;&iecy;&zhcy;&acy;&tcy;&softcy; &rcy;&icy;&scy;&kcy;&acy; &vcy;&zcy;&lcy;&ocy;&mcy;&acy;&period;<&sol;p>&NewLine;<p>&Ecy;&tcy;&ocy;&tcy; &icy;&ncy;&tscy;&icy;&dcy;&iecy;&ncy;&tcy; &tcy;&acy;&kcy;&zhcy;&iecy; &pcy;&ocy;&dcy;&chcy;&iecy;&rcy;&kcy;&ncy;&ucy;&lcy; &vcy;&acy;&zhcy;&ncy;&ocy;&scy;&tcy;&softcy;&colon;<br &sol;>&&num;8212&semi; <strong>&Rcy;&iecy;&gcy;&ucy;&lcy;&yacy;&rcy;&ncy;&ocy;&gcy;&ocy; &ocy;&bcy;&ncy;&ocy;&vcy;&lcy;&iecy;&ncy;&icy;&yacy; &Pcy;&Ocy;<&sol;strong>&period;<br &sol;>&&num;8212&semi; <strong>&Icy;&scy;&pcy;&ocy;&lcy;&softcy;&zcy;&ocy;&vcy;&acy;&ncy;&icy;&yacy; &scy;&ocy;&vcy;&rcy;&iecy;&mcy;&iecy;&ncy;&ncy;&ycy;&khcy; &mcy;&iecy;&khcy;&acy;&ncy;&icy;&zcy;&mcy;&ocy;&vcy; &zcy;&acy;&shchcy;&icy;&tcy;&ycy;<&sol;strong> &lpar;&ncy;&acy;&pcy;&rcy;&icy;&mcy;&iecy;&rcy;&comma; <strong>Seccomp<&sol;strong>&comma; <strong>Namespaces<&sol;strong>&rpar;&period;<br &sol;>&&num;8212&semi; <strong>&Ocy;&bcy;&ucy;&chcy;&iecy;&ncy;&icy;&yacy; &acy;&dcy;&mcy;&icy;&ncy;&icy;&scy;&tcy;&rcy;&acy;&tcy;&ocy;&rcy;&ocy;&vcy; &ocy;&scy;&ncy;&ocy;&vcy;&acy;&mcy; &kcy;&icy;&bcy;&iecy;&rcy;&bcy;&iecy;&zcy;&ocy;&pcy;&acy;&scy;&ncy;&ocy;&scy;&tcy;&icy;<&sol;strong>&period;<&sol;p>&NewLine;<p>Linux &ocy;&scy;&tcy;&acy;&iecy;&tcy;&scy;&yacy; &ocy;&dcy;&ncy;&ocy;&jcy; &icy;&zcy; &scy;&acy;&mcy;&ycy;&khcy; &bcy;&iecy;&zcy;&ocy;&pcy;&acy;&scy;&ncy;&ycy;&khcy; &Ocy;&Scy;&comma; &ncy;&ocy; &tcy;&ocy;&lcy;&softcy;&kcy;&ocy; &pcy;&rcy;&icy; &ucy;&scy;&lcy;&ocy;&vcy;&icy;&icy; &ocy;&tcy;&vcy;&iecy;&tcy;&scy;&tcy;&vcy;&iecy;&ncy;&ncy;&ocy;&gcy;&ocy; &pcy;&ocy;&dcy;&khcy;&ocy;&dcy;&acy; &kcy; &kcy;&ocy;&ncy;&fcy;&icy;&gcy;&ucy;&rcy;&acy;&tscy;&icy;&icy; &icy; &ocy;&bcy;&ncy;&ocy;&vcy;&lcy;&iecy;&ncy;&icy;&yucy;&period; &Ncy;&iecy; &icy;&gcy;&ncy;&ocy;&rcy;&icy;&rcy;&ucy;&jcy;&tcy;&iecy; &ocy;&bcy;&ncy;&ocy;&vcy;&lcy;&iecy;&ncy;&icy;&yacy; — &vcy;&acy;&shcy;&icy; &dcy;&acy;&ncy;&ncy;&ycy;&iecy; &mcy;&ocy;&gcy;&ucy;&tcy; &zcy;&acy;&vcy;&icy;&scy;&iecy;&tcy;&softcy; &ocy;&tcy; &ecy;&tcy;&ocy;&gcy;&ocy;&excl;<&sol;p>&NewLine;